Emergency Help - can't work until safe. Virus/Malware issues

kstmommy · March 29, 2013

I'm just going to stick with the default of move. I'll post final results and logs momentarily.

kstmommy · March 30, 2013

Ok, all done. You're going to kill me. The above scan I was referencing, I have no log. When it started, it asked if I wanted a safe zone (or something like that) scan environment and it was marked as recommended, so I said yes. After the scan was complete, there was no link to open the log. There were 3 total threats, all were neutralized perfectly fine. Since I had no log to show you, after I rebooted, I ran the scan again and it came back clean. I did take notes so here's what I wrote...

DLoader - DSNCSERVICE.EXE

Trojan.MulDrop.4.51 (Aro2011)

Adware.Bandoo.1 (LividSetupV1.exe)

Will post scan logs in next post...

kstmommy · March 30, 2013

ComboFix 13-03-28.01 - Mom 03/29/2013 16:42:59.3.2 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3070.2452 [GMT -4:00]

Running from: C:\ComboFix.exe

Command switches used :: C:\CFScript.txt

AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

--------------- FCopy ---------------

.

c:\windows\ServicePackFiles\i386\explorer.exe --> c:\windows\explorer.exe

.

((((((((((((((((((((((((( Files Created from 2013-02-28 to 2013-03-29 )))))))))))))))))))))))))))))))

.

2013-03-29 20:59 . 2013-03-29 20:59 29904 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{4FF1D7E2-9E7B-48DC-9094-627BA69C21A9}\MpKsl1736767e.sys

2013-03-29 19:00 . 2013-03-29 19:00 29904 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{4FF1D7E2-9E7B-48DC-9094-627BA69C21A9}\MpKslfb81673e.sys

2013-03-29 15:39 . 2013-03-29 15:39 15048 ----a-w- C:\FixitRegBackup.reg

2013-03-29 15:38 . 2013-03-29 15:38 806400 ----a-w- C:\MicrosoftFixit50692.msi

2013-03-29 12:16 . 2013-03-29 12:17 -------- d-----w- c:\program files\HitmanPro

2013-03-29 12:12 . 2013-03-29 12:12 -------- d-----w- c:\documents and settings\Mom\Local Settings\Application Data\Updater26276

2013-03-29 12:12 . 2013-03-29 12:12 -------- d-----w- c:\program files\Deal Spy

2013-03-29 04:01 . 2013-03-15 07:21 7108640 ------w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{4FF1D7E2-9E7B-48DC-9094-627BA69C21A9}\mpengine.dll

2013-03-29 03:20 . 2013-03-29 10:30 -------- d-----w- c:\documents and settings\Mom\Application Data\Strongvault

2013-03-29 03:18 . 2013-03-29 10:31 -------- d-sh--w- c:\windows\system32\AI_RecycleBin

2013-03-29 03:18 . 2013-03-29 10:31 -------- d-----w- C:\AI_RecycleBin

2013-03-28 15:43 . 2013-03-28 15:58 -------- d-----w- C:\MGtools

2013-03-28 10:41 . 2013-03-06 22:33 368176 ----a-w- c:\windows\system32\drivers\aswSP.sys

2013-03-28 10:41 . 2013-03-06 22:33 29816 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys

2013-03-28 10:41 . 2013-03-06 22:33 765736 ----a-w- c:\windows\system32\drivers\aswSnx.sys

2013-03-28 10:41 . 2013-03-06 22:33 62376 ----a-w- c:\windows\system32\drivers\aswTdi.sys

2013-03-28 10:41 . 2013-03-06 22:33 49760 ----a-w- c:\windows\system32\drivers\aswRdr.sys

2013-03-28 10:41 . 2013-03-06 22:33 49248 ----a-w- c:\windows\system32\drivers\aswRvrt.sys

2013-03-28 10:41 . 2013-03-06 22:33 164736 ----a-w- c:\windows\system32\drivers\aswVmm.sys

2013-03-28 10:41 . 2013-03-06 22:33 66336 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys

2013-03-28 10:41 . 2013-03-06 22:32 228600 ----a-w- c:\windows\system32\aswBoot.exe

2013-03-28 10:41 . 2013-03-06 22:32 41664 ----a-w- c:\windows\avastSS.scr

2013-03-28 10:41 . 2013-03-28 10:41 -------- d-----w- c:\program files\AVAST Software

2013-03-28 10:40 . 2013-03-28 10:41 -------- d-----w- c:\documents and settings\All Users\Application Data\AVAST Software

2013-03-27 23:09 . 2013-03-27 23:19 -------- d-----w- C:\8f60095d261204a9c8041a453db3610c

2013-03-27 22:06 . 2013-03-27 22:07 -------- d-----w- c:\documents and settings\Administrator

2013-03-27 21:50 . 2013-03-15 07:21 7108640 ------w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2013-03-17 19:52 . 2013-03-17 19:52 -------- d-----w- c:\program files\ESET

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-03-29 12:43 . 2010-11-12 02:52 12872 ----a-w- c:\windows\system32\bootdelete.exe

2013-03-28 16:55 . 2012-06-09 07:34 693976 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2013-03-28 16:55 . 2011-07-07 21:49 73432 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2013-03-28 15:58 . 2013-03-28 15:44 388084 ----a-w- C:\MGlogs.zip

2013-01-30 10:53 . 2009-10-03 00:36 232336 ------w- c:\windows\system32\MpSigStub.exe

2010-05-12 21:42 . 2010-05-12 21:42 124344 ----a-w- c:\program files\mozilla firefox\plugins\CCMSDK.dll

2010-05-12 22:22 . 2010-05-12 22:22 13240 ----a-w- c:\program files\mozilla firefox\plugins\cgpcfg.dll

2010-05-12 21:43 . 2010-05-12 21:43 70592 ----a-w- c:\program files\mozilla firefox\plugins\CgpCore.dll

2010-05-12 21:42 . 2010-05-12 21:42 91576 ----a-w- c:\program files\mozilla firefox\plugins\confmgr.dll

2010-05-12 21:42 . 2010-05-12 21:42 22464 ----a-w- c:\program files\mozilla firefox\plugins\ctxlogging.dll

2010-05-12 21:41 . 2010-05-12 21:41 255416 ----a-w- c:\program files\mozilla firefox\plugins\ctxmui.dll

2010-05-12 21:42 . 2010-05-12 21:42 31160 ----a-w- c:\program files\mozilla firefox\plugins\icafile.dll

2010-05-12 21:42 . 2010-05-12 21:42 40384 ----a-w- c:\program files\mozilla firefox\plugins\icalogon.dll

2010-04-14 18:55 . 2010-04-14 18:55 652640 ----a-w- c:\program files\mozilla firefox\plugins\sslsdk_b.dll

2010-05-12 21:43 . 2010-05-12 21:43 24000 ----a-w- c:\program files\mozilla firefox\plugins\TcpPServ.dll

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2013-03-06 22:32 121968 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-08-09 13925480]

"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2009-11-05 1468256]

"HostManager"="c:\program files\Common Files\AOL\1176508629\ee\AOLSoftware.exe" [2010-03-08 41800]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-03-06 4767304]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2011-07-27 434080]

.

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

@="Service"

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]

backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Audible Download Manager.lnk]

backup=c:\windows\pss\Audible Download Manager.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk]

backup=c:\windows\pss\Digital Line Detect.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]

backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^hp psc 2000 Series.lnk]

backup=c:\windows\pss\hp psc 2000 Series.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]

backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Workspace Macro Pro Hotkeys.lnk]

backup=c:\windows\pss\Workspace Macro Pro Hotkeys.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^Mom^Start Menu^Programs^Startup^Antimalware Doctor.lnk]

backup=c:\windows\pss\Antimalware Doctor.lnkStartup

.

[HKLM\~\startupfolder\C:^Documents and Settings^Mom^Start Menu^Programs^Startup^Configuration & Monitor Utility.lnk]

backup=c:\windows\pss\Configuration & Monitor Utility.lnkStartup

.

[HKLM\~\startupfolder\C:^Documents and Settings^Mom^Start Menu^Programs^Startup^LimeWire On Startup.lnk]

backup=c:\windows\pss\LimeWire On Startup.lnkStartup

.

[HKLM\~\startupfolder\C:^Documents and Settings^Mom^Start Menu^Programs^Startup^LivePerson.lnk]

backup=c:\windows\pss\LivePerson.lnkStartup

.

[HKLM\~\startupfolder\C:^Documents and Settings^Mom^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]

backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AvgUninstallURL]

start http://www.avg.com/ww.special-uninstallation-feedback-app?lic=OQBBAFYARgBSAEUARQAtAFYATgBKADMAMgAtAEcAMwBMAEEAQQAtAEEANAA4ADkAUgAtADkAVQBKAEsARgAtAEUASwBLADMAWAA&inst=NwA3AC0ANAAzADMANAAxADMAMAAzADgALQBUADUALQBVADgANQArADEALQBLAFYAMwArADcALQBCAEEAKwAxAC0AWABMACsAMQAtAEYAUAA5ACsANgAtAFQAQgA5ACsAMgAtAEYATAArADkALQBYAE8AMwA2ACsAMQAtAEYAOQBNADcAQwArADUALQBGADkATQAxADAAQgArADIA∏=90&ver=9.0.872 [?]

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

2008-10-15 06:04 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]

2012-04-04 10:09 446392 ------w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5.5ServiceManager]

2011-01-12 11:08 1523360 ----a-w- c:\program files\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager]

2012-03-09 20:26 1073312 ----a-w- c:\program files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOL Fast Start]

2011-01-13 11:19 42320 ----a-w- c:\program files\AOL Desktop 9.6\aol.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]

2012-02-21 01:28 59240 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]

2006-01-02 20:41 45056 ----a-w- c:\program files\ATI Technologies\ATI.ACE\CLI.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]

2007-01-15 20:14 147456 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ConnectionCenter]

2010-05-12 22:03 300472 ----a-w- c:\program files\Citrix\ICA Client\concentr.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]

2008-04-14 00:12 15360 ----a-w- c:\windows\system32\ctfmon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ddoctorv2]

2008-04-24 17:25 202560 ----a-w- c:\program files\Comcast\Desktop Doctor\bin\sprtcmd.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]

2009-02-26 22:36 30040 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager]

2010-03-08 07:27 41800 ----a-w- c:\program files\Common Files\aol\1176508629\ee\aolsoftware.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

2010-06-10 01:55 49208 ----a-w- c:\program files\HP\HP Software Update\hpwuschd2.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]

2004-07-27 20:50 221184 ----a-w- c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]

2004-07-27 20:50 81920 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\issch.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

2012-03-06 23:05 421736 ----a-w- c:\program files\iTunes\iTunesHelper.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark 5600-6600 Series Fax Server]

2008-03-20 11:24 311976 ----a-w- c:\program files\Lexmark 5600-6600 Series\fm3032.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxduamon]

2008-03-20 11:24 16040 ----a-w- c:\program files\Lexmark 5600-6600 Series\lxduamon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxdumon.exe]

2008-03-20 11:24 672424 ----a-w- c:\program files\Lexmark 5600-6600 Series\lxdumon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]

2012-12-14 20:49 824232 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Messenger (Yahoo!)]

2009-03-18 22:50 4363504 ----a-w- c:\program files\Yahoo!\Messenger\YahooMessenger.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]

2012-09-12 21:19 947176 ----a-w- c:\program files\Microsoft Security Client\msseces.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]

2008-04-14 00:12 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

2006-01-12 19:40 155648 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]

2010-08-09 03:07 13925480 ----a-w- c:\windows\system32\nvcpl.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]

2010-08-09 03:07 110696 ----a-w- c:\windows\system32\nvmctray.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SigmatelSysTrayApp]

2006-07-27 19:19 282624 ----a-w- c:\windows\stsystra.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SsAAD.exe]

2006-05-08 09:17 81920 ----a-w- c:\progra~1\Sony\SONICS~1\SSAAD.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

2012-01-18 18:02 254696 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]

2010-02-19 17:37 517096 ----a-w- c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

2011-07-07 03:03 273544 ----a-w- c:\program files\Real\RealPlayer\Update\realsched.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]

2006-11-04 00:20 866584 ----a-w- c:\program files\Windows Defender\MSASCui.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]

2006-10-19 00:05 204288 ------w- c:\program files\Windows Media Player\wmpnscfg.exe

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Common Files\\aol\\acs\\AOLDial.exe"=

"c:\\Program Files\\Common Files\\aol\\acs\\AOLacsd.exe"=

"c:\\Program Files\\AOL 9.0\\waol.exe"=

"c:\\Program Files\\Common Files\\aol\\TopSpeed\\3.0\\aoltpsd3.exe"=

"c:\\Program Files\\Common Files\\aol\\Loader\\aolload.exe"=

"c:\\Program Files\\Common Files\\aol\\System Information\\sinf.exe"=

"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=

"c:\\Program Files\\Common Files\\aol\\1176508629\\ee\\aolsoftware.exe"=

"c:\\Program Files\\AOL 9.0a\\waol.exe"=

"c:\\Program Files\\AOL 9.1\\waol.exe"=

"c:\\Documents and Settings\\Mom\\taw\\winvnc.exe"=

"c:\\WINDOWS\\system32\\lxducoms.exe"=

"c:\\Program Files\\Lexmark 5600-6600 Series\\lxduamon.exe"=

"c:\\Program Files\\Lexmark 5600-6600 Series\\frun.exe"=

"c:\\Program Files\\Lexmark 5600-6600 Series\\lxdufax.exe"=

"c:\\Documents and Settings\\Mom\\Application Data\\Macromedia\\Flash Player\\www.macromedia.com\\bin\\octoshape\\octoshape.exe"=

"c:\\Program Files\\AOL 9.1a\\waol.exe"=

"c:\\Documents and Settings\\Mom\\My Documents\\bbviewerv11beta\\BBViewer.exe"=

"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=

"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=

"c:\\Program Files\\SeaMonkey\\seamonkey.exe"=

"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=

"c:\\Documents and Settings\\Mom\\Application Data\\Juniper Networks\\Juniper Terminal Services Client\\dsTermServ.exe"=

"c:\\Program Files\\Juniper Networks\\Secure Application Manager\\dsSamProxy.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=

"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

"c:\\Program Files\\Microsoft Office\\Office12\\WINWORD.EXE"=

"c:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=

"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=

"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=

"c:\\Program Files\\iTunes\\iTunes.exe"=

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"67:UDP"= 67:UDP:DHCP Discovery Service

"53:UDP"= 53:UDP:Promo

"8939:TCP"= 8939:TCP:Remote Assistance Local

"6948:TCP"= 6948:TCP:Remote Assistance Remote

.

R0 aswRvrt;aswRvrt;c:\windows\system32\drivers\aswRvrt.sys [3/28/2013 6:41 AM 49248]

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [9/19/2009 4:36 PM 721904]

R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [3/28/2013 6:41 AM 765736]

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [3/28/2013 6:41 AM 368176]

R1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\drivers\ctxusbm.sys [9/8/2009 7:13 PM 65584]

R1 MpKsl1736767e;MpKsl1736767e;c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{4FF1D7E2-9E7B-48DC-9094-627BA69C21A9}\MpKsl1736767e.sys [3/29/2013 4:59 PM 29904]

R1 NEOFLTR_550_12129;Juniper Networks TDI Filter Driver (NEOFLTR_550_12129);c:\windows\system32\drivers\NEOFLTR_550_12129.sys [10/3/2007 4:20 PM 63008]

R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [7/22/2011 12:27 PM 12880]

R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [7/12/2011 5:55 PM 67664]

R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [8/11/2011 7:38 PM 116608]

R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [3/28/2013 6:41 AM 29816]

R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [3/28/2013 6:41 AM 66336]

R2 PDFsFilter;PDFsFilter;c:\windows\system32\drivers\PDFsFilter.sys [9/12/2012 2:15 PM 68464]

S2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [11/3/2006 8:19 PM 13592]

S3 aswVmm;aswVmm;c:\windows\system32\drivers\aswVmm.sys [3/28/2013 6:41 AM 164736]

S3 IntuitUpdateServiceV4;Intuit Update Service v4;c:\program files\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe [8/23/2012 1:37 PM 13672]

S3 ioloSystemService;iolo System Service;c:\program files\iolo\Common\Lib\ioloServiceManager.exe [9/12/2012 2:15 PM 1027792]

S3 lxdu_device;lxdu_device;c:\windows\system32\lxducoms.exe -service --> c:\windows\system32\lxducoms.exe -service [?]

