devistating antivirus system pro

View previous topic View next topic Go down

devistating antivirus system pro

Post by greyhawk on Tue Nov 24, 2009 12:36 am

I'm a first timer here & need help badly. Found it very hard to follow instructions for updating java etc. so just gave up.My system has been almost completely corrupted, can hardly do anything, & it takes forever for that to happen. To think I was stupid enough to pay for this problem. I can only get on to IE in safe mode, please help!
Keith.

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by Belahzur on Tue Nov 24, 2009 12:58 am

Please download the current version of HijackThis from [You must be registered and logged in to see this link.]

  • Double click and run the installer.
  • It will install to C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
  • After installing, you should get the user agreement, press accept and Hijack This will run.
  • Select Do a system scan and save a log file. This will open a notepad file of everything Hijack This found, copy and paste it back here.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Tue Nov 24, 2009 1:30 am

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:27:34 PM, on 11/24/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [You must be registered and logged in to see this link.]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [You must be registered and logged in to see this link.]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [You must be registered and logged in to see this link.]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O1 - Hosts: ::1 localhost
O1 - Hosts: 91.212.127.226 osguard-pro.microsoft.com
O1 - Hosts: 91.212.127.226 osguard-pro.com
O1 - Hosts: 91.212.127.226 [You must be registered and logged in to see this link.]
O2 - BHO: DownloadRedirect Class - {00000000-6CB0-410C-8C3D-8FA8D2011D0A} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\3.5.2.11\coIEPlg.dll
O2 - BHO: (no name) - {621D36CC-09F4-44F6-BA4C-C8FBEAA00207} - (no file)
O2 - BHO: (no name) - {63D1F479-D32B-D696-B52D-4253729E2855} - (no file)
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\3.5.2.11\IPSBHO.DLL
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00301} - (no file)
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00305} - (no file)
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00311} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: (no name) - {DF00FFA0-AEA9-4EA8-A10F-8BB9A7F8508C} - (no file)
O2 - BHO: - {E9B71102-115A-466C-85B0-33AF4795E639} - (no file)
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\3.5.2.11\coIEPlg.dll
O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
O4 - HKLM\..\Run: [AVGIDS] "C:\Program Files\AVG\AVG8\IdentityProtection\agent\bin\AVGIDSUI.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://global.acer.com/
O16 - DPF: {11111111-1111-1111-1111-111111113457} - [You must be registered and logged in to see this link.]
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - [You must be registered and logged in to see this link.]
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - [You must be registered and logged in to see this link.]
O16 - DPF: {36C66BBD-E667-4DAD-9682-58050E7C9FDC} (CDKey Class) - [You must be registered and logged in to see this link.]
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - [You must be registered and logged in to see this link.]
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - [You must be registered and logged in to see this link.]
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - [You must be registered and logged in to see this link.]
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - [You must be registered and logged in to see this link.]
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - [You must be registered and logged in to see this link.]
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - [You must be registered and logged in to see this link.]
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton 360\Engine\3.5.2.11\coIEPlg.dll
O20 - Winlogon Notify: clbcatex - C:\WINDOWS\
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
O23 - Service: Google Update Service (gupdate1ca692ed9d9a714) (gupdate1ca692ed9d9a714) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\3.5.2.11\ccSvcHst.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 7468 bytes

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by Belahzur on Tue Nov 24, 2009 9:30 pm

Hello.

  • Open HijackThis
  • Choose "Do a system scan only"
  • Check the boxes in front of these lines:


    O1 - Hosts: ::1 localhost
    O1 - Hosts: 91.212.127.226 osguard-pro.microsoft.com
    O1 - Hosts: 91.212.127.226 osguard-pro.com
    O1 - Hosts: 91.212.127.226 [You must be registered and logged in to see this link.]
    O2 - BHO: DownloadRedirect Class - {00000000-6CB0-410C-8C3D-8FA8D2011D0A} - (no file)
    O2 - BHO: (no name) - {621D36CC-09F4-44F6-BA4C-C8FBEAA00207} - (no file)
    O2 - BHO: (no name) - {63D1F479-D32B-D696-B52D-4253729E2855} - (no file)
    O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00301} - (no file)
    O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00305} - (no file)
    O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00311} - (no file)
    O2 - BHO: (no name) - {DF00FFA0-AEA9-4EA8-A10F-8BB9A7F8508C} - (no file)
    O2 - BHO: - {E9B71102-115A-466C-85B0-33AF4795E639} - (no file)
    O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O20 - Winlogon Notify: clbcatex - C:\WINDOWS\



  • Press "Fix Checked"
  • Close Hijack This.

Please download and run this tool.

Download Malwarebytes' Anti-Malware from [You must be registered and logged in to see this link.]

Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.


Post the contents of the MBAM Log.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Tue Nov 24, 2009 11:35 pm

After scan & fix checked & done, did MBAM process. Prompted to restart- did so in normal mode. Desktop all appeared & fully loaded. Selected IE, timer symbol shows up then goes, comes back & goes again; this keeps repeating. More than 9 minutes
later, still no IE.
Had to hold the power button down for 5 seconds to turn the computer off, to be able to restart in safe mode & send this to you.


Malwarebytes' Anti-Malware 1.41
Database version: 3097
Windows 5.1.2600 Service Pack 3 (Safe Mode)

11/4/2009 11:16:09 AM
mbam-log-2009-11-04 (11-16-09).txt

Scan type: Full Scan (C:\|)
Objects scanned: 198851
Time elapsed: 26 minute(s), 17 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0Malwarebytes' Anti-Malware 1.41
Database version: 3224
Windows 5.1.2600 Service Pack 3 (Safe Mode)

11/25/2009 9:48:02 AM
mbam-log-2009-11-25 (09-48-02).txt

Scan type: Full Scan (C:\|)
Objects scanned: 209022
Time elapsed: 45 minute(s), 9 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 5

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\AvScan (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\Antivirus System PRO\htmlayout.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{665AF30D-F3FF-49B2-8AAA-3562EC3F1BAB}\RP659\A0188974.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{665AF30D-F3FF-49B2-8AAA-3562EC3F1BAB}\RP662\A0190152.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{665AF30D-F3FF-49B2-8AAA-3562EC3F1BAB}\RP662\A0190162.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{665AF30D-F3FF-49B2-8AAA-3562EC3F1BAB}\RP664\A0191060.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

Registry Keys Infected: 5
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 22
Files Infected: 281

