Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.
Hi all, please see this major site announcement: https://www.boards.ie/discussion/2058427594/boards-ie-2026

Try again...

  • 13-07-2008 01:54PM
    #1
    Dartz
    Registered Users, Registered Users 2 Posts: 4,450 ✭✭✭


    Hi,

    Since erasing and reinstalling isn't possible, I'm down to cleaning it up...

    Anyway, I've spend the last week or so blundering around, trying to fix this on my own. Using Spybot S&D's registry key viewer feature to disable a lot of stuff on startup and the like. I don't think that's really dealt with it though, just stomped it down and made it go away for a bit...

    Avast doesn't detect anything... but it takes about 3 hours to run a full scan.

    Spybot S&D gives errors when searching under Trojan definitions, which is a bit of an alrm bell alright..

    Anyway, I ran through some of the suggested steps, and generally whalloped it with a stick. It's behaving itself a luittle better now. Panda got 1 Trojan , 5 suspicious items it sent to their lab, and 9 other miscelleaneous items.

    Problem is, there's still evidence of stuff floating around. ctfmon.exe keeps trying to add itself to the startup registry when IE starts.

    There's still some little gribbly's in there.

    Anyway, I ran Dekards System Scanner, and here's what shows up....

    ___________________________________________

    Deckard's System Scanner v20071014.68
    Run by ColmMc on 2008-07-13 13:50:33
    Computer is in Normal Mode.



    -- HijackThis (run as ColmMc.exe)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 13:50:35, on 13/07/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16674)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
    C:\WINDOWS\ehome\RMSvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
    C:\Program Files\Philips\Media Manager\Philips Media Manager.exe
    C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\taskmgr.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32Info.exe
    C:\Documents and Settings\ColmMc\Desktop\dss.exe
    C:\PROGRA~1\TRENDM~1\HIJACK~1\ColmMc.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.ie/0SEENIE/SAOS01?FORM=TOOLBR
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.ie/0SEENIE/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?linkid=677
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.ie/0SEENIE/SAOS01?FORM=TOOLBR
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://support.thetechguys.com/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O1 - Hosts: 127.
    O1 - Hosts: 127.0
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: (no name) - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - (no file)
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
    O4 - HKLM\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S4D.tmp" /EF "HKLM"
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKCU\..\Run: [Power2GoExpress] "C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe" /Startup
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - S-1-5-18 Startup: Philips Media Manager.lnk = C:\Program Files\Philips\Media Manager\Philips Media Manager.exe (User 'SYSTEM')
    O4 - .DEFAULT Startup: Philips Media Manager.lnk = C:\Program Files\Philips\Media Manager\Philips Media Manager.exe (User 'Default user')
    O4 - .DEFAULT User Startup: Philips Media Manager.lnk = C:\Program Files\Philips\Media Manager\Philips Media Manager.exe (User 'Default user')
    O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
    O4 - Startup: Philips Media Manager.lnk = C:\Program Files\Philips\Media Manager\Philips Media Manager.exe
    O4 - Global Startup: Extender Resource Monitor.lnk = C:\WINDOWS\ehome\RMSysTry.exe
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: &Search - ?p=ZJfox000
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
    O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
    O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-ie\msntabres.dll.mui/229?e3b3c006f2bd47988f8dbf750720898e
    O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-ie\msntabres.dll.mui/230?e3b3c006f2bd47988f8dbf750720898e
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - C:\Program Files\Free Download Manager\FUM\fumiebtn.dll (file missing)
    O14 - IERESET.INF: START_PAGE_URL=http://www.pcservicecall.co.uk
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by21fd.bay21.hotmail.msn.com/resources/MsnPUpld.cab
    O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
    O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
    O23 - Service: Intel(R) Quick Resume technology (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: ProtexisLicensing - Unknown owner - C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
    O24 - Desktop Component 1: (no name) - http://gamercard.xbox.com/zShadowman.card