S3 lxduCATSCustConnectService;lxduCATSCustConnectService;c:\windows\system32\spool\drivers\w32x86\3\lxduserv.exe [5/5/2008 4:39 PM 98984]

S3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\DRIVERS\motccgp.sys --> c:\windows\system32\DRIVERS\motccgp.sys [?]

S3 motccgpfl;MotCcgpFlService;c:\windows\system32\DRIVERS\motccgpfl.sys --> c:\windows\system32\DRIVERS\motccgpfl.sys [?]

S3 MotDev;Motorola Inc. USB Device;c:\windows\system32\DRIVERS\motodrv.sys --> c:\windows\system32\DRIVERS\motodrv.sys [?]

S3 Network ConnectorService;Network Connector Service;c:\program files\Barracuda\Network Connector\bin\network-connectorserv.exe [5/18/2010 4:28 AM 43416]

S4 CSHelper;CopySafe Helper Service;c:\windows\system32\CSHelper.exe [2/14/2009 8:33 AM 266240]

S4 SwitchBoard;Adobe SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2/19/2010 1:37 PM 517096]

.

--- Other Services/Drivers In Memory ---

.

*NewlyCreated* - MPKSL1736767E

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

getPlusHelper REG_MULTI_SZ getPlusHelper

.

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2013-03-14 21:46 1629648 ----a-w- c:\program files\Google\Chrome\Application\25.0.1364.172\Installer\chrmstp.exe

.

Contents of the 'Scheduled Tasks' folder

.

2013-03-29 c:\windows\Tasks\avast! Emergency Update.job

- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2013-03-28 22:32]

.

2007-10-01 c:\windows\Tasks\FRU Task 2003-04-06 08:52ewlett-Packard2003-04-06 08:52p psc 2170 series5E771253C1676EBED677BF361FDFC537825E15B8183164567.job

- c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-06 04:52]

.

2013-03-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-22 13:18]

.

2013-03-29 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job

- c:\program files\Microsoft Security Client\MpCmdRun.exe [2013-01-27 21:25]

.

2013-03-28 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-706684962-979399936-124493050-1006.job

- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 14:47]

.

2013-03-28 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-706684962-979399936-124493050-1006.job

- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 14:47]

.

------- Supplementary Scan -------

.

uStart Page = https://portal.arise.com/Login.aspx

mStart Page = hxxp://www.aol.com/?src=customie7

uInternet Connection Wizard,ShellNext = hxxp://us.mcafee.com/apps/vso/en-us/redir.asp?affid=105-79&installtype=force&dtag=563psc1&langid=1&systempopup=true

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000

IE: Sothink SWF Catcher - c:\program files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm

Trusted Zone: arise.com

Trusted Zone: intuit.com

Trusted Zone: intuit.com\ttlc

TCP: DhcpNameServer = 192.168.1.1

DPF: {A084A130-28AE-4B32-B51A-1C8CE164BC88} - hxxp://www.convergysworkathome.com/AppHardT.CAB

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2013-03-29 16:59

Windows 5.1.2600 Service Pack 3 NTFS

.

scanning hidden processes ...

.

scanning hidden autostart entries ...

.

scanning hidden files ...

.

scan completed successfully

hidden files: 0

.

**************************************************************************

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

--------------------- DLLs Loaded Under Running Processes ---------------------

.

- - - - - - - > 'winlogon.exe'(760)

c:\windows\system32\Ati2evxx.dll

.

- - - - - - - > 'explorer.exe'(936)

c:\windows\system32\WININET.dll

c:\windows\system32\ieframe.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

------------------------ Other Running Processes ------------------------

.

c:\windows\system32\nvsvc32.exe

c:\program files\Microsoft Security Client\MsMpEng.exe

c:\program files\AVAST Software\Avast\AvastSvc.exe

c:\program files\Common Files\AOL\ACS\AOLAcsd.exe

.

**************************************************************************

.

Completion time: 2013-03-29 17:06:19 - machine was rebooted

ComboFix-quarantined-files.txt 2013-03-29 21:06

ComboFix2.txt 2013-03-29 19:06

ComboFix3.txt 2013-03-29 13:26

ComboFix4.txt 2013-03-28 02:54

ComboFix5.txt 2013-03-29 20:41

.

Pre-Run: 26,453,008,384 bytes free

Post-Run: 26,442,973,184 bytes free

.

- - End Of File - - C85BC84FC5D35282700BFC50C4E973D9

kstmommy · March 30, 2013

Rkill 2.4.7 by Lawrence Abrams (Grinler)

http://www.bleepingcomputer.com/

More Information about Rkill can be found at this link:

http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 03/29/2013 05:10:20 PM in x86 mode.

Windows Version: Microsoft Windows XP Service Pack 3

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* No issues found.

Checking Windows Service Integrity:

* RpcSs => %SystemRoot%\system32\svchost.exe -k rpcss [incorrect ImagePath]

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* HOSTS file entries found:

127.0.0.1 localhost

Program finished at: 03/29/2013 05:10:54 PM

Execution time: 0 hours(s), 0 minute(s), and 33 seconds(s)

kstmommy · March 30, 2013

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 4.7.3 (03.23.2013:1)

OS: Microsoft Windows XP x86

Ran by Mom on Fri 03/29/2013 at 17:12:28.12

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully repaired: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\searchscopes\{0633ee93-d776-472f-a0ff-e1416b8b2e3a}\\DisplayName