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\AdwareAlert (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\AvScan (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\ErrorSmart (Rogue.ErrorSmart) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\RegistrySmart (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\SpywareBot (Rogue.SpywareBot) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\c:\program files\registrysmart\(default) (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\BootStera (Rogue.WinAntiVirus) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Documents and Settings\keith\Application Data\AdwareAlert (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Settings (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Quarantine (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Registry Backups (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\ErrorSmart (Rogue.ErrorSmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\ErrorSmart\Log (Rogue.ErrorSmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\RegistrySmart (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\RegistrySmart\Log (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\RegistrySmart\Registry Backups (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Log (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Settings (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30 (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\79.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\81.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38 (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\29-05-2008-03-18-18 (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Registry Backups (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Program Files\AdwareAlert (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Program Files\RegistrySmart (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

Files Infected:
C:\Program Files\Antivirus System PRO\htmlayout.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{665AF30D-F3FF-49B2-8AAA-3562EC3F1BAB}\RP658\A0187718.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{665AF30D-F3FF-49B2-8AAA-3562EC3F1BAB}\RP659\A0187853.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{665AF30D-F3FF-49B2-8AAA-3562EC3F1BAB}\RP659\A0187863.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\rs.dat (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\DataBase.ref (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 08 - 08_56_04 PM_812.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 08 - 10_20_56 PM_468.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 09 - 09_43_45 AM_468.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 10 - 02_02_21 PM_781.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 11 - 01_31_09 PM_781.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 15 - 04_12_40 PM_906.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 16 - 09_51_38 AM_096.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 16 - 02_16_17 PM_031.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 20 - 04_55_43 PM_625.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 21 - 10_02_31 AM_500.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 21 - 04_17_07 PM_984.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 22 - 05_28_19 PM_718.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 24 - 10_22_49 AM_140.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 25 - 04_06_10 PM_484.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 26 - 12_41_12 PM_046.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 26 - 02_40_52 PM_171.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 26 - 06_02_37 PM_968.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 27 - 12_49_46 PM_421.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 27 - 02_28_49 PM_984.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 27 - 09_32_22 PM_125.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 28 - 09_45_39 AM_093.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 28 - 03_12_53 PM_734.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 29 - 10_10_17 AM_078.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 29 - 10_17_27 AM_687.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 29 - 07_14_05 PM_140.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 30 - 05_06_45 PM_985.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 30 - 05_51_14 PM_765.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 30 - 09_40_14 PM_953.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 31 - 08_44_06 AM_625.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 08 - 03_00_01 AM_589.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Log\2009 Jul 08 - 03_00_02 AM_261.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Settings\ScanInfo.stg (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Settings\CustomScan.stg (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Settings\IgnoreList.stg (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Settings\SelectedFolders.stg (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\AdwareAlert\Settings\Settings.stg (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\ErrorSmart\Log\2008 Jun 28 - 11_17_30 AM_228.log (Rogue.ErrorSmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\ErrorSmart\Log\2008 Jun 28 - 11_22_19 AM_187.log (Rogue.ErrorSmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\ErrorSmart\Log\2008 Jun 28 - 11_27_49 AM_734.log (Rogue.ErrorSmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\ErrorSmart\Log\2008 Jun 28 - 11_51_21 AM_734.log (Rogue.ErrorSmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\ErrorSmart\Log\2008 Jun 28 - 01_35_16 PM_203.log (Rogue.ErrorSmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\RegistrySmart\Log\2008 Feb 02 - 01_05_47 PM_406.log (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\RegistrySmart\Log\2008 Feb 02 - 01_05_52 PM_031.log (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\keith\Application Data\RegistrySmart\Registry Backups\2008-02-02_13-09-45.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\DataBase.ref (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\fp.dat (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\rs.dat (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Log\2008 Aug 29 - 08_45_27 AM_218.log (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Settings\ScanInfo.stg (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Settings\CustomScan.stg (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Settings\IgnoreList.stg (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Settings\SelectedFolders.stg (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Settings\Settings.stg (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Settings\ScanResults.pie (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\0.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\1.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\2.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\3.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\4.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\4.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\5.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\6.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\7.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\8.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\9.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\10.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\11.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\12.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\13.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\13.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\14.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\15.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\15.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\16.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\17.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\17.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\18.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\18.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\19.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\20.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\20.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\21.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\21.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\22.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\22.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\23.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\23.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\24.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\24.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\25.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\25.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\26.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\26.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\27.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\28.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\29.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\30.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\31.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\32.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\33.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\34.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\35.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\35.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\36.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\37.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\38.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\39.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\39.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\40.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\40.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\41.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\41.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\42.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\43.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\43.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\44.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\44.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\45.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\46.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\46.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\47.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\47.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\48.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\48.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\49.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\49.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\50.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\50.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\51.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\51.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\52.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\52.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\53.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\53.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\54.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\54.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\55.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\55.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\56.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\56.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\57.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\57.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\58.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\58.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\59.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\59.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\60.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\60.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\61.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\61.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\62.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\62.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\63.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\63.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\64.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\64.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\65.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\65.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\66.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\66.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\67.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\67.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\68.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\68.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\69.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\69.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\70.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\70.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\71.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\71.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\72.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\72.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\73.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\73.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\74.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\74.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\75.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\75.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\76.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\76.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\77.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\77.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\78.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\78.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\79.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\80.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\80.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\81.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\82.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\82.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\83.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\83.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\84.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\84.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\85.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\85.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\86.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\86.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\87.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\87.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\88.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\88.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\89.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\89.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\90.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\90.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\91.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\91.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\92.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\92.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\93.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\93.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\94.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\94.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\95.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\95.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\96.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\96.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\97.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\97.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\98.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\98.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\99.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\99.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\100.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\100.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\101.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\15-02-2008-16-08-30\101.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\0.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\1.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\2.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\3.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\3.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\4.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\5.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\5.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\6.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\7.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\8.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\8.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\9.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\9.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\10.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\10.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\11.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\12.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\13.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\14.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\15.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\16.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\17.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\17.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\18.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\19.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\20.qit (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\20.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\21.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\26-05-2008-03-11-38\22.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\29-05-2008-03-18-18\0.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\29-05-2008-03-18-18\1.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\29-05-2008-03-18-18\2.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Documents and Settings\penny\Application Data\SpywareBot\Quarantine\29-05-2008-03-18-18\3.qnf (Rogue.SpywareBot) -> Quarantined and deleted successfully.
C:\Program Files\AdwareAlert\AdwareAlert.exe (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\cpblpbc23.log (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\cpblpbc18.log (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\cpblpbc20.log (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\cpblpbc21.log (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\cpblpbc22.log (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\cpblpbc26.log (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\cpblpbc25.log (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\cpblpbc27.log (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\cpblpbc31.log (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\cpblpbc28.log (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\cpblpbc32.log (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\hosts (Trojan.Agent) -> Quarantined and deleted successfully.

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by Belahzur on Wed Nov 25, 2009 1:12 am

Hello.