    --
    End of file - 12581 bytes

    -- Files created between 2008-06-13 and 2008-07-13

    2008-07-11 02:11:41 0 d
    C:\e8c55bad58c855d48e
    2008-07-09 20:46:43 0 d
    C:\Program Files\Panda Security
    2008-07-09 20:42:05 0 d
    C:\Program Files\Trend Micro
    2008-07-09 19:55:46 0 d
    C:\WINDOWS\Performance
    2008-07-09 19:54:46 0 d
    C:\Documents and Settings\All Users\Application Data\Microsoft Corporation
    2008-07-09 19:53:46 0 d
    C:\Program Files\Microsoft Windows Vista Upgrade Advisor
    2008-07-09 19:46:20 0 d
    C:\Documents and Settings\ColmMc\Application Data\SUPERAntiSpyware.com
    2008-07-07 20:47:39 0 d
    C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
    2008-07-07 20:47:36 0 d
    C:\Program Files\SUPERAntiSpyware
    2008-07-07 20:47:36 0 d
    C:\Documents and Settings\IanMc\Application Data\SUPERAntiSpyware.com
    2008-07-07 20:47:22 0 d
    C:\Program Files\Common Files\Wise Installation Wizard
    2008-07-07 20:37:04 0 d
    C:\Documents and Settings\IanMc\Application Data\InstallShield
    2008-07-07 19:14:17 0 d
    C:\Documents and Settings\Administrator\Application Data\Real
    2008-07-07 19:11:44 0 d
    C:\Documents and Settings\Administrator\Application Data\InstallShield
    2008-07-02 18:37:41 324 --a
    C:\ituninst.bat
    2008-06-26 13:02:27 0 d
    C:\Documents and Settings\ColmMc\Application Data\Songbird2
    2008-06-19 16:07:23 0 d
    C:\Documents and Settings\MarieMc\Application Data\Real


    -- Find3M Report

    2008-07-10 14:06:11 0 d
    C:\Documents and Settings\ColmMc\Application Data\OpenOffice.org2
    2008-07-09 23:33:41 0 d
    C:\Program Files\mIRC
    2008-07-07 20:47:22 0 d
    C:\Program Files\Common Files
    2008-07-07 20:37:28 0 d
    C:\Program Files\Common Files\GTK
    2008-07-07 19:14:19 0 d
    C:\Program Files\Common Files\Real
    2008-07-07 19:13:11 0 d
    C:\Program Files\Messenger Plus! Live
    2008-07-07 19:12:56 0 d
    C:\Program Files\CyberLink
    2008-07-07 19:12:47 0 d
    C:\Program Files\KellySoftware
    2008-07-07 19:11:26 0 d
    C:\Program Files\DivX
    2008-07-06 18:54:14 0 d
    C:\Program Files\StarWarsGalaxies
    2008-07-02 18:37:38 0 d
    C:\Program Files\InterActual
    2008-07-02 18:23:19 0 d--h
    C:\Program Files\InstallShield Installation Information
    2008-07-02 18:18:23 0 d
    C:\Program Files\Creative
    2008-07-02 18:15:53 0 d
    C:\Program Files\Common Files\Adobe
    2008-07-01 19:30:33 0 d
    C:\Documents and Settings\ColmMc\Application Data\BAGSOBJCAMP
    2008-06-26 13:02:30 0 d
    C:\Documents and Settings\ColmMc\Application Data\Mozilla
    2008-06-05 19:47:03 0 d
    C:\Program Files\BAGSOBJCAMP
    2008-05-23 17:31:24 0 d
    C:\Program Files\RandomGames
    2008-05-17 23:15:10 0 d
    C:\Program Files\Windows Media Connect 2
    2008-05-16 11:58:33 0 d
    C:\Program Files\ANPARK
    2008-05-15 23:04:19 0 d
    C:\Program Files\Java
    2008-05-15 18:39:32 552 --a
    C:\WINDOWS\system32\d3d8caps.dat


    -- Registry Dump

    *Note* empty entries & legit default entries are not shown


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [29/09/2005 23:01]
    "Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [13/09/2002 23:42]
    "RTHDCPL"="RTHDCPL.EXE" [10/02/2006 11:25 C:\WINDOWS\RTHDCPL.exe]
    "IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [11/05/2006 11:47]
    "EPSON Stylus DX5000 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.exe" [14/02/2006 05:00]
    "ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [16/02/2005 17:15]
    "ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [16/02/2005 17:15]
    "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [03/11/2006 19:20]
    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [16/05/2008 00:19]
    "Alcmtr"="ALCMTR.EXE" [03/05/2005 11:43 C:\WINDOWS\Alcmtr.exe]
    "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe" [10/05/2006 11:12]
    "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [30/03/2008 10:36]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [22/02/2008 04:25]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Power2GoExpress"="C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe" [08/07/2005 16:01]
    "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [31/05/2005 02:04]

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
    "DWQueuedReporting"="c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t

    C:\Documents and Settings\ColmMc\Start Menu\Programs\Startup\
    OpenOffice.org 2.2.lnk - C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe [02/02/2007 16:54:56]
    Philips Media Manager.lnk - C:\Program Files\Philips\Media Manager\Philips Media Manager.exe [12/10/2006 22:12:12]

    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
    Extender Resource Monitor.lnk - C:\WINDOWS\ehome\RMSysTry.exe [20/10/2005 18:55:40]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
    "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [13/05/2008 10:13 77824]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 19/04/2007 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
    "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    "C:\Program Files\iTunes\iTunesHelper.exe"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr]
    C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "KodakCCS"=3 (0x3)
    "iPod Service"=3 (0x3)
    "Apple Mobile Device"=2 (0x2)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    QWAVE QWAVE


    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{919a1391-9333-11da-bf07-806d6172696f}]
    AutoRun\command- E:\Launch.exe




    -- End of Deckard's System Scanner: finished at 2008-07-13 13:51:06


    _______________________________

    That's the latest one I ran, right before posting. It only gave me a 'main.txt', it didn't open an 'extra.txt'. If that's a problem I'll try running under a different user account.