Successfully repaired: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\searchscopes\{0633ee93-d776-472f-a0ff-e1416b8b2e3a}\\URL

~~~ Registry Keys

Successfully deleted: [Registry Key] hkey_current_user\software\crossrider

Successfully deleted: [Registry Key] hkey_current_user\software\installedbrowserextensions

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0026276.BHO

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0026276.Sandbox

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0026276.Sandbox.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\software\classes\CrossriderApp0026276.BHO

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\software\classes\CrossriderApp0026276.Sandbox

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\software\classes\CrossriderApp0026276.Sandbox.1

Successfully deleted: [Registry Key] hkey_current_user\software\microsoft\internet explorer\searchscopes\{443789b7-f39c-4b5c-9287-da72d38f4fe6}

Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\internet explorer\searchscopes\{443789b7-f39c-4b5c-9287-da72d38f4fe6}

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\Mom\Application Data\red kawa"

Successfully deleted: [Folder] "C:\Documents and Settings\Mom\Application Data\strongvault"

Successfully deleted: [Folder] "C:\WINDOWS\system32\ai_recyclebin"

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Fri 03/29/2013 at 17:19:26.15

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

kstmommy · March 30, 2013

=============================================================================

Dr.Web Scanner SE for Windows v8.1.0.03270

Scan session started 2013/03/29 17:23:37

Module location : c:\documents and settings\mom\local settings\temp\8B37A5BD-BC2E1A65-780C73A8-F93AB56E\

=============================================================================

OPTION [Automatic Apply Actions] NO

OPTION [Turn Off Computer After Scan] NO

OPTION [use Sound Alerts] NO

OPTION [block Network] NO

OPTION [Protect Process] NO

OPTION [Protect Raw Disk] NO

Using language: "English"

Available instances: 6

Instances used: 6

Platform: Windows XP Home x86 (Build 2600), Service Pack 3

API Version: 2.2

Scanning Engine version: 8.0.2.12140

Virus Finding Engine version: 7.0.4.9250

Total 104 virus bases are loaded from c:\documents and settings\mom\local settings\temp\8B37A5BD-BC2E1A65-780C73A8-F93AB56E

95rwc454 7.0 031d930025b8f6711ff28de2654fa59cd22d5915 2013/03/29 15:02:38 1082 records - OK

hh26sof5 7.0 f5d1425097a34628f8d752212dabf9732d209c98 2011/07/25 10:20:03 1 record - OK

vxe2wl0i 7.0 c80c5f3b911f25d8626157c780499dbea11edd48 2013/03/29 15:02:56 20108 records - OK

xcl43zyz 7.0 fd3c78d78ea4dae4e252a7f7d76db22e1a679be9 2013/03/24 23:05:37 34778 records - OK

9sb8e3ko 7.0 268e71b1123ab5e60fd2f38d269fe5f3d22b3697 2013/03/17 23:06:19 11271 records - OK

teyuvoa5 7.0 d196879775b0dc0ee8286f2e4def9adedb5b88df 2013/03/10 23:05:36 12046 records - OK

54noax6c 7.0 0db61d4e3235481da8493523538ced712db362c2 2013/03/03 22:05:18 21747 records - OK

t09wk6ds 7.0 65f99faf227b51883c9f1c854a3f76806b60affb 2013/02/24 22:06:28 11540 records - OK

beznx4po 7.0 17bd7383b9c4b214c5c9029171db8ae1455984a0 2013/02/17 22:06:38 15568 records - OK

m70981be 7.0 cbe8774953ae403e49370d552b522a5839aa9fdb 2013/02/10 22:06:00 18805 records - OK

17x9indm 7.0 fb6865c02a3680338e4ee0603579107227313b2b 2013/02/03 22:06:01 32488 records - OK

u4psks1k 7.0 95fcd2e24cd9b2ec2610656ffa70b8bf46e86a8b 2013/01/27 22:04:52 15470 records - OK

71p3uewt 7.0 3d710b3dd4580a7eca8c74d2c886d48f5b8b5172 2013/01/20 22:06:27 30093 records - OK

bfizalf5 7.0 bddde0b5426b7e5bebd61e1239ca529c87ae6e36 2013/01/13 22:04:41 16158 records - OK

e4tvt1d6 7.0 bc40bd9330301e8d7796f489d03357fb711b3121 2013/01/06 22:04:45 19597 records - OK

l6624z57 7.0 805b6089c867549c75f843eac96b759c3f8d101f 2012/12/30 22:05:41 18184 records - OK

vmgu4hhl 7.0 c12a817c1f95bb9fd8238ef0d5f68868a8d95686 2012/12/23 22:05:33 30183 records - OK

m3dzv743 7.0 33def496782eb5b7b1cc93fdb036a1b62fa6a2fd 2012/12/16 22:06:21 25519 records - OK

oyasask3 7.0 422abae03c588822f412aa9aae50578a1d61737e 2012/12/09 22:05:04 20358 records - OK

eez5t9j4 7.0 a4f0d0ecad4fb6e0afdb1925f4e0b7863b9d03fa 2012/12/02 22:06:19 20133 records - OK

nolmwbdw 7.0 86daa918ee3de1e4c1e5dea6f9b5f63544cf8814 2012/11/25 22:05:22 27311 records - OK

znybjp39 7.0 6556881c748e1f894eb9c7943ebae67017e1aec2 2012/11/18 22:06:09 29434 records - OK

q854r5y9 7.0 559141ef34f9e6226bb58560e9b52e4cc5165150 2012/11/11 22:06:22 26900 records - OK

w8skfaur 7.0 cc55013e63ff89319ec772e34d77056c7108cd3b 2012/11/04 22:05:22 25164 records - OK

3vdasuds 7.0 f477dc247d9b562bb64fd4f46a7dcbdf7124eb60 2012/10/28 23:06:37 30226 records - OK

3s8fy9lg 7.0 abaf5f7fda7308fcf7573b193bbf2116723e9802 2012/10/21 23:04:37 16441 records - OK

nn6tikc5 7.0 5adc85528fb49e201d4bc61eca580d6839cc4a4c 2012/10/14 23:05:04 26289 records - OK

o4fx1hlf 7.0 da8cf3fbd81206bb3d8103347a439f920a74bbe2 2012/10/07 23:05:51 27278 records - OK

ao7fe7b1 7.0 5988744d3cb357f1a013427d466e2d79ab5f8907 2012/09/30 23:05:11 17444 records - OK

yrh903mo 7.0 d4a0dabf4a4df0f79805c6ccdc025f796765e786 2012/09/23 23:06:30 21205 records - OK

6u4q6lyr 7.0 82ed005784d9e258213070a0cd8bfceff345018d 2012/09/16 23:05:43 11686 records - OK

kilz96p6 7.0 a95ae63004b8d857c2db055f4e47c15bfc97f626 2012/09/09 23:04:34 12677 records - OK

9mq9juna 7.0 c39bf233d25242ae9ed8cf204b9b788c8f45ab79 2012/09/02 23:05:28 10118 records - OK

9a6fwcsu 7.0 d37b5484b009947b7cdd3837dafe8148615401c2 2012/08/26 23:05:26 12602 records - OK

3q94bn0z 7.0 41bf1347794ab7060dec7aaecc1d1d95cf6fecb5 2012/08/19 23:04:05 18298 records - OK

1iqruafr 7.0 1a997511e5892aaeb69b3db70e06676af36382e3 2012/08/12 23:05:19 17126 records - OK

fxezafbl 7.0 f7226c59914e3683e538e668c3b664af3232654d 2012/08/05 23:03:53 20539 records - OK

e62pp5r3 7.0 4035c8d3b617bf935a317a8c57efaa8e835a61f4 2012/07/29 23:05:26 19330 records - OK

5qs75231 7.0 09b55bc000f184ed426f1d8b9665669346fe5e71 2012/07/22 23:05:34 19692 records - OK

g3jq8rxh 7.0 f746c097f298e94faa9db94e6f64ef9fd4a7b010 2012/07/15 23:05:43 14727 records - OK

urvklrga 7.0 792a6a25a17e764390440cd4c2c6ca5a97ab162f 2012/07/08 23:04:33 19485 records - OK

ubm3hw6t 7.0 ca9905c39e3d93428a4db65a192debe9fbd7acf7 2012/07/01 23:04:55 22898 records - OK

jr0kageh 7.0 dc29c610b866c66ba5327e7830452b2460149a35 2012/06/24 23:05:17 20551 records - OK

l8tmm5zr 7.0 c28739bea153508d12942ac9a61abd475d0a0404 2012/06/17 23:03:35 9661 records - OK

mnhwlpll 7.0 e5b5835a7c512120c5348e31483a4caa2a845d28 2012/06/10 23:04:32 23632 records - OK

tpceigky 7.0 61853ce89026ef0ebbd80174f1b7dd5d25bbc63a 2012/06/03 23:04:41 12423 records - OK

rwtqs32c 7.0 4e6c9897e153b47ca97b7da48ceed23e555a7761 2012/05/27 23:04:26 15493 records - OK

z07dze1g 7.0 35f4c105cecd8ec1fd01714abebf30f8f3efb96e 2012/05/20 23:03:29 13065 records - OK

px61j86h 7.0 3522aa84677411aa7d67796bb05ea3ab62f02a71 2012/05/13 23:04:24 16238 records - OK

qd0wfw1c 7.0 7597333540eda537bd42c0a17d4a6526ad247a2e 2012/05/06 23:04:33 11570 records - OK

hvzirizh 7.0 867814380363bc6ad605acf4b96e02c54dbd60f7 2012/04/29 23:03:28 15478 records - OK

5tfyu4fp 7.0 3c04f402d91a19039cb9c223c435dc4ea1bb3da4 2012/04/22 23:05:05 11881 records - OK

ctutw0p0 7.0 8d0220a2a50b367e61a51d3b29c2659cde41bb7f 2012/04/15 23:03:29 13578 records - OK

cq2eljyi 7.0 b79dc6f5832ad390108d1880694ec538e8b34bb0 2012/04/08 23:05:02 14292 records - OK

ue9qwfou 7.0 8ff7cc095c43c2154275b7a54a89bf365e8daf4a 2012/04/01 23:03:24 14084 records - OK

jrkqohus 7.0 9502a428b32be4ad08556134e271c9ba03195398 2012/03/25 23:04:43 19126 records - OK

cxrer63c 7.0 28c2fabbc645aff41baac12b911a8499ea163536 2012/03/18 23:03:23 14920 records - OK

ow3dnxp7 7.0 86de597ff06e58206f94263f2eef33cb41b2530c 2012/03/11 23:03:25 19017 records - OK

es3mp1lp 7.0 5bd1d666e7c9ca70c34e591dc6c55314ce4b11af 2012/03/04 22:04:32 19691 records - OK

qtagruib 7.0 15a9d10c451d2fcf124700f29f557d9bf338e671 2012/02/26 22:03:21 23605 records - OK

5fcrpgih 7.0 5647d941e5358105ca6558dce78873f06c48d5dc 2012/02/19 22:03:45 19067 records - OK

s2i5qtvz 7.0 c9b2600cb665ce34e0ccd0f19e0a88cd44437f51 2012/02/12 22:04:49 19019 records - OK

fwnqlqim 7.0 9df2e129e78a9d9ab491186da1329c1dd1190e17 2012/02/05 22:05:25 28028 records - OK

llkcpug3 7.0 b69b9504a51b8777b8e95a4680dc8ac1d8d8c25d 2012/01/29 22:08:41 29444 records - OK

a26zfiad 7.0 3d7431bdee1a22d6329e017f348db7760f2645ac 2012/01/23 03:22:13 19353 records - OK

yk28efr8 7.0 e04570f78fb00d758abdf77c534a460980e102c0 2012/01/15 22:12:31 20747 records - OK

xs36uwd4 7.0 2de2479b112c4416e2375343f57ca789b042aecc 2012/01/08 22:04:30 28052 records - OK

ogup0am8 7.0 c4bd9612ff1f71d8bd23b4f1bc114eed1ae2ee6b 2012/01/01 22:04:40 12183 records - OK

2j60nd17 7.0 28b1d218ade8f05fdc8550c7456ac3b74f705208 2011/12/25 22:03:33 19984 records - OK

fvgm6tfx 7.0 539e41e8f3d97a6f347600c7cef903d9f34e0518 2011/12/18 22:08:45 22627 records - OK

rwanbenw 7.0 f8e81968965f555bce0d02fc9933fee840b97aaf 2011/12/12 15:20:22 49580 records - OK

ki87v2i2 7.0 14751e0f442bba3efc08ee12d82a2815c61cfeb6 2011/12/04 03:00:00 45195 records - OK

go8e3cvl 7.0 5bc1f5e30792d018658f2dcdb35fc0bcbdcf4e1e 2011/12/04 02:00:00 171075 records - OK

xxqpm1uf 7.0 0f948a7d416c556bfc8a8be2c2c39f998fee6d9e 2011/12/04 01:00:00 170820 records - OK

edvp5ivp 7.0 9357c3cc73a4a374346a678f197daa22496c7ae5 2011/12/04 00:00:00 171279 records - OK

ar64b7a6 7.0 ae56b06b3d6f1e13c5f10cce4ed68f2cccbf3298 2011/12/03 23:00:00 170253 records - OK

z9e2qi17 7.0 fdaab5c1079d02c94f20d07c39d638cad79d8771 2011/12/03 22:00:00 170291 records - OK

hjf2kd0f 7.0 b59d8841e65d7670b2aae7f2b65734269f6c4fe3 2011/12/03 21:00:00 170501 records - OK

dsyxsumd 7.0 3946b1d195434cf7a70d144da71c87559475c58f 2011/12/03 20:00:00 353582 records - OK

ggeyrema 7.0 8df4695f74ea5949551df6044720694e204b13d7 2011/12/03 19:00:00 852776 records - OK

svnle0z0 7.0 8c862db1b517ebe5c8b738223131d8f1bb2dcd5b 2013/03/29 15:03:03 1166 records - OK

zcsdepjx 7.0 6cb68b8fab821702ef054f864ff44917414e50fa 2013/02/03 22:13:43 2078 records - OK

e74ra27g 7.0 cfbe9cf43615f7856e4c35f0fc02e2baf12e39e7 2012/12/16 22:14:14 1725 records - OK

jf8mad48 7.0 047694e79b1a8d295f27ea9c6565062404f84a57 2012/11/11 22:12:52 2050 records - OK

tccvx802 7.0 f3413603f4ee1c88018a78c1f6faf2abeb8fa8c1 2012/09/23 23:13:14 1456 records - OK

avml5bu6 7.0 8871f579eeb7e5e7b70c6dd898afd27391d7daf4 2012/06/24 23:12:36 1421 records - OK

2iz7fv8k 7.0 3ee43130fe7fec4b367a791892a444d0a791b29b 2012/03/25 23:12:30 1385 records - OK

5r8wo4o4 7.0 fddc5d687537580c7166dbf117d591593bc62261 2012/01/22 23:56:09 1653 records - OK

olhjace3 7.0 b0a290f44c79260cce2cea5832f95efc061651c6 2013/03/29 15:02:56 713 records - OK

ci80xxsl 7.0 c7f70566b9bae9fd3f5a8d0b56d961f890a55508 2013/03/17 23:23:44 1742 records - OK

5lky35sx 7.0 8893c0d254eb40c78b5c78ea17fbc3be60ea6304 2013/01/20 22:24:33 2016 records - OK

et2202uc 7.0 cdf3a9d2dcab57f90c378d9eefacbfd358a42699 2012/12/09 22:23:23 1620 records - OK

wootcnxf 7.0 c0726ba000e840272f0810b89051e6daa8799084 2012/11/04 22:23:16 1658 records - OK

x3c9kfxq 7.0 216611859de0125bf130d6324d43c9115cb05def 2012/10/07 23:23:20 1465 records - OK

9henama2 7.0 264c14ad60c4423ec292f5f8b182e4448504dfa9 2012/09/09 23:23:14 1588 records - OK

88rxq4bu 7.0 33197bfe9efefa9db33725d240757103c625b601 2012/07/22 23:22:36 1702 records - OK

jh5021t4 7.0 74d8e114edb84b95bc09d5a2a36191d15a61e2cb 2012/06/10 23:22:36 1659 records - OK

o6s74q7l 7.0 79ca8239f310688d2b9c314fa3d738a34985cce3 2012/04/29 23:22:34 1670 records - OK

ev20hjnj 7.0 aac27e986e3731e5260cb76f5b14558e36660dec 2012/03/11 23:22:28 1729 records - OK

83l10umx 7.0 fa5c96b8be693a20c2a295e3545419e6f117fdc4 2012/01/29 22:23:00 1523 records - OK

ea18j0d9 7.0 e9b21e0a3578ef2e2067f4876309671ddc78f65f 2011/12/18 22:22:29 1805 records - OK

hdfqh2yy 7.0 8f7a8f6f55130f6becc5331ab38dc2108746b8aa 2011/12/03 18:00:00 26456 records - OK

3e4a1yc3 7.0 e6d52b11d2f7d405ccd31347da3b6fde69825168 2011/12/03 17:00:00 74279 records - OK

o3wuoibh 7.0 e20ffde4bbc58e0585b0b3b2f324bc91272c2360 2011/12/03 16:00:00 1 record - OK

Total records count: 3788720

Anti-rootkit module version (API 5.00 / 5.00)

Using c:\documents and settings\mom\local settings\temp\8B37A5BD-BC2E1A65-780C73A8-F93AB56E\mjkzcng8.key as Dr.Web ® Key file

This Dr.Web ® Key is for 1 computer (A User)

-----------------------------------------------------------------------------

kstmommy · March 30, 2013

Start scanning

-----------------------------------------------------------------------------

Command line used:-rpcep:\pipe\14D44BCA0 -rpcpr:np /protmode

Object(s) to scan:

- Scan processes in memory

- Scan boot sectors

- Scan startup directory

- Scanning for rootkits

- C:\AdwCleaner[R1].txt

- C:\AdwCleaner[R2].txt

- C:\AdwCleaner[s1].txt

- C:\aolconnfix.exe

- C:\aolconnfix.txt

- C:\AUTOEXEC.BAT

- C:\BcBtRmv.log

- C:\Boot.bak

- C:\boot.ini

- C:\cmldr

- C:\ComboFix.exe

- C:\ComboFix.txt

- C:\CONFIG.SYS

- C:\cookies.txt

- C:\CTX.DAT

- C:\DBS.TXT

- C:\debug.log

- C:\dell.sdr

- C:\extensions.sqlite

- C:\FixitRegBackup.reg

- C:\hiberfil.sys

- C:\hpfr5550.xml

- C:\hpothb07.dat

- C:\hpothb07.tif

- C:\INFCACHE.1

- C:\install.log

- C:\InstallHelper.log

- C:\IO.SYS

- C:\MGlogs.zip

- C:\MGtools.exe

- C:\MicrosoftFixit50692.msi

- C:\MSDOS.SYS

- C:\nickwordsearch.pspimage

- C:\NTDETECT.COM

- C:\ntldr

- C:\pagefile.sys

- C:\perflog.txt

- C:\rapport.txt

- C:\rollback.ini

- C:\ScanSectorLog.dat

- C:\smithrapportopt1.txt

- C:\smithscanrapport.txt

- C:\StubInstaller.exe

- C:\TDSSKiller.2.4.7.0_11.11.2010_23.42.19_log.txt

- C:\TDSSKiller.2.8.16.0_17.03.2013_15.23.14_log.txt

- C:\TDSSKiller.2.8.16.0_18.03.2013_06.48.32_log.txt

- C:\TDSSKiller.2.8.16.0_29.03.2013_09.27.39_log.txt

- C:\TDSSKiller.2.8.8.0_06.09.2012_12.37.03_log.txt

- C:\TDSSKiller.2.8.8.0_06.09.2012_12.54.36_log.txt

- C:\uninstall_flash_player.exe

- C:\VideoEditor.log

- C:\YServer.txt

- C:\WINDOWS\system32\

- C:\Documents and Settings\Mom\My Documents\

Computer\Motherboard\SYSTEM BIOS - Ok

c:\windows\system32\drivers\ntfs.sys - Ok

c:\windows\system32\drivers\mup.sys - Ok

c:\windows\system32\drivers\beep.sys - Ok

c:\windows\system32\drivers\ndis.sys - Ok

c:\windows\system32\drivers\ksecdd.sys - Ok

c:\windows\system32\drivers\nvata.sys - Ok

c:\windows\system32\drivers\mouclass.sys - Ok

c:\windows\system32\drivers\aswsp.sys - Ok

c:\windows\system32\drivers\wanatw4.sys - Ok

c:\windows\system32\drivers\raspti.sys - Ok

c:\windows\system32\drivers\kbdclass.sys - Ok

c:\windows\system32\drivers\fips.sys - Ok

c:\windows\system32\drivers\vga.sys - Ok

c:\windows\system32\drivers\i2omgmt.sys - Ok

c:\windows\system32\drivers\ndproxy.sys - Ok

combo-fix.sys - file not found

c:\windows\system32\drivers\ptilink.sys - Ok

c:\windows\system32\drivers\mountmgr.sys - Ok

c:\windows\system32\drivers\wdmaud.sys - Ok

c:\windows\system32\drivers\isapnp.sys - Ok

c:\windows\system32\drivers\redbook.sys - Ok

c:\windows\system32\drivers\atapi.sys - Ok

c:\windows\system32\drivers\hsf_dp.sys - Ok

c:\windows\system32\drivers\rasacd.sys - Ok

c:\windows\system32\drivers\psched.sys - Ok

sppf.sys - file not found

c:\windows\system32\drivers\ipnat.sys - Ok

c:\windows\system32\drivers\mouhid.sys - Ok

c:\windows\system32\drivers\aswtdi.sys - Ok

c:\windows\system32\drivers\audstub.sys - Ok

c:\windows\system32\drivers\usbohci.sys - Ok

c:\windows\system32\win32k.sys - Ok

c:\windows\system32\drivers\usbhub.sys - Ok

c:\windows\system32\drivers\swenum.sys - Ok

c:\windows\system32\drivers\hsf_cnxt.sys - Ok

c:\windows\system32\drivers\wudfpf.sys - Ok

c:\windows\system32\drivers\http.sys - Ok

c:\windows\system32\drivers\rdpcdd.sys - Ok

c:\windows\system32\drivers\sthda.sys - Ok

c:\windows\system32\drivers\update.sys - Ok

c:\windows\system32\drivers\raspppoe.sys - Ok

c:\windows\system32\drivers\ctoss2k.sys - Ok

c:\windows\system32\drivers\termdd.sys - Ok

c:\windows\system32\drivers\amdk8.sys - Ok

c:\windows\system32\drivers\modem.sys - Ok

c:\windows\system32\drivers\ftdisk.sys - Ok

c:\windows\system32\drivers\sysaudio.sys - Ok

c:\windows\system32\drivers\rasl2tp.sys - Ok

c:\windows\system32\drivers\hsfhwbs2.sys - Ok

c:\windows\system32\drivers\ctusfsyn.sys - Ok

c:\windows\system32\drivers\raspptp.sys - Ok

c:\windows\system32\hal.dll - Ok

c:\windows\system32\drivers\netbt.sys - Ok

c:\combofix\catchme.sys - file not found

c:\windows\system32\drivers\cdrom.sys - Ok

c:\windows\system32\drivers\mssmbios.sys - Ok

c:\windows\system32\drivers\pciide.sys - Ok

c:\windows\system32\drivers\ctxusbm.sys - Ok

c:\program files\superantispyware\sasdifsv.sys - Ok

c:\windows\system32\drivers\wanarp.sys - Ok

c:\windows\system32\drivers\point32.sys - Ok

c:\windows\system32\drivers\kbdhid.sys - Ok

c:\windows\system32\drivers\tcpip.sys - Ok

c:\windows\system32\drivers\mnmdd.sys - Ok

c:\windows\system32\drivers\dsncadpt.sys - Ok

c:\windows\system32\drivers\volsnap.sys - Ok

c:\program files\superantispyware\saskutil.sys - Ok

c:\windows\system32\drivers\modemcsa.sys - Ok

c:\windows\system32\drivers\bcm4sbxp.sys - Ok

c:\windows\system32\drivers\nv4_mini.sys - Ok

c:\windows\system32\drivers\imapi.sys - Ok

c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4ff1d7e2-9e7b-48dc-9094-627ba69c21a9}\mpkslfb81673e.sys - Ok

c:\windows\system32\drivers\ws2ifsl.sys - Ok

c:\windows\system32\drivers\null.sys - Ok

c:\windows\system32\drivers\usbehci.sys - Ok

c:\windows\system32\drivers\disk.sys - Ok

c:\windows\system32\drivers\ipsec.sys - Ok

c:\windows\system32\drivers\gearaspiwdm.sys - Ok

c:\windows\system32\drivers\pci.sys - Ok

c:\windows\system32\drivers\ndistapi.sys - Ok

c:\windows\system32\drivers\ndiswan.sys - Ok

c:\windows\system32\drivers\partmgr.sys - Ok

c:\windows\system32\drivers\msgpc.sys - Ok

c:\windows\system32\drivers\hdaudbus.sys - Ok

c:\windows\system32\drivers\aswrvrt.sys - Ok

c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4ff1d7e2-9e7b-48dc-9094-627ba69c21a9}\mpksl1736767e.sys - Ok

c:\windows\system32\drivers\acpi.sys - Ok

c:\windows\system32\drivers\nvhda32.sys - Ok

c:\windows\system32\drivers\mdmxsdk.sys - Ok

c:\windows\system32\drivers\aswrdr.sys - Ok

c:\windows\system32\drivers\afd.sys - Ok

c:\windows\system32\drivers\ndisuio.sys - Ok

c:\windows\system32\drivers\hidusb.sys - Ok