  • Please download DDS by sUBs to your Desktop (Important!!) from one of these locations:
    [You must be registered and logged in to see this link.]
    [You must be registered and logged in to see this link.]
  • Double click DDS.scr to run.
  • When complete, two logs will open. Save both of the report to your Desktop.
  • Copy and paste BOTH LOGS back here, use more than one post if needed.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Wed Nov 25, 2009 2:55 am

I just looked at a preview of this reply & seem to have lost the logs, so will paste them again.
You must be a genius to be able to understand all this log info, I envy you that ability. I'm old & grey & have lost the ability to deal with complex tasks.
I hope you don't give up on me.
Thank You.
Regards,
Keith.
DDS (Ver_09-11-24.02) - FAT32x86 NETWORK
Run by keith at 13:28:51.28 on Wed 11/25/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.247.36 [GMT 11:00]
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-11-24.02)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 7/9/2004 12:13:52 PM
System Uptime: 11/25/2009 1:16:58 PM (0 hours ago)

Motherboard: Acer | | L4S5MGX
Processor: Intel(R) Celeron(R) CPU 1.80GHz | Socket 478 | 1816/100mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (FAT32) - 37 GiB total, 19.049 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP622: 8/18/2009 10:46:49 PM - Removed Microsoft .NET Framework 2.0 Service Pack 2
RP623: 8/18/2009 10:56:43 PM - Configured NTI CD-Maker
RP624: 8/19/2009 10:28:44 AM - Software Distribution Service 3.0
RP625: 8/20/2009 8:07:57 PM - Software Distribution Service 3.0
RP626: 8/21/2009 9:46:04 AM - Installed Adobe Reader 9.1.
RP627: 8/21/2009 12:02:46 PM - Software Distribution Service 3.0
RP628: 8/26/2009 10:33:06 AM - Installed AVG 8.5
RP629: 8/26/2009 11:01:18 AM - Avg8 Update
RP630: 8/26/2009 11:09:05 AM - Software Distribution Service 3.0
RP631: 8/31/2009 9:36:38 AM - Installed QuickTime
RP632: 8/31/2009 9:40:17 AM - Installed ACDSee for PENTAX 2.0
RP633: 9/1/2009 3:49:30 PM - System Checkpoint
RP634: 9/4/2009 11:49:03 AM - Installed Activ8me Usage Meter
RP635: 9/4/2009 3:50:31 PM - Software Distribution Service 3.0
RP636: 9/4/2009 4:49:38 PM - Software Distribution Service 3.0
RP637: 9/6/2009 11:52:42 AM - System Checkpoint
RP638: 9/9/2009 9:41:46 AM - Avg8 Update
RP639: 9/9/2009 9:47:34 AM - Avg8 Update
RP640: 9/9/2009 11:43:21 AM - Software Distribution Service 3.0
RP641: 9/9/2009 2:55:21 PM - Software Distribution Service 3.0
RP642: 9/11/2009 8:54:40 PM - System Checkpoint
RP643: 9/16/2009 2:16:32 PM - System Checkpoint
RP644: 9/18/2009 8:52:00 AM - Avg8 Update
RP645: 9/19/2009 6:15:31 PM - System Checkpoint
RP646: 9/21/2009 2:17:24 PM - System Checkpoint
RP647: 9/25/2009 10:57:20 AM - Removed AVG 8.5
RP648: 9/25/2009 10:59:27 AM - Installed AVG 8.5
RP649: 9/26/2009 2:57:39 PM - System Checkpoint
RP650: 9/29/2009 12:39:30 PM - Software Distribution Service 3.0
RP651: 9/30/2009 11:15:58 AM - Software Distribution Service 3.0
RP652: 10/3/2009 4:02:22 PM - System Checkpoint
RP653: 10/4/2009 11:15:22 AM - Restore Operation
RP654: 10/4/2009 11:25:49 AM - Restore Operation
RP655: 10/10/2009 8:34:44 PM - System Checkpoint
RP656: 10/18/2009 2:40:41 PM - Software Distribution Service 3.0
RP657: 10/18/2009 7:30:57 PM - Software Distribution Service 3.0
RP658: 10/19/2009 11:32:09 AM - Software Distribution Service 3.0
RP659: 10/26/2009 1:43:46 PM - System Checkpoint
RP660: 11/6/2009 10:10:50 AM - Software Distribution Service 3.0
RP661: 11/10/2009 2:59:17 PM - System Checkpoint
RP662: 11/13/2009 12:45:46 AM - Software Distribution Service 3.0
RP663: 11/14/2009 9:20:56 PM - System Checkpoint
RP664: 11/23/2009 10:31:12 PM - Restore Operation

==== Installed Programs ======================


1000 Games For Windows
ACDSee for PENTAX 2.0
Acrobat.com
Activ8me Usage Meter
Ad-Aware
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 9.2
Ashampoo PowerUp XP
ATI Display Driver
Browser Defender 2.0.6.10
Canon MP Navigator EX 2.0
Canon MP240 series MP Drivers
Canon Utilities Easy-PhotoPrint EX
Canon Utilities My Printer
Canon Utilities Solution Menu
Google Chrome
Google Toolbar for Internet Explorer
Google Update Helper
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Malwarebytes' Anti-Malware
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft National Language Support Downlevel APIs
Microsoft Office 2000 Professional
Microsoft Office Publisher 2003
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 Parser and SDK
Norton 360
OGA Notifier 1.7.0105.35.0
Registry Medic 5.0
SCRABBLE
Security Update for CAPICOM (KB931906)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
SiS315 V2.04WHQL
Spyware Doctor 7.0
Symantec KB-DocID:2003093015493306
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB973874)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951618-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB973815)
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
Web Games Player Plugin
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format Runtime
Windows Media Player 10
Windows XP Service Pack 3

