Wont go away after scan

2»

Comments

  • edited April 2005
    no those directories dont exist,
    ok here is the new and hopefully clean hijack log
    :), thx!!!

    Logfile of HijackThis v1.99.1
    Scan saved at 7:27:33 AM, on 4/11/2005
    Platform: Windows 2000 SP4 (WinNT 5.00.2195)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINNT\system32\spoolsv.exe
    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    C:\WINNT\System32\cisvc.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\system32\hidserv.exe
    C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\AdvTools\NPROTECT.EXE
    C:\WINNT\system32\nvsvc32.exe
    C:\WINNT\system32\regsvc.exe
    C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\SAVScan.exe
    C:\WINNT\system32\MSTask.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINNT\Explorer.EXE
    C:\WINNT\System32\WBEM\WinMgmt.exe
    C:\WINNT\system32\MsPMSPSv.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\Program Files\Yahoo!\browser\ybrwicon.exe
    C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    C:\PROGRA~1\Yahoo!\browser\ycommon.exe
    C:\Program Files\BroadJump\Client Foundation\CFD.exe
    C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    D:\valve\steam\steam.exe
    C:\WINNT\system32\rundll32.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\AIM\AIM95_c1\AIM95_c0\aim.exe
    C:\WINNT\System32\cidaemon.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Yahoo!\Messenger\ypager.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Documents and Settings\Administrator\Desktop\hijackthis_199\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aomi.info
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sbc.yahoo.com/dsl
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Yahoo!
    O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\ycomp5_5_7_0.dll
    O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [YBrowser] C:\Program Files\Yahoo!\browser\ybrwicon.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
    O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\NORTON~1\AdvTools\ADVCHK.EXE
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
    O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKCU\..\Run: [Steam] "d:\valve\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\spydoctor.exe" /Q
    O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Device Detector 2.lnk = C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\SourceTec\Sothink SWF Quicker\InternetExplorer.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\AIM95_c1\AIM95_c1\aim.exe
    O9 - Extra button: SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\SourceTec\Sothink SWF Quicker\InternetExplorer.htm
    O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\SourceTec\Sothink SWF Quicker\InternetExplorer.htm
    O14 - IERESET.INF: START_PAGE_URL=http://www.yahoo.com
    O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab28578.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab28578.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
    O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
    O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (AxisCamControl) - http://64.107.170.80/AxisCamControl.ocx
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab28578.cab
    O16 - DPF: {BAB3E70B-A847-4A88-ACFC-778FCCC00287} (CActSetupObj Object) - http://www.odysseusmarketing.com/actsetup.cab
    O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} (PhotosCtrl Class) - http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab
    O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} - http://guard.gunbound.net/nProtect/keyCrypt/npkcx.cab
    O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab
    O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab28578.cab
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
    O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\navapsvc.exe
    O23 - Service: npkcsvc - INCA Internet Co., Ltd. - C:\WINNT\system32\npkcsvc.exe
    O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\AdvTools\NPROTECT.EXE
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
  • Buckeye_SamBuckeye_Sam Columbus, Ohio
    edited April 2005
    Your log looks clean. Are you having any problems? How does it feel?
  • edited April 2005
    well it feels great, really great, but my norton said it found a file that cant be deleted, cuz it brings me to a screen askin me if i want to exclude it and i just press skip
    so in the final summary, it tells me that 0 files have been deleted and the file remains
    this is what it says:

    The file C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll is a Adware threat
    how do i get rid of it??


    also, my mouse moves by itself when i use it, and the webpage scolls up and down often, i know it isnt me because im trying to read the page, and i see my mouse move around whenever i try to click on a button, do u know what that is caused by??

    well thx a lot, i really appreciate ur help!
  • Buckeye_SamBuckeye_Sam Columbus, Ohio
    edited April 2005
    Do you still have Weatherbug installed? If so, uninstall it through Add/Remove programs. Then you can delete this directory.

    C:\Program Files\AWS


    Are you using a wireless mouse? If so, you can get that when the batteries run low.
  • edited April 2005
    the weather bug isnt shown on the add/remove, but the file exist
    so i just went ahead and deleted it

    and no i dont have a wireless mouse
    but even if i did, that wouldnt explain why the page is scrolling by itself? :confused:
    this is really wierd
    thx guys for the help!
  • Buckeye_SamBuckeye_Sam Columbus, Ohio
    edited April 2005
    Is your Norton firewall enabled?
  • edited April 2005
    yes i do have the firewall enabled, and i made sure the DMZ wasnt on
  • Buckeye_SamBuckeye_Sam Columbus, Ohio
    edited April 2005
    Please download and run this tool.

    http://www.mwti.net/antivirus/mwav.asp


    It should create a log of any malware that it finds. Please post that log.
  • edited April 2005
    ok here is the log

    File System Found infected by "ameopt Spyware/Adware" Virus. Action Taken: No Action Taken.
    File System Found infected by "Narrator Spyware/Adware" Virus. Action Taken: No Action Taken.
  • Buckeye_SamBuckeye_Sam Columbus, Ohio
    edited April 2005
    Please download FindQoologic from here:
    http://forums.net-integration.net/index.php?act=Attach&type=post&id=134981
    Save it to the desktop and run Find-Qoologic2.bat. This will generate a log file; please post the entire contents of the log file here for me to see.
  • edited April 2005
    here is the FindQoologic log
    seems kinda empty


    PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
    »»»»»»»»»»»»»»»»»»»»»»»» Files found »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
  • Buckeye_SamBuckeye_Sam Columbus, Ohio
    edited April 2005
    Are you sure you are letting the batch file finish? It should take about five minutes and the log will open up automatically when it's done.

    You can also look in the Find-Qoologic folder for file.txt. That should be your complete log file if they program ran completely.
  • edited April 2005
    oh sorry about that
    here it is

    PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
    »»»»»»»»»»»»»»»»»»»»»»»» Files found »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


    »»»»»»»»»»»»»»»»»»»»»»»» startup files»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


    »»»»»»»»»»»»»»»»»»»»»»»» Checking Global Startup »»»»»»»»»»»»»»»»»»»»»»

    (fstarts by IMM - test ver. 0.001) NOT using address check -- 0x77f85ba9

    Global Startup:
    C:\Documents and Settings\All Users\Start Menu\Programs\Startup
    .
    ..
    Adobe Gamma Loader.lnk
    Device Detector 2.lnk
    Microsoft Office.lnk

    User Startup:
    C:\Documents and Settings\Administrator\Start Menu\Programs\Startup
    .
    ..

    »»»»»»»»»»»»»»»»»»»»»»»» Registry Entries Found »»»»»»»»»»»»»»»»»»»»»»»

    »»»»»»»»»»»»»»»»»»»»»»»»» Active setup »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    "Find activesetup", version1, launched at: 07:40
    Operating System: Windows 2000


    HKLM\Software\Microsoft\Active Setup\Installed Components\
    ">{22d6f312-b0f6-11d0-94ab-0080c74c7e95}\(Default)" = "Windows Media Player"
    \StubPath = "C:\WINNT\inf\unregmp2.exe /ShowWMP" [MS]
  • Buckeye_SamBuckeye_Sam Columbus, Ohio
    edited April 2005
    OK, nothing there. That's good.

    Let's try one more.

    Please download RootKitRevealer from here:
    http://www.sysinternals.com/files/rootkitrevealer.zip
    Unzip it to the desktop, run it, and click Scan. This will take a while, so be patient. This will generate a log file; please post the entire contents of the log file here for me to see.
  • edited April 2005
    HKLM\SOFTWARE\Apple Computer, Inc.\QuickTime\Installed Files\¼®¡f 9/27/2003 6:16 PM 0 bytes Key name contains embedded nulls (*)
    C:\RECYCLER\NPROTECT\00000230.exe:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000231.exe:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000233.odl:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000237.gif:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/11/2005 10:07 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000238.dll:KAVICHS 4/11/2005 10:07 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000240.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000241.DLL:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000242.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000243.DLL:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000245.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000246.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000247.dll:KAVICHS 4/11/2005 10:07 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000248.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000250.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000251.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000252.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000254.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000255.DLL:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000256.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000257.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000258.DLL:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000259.DLL:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000260.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000263.dll:KAVICHS 4/11/2005 10:07 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000265.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000266.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000267.DLL:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000281.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000282.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000284.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000285.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000286.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000287.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000288.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000289.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000290.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000291.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000293.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000294.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000295.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000298.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000299.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000300.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000302.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000303.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000304.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000305.lst:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000306.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000309.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000310.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000311.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000312.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000313.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000314.GIF:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/11/2005 10:07 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000316.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000321.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000322.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000324.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000326.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000327.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000328.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000330.odl:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000334.gif:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/11/2005 10:07 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000335.dll:KAVICHS 4/11/2005 10:07 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000337.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000338.DLL:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000339.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000340.DLL:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000342.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000343.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000344.dll:KAVICHS 4/11/2005 10:07 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000345.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000347.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000348.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000349.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000351.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000352.DLL:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000353.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000354.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000355.DLL:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000356.DLL:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000357.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000360.dll:KAVICHS 4/11/2005 10:07 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000362.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000363.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000364.DLL:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000377.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000378.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000380.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000381.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000382.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000383.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000384.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000385.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000386.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000387.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000389.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000390.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000391.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000394.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000395.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000396.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000398.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000399.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000400.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000401.lst:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000402.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000405.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000406.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000407.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000408.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000409.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000410.GIF:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/11/2005 10:07 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000412.ocm:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000417.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000418.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000419.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000421.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000422.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000423.dll:KAVICHS 4/11/2005 10:07 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000705.exe:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000707.odl:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000711.gif:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/12/2005 10:42 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000712.dll:KAVICHS 4/12/2005 10:42 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000714.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000715.DLL:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000716.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000717.DLL:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000719.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000720.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000721.dll:KAVICHS 4/12/2005 10:42 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000722.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000724.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000725.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000726.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000728.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000729.DLL:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000730.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000731.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000732.DLL:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000733.DLL:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000734.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000737.dll:KAVICHS 4/12/2005 10:42 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000739.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000740.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000741.DLL:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000754.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000755.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000757.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000758.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000759.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000760.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000761.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000762.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000763.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000764.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000766.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000767.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000768.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000771.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000772.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000773.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000775.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000776.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000777.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000778.lst:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000779.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000782.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000783.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000784.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000785.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000786.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000787.GIF:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/12/2005 10:42 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000789.ocm:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000794.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000795.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000796.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000798.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000799.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000800.dll:KAVICHS 4/12/2005 10:42 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000925.exe:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000927.odl:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000931.gif:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/12/2005 10:57 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000932.dll:KAVICHS 4/12/2005 10:57 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000934.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000935.DLL:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000936.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000937.DLL:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000939.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000940.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000941.dll:KAVICHS 4/12/2005 10:57 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000942.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000944.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000945.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000946.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000948.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000949.DLL:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000950.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000951.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000952.DLL:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000953.DLL:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000954.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000957.dll:KAVICHS 4/12/2005 10:57 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000959.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000960.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000961.DLL:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000974.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000975.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000977.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000978.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000979.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000980.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000981.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000982.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000983.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000984.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000986.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000987.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000988.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000991.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000992.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000993.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000995.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000996.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000997.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000998.lst:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00000999.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001002.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001003.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001004.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001005.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001006.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001007.GIF:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/12/2005 10:57 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001009.ocm:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001014.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001015.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001016.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001018.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001019.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001020.dll:KAVICHS 4/12/2005 10:57 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00001391.sol:KAVICHS 4/13/2005 6:28 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009920.exe:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009922.odl:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009926.gif:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/14/2005 10:27 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009927.dll:KAVICHS 4/14/2005 10:27 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009929.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009930.DLL:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009931.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009932.DLL:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009934.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009935.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009936.dll:KAVICHS 4/14/2005 10:27 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009937.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009939.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009940.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009941.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009943.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009944.DLL:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009945.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009946.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009947.DLL:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009948.DLL:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009949.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009952.dll:KAVICHS 4/14/2005 10:27 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009954.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009955.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009956.DLL:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009969.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009970.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009972.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009973.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009974.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009975.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009976.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009977.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009978.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009979.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009981.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009982.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009983.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009986.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009987.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009988.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009990.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009991.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009992.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009993.lst:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009994.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009997.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009998.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00009999.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010000.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010001.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010002.GIF:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/14/2005 10:27 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010004.ocm:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010009.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010010.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010011.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010013.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010014.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010015.dll:KAVICHS 4/14/2005 10:27 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010144.exe:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010146.odl:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010150.gif:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/14/2005 10:34 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010151.dll:KAVICHS 4/14/2005 10:34 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010153.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010154.DLL:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010155.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010156.DLL:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010158.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010159.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010160.dll:KAVICHS 4/14/2005 10:34 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010161.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010163.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010164.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010165.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010167.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010168.DLL:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010169.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010170.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010171.DLL:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010172.DLL:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010173.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010176.dll:KAVICHS 4/14/2005 10:34 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010178.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010179.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010180.DLL:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010193.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010194.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010196.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010197.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010198.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010199.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010200.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010201.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010202.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010203.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010205.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010206.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010207.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010210.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010211.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010212.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010214.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010215.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010216.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010217.lst:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010218.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010221.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010222.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010223.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010224.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010225.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010226.GIF:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/14/2005 10:34 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010228.ocm:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010233.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010234.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010235.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010237.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010238.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010239.dll:KAVICHS 4/14/2005 10:34 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010373.exe:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010375.odl:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010379.gif:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/14/2005 10:48 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010380.dll:KAVICHS 4/14/2005 10:48 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010382.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010383.DLL:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010384.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010385.DLL:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010387.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010388.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010389.dll:KAVICHS 4/14/2005 10:48 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010390.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010392.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010393.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010394.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010396.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010397.DLL:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010398.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010399.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010400.DLL:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010401.DLL:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010402.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010405.dll:KAVICHS 4/14/2005 10:48 PM 68 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010407.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010408.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010409.DLL:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010422.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010423.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010425.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010426.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010427.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010428.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010429.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010430.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010431.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010432.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010434.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010435.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010436.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010439.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010440.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010441.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010443.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010444.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010445.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010446.lst:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010447.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010450.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010451.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010452.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010453.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010454.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010455.GIF:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} 4/14/2005 10:48 PM 0 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010457.ocm:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010462.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010463.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010464.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010466.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010467.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\RECYCLER\NPROTECT\00010468.dll:KAVICHS 4/14/2005 10:48 PM 36 bytes Hidden from Windows API.
    C:\System Volume Information\catalog.wci\CiCL0001.000:KAVICHS 3/28/2005 11:17 PM 36 bytes Hidden from Windows API.
    C:\System Volume Information\catalog.wci\CiSL0001.000:KAVICHS 3/28/2005 11:17 PM 36 bytes Hidden from Windows API.
    C:\System Volume Information\catalog.wci\INDEX.000:KAVICHS 3/28/2005 11:17 PM 36 bytes Hidden from Windows API.
  • Buckeye_SamBuckeye_Sam Columbus, Ohio
    edited April 2005
    OK, not much there either. You need to empty your Norton protected files.

    Flush your system restore, this will delete any restore points that you have but it will also make sure that any malware hiding in system restore will be booted off.

    Turn off System Restore:

    On the Desktop, right-click My Computer.
    Click Properties.
    Click the System Restore tab.
    Check Turn off System Restore.
    Click Apply, and then click OK.

    Restart your computer, turn it back on and create a restore point.

    To create a restore point:

    Single-click Start and point to All Programs.
    Mouse over Accessories, then System Tools, and select System Restore.
    In the System Restore wizard, select the box next the text labeled "Create a
    restore point" and click the Next button.

    Type a description for your new restore point. Something like "After
    cleanup". Click Create and you're done.



    Please post a new hijackthis log.
  • edited April 2005
    lol, i dont have system restore cuz i have windows2000

    Logfile of HijackThis v1.99.1
    Scan saved at 11:27:47 PM, on 4/15/2005
    Platform: Windows 2000 SP4 (WinNT 5.00.2195)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINNT\system32\spoolsv.exe
    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    C:\WINNT\System32\cisvc.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\system32\hidserv.exe
    C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\AdvTools\NPROTECT.EXE
    C:\WINNT\system32\nvsvc32.exe
    C:\WINNT\system32\regsvc.exe
    C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\SAVScan.exe
    C:\WINNT\system32\MSTask.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINNT\System32\WBEM\WinMgmt.exe
    C:\WINNT\system32\MsPMSPSv.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\Explorer.EXE
    C:\Program Files\Yahoo!\browser\ybrwicon.exe
    C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    C:\PROGRA~1\Yahoo!\browser\ycommon.exe
    C:\Program Files\BroadJump\Client Foundation\CFD.exe
    C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    D:\valve\steam\steam.exe
    C:\WINNT\system32\rundll32.exe
    C:\WINNT\System32\cidaemon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\AIM\AIM95_c1\AIM95_c0\aim.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Yahoo!\Messenger\ypager.exe
    C:\Documents and Settings\Administrator\Desktop\hijackthis_199\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aomi.info
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sbc.yahoo.com/dsl
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Yahoo!
    O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\ycomp5_5_7_0.dll
    O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [YBrowser] C:\Program Files\Yahoo!\browser\ybrwicon.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
    O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\NORTON~1\AdvTools\ADVCHK.EXE
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
    O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKCU\..\Run: [Steam] "d:\valve\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Device Detector 2.lnk = C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\SourceTec\Sothink SWF Quicker\InternetExplorer.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\AIM95_c1\AIM95_c1\aim.exe (file missing)
    O9 - Extra button: SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\SourceTec\Sothink SWF Quicker\InternetExplorer.htm
    O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\SourceTec\Sothink SWF Quicker\InternetExplorer.htm
    O14 - IERESET.INF: START_PAGE_URL=http://www.yahoo.com
    O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab28578.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab28578.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
    O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
    O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (AxisCamControl) - http://64.107.170.80/AxisCamControl.ocx
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab28578.cab
    O16 - DPF: {BAB3E70B-A847-4A88-ACFC-778FCCC00287} (CActSetupObj Object) - http://www.odysseusmarketing.com/actsetup.cab
    O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} (PhotosCtrl Class) - http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab
    O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} - http://guard.gunbound.net/nProtect/keyCrypt/npkcx.cab
    O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab
    O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab28578.cab
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
    O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\navapsvc.exe
    O23 - Service: npkcsvc - INCA Internet Co., Ltd. - C:\WINNT\system32\npkcsvc.exe
    O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\AdvTools\NPROTECT.EXE
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
  • Buckeye_SamBuckeye_Sam Columbus, Ohio
    edited April 2005
    Well I think we have eliminated the malware from your system. If you are still having problems with your mouse there's a couple things that I would suggest.

    1. Reload your driver.

    2. If that doesn't resolve it, pop in your Windows disc, click Start -> Run -> (type) sfc /scannow
    It's possible that the infection that you had corrupted some of your system files and they may need to be replaced.
  • edited April 2005
    how do i reload my driver??
    do i uninstall it from the control panel, and restart my computer??
    is it plug and play?
  • Buckeye_SamBuckeye_Sam Columbus, Ohio
    edited April 2005
    Go to Control Panel -> System and then click on the Devices tab. Look down the list for your mouse. Once you find it, right click and select Properties. There should be a driver tab and then a button to reload the driver. Just follow the prompts.
  • edited April 2005
    ok that fixed the mouse problem,
    but i have one last problem, both my cd drives keep on unpluggin by themselves, and i cant seem to keep it "in"
    like, ill try to burn a cd and right in the middle, 2 windows would come up saying that both my cd drives have been disconnected or unplugged, i would have to open up my computer, unplug it, replug it and then try the process all over again, only to get the same message

    ive already tried to uninstall it, and i reinstall the drivers, still same problem?

    any ideas??

    thx a lot guys
  • Buckeye_SamBuckeye_Sam Columbus, Ohio
    edited April 2005
    I would recommend posting that question in the hardware forum. Could be any number of things, but I'm not the best one to advise you on it.
  • edited April 2005
    oh, ok well thx for all the help u have given me,
    u guys are genius's! :D
This discussion has been closed.