c:\windows\system32\drivers\neofltr_550_12129.sys - Ok

c:\windows\system32\drivers\monfilt.sys - Ok

c:\windows\system32\drivers\pxhelp20.sys - Ok

c:\windows\system32\drivers\ctsfm2k.sys - Ok

c:\windows\system32\drivers\procexp113.sys - file not found

c:\windows\system32\drivers\netbios.sys - Ok

c:\windows\system32\drivers\mrxdav.sys - Ok

c:\windows\system32\drivers\aswsnx.sys - Ok

c:\windows\system32\drivers\rdbss.sys - Ok

c:\documents and settings\mom\local settings\temp\14d74f3f0.sys - file not found

c:\documents and settings\mom\local settings\temp\15ca35bd1.sys - file not found

c:\windows\system32\drivers\srv.sys - Ok

c:\windows\system32\drivers\aswmonflt.sys - Ok

c:\windows\system32\drivers\mrxsmb.sys - Ok

c:\windows\system32\drivers\npfs.sys - Ok

c:\windows\system32\drivers\msfs.sys - Ok

c:\windows\system32\drivers\sr.sys - Ok

c:\windows\system32\drivers\pdfsfilter.sys - Ok

c:\windows\system32\drivers\fs_rec.sys - Ok

c:\windows\system32\drivers\aswfsblk.sys - Ok

c:\windows\system32\drivers\fltmgr.sys - Ok

c:\windows\system32\drivers\cdfs.sys - Ok

c:\windows\system32\drivers\mpfilter.sys - Ok

c:\windows\system32\ntkrnlpa.exe - Ok

c:\windows\system32\kdcom.dll - Ok

c:\windows\system32\bootvid.dll - Ok

c:\windows\system32\drivers\wmilib.sys - Ok

c:\windows\system32\drivers\scsiport.sys - Ok

c:\windows\system32\drivers\pciidex.sys - Ok

c:\windows\system32\drivers\classpnp.sys - Ok

c:\windows\system32\drivers\videoprt.sys - Ok

c:\windows\system32\drivers\usbport.sys - Ok

c:\windows\system32\drivers\ks.sys - Ok

c:\windows\system32\drivers\tdi.sys - Ok

c:\windows\system32\drivers\portcls.sys - Ok

c:\windows\system32\drivers\drmk.sys - Ok

c:\windows\system32\drivers\usbd.sys - Ok

c:\windows\system32\drivers\hidparse.sys - Ok

c:\windows\system32\drivers\hidclass.sys - Ok

c:\windows\system32\drivers\dump_nvata.sys - file not found

c:\windows\system32\drivers\dump_wmilib.sys - file not found

c:\windows\system32\drivers\dxapi.sys - Ok

c:\windows\system32\watchdog.sys - Ok

c:\windows\system32\drivers\dxg.sys - Ok

c:\windows\system32\drivers\dxgthk.sys - Ok

c:\windows\system32\nv4_disp.dll - Ok

c:\windows\system32\atmfd.dll - Ok

System Process - file not found

c:\windows\system32\spoolsv.exe - Ok

c:\program files\common files\aol\acs\aolacsd.exe - Ok

c:\windows\system32\smss.exe - Ok

c:\windows\system32\svchost.exe - Ok

c:\windows\system32\wbem\wmiprvse.exe - Ok

c:\windows\system32\csrss.exe - Ok

c:\windows\system32\winlogon.exe - Ok

c:\windows\system32\services.exe - Ok

c:\windows\system32\lsass.exe - Ok

c:\program files\google\update\googleupdate.exe - Ok

c:\windows\system32\nvsvc32.exe - Ok

c:\program files\avast software\avast\avastui.exe - Ok

c:\program files\common files\aol\1176508629\ee\aolsoftware.exe - Ok

c:\windows\system32\notepad.exe - Ok

c:\program files\microsoft security client\msmpeng.exe - Ok

c:\program files\superantispyware\sascore.exe - Ok

c:\program files\avast software\avast\avastsvc.exe - Ok

c:\program files\microsoft intellipoint\ipoint.exe - Ok

c:\windows\explorer.exe - Ok

c:\documents and settings\mom\local settings\temp\8b37a5bd-bc2e1a65-780c73a8-f93ab56e\z34nqpl7.exe - Ok

c:\windows\system32\alg.exe - Ok

c:\documents and settings\mom\local settings\temp\8b37a5bd-bc2e1a65-780c73a8-f93ab56e\wvi4bxdx.exe - Ok

>c:\documents and settings\mom\local settings\temp\8b37a5bd-bc2e1a65-780c73a8-f93ab56e\4vfczpo8.exe is BINARYRES container

c:\documents and settings\mom\local settings\temp\8b37a5bd-bc2e1a65-780c73a8-f93ab56e\4vfczpo8.exe - container

c:\program files\seamonkey\seamonkey.exe - Ok

>c:\documents and settings\mom\desktop\drweb-cureit.exe is BINARYRES container

>>c:\documents and settings\mom\desktop\drweb-cureit.exe\data001 - packed by BINARYRES

>>c:\documents and settings\mom\desktop\drweb-cureit.exe\data002 - packed by BINARYRES

c:\documents and settings\mom\desktop\drweb-cureit.exe - container

c:\documents and settings\mom\desktop\drweb-cureit.exe:Zone.Identifier - Ok

c:\windows\system32\ntdll.dll - Ok

c:\windows\system32\im31img.dil - Ok

c:\windows\system32\imgman32.dll - Ok

c:\program files\lexmark 5600-6600 series\ipcmt.dll - Ok

c:\windows\system32\hpinksts8911lm.dll - Ok

c:\windows\system32\hpzlnt07.dll - Ok

>c:\windows\system32\hpz3l5ha.dll - packed by PESTUB

c:\windows\system32\hpz3l5ha.dll - Ok

c:\windows\system32\msonpmon.dll - Ok

c:\program files\juniper networks\secure application manager\samnsp.dll - Ok

c:\windows\system32\spool\prtprocs\w32x86\hpzpp5ha.dll - Ok

c:\windows\system32\spool\prtprocs\w32x86\lxdudrpp.dll - Ok

c:\windows\system32\spool\prtprocs\w32x86\msonpppr.dll - Ok

>c:\windows\system32\xpsp2res.dll is BINARYRES container

>>c:\windows\system32\xpsp2res.dll\data001 is JS-HTML container

>>c:\windows\system32\xpsp2res.dll\data002 is JS-HTML container

>>c:\windows\system32\xpsp2res.dll\data003 is JS-HTML container

>>c:\windows\system32\xpsp2res.dll\data004 is JS-HTML container

c:\windows\system32\xpsp2res.dll - container

c:\windows\system32\lxduoem.dll - Ok

c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll - Ok

c:\windows\system32\lxdupmon.dll - Ok

c:\windows\system32\lxdulmpm.dll - Ok

c:\windows\system32\uxtheme.dll - Ok

c:\windows\system32\umdmxfrm.dll - Ok

c:\windows\system32\netapi32.dll - Ok

c:\windows\system32\shimeng.dll - Ok

c:\windows\system32\serwvdrv.dll - Ok

c:\windows\system32\comctl32.dll - Ok

c:\windows\system32\hnetcfg.dll - Ok

c:\windows\system32\fxsmon.dll - Ok

>c:\windows\system32\fxsevent.dll - packed by FLY-CODE

c:\windows\system32\fxsevent.dll - Ok

c:\windows\apppatch\acgenral.dll - Ok

c:\windows\system32\mswsock.dll - Ok

c:\windows\system32\wshtcpip.dll - Ok

c:\windows\system32\ws2help.dll - Ok

c:\windows\system32\ws2_32.dll - Ok

c:\windows\system32\netrap.dll - Ok

c:\windows\system32\usbmon.dll - Ok

c:\windows\system32\tcpmon.dll - Ok

c:\windows\system32\winspool.drv - Ok

>c:\windows\system32\pjlmon.dll - packed by FLY-CODE

c:\windows\system32\pjlmon.dll - Ok

c:\windows\system32\cnbjmon.dll - Ok

c:\windows\system32\spoolss.dll - Ok

c:\windows\system32\inetpp.dll - Ok

c:\windows\system32\localspl.dll - Ok

c:\windows\system32\win32spl.dll - Ok

c:\windows\system32\imm32.dll - Ok

c:\windows\system32\comdlg32.dll - Ok

c:\windows\system32\ntdsapi.dll - Ok

c:\windows\system32\userenv.dll - Ok

c:\windows\system32\winmm.dll - Ok

c:\windows\system32\psapi.dll - Ok

c:\windows\system32\wintrust.dll - Ok

c:\windows\system32\sfc_os.dll - Ok

c:\windows\system32\imagehlp.dll - Ok

c:\windows\system32\iphlpapi.dll - Ok

c:\windows\system32\dnsapi.dll - Ok

c:\windows\system32\wldap32.dll - Ok

>c:\windows\system32\winrnr.dll - packed by FLY-CODE

c:\windows\system32\winrnr.dll - Ok

c:\windows\system32\rasadhlp.dll - Ok

c:\windows\system32\clbcatq.dll - Ok

c:\windows\system32\comres.dll - Ok

c:\windows\system32\oleaut32.dll - Ok

c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll - Ok

>c:\windows\system32\ole32.dll is BINARYRES container

c:\windows\system32\ole32.dll - container

c:\windows\system32\crypt32.dll - Ok

c:\windows\system32\msasn1.dll - Ok

c:\windows\system32\msacm32.dll - Ok

c:\windows\system32\version.dll - Ok

c:\windows\system32\msvcrt.dll - Ok

c:\windows\system32\advapi32.dll - Ok

c:\windows\system32\rpcrt4.dll - Ok

c:\windows\system32\gdi32.dll - Ok

c:\windows\system32\shlwapi.dll - Ok

c:\windows\system32\secur32.dll - Ok

c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll - Ok

c:\windows\system32\kernel32.dll - Ok

>c:\windows\system32\shell32.dll is BINARYRES container

>>c:\windows\system32\shell32.dll\data001 is JS-HTML container

c:\windows\system32\shell32.dll - container

c:\windows\system32\msi.dll - Ok

c:\windows\system32\user32.dll - Ok

c:\program files\common files\aol\acs\xpat.dll - Ok

c:\program files\common files\aol\acs\acsmdiag.dll - Ok

c:\program files\common files\aol\acs\acscmn.dll - Ok

c:\program files\common files\aol\acs\aolacsd.dll - Ok

c:\program files\common files\aol\aoldiag\tbdiag.dll - Ok

c:\windows\system32\msctfime.ime - Ok

>c:\windows\system32\winsta.dll - packed by FLY-CODE

c:\windows\system32\winsta.dll - Ok

c:\windows\system32\rtutils.dll - Ok

c:\windows\system32\tapi32.dll - Ok

c:\windows\system32\wtsapi32.dll - Ok

>c:\windows\system32\setupapi.dll - packed by BINARYRES

>>c:\windows\system32\setupapi.dll - packed by MS COMPRESS

c:\windows\system32\setupapi.dll - Ok

c:\windows\system32\w3ssl.dll - Ok

c:\program files\avast software\avast\snxhk.dll - Ok

c:\windows\system32\httpapi.dll - Ok

c:\windows\system32\strmfilt.dll - Ok

c:\windows\system32\samlib.dll - Ok

c:\windows\system32\ntmarta.dll - Ok

c:\windows\system32\actxprxy.dll - Ok

c:\windows\system32\mscms.dll - Ok

c:\windows\system32\cfgmgr32.dll - Ok

c:\windows\system32\wiaservc.dll - Ok

c:\windows\system32\csrsrv.dll - Ok

c:\windows\system32\basesrv.dll - Ok

c:\windows\system32\winsrv.dll - Ok

c:\windows\system32\sxs.dll - Ok

c:\windows\system32\odbcint.dll - Ok

c:\windows\system32\wgalogon.dll - Ok

c:\windows\system32\ati2evxx.dll - Ok

c:\windows\system32\dimsntfy.dll - Ok

c:\windows\system32\rsaenh.dll - Ok

c:\windows\system32\mpr.dll - Ok

c:\windows\system32\winscard.dll - Ok

>c:\windows\system32\msacm32.drv - packed by FLY-CODE

c:\windows\system32\msacm32.drv - Ok

c:\windows\system32\wdmaud.drv - Ok

c:\windows\system32\odbc32.dll - Ok

c:\windows\system32\profmap.dll - Ok

>c:\windows\system32\nddeapi.dll - packed by FLY-CODE

c:\windows\system32\nddeapi.dll - Ok

c:\windows\system32\wlnotify.dll - Ok

c:\windows\system32\msgina.dll - Ok

c:\windows\system32\cscdll.dll - Ok

c:\windows\system32\cryptdll.dll - Ok

c:\windows\system32\sfc.dll - Ok

c:\windows\system32\regapi.dll - Ok

c:\windows\system32\authz.dll - Ok

c:\windows\system32\shsvcs.dll - Ok

c:\windows\system32\cscui.dll - Ok

c:\windows\system32\apphelp.dll - Ok

c:\windows\system32\midimap.dll - Ok

c:\windows\system32\msv1_0.dll - Ok

c:\windows\apppatch\acadproc.dll - Ok

c:\windows\system32\ncobjapi.dll - Ok

c:\windows\system32\msvcp60.dll - Ok

c:\windows\system32\eventlog.dll - Ok

c:\windows\system32\umpnpmgr.dll - Ok

c:\windows\system32\scesrv.dll - Ok

c:\windows\system32\msprivs.dll - Ok

c:\windows\system32\dssenh.dll - Ok

c:\windows\system32\kerberos.dll - Ok

c:\windows\system32\winipsec.dll - Ok

c:\windows\system32\pstorsvc.dll - Ok

c:\windows\system32\psbase.dll - Ok

c:\windows\system32\ipsecsvc.dll - Ok

c:\windows\system32\scecli.dll - Ok

c:\windows\system32\samsrv.dll - Ok

c:\windows\system32\netlogon.dll - Ok

c:\windows\system32\lsasrv.dll - Ok

c:\windows\system32\oakley.dll - Ok

c:\windows\system32\w32time.dll - Ok

c:\windows\system32\schannel.dll - Ok

c:\windows\system32\wdigest.dll - Ok

c:\windows\system32\normaliz.dll - Ok

c:\program files\google\update\1.3.21.135\goopdate.dll - Ok

c:\windows\system32\wininet.dll - Ok

c:\windows\system32\iertutil.dll - Ok

c:\windows\system32\dbghelp.dll - Ok

c:\windows\system32\mstask.dll - Ok

c:\windows\system32\nvapi.dll - Ok

c:\windows\system32\powrprof.dll - Ok

c:\program files\avast software\avast\aswara.dll - Ok

c:\program files\avast software\avast\ssleay32.dll - Ok

c:\program files\avast software\avast\libeay32.dll - Ok

>c:\program files\avast software\avast\dbghelp.dll - packed by PESTUB

c:\program files\avast software\avast\dbghelp.dll - Ok

c:\program files\avast software\avast\avastip.dll - Ok

c:\windows\system32\winhttp.dll - Ok

c:\windows\winsxs\x86_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90enu.dll - Ok

c:\windows\system32\oleacc.dll - Ok

c:\program files\avast software\avast\defs\13032900\uiext.dll - Ok

c:\program files\avast software\avast\ashbase.dll - Ok

c:\program files\avast software\avast\aswaux.dll - Ok

c:\program files\avast software\avast\aswdata.dll - Ok

c:\program files\avast software\avast\aswlog.dll - Ok

c:\program files\avast software\avast\aswproperty.dll - Ok

c:\program files\avast software\avast\aswutil.dll - Ok

c:\program files\avast software\avast\ashtaskex.dll - Ok

c:\program files\avast software\avast\ashtask.dll - Ok

c:\program files\avast software\avast\aswsqlt.dll - Ok

c:\program files\avast software\avast\aswengldr.dll - Ok

>c:\program files\avast software\avast\aswcmnos.dll is BINARYRES container

>>c:\program files\avast software\avast\aswcmnos.dll\data001 - packed by XOREXE

>>>c:\program files\avast software\avast\aswcmnos.dll\data001 - packed by BINARYRES

c:\program files\avast software\avast\aswcmnos.dll - container

c:\program files\avast software\avast\aswcmnis.dll - Ok

>c:\program files\avast software\avast\aswcmnbs.dll is BINARYRES container

c:\program files\avast software\avast\aswcmnbs.dll - container

>c:\program files\avast software\avast\aavm4h.dll - packed by BINARYRES

c:\program files\avast software\avast\aavm4h.dll - Ok

c:\program files\avast software\avast\aavmrpch.dll - Ok

c:\program files\avast software\avast\1033\base.dll - Ok

c:\program files\avast software\avast\1033\uilangres.dll - Ok

>c:\program files\avast software\avast\commonres.dll - packed by BINARYRES

>>c:\program files\avast software\avast\commonres.dll is BINARYRES container

>>>c:\program files\avast software\avast\commonres.dll\data003 - packed by FLY-CODE

>>>>c:\program files\avast software\avast\commonres.dll\data003 is NSIS container

>>>>>c:\program files\avast software\avast\commonres.dll\data003\GoogleUpdateSetup_latest.exe is LZMA container

>>>c:\program files\avast software\avast\commonres.dll\data004 - packed by FLY-CODE

>>>>c:\program files\avast software\avast\commonres.dll\data004 is NSIS container

>>>>>c:\program files\avast software\avast\commonres.dll\data004\GoogleUpdateSetup_latest.exe is LZMA container

>>>c:\program files\avast software\avast\commonres.dll\data006 - packed by FLY-CODE

>>>>c:\program files\avast software\avast\commonres.dll\data006 is NSIS container

>>>>>c:\program files\avast software\avast\commonres.dll\data006\GoogleUpdateSetup_latest.exe is LZMA container

c:\program files\avast software\avast\commonres.dll - container

c:\windows\system32\wsock32.dll - Ok

c:\windows\system32\cryptui.dll - Ok

c:\windows\system32\msimg32.dll - Ok

c:\windows\system32\urlmon.dll - Ok

c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll - Ok

c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll - Ok

>c:\windows\winsxs\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90u.dll is ZLIB container

c:\windows\winsxs\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90u.dll - container

c:\program files\common files\aol\1176508629\ee\xprt5.dll - Ok

>c:\program files\common files\aol\1176508629\ee\services\os\ver5_2_1_1\aolidlemon.dll - packed by FLY-CODE

c:\program files\common files\aol\1176508629\ee\services\os\ver5_2_1_1\aolidlemon.dll - Ok

c:\program files\common files\aol\1176508629\ee\xprt6.dll - Ok

>c:\program files\common files\aol\1176508629\ee\coolcore54.dll is ZIP archive

c:\program files\common files\aol\1176508629\ee\coolcore54.dll - Ok

c:\program files\common files\aol\1176508629\ee\coolcore54.dll - archive

c:\program files\common files\aol\1176508629\ee\services\metrics\ver4_1_11_1\cmls.dll - Ok

c:\program files\common files\aol\1176508629\ee\services\localstorage\ver8_1_1_1\clssvc.dll - Ok

c:\program files\common files\aol\1176508629\ee\services\notification\ver7_1_1_1\notify.dll - Ok

c:\program files\common files\aol\1176508629\ee\services\os\ver5_2_1_1\os.dll - Ok

c:\program files\common files\aol\1176508629\ee\services\preferences\ver6_1_1_1\preferences.dll - Ok

c:\program files\common files\aol\1176508629\ee\services\suiteframework\ver5_1_4_1\suiteframework.dll - Ok

c:\program files\common files\aol\1176508629\ee\services\connection\ver7_1_2_1\connection.dll - Ok

c:\program files\common files\aol\1176508629\ee\services\aolsystrayservice\ver4_1_2_1\aolsystrayservice.dll - Ok

c:\program files\common files\aol\1176508629\ee\services\osinfo\ver2_1_1_1\osinfo.dll - Ok

c:\program files\common files\aol\1176508629\ee\aolsvcmgr.dll - Ok

c:\windows\system32\sensapi.dll - Ok

c:\windows\system32\atl.dll - Ok

c:\windows\system32\mprapi.dll - Ok

c:\windows\system32\adsldpc.dll - Ok

c:\windows\system32\rasman.dll - Ok

c:\windows\system32\rasapi32.dll - Ok

c:\windows\system32\activeds.dll - Ok

c:\windows\system32\rpcss.dll - Ok

c:\program files\common files\adobe\acrobat\activex\pdfshell.dll - Ok

c:\program files\common files\ahead\lib\nerodigitalext.dll - Ok

c:\program files\avast software\avast\ashshell.dll - Ok

c:\program files\microsoft office\office12\grooveshellextensions.dll - Ok

c:\program files\microsoft office\office12\grooveutil.dll - Ok

c:\program files\microsoft office\office12\groovenew.dll - Ok

>c:\windows\system32\linkinfo.dll - packed by FLY-CODE

c:\windows\system32\linkinfo.dll - Ok

c:\windows\system32\ntshrui.dll - Ok

c:\program files\common files\ahead\lib\mfc71.dll - Ok

c:\program files\common files\ahead\lib\msvcr71.dll - Ok

c:\program files\common files\ahead\lib\msvcp71.dll - Ok

c:\windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\atl80.dll - Ok

c:\program files\microsoft security client\mpclient.dll - Ok

c:\windows\system32\fltlib.dll - Ok

>c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4ff1d7e2-9e7b-48dc-9094-627ba69c21a9}\mpengine.dll is BINARYRES container

c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4ff1d7e2-9e7b-48dc-9094-627ba69c21a9}\mpengine.dll - container

c:\program files\microsoft security client\mpsvc.dll - Ok

c:\program files\microsoft security client\mprtp.dll - Ok

c:\windows\system32\cabinet.dll - Ok

c:\windows\system32\cryptnet.dll - Ok

c:\windows\system32\wbem\wmiprvsd.dll - Ok

c:\windows\system32\advpack.dll - Ok

c:\windows\system32\dot3api.dll - Ok

c:\windows\system32\wscsvc.dll - Ok

c:\windows\system32\wuauserv.dll - Ok

c:\windows\system32\wuaueng.dll - Ok

c:\windows\system32\unimdm.tsp - Ok

c:\windows\system32\ndptsp.tsp - Ok

c:\windows\system32\kmddsp.tsp - Ok

c:\windows\system32\ipconf.tsp - Ok

c:\windows\system32\hidphone.tsp - Ok

c:\windows\system32\h323.tsp - Ok

c:\windows\system32\wbem\wmisvc.dll - Ok

c:\windows\system32\unimdmat.dll - Ok

c:\windows\system32\onex.dll - Ok

c:\windows\system32\eappprxy.dll - Ok

c:\windows\system32\wbem\ncprov.dll - Ok

c:\windows\system32\mspatcha.dll - Ok

c:\windows\system32\esent.dll - Ok

c:\windows\system32\modemui.dll - Ok

c:\windows\system32\ipnathlp.dll - Ok

c:\windows\system32\hidserv.dll - Ok

c:\windows\system32\hid.dll - Ok

c:\windows\system32\audiosrv.dll - Ok

>c:\windows\system32\uniplat.dll - packed by FLY-CODE

c:\windows\system32\uniplat.dll - Ok

c:\windows\system32\rasppp.dll - Ok

c:\windows\system32\sens.dll - Ok

c:\windows\system32\ntlsapi.dll - Ok

c:\windows\system32\qutil.dll - Ok

c:\windows\system32\eapolqec.dll - Ok

c:\windows\system32\rasqec.dll - Ok

c:\windows\system32\wzcsapi.dll - Ok

c:\windows\system32\tapisrv.dll - Ok

c:\windows\system32\dot3dlg.dll - Ok

c:\windows\system32\seclogon.dll - Ok

c:\windows\system32\eappcfg.dll - Ok

c:\windows\system32\msxml3.dll - Ok

c:\windows\system32\wbem\wbemsvc.dll - Ok

c:\windows\system32\ssdpapi.dll - Ok

c:\windows\pchealth\helpctr\binaries\pchsvc.dll - Ok

c:\windows\system32\msidle.dll - Ok

c:\windows\system32\wbem\wmiutils.dll - Ok

c:\windows\system32\srvsvc.dll - Ok

c:\windows\system32\resutils.dll - Ok

c:\windows\system32\mtxclu.dll - Ok

c:\windows\system32\colbact.dll - Ok

c:\windows\system32\srsvc.dll - Ok

c:\windows\system32\wbem\repdrvfs.dll - Ok

c:\windows\system32\wbem\wbemcomn.dll - Ok

c:\windows\system32\wbem\esscli.dll - Ok

c:\windows\system32\wbem\wbemess.dll - Ok

c:\windows\system32\vssapi.dll - Ok

c:\windows\system32\netcfgx.dll - Ok

c:\windows\system32\wbem\fastprox.dll - Ok

c:\windows\system32\rastapi.dll - Ok

c:\windows\system32\wbem\wbemcore.dll - Ok

c:\windows\system32\netshell.dll - Ok

c:\windows\system32\comsvcs.dll - Ok

c:\windows\system32\rasdlg.dll - Ok

c:\windows\system32\rastls.dll - Ok

c:\windows\system32\raschap.dll - Ok

c:\windows\system32\credui.dll - Ok

c:\windows\system32\cryptsvc.dll - Ok

c:\windows\system32\clusapi.dll - Ok

c:\windows\system32\wmi.dll - Ok

c:\windows\system32\browser.dll - Ok

c:\windows\system32\upnp.dll - Ok

c:\windows\system32\wkssvc.dll - Ok

c:\windows\system32\schedsvc.dll - Ok

c:\windows\system32\es.dll - Ok

c:\windows\system32\certcli.dll - Ok

c:\windows\system32\netman.dll - Ok

c:\windows\system32\dhcpcsvc.dll - Ok

c:\windows\system32\wzcsvc.dll - Ok

c:\windows\system32\rasmans.dll - Ok

c:\windows\system32\wudfplatform.dll - Ok

c:\windows\system32\wudfsvc.dll - Ok

c:\windows\system32\dnsrslvr.dll - Ok

c:\windows\system32\lmhsvc.dll - Ok

c:\windows\system32\ssdpsrv.dll - Ok

c:\program files\avast software\avast\aswpatchmgt.dll - Ok

c:\windows\system32\wlanapi.dll - Ok

c:\windows\system32\qmgrprxy.dll - Ok

c:\program files\avast software\avast\defs\13032900\aswfidb.dll - Ok

>c:\program files\avast software\avast\defs\13032900\algo.dll is BINARYRES container

>>c:\program files\avast software\avast\defs\13032900\algo.dll\data001 - packed by XOREXE

>>>c:\program files\avast software\avast\defs\13032900\algo.dll\data001 - packed by FLY-CODE

c:\program files\avast software\avast\defs\13032900\algo.dll - container

c:\program files\avast software\avast\defs\13032900\aswrep.dll - Ok

>c:\program files\avast software\avast\defs\13032900\aswcmnos.dll is BINARYRES container

>>c:\program files\avast software\avast\defs\13032900\aswcmnos.dll\data001 - packed by XOREXE

>>>c:\program files\avast software\avast\defs\13032900\aswcmnos.dll\data001 - packed by BINARYRES

c:\program files\avast software\avast\defs\13032900\aswcmnos.dll - container

>c:\program files\avast software\avast\defs\13032900\aswcmnbs.dll is BINARYRES container

c:\program files\avast software\avast\defs\13032900\aswcmnbs.dll - container

c:\program files\avast software\avast\defs\13032900\aswcmnis.dll - Ok

c:\program files\avast software\avast\defs\13032900\aswscan.dll - Ok

>c:\program files\avast software\avast\defs\13032900\aswengin.dll is BINARYRES container

>>c:\program files\avast software\avast\defs\13032900\aswengin.dll\data001 is LZMA container

>>c:\program files\avast software\avast\defs\13032900\aswengin.dll\data002 - packed by MS COMPRESS

c:\program files\avast software\avast\defs\13032900\aswengin.dll - container

c:\program files\avast software\avast\aswdld.dll - Ok

c:\program files\avast software\avast\aswstrm.dll - Ok

c:\program files\avast software\avast\aswidle.dll - Ok

>c:\program files\avast software\avast\ashserv.dll is BINARYRES container

c:\program files\avast software\avast\ashserv.dll - container

c:\program files\avast software\avast\ashwebsv.dll - Ok

c:\program files\avast software\avast\ahresstd.dll - Ok

c:\program files\avast software\avast\ahresmai.dll - Ok

>c:\program files\avast software\avast\ahresjs.dll - packed by FLY-CODE

c:\program files\avast software\avast\ahresjs.dll - Ok

c:\program files\avast software\avast\ahresmes.dll - Ok

c:\program files\avast software\avast\ahresp2p.dll - Ok

c:\program files\avast software\avast\ahresns.dll - Ok

c:\program files\avast software\avast\ahresws.dll - Ok

c:\program files\avast software\avast\ahresbhv.dll - Ok

c:\windows\system32\wbem\wbemprox.dll - Ok

c:\windows\system32\webclnt.dll - Ok

c:\program files\microsoft intellipoint\ipres.dll - Ok

c:\program files\microsoft intellipoint\dpgcmd.dll - Ok

c:\program files\microsoft intellipoint\components\commands\dpghnt\dpghnt.dll - Ok

c:\program files\microsoft intellipoint\srres.dll - Ok

c:\program files\microsoft intellipoint\dpgmkb.dll - Ok

c:\windows\system32\msxml6.dll - Ok

c:\program files\microsoft intellipoint\sqmapi.dll - Ok

c:\windows\system32\portabledeviceapi.dll - Ok

c:\windows\system32\portabledevicetypes.dll - Ok

c:\windows\system32\wpdshserviceobj.dll - Ok

c:\windows\system32\ieframe.dll - Ok

c:\windows\system32\webcheck.dll - Ok

c:\windows\system32\fxsapi.dll - Ok

c:\windows\system32\themeui.dll - Ok

c:\program files\windows defender\mpshhook.dll - Ok

c:\program files\microsoft office\office12\groovesystemservices.dll - Ok

c:\program files\microsoft office\office12\groovemisc.dll - Ok

c:\windows\system32\fxsst.dll - Ok

c:\windows\system32\duser.dll - Ok

>c:\windows\system32\browselc.dll is BINARYRES container

>>c:\windows\system32\browselc.dll\data004 is JS-HTML container

>>c:\windows\system32\browselc.dll\data008 is JS-HTML container

>>c:\windows\system32\browselc.dll\data012 is JS-HTML container

>>c:\windows\system32\browselc.dll\data013 is ZLIB container

c:\windows\system32\browselc.dll - container

>c:\windows\system32\shdoclc.dll is BINARYRES container

>>c:\windows\system32\shdoclc.dll\data001 is JS-HTML container

>>c:\windows\system32\shdoclc.dll\data002 is JS-HTML container

>>c:\windows\system32\shdoclc.dll\data003 is JS-HTML container

>>c:\windows\system32\shdoclc.dll\data004 is JS-HTML container

>>c:\windows\system32\shdoclc.dll\data005 is JS-HTML container

>>c:\windows\system32\shdoclc.dll\data006 is JS-HTML container

c:\windows\system32\shdoclc.dll - container

c:\windows\system32\ntlanman.dll - Ok

c:\windows\system32\netui1.dll - Ok

c:\windows\system32\netui0.dll - Ok

c:\windows\system32\batmeter.dll - Ok

c:\windows\system32\mlang.dll - Ok

c:\windows\system32\drprov.dll - Ok

c:\windows\system32\davclnt.dll - Ok

c:\windows\system32\browseui.dll - Ok

c:\windows\system32\stobject.dll - Ok

c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll - Ok

c:\windows\system32\shdocvw.dll - Ok

c:\windows\system32\qmgr.dll - Ok

c:\windows\system32\shfolder.dll - Ok

>c:\documents and settings\mom\local settings\temp\8b37a5bd-bc2e1a65-780c73a8-f93ab56e\b4p6dmo1.dll is BINARYRES container

>>c:\documents and settings\mom\local settings\temp\8b37a5bd-bc2e1a65-780c73a8-f93ab56e\b4p6dmo1.dll\data003 - packed by BINARYRES

>>c:\documents and settings\mom\local settings\temp\8b37a5bd-bc2e1a65-780c73a8-f93ab56e\b4p6dmo1.dll\data004 - packed by BINARYRES

c:\documents and settings\mom\local settings\temp\8b37a5bd-bc2e1a65-780c73a8-f93ab56e\b4p6dmo1.dll - container

c:\windows\system32\odbcbcp.dll - Ok

c:\windows\system32\pdh.dll - Ok

c:\program files\seamonkey\mozsqlite3.dll - Ok

c:\program files\seamonkey\nspr4.dll - Ok

c:\program files\seamonkey\smime3.dll - Ok

c:\program files\seamonkey\nssutil3.dll - Ok

c:\program files\seamonkey\plc4.dll - Ok

c:\program files\seamonkey\mozjs.dll - Ok

c:\program files\seamonkey\nss3.dll - Ok

c:\program files\seamonkey\plds4.dll - Ok

c:\program files\seamonkey\ssl3.dll - Ok

c:\program files\seamonkey\nsldap32v60.dll - Ok

c:\program files\seamonkey\nsldappr32v60.dll - Ok

c:\program files\seamonkey\mozalloc.dll - Ok

c:\program files\seamonkey\xpcom.dll - Ok

c:\program files\seamonkey\components\suite.dll - Ok

c:\program files\seamonkey\softokn3.dll - Ok

c:\program files\seamonkey\nssdbm3.dll - Ok

c:\program files\seamonkey\freebl3.dll - Ok

c:\program files\seamonkey\nssckbi.dll - Ok

c:\program files\superantispyware\sasseh.dll - Ok

c:\program files\seamonkey\xul.dll - Ok

c:\windows\system32\d3d9.dll - Ok

c:\program files\windows defender\mpoav.dll - Ok

c:\windows\system32\feclient.dll - Ok

c:\windows\system32\d3d8thk.dll - Ok

c:\windows\system32\t2embed.dll - Ok

c:\windows\system32\lz32.dll - Ok

c:\windows\system32\usp10.dll - Ok

c:\program files\seamonkey\mozcrt19.dll - Ok

c:\program files\seamonkey\mozcpp19.dll - Ok

c:\documents and settings\administrator\start menu\programs\startup\desktop.ini - Ok

c:\documents and settings\updatususer\start menu\programs\startup\desktop.ini - Ok

c:\documents and settings\mom\start menu\programs\startup\desktop.ini - Ok

c:\windows\system32\config\systemprofile\start menu\programs\startup\desktop.ini - Ok

c:\documents and settings\default user\start menu\programs\startup\desktop.ini - Ok

c:\documents and settings\all users\start menu\programs\startup\desktop.ini - Ok

c:\windows\system32\dot3cfg.dll - Ok

c:\windows\system32\napmontr.dll - Ok

c:\windows\system32\fwcfg.dll - Ok

c:\windows\system32\hnetmon.dll - Ok

c:\windows\system32\dgnet.dll - Ok

c:\windows\system32\ipxpromn.dll - Ok

c:\windows\system32\ipxmontr.dll - Ok

c:\windows\system32\rasmontr.dll - Ok

c:\windows\system32\ippromon.dll - Ok

c:\windows\system32\ifmon.dll - Ok

c:\windows\system32\ipmontr.dll - Ok

c:\windows\system32\ipv6mon.dll - Ok

c:\windows\system32\dfrg.msc - Ok

c:\windows\system32\cleanmgr.exe - Ok

c:\windows\system32\calc.exe - Ok

c:\windows\system32\rdpwsx.dll - Ok

c:\windows\system32\rdpclip.exe - Ok

c:\windows\system32\rdpcfgex.dll - Ok

c:\program files\microsoft office\office12\onenote.exe - Ok

c:\program files\microsoft office\office12\winword.exe - Ok

c:\program files\microsoft office\office12\mspub.exe - Ok

c:\program files\microsoft office\office11\wordview.exe - Ok

c:\windows\system32\cmd.exe - Ok

c:\windows\system32\msobjs.dll - Ok

c:\windows\system32\msaudite.dll - Ok

c:\windows\system32\iassvcs.dll - Ok

c:\windows\system32\napipsec.dll - Ok

c:\program files\microsoft security client\mpevmsg.dll - Ok

c:\windows\system32\dhcpqec.dll - Ok

c:\windows\system32\syssetup.dll - Ok

c:\windows\system32\savedump.exe - Ok

c:\windows\system32\rsvpmsg.dll - Ok

c:\windows\system32\ntmsevt.dll - Ok

c:\windows\system32\rtm.dll - Ok

c:\windows\system32\spmsg.dll - Ok

c:\windows\system32\mprmsg.dll - Ok

c:\windows\system32\netmsg.dll - Ok

c:\windows\system32\iologmsg.dll - Ok

c:\windows\system32\drivers\ati2erec.dll - Ok

c:\windows\system32\drivers\umdf\wpdmtpdr.dll - Ok

c:\windows\system32\wpd_ci.dll - Ok

c:\windows\system32\wuaucpl.cpl.mui - Ok

c:\windows\system32\xpob2res.dll - Ok

c:\program files\microsoft office\office12\1033\mapir.dll - Ok

c:\windows\system32\nvoglnt.dll - Ok

c:\windows\system32\msshavmsg.dll - Ok

>c:\program files\microsoft security client\msmpres.dll is ZLIB container

c:\program files\microsoft security client\msmpres.dll - container

c:\windows\microsoft.net\framework\v4.0.30319\eventlogmessages.dll - Ok

c:\windows\system32\wbem\wmiapres.dll - Ok

c:\windows\system32\dpcdll.dll - Ok

c:\program files\windows defender\mpevmsg.dll - Ok

c:\windows\system32\netevent.dll - Ok

c:\windows\system32\msvbvm50.dll - Ok

c:\program files\common files\sony shared\avlib\sptisrvmsg.dll - Ok

c:\windows\system32\safrslv.dll - Ok

c:\windows\system32\safrdm.dll - Ok

>c:\windows\system32\xpsp3res.dll is BINARYRES container

>>c:\windows\system32\xpsp3res.dll\data001 is JS-HTML container

>>c:\windows\system32\xpsp3res.dll\data002 is JS-HTML container

>>c:\windows\system32\xpsp3res.dll\data004 is JS-HTML container

c:\windows\system32\xpsp3res.dll - container

c:\windows\system32\perfmon.exe - Ok

c:\windows\system32\prflbmsg.dll - Ok

c:\windows\system32\perfctrs.dll - Ok

c:\windows\system32\nmevtmsg.dll - Ok

c:\windows\system32\loadperf.dll - Ok

c:\windows\pchealth\helpctr\binaries\hcappres.dll - Ok

c:\windows\system32\drwtsn32.exe - Ok

c:\windows\system32\ulib.dll - Ok

c:\windows\system32\pautoenr.dll - Ok

c:\windows\microsoft.net\framework\v2.0.50727\eventlogmessages.dll - Ok

c:\windows\system32\faultrep.dll - Ok

c:\program files\common files\microsoft shared\dw\dw20.exe - Ok

c:\windows\microsoft.net\framework\v4.0.30319\mui\0409\servicemodelevents.dll.mui - Ok

c:\windows\microsoft.net\framework\v4.0.30319\aspnet_rc.dll - Ok

c:\program files\common files\ahead\lib\nerocheck.exe - Ok

c:\program files\common files\system\ole db\msdmine.dll - Ok

c:\windows\microsoft.net\framework\v3.0\windows communication foundation\servicemodelevents.dll.mui - Ok

c:\windows\system32\query.dll - Ok

>c:\windows\system32\icardres.dll.mui is BINARYRES container

c:\windows\system32\icardres.dll.mui - container

c:\windows\microsoft.net\framework\v2.0.50727\aspnet_rc.dll - Ok

c:\windows\microsoft.net\framework\v1.1.4322\aspnet_rc.dll - Ok

c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll - Ok

c:\program files\java\jre6\bin\jp2ssv.dll - Ok

c:\program files\java\jre6\bin\ssv.dll - Ok

>c:\program files\avast software\avast\aswwebrepie.dll is BINARYRES container

>>c:\program files\avast software\avast\aswwebrepie.dll\data001 is JS-HTML container

c:\program files\avast software\avast\aswwebrepie.dll - container

c:\windows\system32\incinerator32.dll - Ok

c:\program files\microsoft expression\web 4\fpnse.dll - Ok

c:\program files\itunes\itunesminiplayer.dll - Ok

c:\program files\microsoft intellipoint\ipcplwir.dll - Ok

c:\program files\microsoft intellipoint\ipcplwhl.dll - Ok

c:\program files\microsoft intellipoint\ipcplsens.dll - Ok

c:\program files\microsoft intellipoint\ipcplbtn.dll - Ok

c:\program files\microsoft intellipoint\ipcplact.dll - Ok

c:\program files\real\realplayer\rpshell.dll - Ok

c:\program files\microsoft office\office11\msohev.dll - Ok

c:\program files\microsoft office\office12\onfilter.dll - Ok

c:\program files\microsoft office\office12\mlshext.dll - Ok

c:\program files\microsoft office\office12\olkfstub.dll - Ok

c:\program files\ati technologies\ati.ace\atiacmxx.dll - Ok

c:\windows\system32\xpsshhdr.dll - Ok

c:\program files\common files\microsoft shared\web folders\msonsext.dll - Ok

c:\windows\system32\dfshim.dll - Ok

c:\windows\system32\wpdshext.dll - Ok

>c:\windows\system32\audiodev.dll - packed by PESTUB

c:\windows\system32\audiodev.dll - Ok

c:\program files\common files\microsoft shared\office12\msoshext.dll - Ok

c:\program files\winrar\rarext.dll - Ok

c:\program files\nero\nero 7\nero coverdesigner\coveredextension.dll - Ok

c:\program files\winzip\wzshlstb.dll - Ok

c:\windows\system32\wmpshell.dll - Ok

c:\program files\outlook express\wabfind.dll - Ok

c:\windows\system32\cabview.dll - Ok

c:\windows\system32\mmcshext.dll - Ok

c:\windows\system32\photowiz.dll - Ok

c:\windows\system32\dfsshlex.dll - Ok

c:\windows\msagent\agentpsh.dll - Ok

c:\windows\system32\mydocs.dll - Ok

c:\windows\system32\dsuiext.dll - Ok

c:\windows\system32\dsquery.dll - Ok

c:\windows\system32\docprop2.dll - Ok

c:\windows\system32\msieftp.dll - Ok

c:\windows\system32\extmgr.dll - Ok

c:\windows\system32\zipfldr.dll - Ok

c:\windows\system32\netplwiz.dll - Ok

>c:\windows\system32\shimgvw.dll is BINARYRES container

>>c:\windows\system32\shimgvw.dll\data001 is JS-HTML container

>>c:\windows\system32\shimgvw.dll\data002 is JS-HTML container

c:\windows\system32\shimgvw.dll - container

>c:\windows\system32\appwiz.cpl is BINARYRES container

>>c:\windows\system32\appwiz.cpl\data001 is JS-HTML container

>>c:\windows\system32\appwiz.cpl\data003 is JS-HTML container

>>c:\windows\system32\appwiz.cpl\data004 is JS-HTML container

>>c:\windows\system32\appwiz.cpl\data006 is JS-HTML container

>>c:\windows\system32\appwiz.cpl\data008 is JS-HTML container

>>c:\windows\system32\appwiz.cpl\data009 is JS-HTML container

>>c:\windows\system32\appwiz.cpl\data011 is JS-HTML container

>>c:\windows\system32\appwiz.cpl\data012 is JS-HTML container

>>c:\windows\system32\appwiz.cpl\data014 is JS-HTML container

>>c:\windows\system32\appwiz.cpl\data015 is JS-HTML container

>>c:\windows\system32\appwiz.cpl\data016 is JS-HTML container

c:\windows\system32\appwiz.cpl - container

c:\windows\system32\occache.dll - Ok

c:\windows\system32\sendmail.dll - Ok

c:\windows\system32\shmedia.dll - Ok

c:\windows\system32\twext.dll - Ok

>c:\windows\system32\wuaucpl.cpl - packed by FLY-CODE

c:\windows\system32\wuaucpl.cpl - Ok

c:\program files\common files\system\ole db\oledb32.dll - Ok

c:\windows\system32\wshext.dll - Ok

c:\windows\system32\remotepg.dll - Ok

c:\windows\system32\wiashext.dll - Ok

c:\windows\system32\cryptext.dll - Ok

>c:\windows\system32\deskperf.dll - packed by FLY-CODE

c:\windows\system32\deskperf.dll - Ok

>c:\windows\system32\fontext.dll is BINARYRES container

>>c:\windows\system32\fontext.dll\data001 - packed by MS COMPRESS

>>c:\windows\system32\fontext.dll\data002 - packed by MS COMPRESS

c:\windows\system32\fontext.dll - container

c:\windows\system32\hticons.dll - Ok

c:\windows\system32\syncui.dll - Ok

c:\windows\system32\dskquoui.dll - Ok

c:\windows\system32\printui.dll - Ok

c:\windows\system32\ntlanui2.dll - Ok

c:\windows\system32\diskcopy.dll - Ok

c:\windows\system32\shscrap.dll - Ok

c:\windows\system32\slayerxp.dll - Ok

c:\windows\system32\dssec.dll - Ok

>c:\windows\system32\deskmon.dll - packed by FLY-CODE

c:\windows\system32\deskmon.dll - Ok

c:\windows\system32\deskadp.dll - Ok

c:\windows\system32\docprop.dll - Ok

c:\windows\system32\rshx32.dll - Ok

c:\windows\system32\icmui.dll - Ok

c:\windows\system32\mmsys.cpl - Ok

c:\windows\system32\wiascr.dll - Ok

c:\program files\common files\microsoft shared\help\hxds.dll - Ok

c:\windows\system32\inetcomm.dll - Ok

c:\windows\system32\itss.dll - Ok

c:\windows\system32\msvidctl.dll - Ok

c:\windows\system32\mshtml.dll - Ok

c:\program files\common files\microsoft shared\office12\msoxmlmf.dll - Ok

c:\program files\citrix\ica client\icamimefilter.dll - Ok

c:\windows\system32\mscoree.dll - Ok

c:\windows\system32\rsvpsp.dll - Ok

c:\windows\system32\sclgntfy.dll - Ok

c:\windows\system32\ntsd.exe - Ok

c:\windows\microsoft.net\framework\v4.0.30319\wpf\wpffontcache_v0400.exe - Ok

c:\windows\system32\drivers\tap0901.sys - Ok

c:\program files\common files\adobe\switchboard\switchboard.exe - Ok

c:\program files\comcast\desktop doctor\bin\sprtsvc.exe - Ok

c:\windows\system32\drivers\pccsmcfd.sys - Ok

c:\program files\common files\microsoft shared\office12\odserv.exe - Ok

c:\program files\nvidia corporation\nvidia updatus\daemonu.exe - Ok

c:\program files\barracuda\network connector\bin\network-connectorserv.exe - Ok

c:\windows\system32\qagentrt.dll - Ok

c:\program files\microsoft office\office12\grooveauditservice.exe - Ok

>c:\program files\iolo\common\lib\ioloservicemanager.exe - packed by ASPACK

>>c:\program files\iolo\common\lib\ioloservicemanager.exe - packed by FLY-CODE

c:\program files\iolo\common\lib\ioloservicemanager.exe - Ok

c:\program files\common files\intuit\update service v4\intuitupdateservice.exe - Ok

c:\windows\system32\kmsvc.dll - Ok

c:\windows\system32\eapsvc.dll - Ok

c:\windows\system32\dot3svc.dll - Ok

c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe - Ok

c:\windows\system32\drivers\bvrpmpr5.sys - Ok

c:\windows\system32\drivers\ati2mtag.sys - Ok

c:\windows\system32\ati2sgag.exe - Ok

c:\windows\system32\ati2evxx.exe - Ok

c:\windows\system32\drivers\aswvmm.sys - Ok

c:\windows\microsoft.net\framework\v4.0.30319\aspnet_state.exe - Ok

c:\program files\common files\apple\mobile device support\applemobiledeviceservice.exe - Ok

c:\windows\system32\drivers\tcpip6.sys - Ok

c:\windows\system32\drivers\sptd.sys - Ok

c:\windows\system32\xmlprov.dll - Ok

c:\windows\system32\drivers\wudfrd.sys - Ok

c:\windows\system32\drivers\wstcodec.sys - Ok

c:\windows\system32\drivers\wpdusb.sys - Ok

>c:\program files\windows media player\wmpnetwk.exe is ZLIB container

c:\program files\windows media player\wmpnetwk.exe - container

c:\windows\system32\wbem\wmiapsrv.exe - Ok

c:\windows\system32\wbem\wmiaprpl.dll - Ok

c:\windows\system32\mspmsnsv.dll - Ok

c:\windows\system32\winsock.dll - Ok

c:\program files\windows defender\msmpeng.exe - Ok

>c:\windows\system32\drivers\wdf01000.sys - packed by FLY-CODE

c:\windows\system32\drivers\wdf01000.sys - Ok

c:\windows\system32\vssvc.exe - Ok

c:\windows\system32\drivers\viaide.sys - Ok

c:\windows\system32\drivers\viaagp.sys - Ok

c:\windows\system32\drivers\usbuhci.sys - Ok

c:\windows\system32\drivers\usbstor.sys - Ok

c:\windows\system32\drivers\usbscan.sys - Ok

c:\windows\system32\drivers\usbprint.sys - Ok

c:\windows\system32\drivers\usbccgp.sys - Ok

c:\windows\system32\drivers\usbaudio.sys - Ok

c:\windows\system32\drivers\usbaapl.sys - Ok

c:\windows\system32\ups.exe - Ok

c:\windows\system32\upnphost.dll - Ok

c:\windows\system32\drivers\ultra.sys - Ok

c:\windows\system32\drivers\udfs.sys - Ok

c:\windows\system32\tsddd.dll - Ok

c:\windows\system32\trkwks.dll - Ok

c:\windows\system32\drivers\toside.sys - Ok

c:\windows\system32\termsrv.dll - Ok

c:\windows\system32\drivers\tdtcp.sys - Ok

c:\windows\system32\drivers\tdpipe.sys - Ok

c:\windows\system32\smlogsvc.exe - Ok

c:\windows\system32\drivers\sym_u3.sys - Ok

c:\windows\system32\drivers\sym_hi.sys - Ok

c:\windows\system32\drivers\symc8xx.sys - Ok

c:\windows\system32\drivers\symc810.sys - Ok

c:\windows\system32\drivers\swmidi.sys - Ok

c:\windows\system32\drivers\streamip.sys - Ok

c:\windows\system32\drivers\capt905c.sys - Ok

c:\program files\common files\sony shared\avlib\sptisrv.exe - Ok

c:\windows\system32\drivers\splitter.sys - Ok

c:\windows\system32\drivers\sparrow.sys - Ok

c:\windows\system32\drivers\slip.sys - Ok

c:\windows\system32\drivers\sisagp.sys - Ok

c:\windows\system32\drivers\sfloppy.sys - Ok

c:\windows\system32\drivers\serial.sys - Ok

c:\windows\system32\drivers\serenum.sys - Ok

c:\windows\system32\drivers\secdrv.sys - Ok

c:\windows\system32\scardsvr.exe - Ok

c:\windows\system32\rsvp.exe - Ok

c:\windows\system32\locator.exe - Ok

c:\windows\system32\mprdim.dll - Ok

c:\windows\system32\sessmgr.exe - Ok

c:\windows\system32\drivers\rdpwd.sys - Ok

c:\windows\system32\drivers\rdpdr.sys - Ok

c:\windows\system32\rdpdd.dll - Ok

c:\windows\system32\rasauto.dll - Ok

c:\windows\system32\drivers\ql1280.sys - Ok

c:\windows\system32\drivers\ql1240.sys - Ok

c:\windows\system32\drivers\ql12160.sys - Ok

c:\windows\system32\drivers\ql10wnt.sys - Ok

c:\windows\system32\drivers\ql1080.sys - Ok

c:\windows\system32\drivers\processr.sys - Ok

c:\windows\system32\hpzipm12.dll - Ok

c:\windows\system32\perfproc.dll - Ok

c:\windows\system32\perfos.dll - Ok

c:\windows\system32\perfnet.dll - Ok

c:\windows\system32\perfdisk.dll - Ok

c:\windows\system32\drivers\perc2hib.sys - Ok

c:\windows\system32\drivers\perc2.sys - Ok

c:\windows\system32\drivers\pcmcia.sys - Ok

c:\windows\system32\drivers\parvdm.sys - Ok

c:\windows\system32\drivers\parport.sys - Ok

c:\program files\common files\sony shared\avlib\pacsptisvr.exe - Ok

c:\program files\common files\microsoft shared\source engine\ose.exe - Ok

c:\windows\system32\drivers\nwlnkfwd.sys - Ok

c:\windows\system32\drivers\nwlnkflt.sys - Ok

c:\windows\system32\drivers\nvraid.sys - Ok

c:\windows\system32\drivers\nvatabus.sys - Ok

c:\windows\system32\ntmssvc.dll - Ok

c:\program files\common files\ahead\lib\nmindexingservice.exe - Ok

c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe - Ok

c:\windows\system32\netdde.exe - Ok

c:\windows\system32\hpzinw12.dll - Ok

c:\windows\system32\drivers\ndisip.sys - Ok

c:\program files\nero\nero 7\nero backitup\nbservice.exe - Ok

c:\windows\system32\drivers\nabtsfec.sys - Ok

c:\windows\system32\drivers\mstee.sys - Ok

c:\windows\system32\drivers\mspqm.sys - Ok

c:\windows\system32\drivers\mspclock.sys - Ok

c:\windows\system32\drivers\mskssrv.sys - Ok

c:\windows\system32\msiexec.exe - Ok

c:\windows\system32\drivers\bridge.sys - Ok

c:\windows\system32\msdtc.exe - Ok

c:\program files\common files\sony shared\avlib\mscsptisrv.exe - Ok

c:\windows\system32\drivers\mraid35x.sys - Ok

c:\windows\system32\drivers\motmodem.sys - Ok

c:\windows\system32\mnmsrvc.exe - Ok

c:\windows\system32\mnmdd.dll - Ok

c:\windows\system32\msgsvc.dll - Ok

c:\windows\system32\lxducoms.exe - Ok

c:\windows\system32\spool\drivers\w32x86\3\\lxduserv.exe - Ok

c:\windows\system32\drivers\kmixer.sys - Ok

c:\program files\java\jre6\lib\deploy\jqs\jqs.conf - Ok

c:\program files\java\jre6\bin\jqs.exe - Ok

c:\windows\system32\drivers\irenum.sys - Ok

c:\program files\ipod\bin\ipodservice.exe - Ok

c:\windows\system32\drivers\ipinip.sys - Ok

c:\windows\system32\drivers\ipfltdrv.sys - Ok

c:\windows\system32\drivers\ip6fw.sys - Ok

c:\program files\common files\intuit\update service\intuitupdateservice.exe - Ok

c:\windows\system32\drivers\intelppm.sys - Ok

c:\windows\system32\drivers\intelide.sys - Ok

c:\windows\system32\drivers\ini910u.sys - Ok

c:\windows\system32\imapi.exe - Ok

c:\windows\system32\drivers\imagesrv.sys - Ok

c:\windows\system32\drivers\imagedrv.sys - Ok

c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe - Ok

c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe - Ok

c:\windows\system32\drivers\i8042prt.sys - Ok

c:\windows\system32\drivers\i2omp.sys - Ok

c:\windows\system32\drivers\hpzius12.sys - Ok

c:\windows\system32\drivers\hpzipr12.sys - Ok

c:\windows\system32\drivers\hpzid412.sys - Ok

c:\windows\system32\drivers\hpn.sys - Ok

c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe - Ok

c:\windows\system32\drivers\flpydisk.sys - Ok

c:\windows\system32\drivers\fdc.sys - Ok

c:\windows\system32\fxssvc.exe - Ok

c:\windows\system32\drivers\fastfat.sys - Ok

c:\windows\system32\ersvc.dll - Ok

c:\windows\system32\drivers\e100b325.sys - Ok

c:\program files\juniper networks\common files\dsncservice.exe - probably infected with DLOADER.Trojan

c:\program files\juniper networks\common files\dsncservice.exe - infected

c:\windows\system32\drivers\drmkaud.sys - Ok

c:\windows\system32\drivers\dpti2o.sys - Ok

c:\windows\system32\drivers\dne2000.sys - Ok

c:\windows\system32\drivers\dmusic.sys - Ok

c:\windows\system32\dmserver.dll - Ok

c:\windows\system32\drivers\dmload.sys - Ok

c:\windows\system32\drivers\dmio.sys - Ok

c:\windows\system32\drivers\dmboot.sys - Ok

c:\windows\system32\dmadmin.exe - Ok

c:\windows\system32\drivers\dac960nt.sys - Ok

c:\windows\system32\drivers\dac2w2k.sys - Ok

c:\windows\system32\drivers\cvirta.sys - Ok

c:\windows\system32\cshelper.exe - Ok

c:\windows\system32\drivers\cpqarray.sys - Ok

c:\windows\system32\drivers\co_mon.sys - Ok

c:\windows\system32\dllhost.exe - Ok

c:\windows\system32\drivers\cmdide.sys - Ok

c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe - Ok

kstmommy · March 30, 2013

OMG I'm sorry this log is SO huge. Looks like all my teenagers music is even showing up. How embarrassing, I'm sorry....

kstmommy · March 30, 2013

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\detach-1.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\detach-2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\digital.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\detach-3.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\douglas.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\dvi_pin.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\enerstar.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\english.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\exit.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\front.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\Gaming mode.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\front_00.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\front_01.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\f_audio.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\getacro1.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\front_90.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\icon-1.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\hg.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\icon-2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\holder.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ICONa.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ICONb.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\image mode_Select.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\image submenu VGA.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\image submenu video.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\image005.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\imageiconAdjust_H.GIF - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\images.jpg - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\input1.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\input2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\imgset.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\input4.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\input3.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\langicn.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\jap.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\langs2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\langs.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\menu.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\menu2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\mic.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\mnuicnsm.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\mic_a.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\mode.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\Multimedia mode.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\m_menu.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\m_menu3.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\m_menu1.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\m_menu2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\Nature mode.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\note.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\notice.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\o_htsm.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\o_hpsm.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\o_lcsm.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\o_lock.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\o_param.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\o_set.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\o_vpsm.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\pc-j.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\phasesm.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\pedestal.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\posicn.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\pl_mi.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\polish.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\pxlclksm.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\pwricnsm.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\remove-1.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\remove-2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\rear2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\reset01.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\side.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\reseticn.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\rotation.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\side2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\Sports mode.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\stand_d.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\step-1.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\step-10.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\step-3.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\step-2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\step-4.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\step-5.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\step-6.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\step-8.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\step-7.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\steven.jpg - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\step-9.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\stfca.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\stfcaa.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\stfcad.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\tco99.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\stfcd.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\tco03.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\Therter mode.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\usb_235.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\vcci.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\Thumbs.db - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\vdoani.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\vid_sel.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\zoom.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\clrset.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\au_on.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\bright.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\clrset2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\contrast.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\ddc_ci.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\langs.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\imgset.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\m_menu.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\m_menu1.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\m_menu2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\m_menu3.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\o-lock.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\o_lock.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\reset01.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\stfca.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\stfcaa.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\stfcad.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\stfcd.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\zoom.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\fr\Thumbs.db - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\au_on.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\bright.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\clrset.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\clrset2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\contrast.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\ddc_ci.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\imgset.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\langs.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\m_menu.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\m_menu1.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\m_menu2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\o-lock.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\m_menu3.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\o_lock.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\reset01.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\stfca.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\stfcaa.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\stfcad.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\stfcd.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\1.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\zoom.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ge\Thumbs.db - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\au_on.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\bright.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\clrset.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\clrset2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\contrast.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\ddc_ci.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\imgset.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\langs.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\m_menu.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\m_menu1.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\m_menu2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\o-lock.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\m_menu3.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\o_lock.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\reset01.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\stfca.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\stfcaa.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\stfcad.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\stfcd.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\zoom.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\ja\Thumbs.db - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\au_on.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\bright.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\clrset.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\clrset2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\contrast.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\ddc_ci.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\imgset.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\langs.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\m_menu.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\m_menu1.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\m_menu2.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\m_menu3.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\o-lock.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\o_lock.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\reset01.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\stfca.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\stfcad.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\stfcd.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\stfcaa.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\zoom.gif - Ok

C:\Documents and Settings\Mom\My Documents\ug_en\ug_en\graphics\sp\Thumbs.db - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\-PAXP-deijE.gif - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\-PAXP-deijE.gif:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\-rublrRP5s1.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\0i1YPu6OmZ0.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\0i1YPu6OmZ0.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\11.htm - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\1312775374855366286_1_5fcbe979.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\1312775374855366286_1_5fcbe979.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\161615_655552934_5641683_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\161186_100001973591661_3899779_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\11.htm:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\161186_100001973591661_3899779_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\161615_655552934_5641683_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\174473_1843192789_7535428_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\174473_1843192789_7535428_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\186037_100002324880429_2934886_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\186043_100000016935932_3503444_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\186037_100002324880429_2934886_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\186043_100000016935932_3503444_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\186086_1462515100_6554402_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\186086_1462515100_6554402_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\-rublrRP5s1.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\186980_100002156042489_4833822_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\186980_100002156042489_4833822_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\187586_1391005017_5516856_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\187478_1516590529_288019_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\187586_1391005017_5516856_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\187610_554188699_963900_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\187478_1516590529_288019_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\187610_554188699_963900_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\187671_100002409684470_4306949_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\187727_1618472622_3252971_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\187671_100002409684470_4306949_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\187727_1618472622_3252971_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\187741_700998619_2804394_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\187741_700998619_2804394_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\195343_100000004299767_7489888_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\195343_100000004299767_7489888_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\195614_505048982_628910_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\195614_505048982_628910_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\1xbEnWOvBF3.js:Zone.Identifier - Ok

>C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\1xbEnWOvBF3.js is JS-HTML container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\202991_1401438953_3715096_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\1xbEnWOvBF3.js - container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\202998_100002691099755_8072155_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\202997_100000672162897_4073718_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\202991_1401438953_3715096_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\202997_100000672162897_4073718_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\202998_100002691099755_8072155_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203034_1579421617_5147601_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203034_1579421617_5147601_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203070_100001107024013_6116680_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203129_1443176598_1223738_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203070_100001107024013_6116680_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203156_525457391_611480_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203167_100000060805824_8299883_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203129_1443176598_1223738_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203156_525457391_611480_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203167_100000060805824_8299883_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203229_100000256115298_628045_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203229_100000256115298_628045_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203241_100001486964502_4234607_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203241_100001486964502_4234607_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203243_100000419872204_6869778_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203247_100000409541615_4944675_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203247_100000409541615_4944675_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203243_100000419872204_6869778_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203285_100000204199712_877403_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203285_100000204199712_877403_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203288_100000529023678_6529821_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203301_1394887617_5728994_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203288_100000529023678_6529821_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203301_1394887617_5728994_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203415_1162455705_4364139_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203415_1162455705_4364139_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203432_100000251824606_3263611_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203432_100000251824606_3263611_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203451_1612430021_899143_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203451_1612430021_899143_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203458_1171310950_4977261_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203458_1171310950_4977261_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203611_110144809045338_2322501_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\203611_110144809045338_2322501_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211182_84395074332_2171870_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211182_84395074332_2171870_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211400_100000220508959_7706063_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211400_100000220508959_7706063_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211403_100001593527837_7765175_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211403_100001593527837_7765175_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211419_100000068329683_2577191_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211419_100000068329683_2577191_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211503_1815568656_7490587_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211515_1074595243_4771091_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211503_1815568656_7490587_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211515_1074595243_4771091_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211525_1173075495_6075753_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211525_1173075495_6075753_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211618_687402787_2605842_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211618_687402787_2605842_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211643_799550116_970345_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211665_1432760928_8078699_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211691_100001885090305_4884847_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211665_1432760928_8078699_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211643_799550116_970345_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211693_1115850446_7489565_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211693_1115850446_7489565_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211691_100001885090305_4884847_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211911_100000545131412_806484_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\211911_100000545131412_806484_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\223603_177755032296198_100001851060583_422507_5648838_s.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\223603_177755032296198_100001851060583_422507_5648838_s.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\23096_1404431211_8753_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\23096_1404431211_8753_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260727_100001503470031_2544177_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260727_100001503470031_2544177_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260928_1447808352_2328245_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260928_1447808352_2328245_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260935_1430663865_2667960_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260935_1430663865_2667960_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260952_1141000573_6435080_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260952_1141000573_6435080_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260962_100000643650529_2843904_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260962_100000643650529_2843904_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260965_100000717240268_4987725_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260965_100000717240268_4987725_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260969_546864828_4614864_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260969_546864828_4614864_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260982_100000658155268_2926139_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260982_100000658155268_2926139_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\261027_100000628097355_2273848_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260995_562232502_3002684_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\260995_562232502_3002684_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\261027_100000628097355_2273848_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\261175_142467255840844_5488674_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\261175_142467255840844_5488674_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\262587_162336213843007_100001998892897_324638_5265248_n.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\262587_162336213843007_100001998892897_324638_5265248_n.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273220_1360284370_7475507_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273220_1360284370_7475507_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273242_100000254280993_6290251_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273242_100000254280993_6290251_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273300_100001347236753_7183225_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273300_100001347236753_7183225_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273306_1695861470_1910136_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273306_1695861470_1910136_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273333_100000591438187_3627832_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273333_100000591438187_3627832_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273346_1661981066_872031_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273346_1661981066_872031_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273387_1290619800_4977019_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273387_1290619800_4977019_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273458_100000385159066_843097_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273458_100000385159066_843097_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273479_100002295878736_818752_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273489_100000741338160_5512492_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273479_100002295878736_818752_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273489_100000741338160_5512492_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273504_100002752338660_3005695_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273517_100001737242912_3587876_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273504_100002752338660_3005695_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273517_100001737242912_3587876_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273545_1501532441_1642223_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273575_1242647589_5588767_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273575_1242647589_5588767_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273545_1501532441_1642223_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273586_1393890394_7711241_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273586_1393890394_7711241_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273648_1663613938_3658938_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273648_1663613938_3658938_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273675_832656123_6005621_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273675_832656123_6005621_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273877_100001871362998_1751562_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274032_100000186237425_174195_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\273877_100001871362998_1751562_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274032_100000186237425_174195_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274043_1145064408_912101_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274043_1145064408_912101_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274068_100000112144282_7705950_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274068_100000112144282_7705950_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274098_100000118153194_805413_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274098_100000118153194_805413_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274142_100000970012842_7761606_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274142_100000970012842_7761606_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274166_100002164009842_1881649_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274166_100002164009842_1881649_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274182_100000230374609_6152868_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274202_100001998892897_125774_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274182_100000230374609_6152868_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274202_100001998892897_125774_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274221_1202437388_3213298_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274221_1202437388_3213298_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274232_1166987590_571906_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274232_1166987590_571906_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274242_1341261271_7752356_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274242_1341261271_7752356_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274283_690811027_4408182_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274283_690811027_4408182_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274526_100002577511949_6276585_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274526_100002577511949_6276585_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274573_1408658936_3134276_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274575_100001255692392_3524185_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274586_100000278566596_7776482_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274573_1408658936_3134276_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274595_1834994447_2906192_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274595_1834994447_2906192_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274575_100001255692392_3524185_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274586_100000278566596_7776482_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274801_1553867805_3132247_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274801_1553867805_3132247_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274812_100002000311311_1231708_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274812_100002000311311_1231708_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274828_100001311720916_3704613_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274828_100001311720916_3704613_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274881_100000746346313_6492871_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274881_100000746346313_6492871_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274913_100002537960047_2808297_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274948_1677407402_191018_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274913_100002537960047_2808297_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274948_1677407402_191018_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274969_1201809577_3843922_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274969_1201809577_3843922_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274971_100000212874173_7482468_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274971_100000212874173_7482468_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274984_1388516350_6024795_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275005_1389744880_4012971_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\274984_1388516350_6024795_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275005_1389744880_4012971_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275025_100002099569238_8197339_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275025_100002099569238_8197339_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275036_1551517187_6110571_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275036_1551517187_6110571_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275053_100002727764903_7908494_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275053_100002727764903_7908494_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275074_100000644594018_6281253_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275074_100000644594018_6281253_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275100_100000309789848_3556682_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275100_100000309789848_3556682_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275146_1707358205_3848274_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275146_1707358205_3848274_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275182_1272900715_1682552_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275182_1272900715_1682552_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275224_100000494011563_3189106_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275224_100000494011563_3189106_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275444_100000733733142_2980549_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275448_1466902006_3246514_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275444_100000733733142_2980549_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275448_1466902006_3246514_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275490_1218026706_6257703_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275490_1218026706_6257703_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275567_100001554950756_8224722_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275567_100001554950756_8224722_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275510_100000474084378_5011720_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275510_100000474084378_5011720_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275588_100000574046719_1891876_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275581_100000767602606_2662753_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275581_100000767602606_2662753_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275588_100000574046719_1891876_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275631_1838960791_7491457_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275631_1838960791_7491457_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275720_1370294081_2614973_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275720_1370294081_2614973_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275787_100000189223585_801980_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275787_100000189223585_801980_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275833_1702298600_1189820_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275833_1702298600_1189820_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275866_100001251587524_6436921_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275866_100001251587524_6436921_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275875_100001398905184_85482_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275875_100001398905184_85482_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275876_100000656820219_7949434_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275876_100000656820219_7949434_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275905_1822241533_6791786_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275905_1822241533_6791786_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275986_100000012276454_5591670_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\275986_100000012276454_5591670_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276004_100002739584920_7528570_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276004_100002739584920_7528570_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276004_1519628158_2859891_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276004_1519628158_2859891_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276007_1663710366_5795728_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276007_1663710366_5795728_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276029_712525849_5210943_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276048_100000568895110_829348_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276140_1599896561_139793_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276048_100000568895110_829348_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276029_712525849_5210943_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276140_1599896561_139793_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276186_1279990598_3590274_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276186_1279990598_3590274_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276203_100000157363330_5530442_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276203_100000157363330_5530442_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276229_748872718_5961994_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276229_748872718_5961994_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276255_1459953928_6160192_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276255_1459953928_6160192_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276267_100000461456861_1988918_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276267_100000461456861_1988918_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276293_100000808134119_1669015_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276347_100000742553864_528011_q.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\277121_129834150442308_516087_s.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276293_100000808134119_1669015_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\276347_100000742553864_528011_q.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\277121_129834150442308_516087_s.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\293252_2201647408358_1462515100_32415171_1315855_s.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\293252_2201647408358_1462515100_32415171_1315855_s.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\294732_2201647008348_1462515100_32415169_3666292_s.jpg - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\294732_2201647008348_1462515100_32415169_3666292_s.jpg:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\2p1GVwLpsud.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\2P56uV0mJPN.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\2P56uV0mJPN.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\2p1GVwLpsud.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\3QzsdSgy0gG.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\4UX3rYN_hcQ.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\3QzsdSgy0gG.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\4UX3rYN_hcQ.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\7E9DFh78ir7.js:Zone.Identifier - Ok

>C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\7phT2ydMzW6.js is JS-HTML container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\7phT2ydMzW6.js - container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\990JObUHZtN.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\ai(1).htm - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\ai(1).htm:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\990JObUHZtN.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\7phT2ydMzW6.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\ai.htm - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\ai.htm:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\app_1_256799621935_2089.gif - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\app_1_256799621935_2089.gif:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\app_2_256799621935_1837.gif - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\app_2_8109791468_3791.gif - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\app_2_106548749379931_718.gif:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\app_2_106548749379931_718.gif - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\app_2_256799621935_1837.gif:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\app_2_8109791468_3791.gif:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\app_full_proxy.php - Ok

>C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\aXmtBlv9XYz.js is JS-HTML container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\aXmtBlv9XYz.js - container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\7E9DFh78ir7.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\app_full_proxy.php:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\aXmtBlv9XYz.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\BawGDULIRtU.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\BawGDULIRtU.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\CSxyt5OIq4R.js:Zone.Identifier - Ok

>C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\cZ_HGTM0vqb.js is JS-HTML container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\cZ_HGTM0vqb.js - container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\cZ_HGTM0vqb.js:Zone.Identifier - Ok

kstmommy · March 30, 2013

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\dBNzZ9AtCWo.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\CSxyt5OIq4R.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\dBNzZ9AtCWo.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\dxOyUY4T4BR.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\E00idKOIFMb.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\f9JHuD7OTbc.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\f9JHuD7OTbc.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\dxOyUY4T4BR.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\E00idKOIFMb.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\fLiM0DKnx2t.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\fLiM0DKnx2t.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\G1JWkdBvnnd.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\GsNJNwuI-UM.gif - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\G-VhVw5zOWF.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\GsNJNwuI-UM.gif:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\G1JWkdBvnnd.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\G-VhVw5zOWF.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\gvrW9GGxv2y.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\Gx3euZDvNOe.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\J-KVwovL42j.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\J-KVwovL42j.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\J1SytM86ibz.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\Gx3euZDvNOe.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\gvrW9GGxv2y.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\J1SytM86ibz.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\KPGxj5VxuoM.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\JKQSEcToESS.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\KPGxj5VxuoM.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\L8yUExs-fkD.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\mVJg8S3A2Rm.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\L8yUExs-fkD.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\rotH3uaAMoy.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\rotH3uaAMoy.js:Zone.Identifier - Ok

>C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\Sp2IUK7A8Z2.js is JS-HTML container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\Sp2IUK7A8Z2.js - container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\JKQSEcToESS.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\Sp2IUK7A8Z2.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\mVJg8S3A2Rm.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\T6cbLf9xS-k.js:Zone.Identifier - Ok

>C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\T6cbLf9xS-k.js is JS-HTML container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\T6cbLf9xS-k.js - container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\Thumbs.db:encryptable - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\Thumbs.db - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\U-hWvICPM7_.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\vIpx6O3T-P_.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\wQ6daFs36J_.css:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\vIpx6O3T-P_.css - Ok

>C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\xrEeXUiCo9E.js is JS-HTML container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\xrEeXUiCo9E.js - container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\xrEeXUiCo9E.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\y-2LR9eyI1L.gif - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\wQ6daFs36J_.css - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\y-2LR9eyI1L.gif:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\yCyTimbRkBE.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\yCyTimbRkBE.js - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\yXawyQUDusn.js - Ok

>C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\U-hWvICPM7_.js is JS-HTML container

>C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\ZtRW1eq5Wy5.js is JS-HTML container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\ZtRW1eq5Wy5.js - container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\U-hWvICPM7_.js - container

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\yXawyQUDusn.js:Zone.Identifier - Ok

C:\Documents and Settings\Mom\My Documents\zzzzzzzzzzzzzzzzzzzzz_files\ZtRW1eq5Wy5.js:Zone.Identifier - Ok

Total 34924887651 bytes in 19989 files scanned (33986 objects)

Total 19963 files (33953 objects) are clean

Total 2 files are infected

Total 1 file (2 objects) are suspicious

Total 27 files (29 objects) are raised error condition

Scan time is 00:24:53.015

-----------------------------------------------------------------------------

Start curing

-----------------------------------------------------------------------------

c:\program files\juniper networks\common files\dsncservice.exe - quarantined, reboot required

C:\Documents and Settings\Mom\My Documents\Downloads\aro2011_uc.exe - incurable, quarantined

C:\Documents and Settings\Mom\My Documents\Downloads\iLividSetupV1.exe - quarantined

Total 34924887651 bytes in 19989 files scanned (33986 objects)

Total 19963 files (33953 objects) are clean

Total 2 files are infected

Total 1 file (2 objects) are suspicious

Total 3 files are neutralized

Total 27 files (29 objects) are raised error condition

Scan time is 00:24:53.015

=============================================================================

Dr.Web Scanner SE for Windows v8.1.0.03270

Scan session started 2013/03/29 20:09:10

Module location : c:\documents and settings\mom\local settings\temp\B0D9FF50-8076B36C-90BA7310-1300DCEC\

=============================================================================

OPTION [Automatic Apply Actions] NO

OPTION [Turn Off Computer After Scan] NO

OPTION [use Sound Alerts] NO

OPTION [block Network] NO

OPTION [Protect Process] NO

OPTION [Protect Raw Disk] NO

Using language: "English"

Available instances: 6

Instances used: 6

Platform: Windows XP Home x86 (Build 2600), Service Pack 3

API Version: 2.2

Scanning Engine version: 8.0.2.12140

Virus Finding Engine version: 7.0.4.9250

Total 104 virus bases are loaded from c:\documents and settings\mom\local settings\temp\B0D9FF50-8076B36C-90BA7310-1300DCEC