==== Event Viewer Messages From Past Week ========

11/24/2009 12:19:42 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
11/24/2009 10:11:28 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097}
11/23/2009 9:34:42 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}
11/23/2009 9:27:37 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
11/23/2009 9:25:55 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
11/23/2009 9:25:46 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: ASPI32 BHDrvx86 ccHP eeCtrl Fips IDSxpx86 Processor prodrv06 SRTSPX SYMTDI
11/23/2009 9:06:42 PM, error: Service Control Manager [7034] - The PC Tools Security Service service terminated unexpectedly. It has done this 2 time(s).
11/23/2009 8:53:12 PM, error: Service Control Manager [7034] - The PC Tools Security Service service terminated unexpectedly. It has done this 1 time(s).
11/23/2009 8:08:15 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the stisvc service.
11/23/2009 10:31:44 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the sdCoreService service.
11/23/2009 10:30:49 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Application Layer Gateway Service service to connect.
11/23/2009 10:30:49 PM, error: Service Control Manager [7000] - The Application Layer Gateway Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/21/2009 4:16:15 PM, error: Print [6161] - The document Microsoft Word - White Christmas.doc owned by penny failed to print on printer Canon MP240 series Printer. Data type: NT EMF 1.008. Size of the spool file in bytes: 65536. Number of bytes printed: 17416. Total number of pages in the document: 2. Number of pages printed: 0. Client machine: \\OEM-YVIILZ9SS5M. Win32 error code returned by the print processor: 13 (0xd).
11/21/2009 3:08:56 PM, error: Service Control Manager [7022] - The Terminal Services service hung on starting.
11/21/2009 3:08:56 PM, error: Service Control Manager [7001] - The Fast User Switching Compatibility service depends on the Terminal Services service which failed to start because of the following error: After starting, the service hung in a start-pending state.
11/20/2009 3:19:50 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the IMAPI CD-Burning COM Service service to connect.
11/20/2009 3:19:50 PM, error: Service Control Manager [7000] - The IMAPI CD-Burning COM Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/19/2009 9:27:29 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the N360 service.
11/18/2009 2:53:24 PM, error: Service Control Manager [7000] - The Windows CardSpace service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/18/2009 2:53:23 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Windows CardSpace service to connect.
11/18/2009 2:14:43 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Google Software Updater service to connect.
11/18/2009 2:14:40 PM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service gusvc with arguments "" in order to run the server: {89DAE4CD-9F17-4980-902A-99BA84A8F5C8}

==== End Of File ===========================


AV: Antivirus System PRO *On-access scanning enabled* (Outdated) {A8D49023-CEF0-4614-B2F4-E86F1AF0D636}
AV: Norton 360 *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Documents and Settings\keith\Local Settings\Temporary Internet Files\Content.IE5\AQ6WTLXM\dds[1].scr

============== Pseudo HJT Report ===============

uStart Page = [You must be registered and logged in to see this link.]
uSearch Page = [You must be registered and logged in to see this link.]
uSearch Bar = [You must be registered and logged in to see this link.]
uSearchMigratedDefaultURL = [You must be registered and logged in to see this link.]
uSearchAssistant = [You must be registered and logged in to see this link.]
uSearchURL,(Default) = [You must be registered and logged in to see this link.]
mSearchAssistant = [You must be registered and logged in to see this link.]
mURLSearchHooks: H - No File
mWinlogon: Userinit=c:\windows\system32\Userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: PC Tools Browser Guard BHO: {2a0f3d1b-0909-4ff4-b272-609cce6054e7} - c:\program files\spyware doctor\bdt\PCTBrowserDefender.dll
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton 360\engine\3.5.2.11\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton 360\engine\3.5.2.11\IPSBHO.DLL
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.4.4525.1752\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_B7C5AC242193BB3E.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton 360\engine\3.5.2.11\coIEPlg.dll
TB: PC Tools Browser Guard: {472734ea-242a-422b-adf8-83d1e48cc825} - c:\program files\spyware doctor\bdt\PCTBrowserDefender.dll
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No File
TB: {C6139A57-16FB-4FA4-8045-A847FBFFD695} - No File
TB: {08FCF7E3-5F7D-444E-8554-76A516EB3C6C} - No File
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
EB: {08FCF7E3-5F7D-444E-8554-76A516EB3C6C} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [AVGIDS] "c:\program files\avg\avg8\identityprotection\agent\bin\AVGIDSUI.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mRun: [ISTray] "c:\program files\spyware doctor\pctsTray.exe"
uPolicies-explorer: NoWindowsUpdate = 0 (0x0)
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: Microsoft XML Parser for Java - [You must be registered and logged in to see this link.]
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - [You must be registered and logged in to see this link.]
DPF: {11111111-1111-1111-1111-111111113457} - [You must be registered and logged in to see this link.]
DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} - [You must be registered and logged in to see this link.]
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - [You must be registered and logged in to see this link.]
DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} - [You must be registered and logged in to see this link.]
DPF: {33564D57-0000-0010-8000-00AA00389B71} - [You must be registered and logged in to see this link.]
DPF: {36C66BBD-E667-4DAD-9682-58050E7C9FDC} - [You must be registered and logged in to see this link.]
DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - [You must be registered and logged in to see this link.]
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - [You must be registered and logged in to see this link.]
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - [You must be registered and logged in to see this link.]
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - [You must be registered and logged in to see this link.]
DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - [You must be registered and logged in to see this link.]
DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - [You must be registered and logged in to see this link.]
DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} - [You must be registered and logged in to see this link.]
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - [You must be registered and logged in to see this link.]
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - [You must be registered and logged in to see this link.]
DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} - [You must be registered and logged in to see this link.]
Handler: symres - {AA1061FE-6C41-421f-9344-69640C9732AB} - c:\program files\norton 360\engine\3.5.2.11\CoIEPlg.dll

============= SERVICES / DRIVERS ===============


=============== Created Last 30 ================

2009-11-24 21:55:21 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-11-24 21:55:15 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-23 22:37:22 0 d-sh--w- C:\FOUND.002
2009-11-23 11:17:29 0 d-----w- c:\docume~1\alluse~1\applic~1\PC Tools
2009-11-23 11:17:05 0 d-----w- c:\program files\Zylom Games
2009-11-23 11:16:56 0 d-----w- c:\program files\Antivirus System PRO
2009-11-23 09:47:33 767952 ----a-w- c:\windows\BDTSupport.dll
2009-11-23 09:47:29 882 ----a-w- c:\windows\RegSDImport.xml
2009-11-23 09:47:28 880 ----a-w- c:\windows\RegISSImport.xml
2009-11-23 09:47:26 149456 ----a-w- c:\windows\SGDetectionTool.dll
2009-11-23 09:47:26 131 ----a-w- c:\windows\IDB.zip
2009-11-23 09:47:25 1152470 ----a-w- c:\windows\UDB.zip
2009-11-23 09:47:23 1636304 ----a-w- c:\windows\PCTBDCore.dll
2009-11-23 09:47:21 165840 ----a-w- c:\windows\PCTBDRes.dll
2009-11-23 09:29:12 7387 ----a-w- c:\windows\system32\drivers\pctgntdi.cat
2009-11-23 09:29:12 229304 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2009-11-23 09:25:46 7412 ----a-w- c:\windows\system32\drivers\PCTAppEvent.cat
2009-11-23 09:25:46 7383 ----a-w- c:\windows\system32\drivers\pctcore.cat
2009-11-23 09:25:46 207280 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2009-11-23 09:25:45 87784 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2009-11-23 09:23:56 7383 ----a-w- c:\windows\system32\drivers\pctplsg.cat
2009-11-23 09:23:55 70408 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2009-11-23 09:22:50 0 d-----w- c:\program files\common files\PC Tools
2009-11-23 09:22:43 0 d-----w- c:\program files\Spyware Doctor
2009-11-22 01:43:33 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-11-22 01:42:52 93360 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2009-11-22 01:33:07 0 d--h--w- c:\docume~1\alluse~1\applic~1\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-11-22 01:32:08 0 d-----w- c:\program files\Lavasoft
2009-11-19 15:48:28 0 d-----w- c:\docume~1\alluse~1\applic~1\Trymedia
2009-11-19 15:46:02 0 d-----w- c:\docume~1\alluse~1\applic~1\Zylom
2009-11-19 15:36:35 0 d-----w- c:\program files\RealArcade
2009-11-19 15:31:32 0 d-----w- c:\program files\SCRABBLE
2009-11-07 00:39:36 0 d-sh--w- C:\FOUND.001
2009-11-03 23:44:09 0 d-----w- c:\docume~1\keith\applic~1\Malwarebytes
2009-11-03 23:43:59 0 d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-11-03 23:43:59 0 d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-11-03 22:41:12 0 d-sh--w- C:\FOUND.000
2009-10-28 04:17:56 0 d-----w- c:\program files\Trend Micro