    Kinda funny really.... probably isn't even half as clean as I thought it was...

    Thing really needs a clean reinstall, but that's really not possible. Recovery partition seems to have corrupted, it just bluescreens.


Comments

  • #2
    ActorSeeksJob
    Closed Accounts Posts: 1,970 ✭✭✭ActorSeeksJob


    Its clean

    Fix these with HijackThis

    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: &Search - ?p=ZJfox000



    Please do an online scan with Kaspersky WebScanner

    Make sure you are using Internet Explorer for this. Click on Kaspersky Online Scanner and click Accept

    You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
    • The program will launch and then begin downloading the latest definition files:
    • Once the files have been downloaded click on NEXT
    • Now click on Scan Settings
    • In the scan settings make that the following are selected:
      • Scan using the following Anti-Virus database:
        Extended (if available otherwise Standard)
      • Scan Options:
        Scan Archives
        Scan Mail Bases

        [*]Click OK
        [*]Now under select a target to scan:
          Select
        My Computer

        [*]This will program will start and scan your system.
        [*]The scan will take a while so be patient and let it run.
        [*]Once the scan is complete it will display if your system has been infected.
        • Now click on the Save as Text button:
        [*]Save the file to your desktop.
        [*]Copy and paste that information in your next post.


      • #3
        Dartz
        Registered Users, Registered Users 2 Posts: 4,450 ✭✭✭Dartz


        That's a pleasant surprise...

        I ran the scanner and it did detect a few things...

        *KASPERSKY ONLINE SCANNER REPORT*
        Sunday, July 13, 2008 4:39:28 PM
        Operating System: Microsoft Windows XP Professional, Service Pack 2
        (Build 2600)
        Kaspersky Online Scanner version: 5.0.98.0
        Kaspersky Anti-Virus database last update: 13/07/2008
        Kaspersky Anti-Virus database records: 948721

        *Scan Settings*
        Scan using the following antivirus database extended
        Scan Archives true
        Scan Mail Bases true
        *Scan Target* My Computer
        C:\
        D:\
        E:\
        F:\
        G:\
        H:\
        *Scan Statistics*
        Total number of scanned objects 138096
        Number of viruses found 5
        Number of infected objects 11
        Number of suspicious objects 0
        Duration of the scan process 01:12:20