==================== Find3M ====================

2009-10-22 09:19:04 5939712 ------w- c:\windows\system32\dllcache\mshtml.dll
2009-09-26 01:29:38 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL
2009-09-26 01:24:02 107368 ----a-r- c:\windows\system32\GEARAspi.dll
2009-09-11 14:18:40 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-11 14:18:40 136192 ------w- c:\windows\system32\dllcache\msv1_0.dll
2009-09-04 21:03:36 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-09-04 21:03:36 58880 ------w- c:\windows\system32\dllcache\msasn1.dll
2009-08-28 10:35:52 173056 ------w- c:\windows\system32\dllcache\ie4uinit.exe
2004-08-11 10:29:06 0 --sha-w- c:\windows\addir.exe
2004-08-26 11:06:16 0 --sha-w- c:\windows\avnlv.dll
2004-08-26 11:14:08 0 --sha-w- c:\windows\aslcd.dll
2004-09-09 10:37:26 0 --sha-w- c:\windows\qvqto.dll
2004-09-11 10:41:34 0 --sha-w- c:\windows\viniv.dll
2008-04-13 23:12:02 84992 --sha-w- c:\windows\system32\olepro32.dll
2008-04-13 23:12:02 343040 --sha-w- c:\windows\system32\msvcrt.dll
2008-04-13 23:12:02 551936 --sh--w- c:\windows\system32\oleaut32.dll
2008-04-13 23:12:32 11776 --sh--w- c:\windows\system32\regsvr32.exe
2004-08-26 10:17:46 0 --sha-w- c:\windows\system32\qwfeg.dll
2004-08-28 09:34:52 0 --sha-w- c:\windows\system32\tpaad.dll
2008-04-13 23:12:02 413696 --sha-w- c:\windows\system32\msvcp60.dll
2008-04-13 23:12:02 57344 --sh--w- c:\windows\system32\msvcirt.dll
2008-04-13 23:11:56 1028096 --sha-w- c:\windows\system32\mfc42.dll
2008-08-19 23:57:44 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008082020080821\index.dat

============= FINISH: 13:31:45.32 ===============

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by Belahzur on Wed Nov 25, 2009 7:36 pm

Please download the [You must be registered and logged in to see this link.].

  • Save it to your desktop.
  • Please double-click OTM.exe to run it.
  • Copy the bolded text below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose CopyCrying


    :files
    C:\FOUND.***
    c:\windows\addir.exe
    c:\windows\avnlv.dll
    c:\windows\aslcd.dll
    c:\windows\qvqto.dll
    c:\windows\viniv.dll


  • Return to OTMoveIt, right click in the "Paste instructions for items to be Moved" window (under the light blue bar) and choose Paste.
  • Click the red Moveit! button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTMoveIt
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Please post the OTMoveIt log.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Wed Nov 25, 2009 11:05 pm

I hope I've done this correctly.
Error: Unable to interpret <:\FOUND.***> in the current context!
Error: Unable to interpret in the current context!
Error: Unable to interpret in the current context!
Error: Unable to interpret in the current context!
Error: Unable to interpret in the current context!
Error: Unable to interpret in the current context!

OTM by OldTimer - Version 3.1.2.0 log created on 11262009_095856

Thanks.

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by Belahzur on Thu Nov 26, 2009 1:38 am

Hello.
I think you may have missed :files in the script there.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Thu Nov 26, 2009 4:03 am

I will try again. My computer seems to be getting worse.

Under Paste instructions
:files
C:\FOUND.***
c:\windows\addir.exe
c:\windows\avnlv.dll
c:\windows\aslcd.dll
c:\windows\qvqto.dll
c:\windows\viniv.dll
After selecting Moveit the results show

========== FILES ==========
File/Folder C:\FOUND.*** not found.
File/Folder c:\windows\addir.exe not found.
File/Folder c:\windows\avnlv.dll not found.
File/Folder c:\windows\aslcd.dll not found.
File/Folder c:\windows\qvqto.dll not found.
File/Folder c:\windows\viniv.dll not found.

OTM by OldTimer - Version 3.1.2.0 log created on 11262009_145602

And the Notepad log shows:

========== FILES ==========
File/Folder C:\FOUND.*** not found.
File/Folder c:\windows\addir.exe not found.
File/Folder c:\windows\avnlv.dll not found.
File/Folder c:\windows\aslcd.dll not found.
File/Folder c:\windows\qvqto.dll not found.
File/Folder c:\windows\viniv.dll not found.

OTM by OldTimer - Version 3.1.2.0 log created on 11262009_145602


What is going on??

Keith.

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Fri Nov 27, 2009 3:48 am

Belahzur, Hello,

I have tried several times today to get the file results from OTM you are seeking, but still no luck.
Could this have anything to do with the fact that I can only operate this computer in Safe Mode?

Regards,
Keith.

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by Belahzur on Fri Nov 27, 2009 10:13 am

No.
Re-run DDS for me, post the new DDS.txt when done.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Fri Nov 27, 2009 9:56 pm

Hope this works.


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-11-24.02)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 7/9/2004 12:13:52 PM
System Uptime: 11/28/2009 8:34:53 AM (0 hours ago)

Motherboard: Acer | | L4S5MGX
Processor: Intel(R) Celeron(R) CPU 1.80GHz | Socket 478 | 1816/100mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (FAT32) - 37 GiB total, 19.011 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP622: 8/18/2009 10:46:49 PM - Removed Microsoft .NET Framework 2.0 Service Pack 2
RP623: 8/18/2009 10:56:43 PM - Configured NTI CD-Maker
RP624: 8/19/2009 10:28:44 AM - Software Distribution Service 3.0
RP625: 8/20/2009 8:07:57 PM - Software Distribution Service 3.0
RP626: 8/21/2009 9:46:04 AM - Installed Adobe Reader 9.1.
RP627: 8/21/2009 12:02:46 PM - Software Distribution Service 3.0
RP628: 8/26/2009 10:33:06 AM - Installed AVG 8.5
RP629: 8/26/2009 11:01:18 AM - Avg8 Update
RP630: 8/26/2009 11:09:05 AM - Software Distribution Service 3.0
RP631: 8/31/2009 9:36:38 AM - Installed QuickTime
RP632: 8/31/2009 9:40:17 AM - Installed ACDSee for PENTAX 2.0
RP633: 9/1/2009 3:49:30 PM - System Checkpoint
RP634: 9/4/2009 11:49:03 AM - Installed Activ8me Usage Meter
RP635: 9/4/2009 3:50:31 PM - Software Distribution Service 3.0
RP636: 9/4/2009 4:49:38 PM - Software Distribution Service 3.0
RP637: 9/6/2009 11:52:42 AM - System Checkpoint
RP638: 9/9/2009 9:41:46 AM - Avg8 Update
RP639: 9/9/2009 9:47:34 AM - Avg8 Update
RP640: 9/9/2009 11:43:21 AM - Software Distribution Service 3.0
RP641: 9/9/2009 2:55:21 PM - Software Distribution Service 3.0
RP642: 9/11/2009 8:54:40 PM - System Checkpoint
RP643: 9/16/2009 2:16:32 PM - System Checkpoint
RP644: 9/18/2009 8:52:00 AM - Avg8 Update
RP645: 9/19/2009 6:15:31 PM - System Checkpoint
RP646: 9/21/2009 2:17:24 PM - System Checkpoint
RP647: 9/25/2009 10:57:20 AM - Removed AVG 8.5
RP648: 9/25/2009 10:59:27 AM - Installed AVG 8.5
RP649: 9/26/2009 2:57:39 PM - System Checkpoint
RP650: 9/29/2009 12:39:30 PM - Software Distribution Service 3.0
RP651: 9/30/2009 11:15:58 AM - Software Distribution Service 3.0
RP652: 10/3/2009 4:02:22 PM - System Checkpoint
RP653: 10/4/2009 11:15:22 AM - Restore Operation
RP654: 10/4/2009 11:25:49 AM - Restore Operation
RP655: 10/10/2009 8:34:44 PM - System Checkpoint
RP656: 10/18/2009 2:40:41 PM - Software Distribution Service 3.0
RP657: 10/18/2009 7:30:57 PM - Software Distribution Service 3.0
RP658: 10/19/2009 11:32:09 AM - Software Distribution Service 3.0
RP659: 10/26/2009 1:43:46 PM - System Checkpoint
RP660: 11/6/2009 10:10:50 AM - Software Distribution Service 3.0
RP661: 11/10/2009 2:59:17 PM - System Checkpoint
RP662: 11/13/2009 12:45:46 AM - Software Distribution Service 3.0
RP663: 11/14/2009 9:20:56 PM - System Checkpoint
RP664: 11/23/2009 10:31:12 PM - Restore Operation

==== Installed Programs ======================


1000 Games For Windows
ACDSee for PENTAX 2.0
Acrobat.com
Activ8me Usage Meter
Ad-Aware
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 9.2
Ashampoo PowerUp XP
ATI Display Driver
Browser Defender 2.0.6.10
Canon MP Navigator EX 2.0
Canon MP240 series MP Drivers
Canon Utilities Easy-PhotoPrint EX
Canon Utilities My Printer
Canon Utilities Solution Menu
Google Chrome
Google Toolbar for Internet Explorer
Google Update Helper
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Malwarebytes' Anti-Malware
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft National Language Support Downlevel APIs
Microsoft Office 2000 Professional
Microsoft Office Publisher 2003
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 Parser and SDK
Norton 360
OGA Notifier 1.7.0105.35.0
Registry Medic 5.0
SCRABBLE
Security Update for CAPICOM (KB931906)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
SiS315 V2.04WHQL
Spyware Doctor 7.0
Symantec KB-DocID:2003093015493306
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB973874)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951618-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB973815)
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
Web Games Player Plugin
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format Runtime
Windows Media Player 10
Windows XP Service Pack 3

==== Event Viewer Messages From Past Week ========

11/24/2009 9:23:41 AM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the N360 service.
11/24/2009 12:19:42 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
11/24/2009 10:11:28 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097}
11/23/2009 9:34:42 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}
11/23/2009 9:27:37 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
11/23/2009 9:25:55 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
11/23/2009 9:25:46 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: ASPI32 BHDrvx86 ccHP eeCtrl Fips IDSxpx86 Processor prodrv06 SRTSPX SYMTDI
11/23/2009 9:06:42 PM, error: Service Control Manager [7034] - The PC Tools Security Service service terminated unexpectedly. It has done this 2 time(s).
11/23/2009 8:53:12 PM, error: Service Control Manager [7034] - The PC Tools Security Service service terminated unexpectedly. It has done this 1 time(s).
11/23/2009 8:08:15 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the stisvc service.
11/23/2009 10:31:44 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the sdCoreService service.
11/23/2009 10:30:49 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Application Layer Gateway Service service to connect.
11/23/2009 10:30:49 PM, error: Service Control Manager [7000] - The Application Layer Gateway Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/22/2009 3:42:49 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Google Software Updater service to connect.
11/22/2009 3:42:45 PM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service gusvc with arguments "" in order to run the server: {89DAE4CD-9F17-4980-902A-99BA84A8F5C8}
11/22/2009 2:01:50 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Windows CardSpace service to connect.
11/22/2009 2:01:50 PM, error: Service Control Manager [7000] - The Windows CardSpace service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/21/2009 4:16:15 PM, error: Print [6161] - The document Microsoft Word - White Christmas.doc owned by penny failed to print on printer Canon MP240 series Printer. Data type: NT EMF 1.008. Size of the spool file in bytes: 65536. Number of bytes printed: 17416. Total number of pages in the document: 2. Number of pages printed: 0. Client machine: \\OEM-YVIILZ9SS5M. Win32 error code returned by the print processor: 13 (0xd).
11/21/2009 3:09:45 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the IMAPI CD-Burning COM Service service to connect.
11/21/2009 3:09:45 PM, error: Service Control Manager [7000] - The IMAPI CD-Burning COM Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/21/2009 3:08:56 PM, error: Service Control Manager [7022] - The Terminal Services service hung on starting.
11/21/2009 3:08:56 PM, error: Service Control Manager [7001] - The Fast User Switching Compatibility service depends on the Terminal Services service which failed to start because of the following error: After starting, the service hung in a start-pending state.