        *Infected Object Name* *Virus Name* *Last Action*
        C:\Documents and Settings\Administrator\Local Settings\Application
        Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
        C:\Documents and Settings\Administrator\Local Settings\Application
        Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
        C:\Documents and Settings\Administrator\NTUSER.DAT Object is locked
        skipped
        C:\Documents and Settings\Administrator\ntuser.dat.LOG Object is
        locked skipped
        C:\Documents and
        Settings\AlanMc\.Philips\MediaManager\media\db4\scMediaDB.backup Object
        is locked skipped
        C:\Documents and
        Settings\AlanMc\.Philips\MediaManager\media\db4\scMediaDB.data Object
        is locked skipped
        C:\Documents and
        Settings\AlanMc\.Philips\MediaManager\media\db4\scMediaDB.properties
        Object is locked skipped
        C:\Documents and
        Settings\AlanMc\.Philips\MediaManager\media\db4\scMediaDB.script Object
        is locked skipped
        C:\Documents and Settings\AlanMc\.Philips\MediaManager\Philips Media
        Manager.lnk Object is locked skipped
        C:\Documents and
        Settings\AlanMc\.Philips\MediaManager\simplecenter.0.log Object is
        locked skipped
        C:\Documents and
        Settings\AlanMc\.Philips\MediaManager\simplecenter.0.log.lck Object is
        locked skipped
        C:\Documents and
        Settings\AlanMc\.Philips\MediaManager\simplecenter.1.log Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Adobe\Acrobat\7.0\AdobeCMapFnt07.lst Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Adobe\Acrobat\7.0\AdobeSysFnt07.lst Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Adobe\Acrobat\7.0\UserCache.bin Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\CyberLink\Power2Go\4.0\AudioPrj.p2g Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\CyberLink\Power2Go\4.0\AudioPrj.p2g.old Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\CyberLink\Power2Go\4.0\DataPrj.p2g Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\CyberLink\Power2Go\4.0\DataPrj.p2g.old Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\CyberLink\Power2Go\4.0\VideoPrj.p2g Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\CyberLink\Power2Go\4.0\VideoPrj.p2g.old Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\desktop.ini Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Macromedia\Flash
        Player\#SharedObjects\Q99YXDT2\skype.com\#ui\preferences.sol Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Macromedia\Flash
        Player\#SharedObjects\Q99YXDT2\uk.youtube.com\soundData.sol Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Macromedia\Flash
        Player\#SharedObjects\Q99YXDT2\uk.youtube.com\videostats.sol Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Macromedia\Flash
        Player\macromedia.com\support\flashplayer\sys\#local\settings.sol
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Macromedia\Flash
        Player\macromedia.com\support\flashplayer\sys\#uk.youtube.com\settings.sol
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Macromedia\Flash
        Player\macromedia.com\support\flashplayer\sys\settings.sol Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\Address
        Book\AlanMc.wab Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\Address
        Book\AlanMc.wab~ Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\CLR Security
        Config\v1.0.3705\security.config Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\CLR Security
        Config\v1.0.3705\security.config.cch Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\CLR Security
        Config\v1.0.3705\security.config.old Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\CLR Security
        Config\v1.1.4322\security.config Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\CLR Security
        Config\v1.1.4322\security.config.cch Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\CryptnetUrlCache\Content\904590238400AD963F77FAAAADC9BAB5
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\CryptnetUrlCache\MetaData\904590238400AD963F77FAAAADC9BAB5
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\Crypto\RSA\S-1-5-21-2453259776-157788358-1785294672-1007\83aa4cc77f591dfc2374580bbd95f6ba_bf5ff611-056f-40d9-b643-8c23ae2abc6c
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\Installer\{5E8A1B08-0FBD-4543-9646-F2C2D0D05750}\ARPPRODUCTICON.exe
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\Internet
        Explorer\brndlog.bak Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\Internet
        Explorer\brndlog.txt Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\Internet
        Explorer\Desktop.htt Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\Internet
        Explorer\Quick Launch\desktop.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\Internet
        Explorer\Quick Launch\Digital Download Centre.lnk Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\Internet
        Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\Internet
        Explorer\Quick Launch\Media Center.lnk Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\Internet
        Explorer\Quick Launch\mypixmania Photo Storage.lnk Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\Internet
        Explorer\Quick Launch\Show Desktop.scf Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\Protect\CREDHIST Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\Protect\S-1-5-21-1123492281-3161172719-1531045560-500\9b6154f2-f80d-4b95-a28b-f41ba540c21e
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\Protect\S-1-5-21-1123492281-3161172719-1531045560-500\Preferred
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\Protect\S-1-5-21-2453259776-157788358-1785294672-1007\064f576b-1bd9-4085-b0e8-81a49eae7a4b
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\Protect\S-1-5-21-2453259776-157788358-1785294672-1007\ce6c78b2-4d88-42b7-9d69-300fa1e63185
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\Protect\S-1-5-21-2453259776-157788358-1785294672-1007\dec08139-5ca9-4d8d-81fb-f5cfd232a9ca
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\Protect\S-1-5-21-2453259776-157788358-1785294672-1007\Preferred
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\Protect\S-1-5-21-2848099875-2545643026-1731080157-500\a208bcbb-7ac5-4d11-9f50-90c3fcd76a14
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\Protect\S-1-5-21-2848099875-2545643026-1731080157-500\Preferred
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Microsoft\Windows\Themes\Custom.theme Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\WLTB Custom
        Buttons\microsoft.msn.mymsn.btn\button.xml Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\WLTB Custom
        Buttons\microsoft.msn.mymsn.btn\msn.bmp Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\WLTB Custom
        Buttons\microsoft.windowslive.addbtn.btn\add.bmp Object is locked skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\WLTB Custom
        Buttons\microsoft.windowslive.addbtn.btn\button.xml Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\WLTB Custom
        Buttons\microsoft.windowslive.news.btn\button.xml Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Application Data\Microsoft\WLTB Custom
        Buttons\microsoft.windowslive.news.btn\news.bmp Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\pluginreg.dat Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\.autoreg Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\bookmarkbackups\bookmarks-2007-12-26.html
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\bookmarks.bak Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\bookmarks.html Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\cert8.db Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\chrome\userChrome-example.css
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\chrome\userContent-example.css
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\compatibility.ini Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\compreg.dat Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\cookies.txt Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\extensions\staged-xpis\{3112ca9c-de6d-4884-a869-9855de68056c}\tmp.xpi
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\extensions.cache Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\extensions.ini Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\extensions.rdf Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\formhistory.dat Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\history.dat Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\key3.db Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\localstore.rdf Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\metrics.xml Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\mimeTypes.rdf Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\prefs.js Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\search.rdf Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\search.sqlite Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\secmod.db Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\urlclassifier2.sqlite
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\xpti.dat Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Application
        Data\Mozilla\Firefox\profiles.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Cookies\alanmc@888[1].txt Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Cookies\alanmc@eircom[2].txt Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Cookies\alanmc@gallery.live[2].txt
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Cookies\alanmc@int.sitestat[1].txt
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Cookies\alanmc@int.sitestat[2].txt
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Cookies\alanmc@ir.celldorado[1].txt
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Cookies\alanmc@m.webtrends[1].txt
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Cookies\alanmc@microsoft[2].txt Object
        is locked skipped
        C:\Documents and
        Settings\AlanMc\Cookies\alanmc@network.adsmarket[1].txt Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Cookies\alanmc@rad.microsoft[2].txt
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Cookies\alanmc@search.sweetim[1].txt
        Object is locked skipped
        C:\Documents and
        Settings\AlanMc\Cookies\alanmc@stl.p.a1.traceworks[1].txt Object is
        locked skipped
        C:\Documents and
        Settings\AlanMc\Cookies\alanmc@webcollector.eircom[1].txt Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Cookies\index.dat Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Desktop\GarminCode.txt Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Desktop\mypixmania Photo Storage.lnk
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Desktop\Norton Internet Security
        2006.lnk Object is locked skipped
        C:\Documents and Settings\AlanMc\Desktop\Philips Media Manager.lnk
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Desktop\Windows Media Player.lnk
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Desktop.ini Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Links\Customize Links.url
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Links\Free Hotmail.url
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Links\Windows
        Marketplace.url Object is locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Links\Windows Media.url
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Links\Windows.url Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Microsoft Websites\IE Add-on
        site.url Object is locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Microsoft Websites\IE site on
        Microsoft.com.url Object is locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Microsoft
        Websites\Marketplace.url Object is locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Microsoft Websites\Microsoft
        At Home.url Object is locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Microsoft Websites\Microsoft
        At Work.url Object is locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Microsoft Websites\Welcome to
        IE7.url Object is locked skipped
        C:\Documents and Settings\AlanMc\Favorites\MSN.com.url Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Favorites\mypixmania.com Online
        Unlimited Free-Storage and photo printing.url Object is locked skipped
        C:\Documents and Settings\AlanMc\Favorites\Radio Station Guide.url
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Adobe\Acrobat\7.0\Cache\AcroFnt07.lst Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Adobe\Color\ACECache4.lst Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\ApplicationHistory\cli.exe.c88dbd71.ini.inuse Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\ApplicationHistory\FreeventsSchedule.exe.34f2941e.ini Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\ApplicationHistory\MCInstaller.exe.19423898.ini Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\ApplicationHistory\MCInstaller.exe.e24841d8.ini Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\ApplicationHistory\MCInstaller.exe.e3b16eb1.ini Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\ApplicationHistory\ngen.exe.2c05686e.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\ApplicationHistory\ngen.exe.89f695a3.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\ApplicationHistory\SL69.tmp.edc4126c.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\ApplicationHistory\SL7.tmp.32be5160.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\ApplicationHistory\SL70.tmp.a0a11ca2.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\ATI\ACE\Profiles.xml Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\fusioncache.dat Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\GDIPFONTCACHEV1.DAT Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\IconCache.db Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Identities\{AEC808DC-0C00-4228-A348-5BFDC00FEBBE}\Microsoft\Outlook
        Express\Deleted Items.dbx Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Identities\{AEC808DC-0C00-4228-A348-5BFDC00FEBBE}\Microsoft\Outlook
        Express\Drafts.dbx Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Identities\{AEC808DC-0C00-4228-A348-5BFDC00FEBBE}\Microsoft\Outlook
        Express\Folders.dbx Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Identities\{AEC808DC-0C00-4228-A348-5BFDC00FEBBE}\Microsoft\Outlook
        Express\Inbox.dbx Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Identities\{AEC808DC-0C00-4228-A348-5BFDC00FEBBE}\Microsoft\Outlook
        Express\Offline.dbx Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Identities\{AEC808DC-0C00-4228-A348-5BFDC00FEBBE}\Microsoft\Outlook
        Express\Outbox.dbx Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Identities\{AEC808DC-0C00-4228-A348-5BFDC00FEBBE}\Microsoft\Outlook
        Express\Sent Items.dbx Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Feeds\FeedsStore.feedsdb-ms Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Feeds Cache\02DSO0QR\desktop.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Feeds Cache\02DSO0QR\fwlink[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Feeds Cache\0QX18WFO\desktop.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Feeds Cache\desktop.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Feeds Cache\NVTRIF6M\desktop.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Feeds Cache\O42HS80P\desktop.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Feeds Cache\O42HS80P\fwlink[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\HelpCtr\HelpSessionHistory.dat Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Media Player\CurrentDatabase_219.wmdb Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Media Player\wmdbexport.xml Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Wallpaper1.bmp Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Windows Media\10.0\WMSDKNS.DTD Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Windows Media\10.0\WMSDKNS.XML Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Microsoft\Works\Portfolio\wsbsamp.wsb Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\136384F7d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\630714E1d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\6D831C09d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\6D831C19d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\6D831C29d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\6D831C39d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\6D831C49d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\6D831C59d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\6D831CF9d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\712665DCd01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\95A852B7d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\C0487342d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\D42797FFd01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\E69C9837d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\EA025A05d01 Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\_CACHE_001_ Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\_CACHE_002_ Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\_CACHE_003_ Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\Cache\_CACHE_MAP_ Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\XPC.mfl Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Application
        Data\Mozilla\Firefox\Profiles\223yl7bd.default\XUL.mfl Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\desktop.ini Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\History\desktop.ini
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Local
        Settings\History\History.IE5\desktop.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local
        Settings\History\History.IE5\index.dat Object is locked skipped
        C:\Documents and Settings\AlanMc\Local
        Settings\History\History.IE5\MSHist012007122620071227\index.dat Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\jusched.log Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\msiutil(1).log
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.msn.mymsn.btn feed 0 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.msn.mymsn.btn upgrade status Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.addbtn.btn feed 0 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.addbtn.btn feed 1 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.addbtn.btn feed 3 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.addbtn.btn upgrade status Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.news.btn feed 0 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.news.btn feed 1 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.news.btn feed 2 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.news.btn feed 3 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.news.btn feed 4 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.news.btn feed 5 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.news.btn feed 6 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.news.btn feed 7 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temp\WLTB Custom Button
        Feeds\microsoft.windowslive.news.btn upgrade status Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\&[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\&[2].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\&[3].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\142x50-home[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\201[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\250x250_vid[1].swf Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\888responsible[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\888_casino_dnld[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\888_casino_logo[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\888_main_roulette[1].jpg Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\888_poker_logo_n[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\90x35[1].swf Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\accountpage[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\active_tables[1].js Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\ADSAdClient31[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\Alert[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\arrowWhite[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\arrow_px_up[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\as-avas[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\auto_sky_motor_050120[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\axa120x600_060222[1].swf Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\B2326877;sz=142x50;click=;ord=[1] Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\B2356013[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\bannerlogo_left[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\bg_pokerevent[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\bg_prop[1].jpg Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\bullet-point-1[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\bullet-point-2[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\bus-edisupport[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\CAC6VO49 Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\CAFDFRTI Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\callaxa_142x85_061123[1].swf Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\casino_jackpot_left[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\CheckIfMyGarminUnlockCustomer[1].txt Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\closeup[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\connect4freebanner[1].swf Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\connection-active[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\connection_icon_disconnect[1].jpg Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\continue[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\cp-entpass[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dcs[10].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dcs[11].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dcs[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dcs[2].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dcs[3].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dcs[4].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dcs[5].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dcs[6].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dcs[7].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dcs[8].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dcs[9].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dcu[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\default[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\desktop.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\dsl-bbtime[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\eircom_bdl_1[1].jpg Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\email-protector[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\email[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\entertainment_active[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\favicon[1].ico Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\favicon[2].ico Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\favicon[3].ico Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\favicon[4].ico Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\first[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\flash_redirect[1].js Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\general_links[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\Generic[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\go-search-button[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\google-s-g[1].png Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\gorg142-50_070525[1].jpg Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\group-top-left-corner[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\hd_chan_m[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\header02[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\header06[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\header_ps_selfservice[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\header_ps_voice[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\helpdoc[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\home-active[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\homepage[1].css Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\home_ban_1_bus[1].jpg Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\home_page[1].css Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\home_page_no_bgmn[1].css Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\icons_caribbean[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\icons_craps[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\igc_helping_hand[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\improvement[1].png Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\Index[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\index[2].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\info_48[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\internet-security[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\ISPAI_ad[1].jpg Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\jcb_background[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\Keyword=eircom+net+contracts+@+eircom[1].net Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\Keyword=eircomnetcontracts+@+eircom[1].net
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\latest_news_bg[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\legacy[1].css Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\localtext[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\location[1].png Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\main_left_bg[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\map[1].bmp Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\nb-fr60[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\nb-support[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\new-email[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\news_active[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\next[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\nwcorner[1].png Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\oelogo1[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\oelogo2[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\online_billing[1].swf Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\OUicon[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\packages[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\page_end_inner[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\parameters[1].bin Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\passwordpage2[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\phone[1].bmp Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\pos=11[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\pos=1[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\print[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\prop_search[1].jpg Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\protecting-your-pc[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\pwch[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\ql[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\query_xml[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\Rabo5button070310[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\red[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\RegisterDeluxe[1].txt Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\RelatedSitesMenu[1].js Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\rem_hp[1].jpg Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\rmtag2[1].js Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\r_corner[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\safe-surfing[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\search[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\search[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\selectable[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\set_homepage[1].jpg Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\shadow_top_menu[1].jpg Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\showContent[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\side_head_email_shdw[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\side_head_end[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\side_panel_top[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\skyscraper120[1].css Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\stocks[1].bmp Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\sysinfo-orange[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\tabspace[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\tabswelcome[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\tab_bg[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\tab_bingo_off[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\thinWhiteArrow[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\tooltip_corner_bottom_left_beak[1].gif
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\tooltip_corner_bottom_right[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\topmenu_divider_left[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\ufo[1].js Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\urchin[1].js Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\url[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\useful-info[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\users32[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\Verisign[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\version_en_win_ax[1].xml Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\view_bill[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\wab[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\weather[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\website[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\wt[1].js Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\wuredist[1].cab Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\0EJ1S6N0\xprightclm[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\&[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\&[2].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\0000_XBox_Rob_Tool_othr_120x240_.gif[1].gif
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\1248218314[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\142x50-home[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\200409_jpeg_tool[1].htm Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\250x250-version6[1].swf Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\888_poker_round_dnld_n[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\95594[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\a2z[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\account-maintenance[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\acct_common[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\activity;src=1350186;type=eirco342;cat=homep167;ord=5122668279384[1].gif
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\alert[2] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\arrow1[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\arrowLTR[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\arrow_leftnav_gr[1].jpg Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\arrow_orange[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\B2177184;sz=142x50;click=;ord=69761200[1]
        Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\background_gradient[1] Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\BarTop[1].jpg Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\build-a-website-ftp[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\build-a-website-ftp[2].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\bus-dslbussupport[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\button_more[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\callaxa_142x85_061123[1].swf Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\casino_bonus35[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\casino_jackpot[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\celtic_hp[1].jpg Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\channeldirectory_header[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\cleartype[1].png Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\clientscripts[1].js Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\cmdarrw_nor[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\cnsl-btn-norm-tall[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\commandLinkDefault[1].png Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\commonFunctions[1].js Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\common[1].js Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\contacthome[1].css Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\cookie_functions[1].js Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\cp-sporplus[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\cpwebvw[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\dcs[10].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\dcs[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\dcs[2].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\dcs[3].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\dcs[4].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\dcs[5].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\dcs[6].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\dcs[7].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\dcs[8].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\dcs[9].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\default[1].bmp Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\default[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\default[2].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\desktop.ini Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\down[1] Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\dsl-bb[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\ecogra[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\eircom-o-s[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\eircomnet_redirect[1].js Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\eircom[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\eircom_250x250[1].swf Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\email[1].bmp Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\email[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\email[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\enable-web[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\favicon[1].ico Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\feedback[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\filters[1].bin Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\filters[2].bin Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\frame_global[1].htm Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\generic_eircom142x50_17Apr07[1].gif Object
        is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\global[1].css Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\google-s-w[1].png Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\grey[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\group-bottom-left-corner[1].gif Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\header05[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\headerGradient[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\header_ps_devices[1].gif Object is locked
        skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\help[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\home_ban_3_new1_talkt[1].jpg Object is
        locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\hotline_ad[1].jpg Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settings\Temporary Internet
        Files\Content.IE5\5U65FK6E\IconKey[1].gif Object is locked skipped
        C:\Documents and Settings\AlanMc\Local Settin


      • #4
        ActorSeeksJob
        Closed Accounts Posts: 1,970 ✭✭✭ActorSeeksJob


        Delete these files

        C:\Documents and Settings\ColmMc\Incomplete\T-3545425-your gonna go far offspring.mp3
        C:\Documents and Settings\ColmMc\Shared\seal is broken nobuo uematsu.mp3
        C:\Documents and Settings\ColmMc\Shared\your gonna go far offspring.mp3
        C:\Program Files\MSN Messenger\riched20.dll


        Tell me how your PC is running after that


      • #5
        Dartz
        Registered Users, Registered Users 2 Posts: 4,450 ✭✭✭Dartz


        Yup...

        It is starting up faster alright. There's no odd toolbars on IE anymore. I normally use Firefox anyway, but it's a good marker if there's something present.

        One thing that is strange is Spybot is still warning we about a bunch of registry entries I deleted with it its system startup tool before I posted here. Thay related to obvious viruses and stuff. Everytime I reboot it asks me if I want to delete these again...

        Everything else seems okay...

        EDIT:

        Scratch that, I just got an alert from the on-access scanner in Avast! telling me that C:\WINDOWS MOTA113.exe is Win32: Tojan-gen{other}...
        And Spybot S&D is still giving me Zango results when i run a scan with it.

        EDIT again:

        Fixed that....
        Going to install Kaspersky 2009 on it tomorrow, should keep it safe.

        Thanks man


      • #6
        ActorSeeksJob
        Closed Accounts Posts: 1,970 ✭✭✭ActorSeeksJob


        mota113.exe is a legit file, thats a false positive

        Do this for Zango, it is probably just remains

        Download and unzip BFUzip from http://www.merijn.org/files/bfu.zip
        Run the program and click the Web button as shown here:
        BFUonlinescript.jpg

        Use this URL to copy into the address bar of the Download script window:
        http://metallica.geekstogo.com/MediaGateway.BFU

        Make sure all IE windows are closed.

        Execute the script by clicking the Execute button.

        If you have any questions about the use of BFU please read here:
        http://metallica.geekstogo.com/BFUinstructions.html



        I wouldn't worry if Spybot is detecting stuff, its probably some harmless left overs


      • Advertisement
      • #7
        Dartz
        Registered Users, Registered Users 2 Posts: 4,450 ✭✭✭Dartz


        Yup, that seems to have gotten it. I like Spybot though, it's saved my butt a fair few times. PC is booting up and calming down noticeably faster. Malware registry entries seem to be not coming back...

        Have Kaspersky Internet Security 2009 installed, running a full scan with that, and see what it shows up. If she's clean, I'll creat a restore point and call it a day


      • #8
        ActorSeeksJob
        Closed Accounts Posts: 1,970 ✭✭✭ActorSeeksJob


        One final thing
        • Make sure you have an Internet Connection.
        • Double-click OTMoveIt2.exe to run it.
        • Click on the CleanUp! button
        • A list of tool components used in the Cleanup of malware will be downloaded.
        • If your Firewall or Real Time protection attempts to block OtMoveit2 to rech the Internet, please allow the application to do so.
        • Click Yes to beging the Cleanup process and remove these components, including this application.
        • You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.



        You now need to update your Java and remove your older versions.

        Please follow these steps to remove older version Java components.

        * Click Start > Control Panel.
        * Click Add/Remove Programs.
        * Check any item with Java Runtime Environment (JRE) in the name.
        * Click the Remove or Change/Remove button.

        Download the latest version of Java Runtime Environment (JRE), and install it to your computer from
        here




        Now we need to create a new System Restore point.

        Click Start Menu > Run > type (or copy and paste)

        %SystemRoot%\System32\restore\rstrui.exe

        Press OK. Choose Create a Restore Point then click Next. Name it and click Create, when the confirmation screen shows the restore point has been created click Close.

        Next goto Start Menu > Run > type

        cleanmgr

        Click OK, Disk Cleanup will open and start calculating the amount of space that can be freed, Once thats finished it will open the Disk Cleanup options screen, click the More Options tab then click Clean up on the system restore area and choose Yes at the confirmation window which will remove all the restore points except the one we just created.

        To close Disk Cleanup and remove the Temporary Internet Files detected in the initial scan click OK then choose Yes on the confirmation window.




        Below I have included a number of recommendations for how to protect your computer against malware infections.

        * Keep Windows updated by regularly checking their website at :
        http://windowsupdate.microsoft.com/
        This will ensure your computer has always the latest security updates available installed on your computer.

        * To reduce re-infection for malware in the future, I strongly recommend installing these free programs:

        SpywareBlaster protects against bad ActiveX
        IE-SPYAD puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all
        Have a look at this tutorial for IE-Spyad here

        * SpywareGuard offers realtime protection from spyware installation attempts. Make sure you are only running one real-time anti-spyware protection program or there will be a conflict.

        Make Internet Explorer more secure
        • Click Start > Run
        • Type Inetcpl.cpl & click OK
        • Click on the Security tab
        • Click Reset all zones to default level
        • Make sure the Internet Zone is selected & Click Custom level
        • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
        • Next Click OK, then Apply button and then OK to exit the Internet Properties page.

        * MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.

        * Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more
        secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in pop up
        blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from
        Here

        * Take a good look at the following suggestions for malware prevention by reading Tony Klein’s article 'How Did I Get Infected In The First Place'
        Here

        Thank you for your patience, and performing all of the procedures requested.


      • #9
        Dartz
        Registered Users, Registered Users 2 Posts: 4,450 ✭✭✭Dartz


        Thanks for your patience going through those logs...

        I normally do use Firefox, but IE has it's uses at times. I'll get the rest of that stuff done on it the next time I can, and then generally make sure it doesn't happen again.


      Advertisement
      Advertisement