==== End Of File ===========================


DDS (Ver_09-11-24.02) - FAT32x86 NETWORK
Run by keith at 8:40:17.20 on Sat 11/28/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.247.127 [GMT 11:00]

AV: Antivirus System PRO *On-access scanning enabled* (Outdated) {A8D49023-CEF0-4614-B2F4-E86F1AF0D636}
AV: Norton 360 *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\keith\Desktop\dds.pif

============== Pseudo HJT Report ===============

uStart Page = [You must be registered and logged in to see this link.]
uSearch Page = [You must be registered and logged in to see this link.]
uSearch Bar = [You must be registered and logged in to see this link.]
uSearchMigratedDefaultURL = [You must be registered and logged in to see this link.]
uSearchAssistant = [You must be registered and logged in to see this link.]
uSearchURL,(Default) = [You must be registered and logged in to see this link.]
mSearchAssistant = [You must be registered and logged in to see this link.]
mURLSearchHooks: H - No File
mWinlogon: Userinit=c:\windows\system32\Userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: PC Tools Browser Guard BHO: {2a0f3d1b-0909-4ff4-b272-609cce6054e7} - c:\program files\spyware doctor\bdt\PCTBrowserDefender.dll
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton 360\engine\3.5.2.11\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton 360\engine\3.5.2.11\IPSBHO.DLL
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.4.4525.1752\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_B7C5AC242193BB3E.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton 360\engine\3.5.2.11\coIEPlg.dll
TB: PC Tools Browser Guard: {472734ea-242a-422b-adf8-83d1e48cc825} - c:\program files\spyware doctor\bdt\PCTBrowserDefender.dll
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No File
TB: {C6139A57-16FB-4FA4-8045-A847FBFFD695} - No File
TB: {08FCF7E3-5F7D-444E-8554-76A516EB3C6C} - No File
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
EB: {08FCF7E3-5F7D-444E-8554-76A516EB3C6C} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [AVGIDS] "c:\program files\avg\avg8\identityprotection\agent\bin\AVGIDSUI.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mRun: [ISTray] "c:\program files\spyware doctor\pctsTray.exe"
uPolicies-explorer: NoWindowsUpdate = 0 (0x0)
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: Microsoft XML Parser for Java - [You must be registered and logged in to see this link.]
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - [You must be registered and logged in to see this link.]
DPF: {11111111-1111-1111-1111-111111113457} - [You must be registered and logged in to see this link.]
DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} - [You must be registered and logged in to see this link.]
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - [You must be registered and logged in to see this link.]
DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} - [You must be registered and logged in to see this link.]
DPF: {33564D57-0000-0010-8000-00AA00389B71} - [You must be registered and logged in to see this link.]
DPF: {36C66BBD-E667-4DAD-9682-58050E7C9FDC} - [You must be registered and logged in to see this link.]
DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - [You must be registered and logged in to see this link.]
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - [You must be registered and logged in to see this link.]
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - [You must be registered and logged in to see this link.]
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - [You must be registered and logged in to see this link.]
DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - [You must be registered and logged in to see this link.]
DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - [You must be registered and logged in to see this link.]
DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} - [You must be registered and logged in to see this link.]
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - [You must be registered and logged in to see this link.]
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - [You must be registered and logged in to see this link.]
DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} - [You must be registered and logged in to see this link.]
Handler: symres - {AA1061FE-6C41-421f-9344-69640C9732AB} - c:\program files\norton 360\engine\3.5.2.11\CoIEPlg.dll

============= SERVICES / DRIVERS ===============

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-11-22 64288]
S1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\n360\0305020.00b\BHDrvx86.sys [2009-9-26 259632]
S1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\n360\0305020.00b\cchpx86.sys [2009-9-26 482432]
S1 IDSxpx86;IDSxpx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\ipsdefs\20091105.001\IDSXpx86.sys [2009-11-7 329592]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2009-9-26 102448]
S3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys --> c:\windows\system32\drivers\massfilter.sys [?]

=============== Created Last 30 ================

2009-11-27 03:21:58 0 d-sh--w- C:\FOUND.000
2009-11-25 22:58:56 0 d-----w- C:\_OTM
2009-11-24 21:55:21 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-11-24 21:55:15 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-23 11:17:29 0 d-----w- c:\docume~1\alluse~1\applic~1\PC Tools
2009-11-23 11:17:05 0 d-----w- c:\program files\Zylom Games
2009-11-23 11:16:56 0 d-----w- c:\program files\Antivirus System PRO
2009-11-23 09:47:33 767952 ----a-w- c:\windows\BDTSupport.dll
2009-11-23 09:47:29 882 ----a-w- c:\windows\RegSDImport.xml
2009-11-23 09:47:28 880 ----a-w- c:\windows\RegISSImport.xml
2009-11-23 09:47:26 149456 ----a-w- c:\windows\SGDetectionTool.dll
2009-11-23 09:47:26 131 ----a-w- c:\windows\IDB.zip
2009-11-23 09:47:25 1152470 ----a-w- c:\windows\UDB.zip
2009-11-23 09:47:23 1636304 ----a-w- c:\windows\PCTBDCore.dll
2009-11-23 09:47:21 165840 ----a-w- c:\windows\PCTBDRes.dll
2009-11-23 09:29:12 7387 ----a-w- c:\windows\system32\drivers\pctgntdi.cat
2009-11-23 09:29:12 229304 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2009-11-23 09:25:46 7412 ----a-w- c:\windows\system32\drivers\PCTAppEvent.cat
2009-11-23 09:25:46 7383 ----a-w- c:\windows\system32\drivers\pctcore.cat
2009-11-23 09:25:46 207280 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2009-11-23 09:25:45 87784 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2009-11-23 09:23:56 7383 ----a-w- c:\windows\system32\drivers\pctplsg.cat
2009-11-23 09:23:55 70408 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2009-11-23 09:22:50 0 d-----w- c:\program files\common files\PC Tools
2009-11-23 09:22:43 0 d-----w- c:\program files\Spyware Doctor
2009-11-22 01:43:33 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-11-22 01:42:52 93360 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2009-11-22 01:33:07 0 d--h--w- c:\docume~1\alluse~1\applic~1\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-11-22 01:32:08 0 d-----w- c:\program files\Lavasoft
2009-11-19 15:48:28 0 d-----w- c:\docume~1\alluse~1\applic~1\Trymedia
2009-11-19 15:46:02 0 d-----w- c:\docume~1\alluse~1\applic~1\Zylom
2009-11-19 15:36:35 0 d-----w- c:\program files\RealArcade
2009-11-19 15:31:32 0 d-----w- c:\program files\SCRABBLE
2009-11-03 23:44:09 0 d-----w- c:\docume~1\keith\applic~1\Malwarebytes
2009-11-03 23:43:59 0 d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-11-03 23:43:59 0 d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes

==================== Find3M ====================

2009-10-22 09:19:04 5939712 ------w- c:\windows\system32\dllcache\mshtml.dll
2009-09-26 01:29:38 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL
2009-09-26 01:24:02 107368 ----a-r- c:\windows\system32\GEARAspi.dll
2009-09-11 14:18:40 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-11 14:18:40 136192 ------w- c:\windows\system32\dllcache\msv1_0.dll
2009-09-04 21:03:36 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-09-04 21:03:36 58880 ------w- c:\windows\system32\dllcache\msasn1.dll
2008-04-13 23:12:02 84992 --sha-w- c:\windows\system32\olepro32.dll
2008-04-13 23:12:02 343040 --sha-w- c:\windows\system32\msvcrt.dll
2008-04-13 23:12:02 551936 --sh--w- c:\windows\system32\oleaut32.dll
2008-04-13 23:12:32 11776 --sh--w- c:\windows\system32\regsvr32.exe
2004-08-26 10:17:46 0 --sha-w- c:\windows\system32\qwfeg.dll
2004-08-28 09:34:52 0 --sha-w- c:\windows\system32\tpaad.dll
2008-04-13 23:12:02 413696 --sha-w- c:\windows\system32\msvcp60.dll
2008-04-13 23:12:02 57344 --sh--w- c:\windows\system32\msvcirt.dll
2008-04-13 23:11:56 1028096 --sha-w- c:\windows\system32\mfc42.dll
2008-08-19 23:57:44 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008082020080821\index.dat

============= FINISH: 8:43:10.82 ===============

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by Belahzur on Fri Nov 27, 2009 11:12 pm

Delete this folder in bold:
c:\program files\Antivirus System PRO

How is the machine now?
Those files we wanted gone are gone anyway, OTM must have worked the first time.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Sat Nov 28, 2009 2:45 am

Followed instructions & deleted file.
Took 15 minutes for machine to shut down on normal (start/turn comp. off/shut down).
Start in normal mode good, personal settings loaded & desktop appeared quickly. Would not load IE, would not close normally. Had to 5 seconds on power button.
Now in Safemode to respond to you.
I really have a problem, don't I?
Hope you will continue to help me.
Cheers,
Keith.

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Sat Nov 28, 2009 5:38 am

I sent you a response several hours ago. I just looked to see if you had responded & couldn't find any copy of my note. If it didn't go: followed instructions, my machine boots up in normal mode,desktop icons load quickly, can't access IE at all. Had to use safemode again to reach you.
Thanks,
Keith.

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by Belahzur on Sat Nov 28, 2009 7:12 pm

Keep in mind, malware can damage an OS if left for long enough, repairing isn't always possible, but we can try.

Please download [You must be registered and logged in to see this link.] by DragonMaster Jay, and save it to your Desktop.
  • Please disable realtime protection. (If any)
  • Double-click RunFirst.vbs. Follow the prompts and make sure it completes. It will confirm the Restore Point was added.
  • Double-click DragonFix.reg, and follow the prompt(s).
  • Please reboot your computer.


Any change now?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Sat Nov 28, 2009 10:41 pm

Runfirst wants a name for system restore--- what do I put there?

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by Belahzur on Sun Nov 29, 2009 1:52 am

Todays date. Smile


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Sun Nov 29, 2009 4:36 am

Will not accept any combination of dates for today (2009-11-29/29-11-2009/29th November 2009).
Shows a window that says"unknown error-system restore point not created".
Any suggestions?
Cheers,
Keith.

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by Belahzur on Sun Nov 29, 2009 11:45 pm

Hello.
It wants a text value, meaning just give it a name that is LETTERS only, no numbers or symbols.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Mon Nov 30, 2009 12:35 am

Still the same result, "unknown error etc". I entered : thirty november; november thirty;tried Caps; no spaces; full date including year.
Have I misunderstood you?

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by Belahzur on Mon Nov 30, 2009 8:07 pm

Hello.
We'll use DragonFix soon, just need to set a restore point.

Go to the Start Menu > Help and Support. Once that window opens, under "Choose a task", hit "Undo changes to your computer with System Restore"

Now this next window has two options, choose the second option called "Create a restore point"

It will ask for a name, type in something you will remember and set it.

Close the System Restore windows, then try running DragonFix again.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Tue Dec 01, 2009 1:07 am

G'day,
Finally managed to create a new System Restore Point today in normal mode ( could not be done in Safe Mode). It took forever to acknowledge that it had been created.
Tried to use normal mode for RunFirst, it kept asking for me to select a System Restore name (which I did) and then acknowledged it had been created. When I clicked RunFirst, it again asked for a restore name and confirmed etc, this kept happening.
Went to Safe Mode, clicked x 2 on RunFirst, pop-up asked for name for System Restore (I repeated it), and it confirmed it was created. Pressed OK. Pop-up dissapeared-RunFirst "blued out", no timer icon, no machine noise, after waiting 5 minutes for something to happen, sent you this.
I hope you stay with me .
Regards,
Keith.

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Thu Dec 03, 2009 10:01 pm

Hello Belahzur,
I havn't heard from you for a couple of days now.
Are you prepared to continue to try to help me, or am I unhelpable?
Should I just give up on this computer and plan to buy another one. That would solve the current problem, but how do I prevent the same thing happening to a different machine, and I can't afford it anyway.
Hope to hear from you soon.
Thanks,
K.

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by Belahzur on Fri Dec 04, 2009 12:51 am

Hello.
Sorry, didn't leave you, just miss your post, you may have posted when I was posting to others and I didn't see it in the list as I use tabs.

DragonFix has a few bugs, I talked to the developer so he should fix them soon. For now, I'm not sure if we can repair it as malware damage can be ever lasting, like looking for a needle in a haystack.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: devistating antivirus system pro

Post by greyhawk on Fri Dec 04, 2009 2:45 am

G'day,
I appreciate all your time and effort, thanks .
If DragonFix can be debugged and can be made available to me, I will gladly run it again and report on it's performance with my problem.
Thanks again for your help so far.
Regards,
K.

greyhawk
Novice
Novice

Posts Posts : 16
Joined Joined : 2009-11-23
Gender Gender : Male
OS OS : xp
Points Points : 25918
# Likes # Likes : 0

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum