New HJT log, Kaspersky and Panda attached

stacy3

Hey there - here are my new scans - thanks for taking the time to look them over...

Stacy

Hijack this:

Logfile of HijackThis v1.99.1
Scan saved at 4:46:38 PM, on 10/30/06
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Folding@Home\winFAH.exe
C:\Program Files\Folding@Home\FahCore_78.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] "C:\Program Files\Norton Internet Security\UrlLstCk.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Folding@Home 5.03.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O15 - Trusted Zone: http://home.comcast.net
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://photo.walmart.com/photo/uploads/FujifilmUploadClient.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Companion) - http://us.dl1.yimg.com/download.yahoo.com/dl/toolbar/my/yiebio5_0_2_7.cab
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

stacy3

Panda scan:


Incident Status Location

Adware:Adware/Lop Not disinfected C:\Documents and Settings\All Users\Documents\backup\file1092488730.dl_
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt[.adrevolver.com/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt[.apmebf.com/]
Spyware:Cookie/360i Not disinfected C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt[.ct.360i.com/]
Spyware:Cookie/did-it Not disinfected C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt[.did-it.com/]
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt[.go.com/]
Spyware:Cookie/Maxserving Not disinfected C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt[.maxserving.com/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt[.realmedia.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Maxserving Not disinfected C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\Stacy\cookies.txt[.maxserving.com/]
Possible Virus. Not disinfected C:\Documents and Settings\Stacy\My Documents\Electron Microscope\EMCalc.exe
Potentially unwanted tool:Application/FunWeb Not disinfected C:\Documents and Settings\Stacy\My Documents\HijackThis Folder\backups\backup-20040813-133059-686.inf
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt[.adrevolver.com/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt[.apmebf.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt[.atwola.com/]
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt[.belnk.com/]
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt[.go.com/]
Spyware:Cookie/Maxserving Not disinfected C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt[.maxserving.com/]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt[.target.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt[searchportal.information.com/]
Adware:Adware/Lop Not disinfected C:\RECYCLER\S-1-5-21-3341562259-1085806099-568186159-500\Dc3\coal ping knob.exe.tcf
Potentially unwanted tool:Application/Processor Not disinfected C:\WINDOWS\SYSTEM32\Process.exe
Possible Virus. Not disinfected C:\WINDOWS\SYSTEM32\swsc.exe

stacy3

Kaspersky 1:

---

KASPERSKY ONLINE SCANNER REPORT
October 30, 2006 4:45:23 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 30/10/2006
Kaspersky Anti-Virus database records: 236469

---

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
G:\

Scan Statistics:
Total number of scanned objects: 85238
Number of viruses found: 4
Number of infected objects: 5 / 0
Number of suspicious objects: 0
Duration of the scan process: 01:32:03

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Confid.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Content.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Privacy.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Restrict.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\WebHist.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\HPPAppActivity.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\HPPHomePageActivity.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2006-10-30_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\15895E1A.vw7 Infected: not-a-virus:AdWare.Win32.180Solutions.as skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4727194A.exe Infected: not-a-virus:AdWare.Win32.Lop.ag skipped
C:\Documents and Settings\All Users\Documents\backup\file1092488730.dl_ Infected: Trojan-Downloader.Win32.Swizzor.fg skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Stacy\Application Data\Symantec\PendingAlertsQueue.log Object is locked skipped
C:\Documents and Settings\Stacy\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Stacy\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Stacy\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Stacy\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Stacy\Local Settings\History\History.IE5\MSHist012006103020061031\index.dat Object is locked skipped
C:\Documents and Settings\Stacy\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Stacy\ntuser.dat Object is locked skipped
C:\Documents and Settings\Stacy\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\AntiSpam\Log\Spam.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDALRT.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDCON.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDDBG.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDFW.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDIDS.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDSYS.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBConfig.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBDebug.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBDetect.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBNotify.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBRefr.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetCfg.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetCfg2.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetDev.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetLoc.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetUsr.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMNot.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMReg.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMRSt.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBStHash.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBStMSI.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBValid.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPPolicy.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPStart.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPStop.log Object is locked skipped
C:\Program Files\Folding@Home\FAHlog.txt Object is locked skipped
C:\Program Files\Folding@Home\work\logfile_00.txt Object is locked skipped
C:\Program Files\Folding@Home\work\wudata_00.arc Object is locked skipped
C:\Program Files\Folding@Home\work\wudata_00.bed Object is locked skipped
C:\Program Files\Folding@Home\work\wudata_00.goe Object is locked skipped
C:\Program Files\Folding@Home\work\wudata_00.log Object is locked skipped
C:\Program Files\Folding@Home\work\wudata_00.sas Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVApp.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVError.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVVirus.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Savrt\0706NAV~.TMP Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Savrt\0820NAV~.TMP Object is locked skipped
C:\RECYCLER\S-1-5-21-3341562259-1085806099-568186159-500\Dc3\coal ping knob.exe.tcf Infected: Trojan-Downloader.Win32.Swizzor.fg skipped
C:\System Volume Information\_restore{11B4CBB0-31B0-483C-A4FE-D6E9E8C1A928}\RP725\A0162300.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{11B4CBB0-31B0-483C-A4FE-D6E9E8C1A928}\RP727\change.log Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\1394bus.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\61883.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\6to4svc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\access.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\accessor.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\accwiz.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\acgenral.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\aclayers.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\aclua.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\aclui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\acpi.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\acspecfc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\activeds.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\actmovie.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\actshell.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\actxprxy.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\acverfyr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\acxtrnal.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\adcjavas.inc Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\adcvbs.inc Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\admin.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\admin.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\admparse.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\adojavas.inc Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\adovbs.inc Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\adsldp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\adsldpc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\adsmsext.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\adsnt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\advapi32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\advpack.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\aec.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\afd.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\agentanm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\agentctl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\agentdp2.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\agentmpx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\agentpsh.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\agentsr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\agentsvr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\agp440.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\agpcpq.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\agtctl15.tlb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\agtintl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\agtscrpt.js Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ahui.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\alg.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\alim1541.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\alrsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\amdagp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\amdk6.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\amdk7.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\amstream.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\apphelp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\apphelp.sdb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\apph_sp.sdb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\apps.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\apps_sp.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\appwiz.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\arial.ttf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\arialbd.ttf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\arp1394.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\asctrls.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\asferror.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\asfsipc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\asycfilt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\at.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atapi.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ati2dvaa.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ati2dvag.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ati2mtaa.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ati2mtag.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ati3d1ag.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ati3d2ag.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atiixpaa.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atiixpag.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atinbtxx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atinmdxx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atinpdxx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atinraxx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atinrvxx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atinsnxx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atinttxx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atintuxx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atinxbxx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atinxsxx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atiradn1.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ativdaxx.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ativmvxx.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atixpwdm.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atm.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atmadm.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atmarpc.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atmfd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atmlane.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\atmlib.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\au.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\audiosrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\author.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\author.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\authz.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\autochk.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\autoconv.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\autofmt.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\autolfn.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\avc.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\avifil32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\basesrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\basesrv.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\batmeter.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\batt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\bda.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\bidispl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\biosinfo.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\bitsprx2.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\bitsprx3.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\bridge.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\browselc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\browser.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\browseui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\browseui.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\browsewm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cabinet.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cabview.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\callcont.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\callcont.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\camocx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\catsrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\catsrvps.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\catsrvut.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\catsrvut.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ccdecode.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cdfs.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cdfview.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cdm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cdosys.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\certcli.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\certmgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cewmdm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cfgbkend.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cfgmgr32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cfgwiz.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\chajei.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cimwin32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cimwin32.mfl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cimwin32.mof Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cintime.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cintsetp.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ciodm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ciodm.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cisvc.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\classpnp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\clbcatex.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\clbcatq.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cleanmgr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cliconfg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cliconfg.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cliconfg.rll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\clipbrd.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\clipsrv.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\clusapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cmbatt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cmcfg32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cmd.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cmdial32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cmdl32.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cmmon32.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cmprops.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cmstp.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cmutil.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cnbjmon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\colbact.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\comadmin.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\comadmin.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\comdlg32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\comexp.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\comic.ttf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\compact.wmz Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\compatui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\compstui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\comrepl.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\comres.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\comsvcs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\comsvcs.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\comuid.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\conf.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\confmrsl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\conime.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\connected_data.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\connected_fr.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\connected_multiple.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\connected_networks.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\connected_wizard.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\corpol.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cpanel.chq Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cplexe.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cpu.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\credui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\crusoe.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\crypt32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\crypt32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cryptdlg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cryptdll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cryptext.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cryptnet.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cryptui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cryptui.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cscdll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cscript.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\cscui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\csrsrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\csrss.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\custsat.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\d3d8.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\d3d8thk.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\d3dim700.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\danim.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dao360.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dataclen.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dataspec.xml Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\datetime.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\davclnt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\daxctle.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dayi.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dbghelp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dbmsrpcn.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dbnetlib.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dbnetlib.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dbnmpntw.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dcache.bin Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dcap32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dciman32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ddeshare.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ddrawex.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\default.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\defltwk.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\defrag.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\desk.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\devenum.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\devmgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\devxprop.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dfrgfat.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dfrgntfs.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dfrgsnap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dfrgui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dfsshlex.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dgnet.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dhcpcsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dhtmled.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dialer.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\diantz.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\digest.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dinput.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dinput8.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\directdb.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\disk.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\diskdump.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\diskpart.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dlimport.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dllhost.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmadmin.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmband.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmboot.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmcompos.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmdskmgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmime.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmio.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmloader.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmremote.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmscript.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmserver.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmstyle.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmsynth.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmusic.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmusic.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dmutil.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dnsapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dnsrslvr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\docprop2.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dosx.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpcdll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dplaysvr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dplayx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpmodemx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpnaddr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpnet.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpnhpast.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpnhupnp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpnlobby.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpnsvr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpup.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpvacm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpvoice.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpvsetup.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpvvox.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpwsockx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dpwsockx.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\drm.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\drmclien.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\drmk.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\drmkaud.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\drmstor.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\drmv2clt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\drprov.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\drvindex.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\drvmain.sdb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ds32gt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dsdmo.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dsdmoprp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dshowext.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dskquota.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dskquoui.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dsound.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dsound3d.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dsprop.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dsprpres.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dsquery.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dssec.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dssenh.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dsuiext.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dswave.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dtsgnup.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dumprep.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\duser.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dvdupgrd.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dwup.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dwwin.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dx7vb.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dx8vb.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dxdiag.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dxdiag.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dxg.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dxmasf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dxmrtp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dxtmsft.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\dxtrans.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\els.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\encapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\encdec.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\error.js Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ersvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\es.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\es.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\esent.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\esscli.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\eudcedit.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\evconcepts.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\evntrprv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\explorer.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\expsrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\expsrv.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\extrac32.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fastfat.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fastprox.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\faultrep.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\faxpatch.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fdc.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\feclient.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\filefold.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\filelist.xml Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\filelist.xml.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\filemgmt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\file_srv.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\findstr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fldrclnr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fldrclnr.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\flpydisk.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fontext.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fontview.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\footer.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp4.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp40ext.cab Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp40ext.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp40ext.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp4amsft.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp4anscp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp4apws.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp4areg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp4atxt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp4autl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp4autl.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp4avnb.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp4avss.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp4awebs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp4awel.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp98sadm.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fp98swin.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fpadmcgi.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fpadmdll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fpcount.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fpencode.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fpexedll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fpmmc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fpmmcsat.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fpremadm.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fpsrvadm.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\framebuf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\framedyn.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ftp.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxsapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxsclnt.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxscomex.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxscover.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxsdrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxsext32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxsocm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxsocm.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxsperf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxsres.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxsst.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxssvc.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxst30.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxstiff.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxsui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxswzrd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\fxsxp32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\gameenum.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\gckernel.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\gdi32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\gdi32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\glu32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\gpkrsrc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\grpconv.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\guitrn.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\guitrn_a.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\h323.tsp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\h323cc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\h323msp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hal.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hal.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\halaacpi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\halacpi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\halapic.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\halmacpi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\halmps.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hardware.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hccoin.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hccoin.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hdwwiz.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\helpctr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\helpctr.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\helpsvc.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hh.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hh.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hhctrl.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hhctrl.ocx.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hhsetup.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hhsetup.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hid.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hidclass.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hiddigi.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hidir.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hidparse.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hidphone.tsp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hidserv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hidserv.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hmmapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hnetcfg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hnetwiz.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\homepage.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hotplug.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\howto.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hschelp.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hscupd.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hscupd.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hscxpsp1.cab Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\htui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\hypertrm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i2omgmt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i2omp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i8042prt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xdnt5.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xnt5.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xnt5.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xwfp0.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xwfp1.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xwfp2.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xwfp3.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xwfp4.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xwtv0.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xwtv1.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xwtv2.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xwtv3.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\i81xwtv4.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iac25_32.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iasrad.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icaapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iccvid.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icm32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icm32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icmp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iconlib.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ics.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icwconn.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icwconn1.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icwconn2.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icwdial.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icwdl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icwhelp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icwphbk.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icwrmind.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\icwutil.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\idq.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ie.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ie4uinit.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ieaccess.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ieakeng.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ieaksie.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iedkcs32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iepeers.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iepeers.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iernonce.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iesetup.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ieuinit.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iexplore.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iexplore.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iexpress.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ifmon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\igmpagnt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iis.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ils.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imaadp32.acm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imagehlp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imapi.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imapi.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imekr61.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imekrcic.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imeshare.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imgutil.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjp81.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjp81k.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjpcd.dic Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjpcic.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjpcus.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjpdct.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjpdct.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjpdsvr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjpinst.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjpmig.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjprw.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjputy.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imjputyc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\imm32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ims.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ims.inf Object is locked skipped

stacy3

Kaspersky 2:

C:\WINDOWS\$NtServicePackUninstall$\inetcfg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\inetcomm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\inetcomm.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\inetcpl.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\inetmib1.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\inetpp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\inetppui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\inetpref.xml Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\inetres.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\inetwiz.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\infrared.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\initpki.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\input.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\input.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\input.hlp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\input.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\inseng.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\inseng.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\instcat.sql Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\intelide.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\intl.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\intl.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipconf.tsp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipconfig.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iphlpapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipinip.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipnat.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipnathlp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipnathlp.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ippromon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_0002.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_0004.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_0005.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_0006.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_0007.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_0008.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_0009.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_0010.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_0011.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_0012.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_0014.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_0016.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipp_util.inc Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipsecconcepts.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipsecsnp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipsecsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipsink.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipsmsnap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipv6.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipv6.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipv6mon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ipxroute.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ir41_32.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ir41_qc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ir41_qcx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ir50_32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ir50_qc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ir50_qcx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\irenum.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\irmon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\isign32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\isrdbg32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\itircl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\itircl.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\itss.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\itss.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iuctl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iuengine.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ivfsrc.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ixsso.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\iyuv_32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\joy.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\jscript.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\jsproxy.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb810217.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb821557.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb823182.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb823559.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb823980.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb824105.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb824141.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb824146.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb825119.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb828028.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb828035.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb828741.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb833987.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb835732.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb837001.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb839643.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb839645.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb840315.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb840374.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb840987.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb841356.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb841533.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb841873.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb842773.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb867282-ie6sp1-20050127.163319.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb871250.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb873376.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb883357.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb883939-ie6sp1-20050428.125228.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb889293-ie6sp1-20041111.235619.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb890923-ie6sp1-20050225.103456.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb891711.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb896426.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb896727-ie6sp1-20050719.165959.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kb897715-oe6sp1-20050503.210336.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kbdclass.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kd1394.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kerberos.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kerberos.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\keyboard.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\keymgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kmddsp.tsp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kmixer.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\krnl386.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\krnlprov.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ks.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ks.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kscaptur.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ksecdd.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ksfilter.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ksproxy.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kstvtune.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ksuser.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\kswdmcap.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ksxbar.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\l3codeca.acm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\langbar.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\laprxy.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\layout.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\lclmm.xml Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\licdll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\license.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\licmgr10.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\licwmi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\linkinfo.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\lmhsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\lmrt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\loadperf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\locale.nls Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\localsec.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\localspl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\localui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\locator.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\log.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\logagent.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\logon.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\logonui.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\lpk.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\lprhelp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\lsasrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\lsasrv.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\lsass.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ltmdmnt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ltotape.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\luna.msstyles Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\luna.mst Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\machine.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\magnify.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\makecab.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mcastmib.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mchgr.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mciavi32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mciqtz32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mciseq.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mciwave.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mdac.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mdminst.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mdmirmdm.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\medctrro.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\memstpci.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mf.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mf3216.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mfc42.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mfc42u.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mfcsubs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mgmtapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\micross.ttf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\midimap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\migapp.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\migip.dun Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\migism.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\migism.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\migism_a.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\miglibnt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\migload.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\migrate.js Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\migsys.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\miguser.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\migwiz.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\migwiz.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\migwiz.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\migwiz_a.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\miniime.tpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\misc.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\miscp.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mlang.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mmc.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mmcbase.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mmcndmgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mmcshext.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mmfutil.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mmsys.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mmsystem.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mnmdd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mnmsrvc.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mobsync.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mobsync.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mode.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\modem.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\modemui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mofcomp.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mofd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\moricons.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mouclass.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mountmgr.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\moviemk.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\moviemk.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\moviemk.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mp43dmod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mp4sdmod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mpe.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mpg2splt.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mpg4dmod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mpg4dmod.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mpg4ds32.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mplay32.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mplayer2.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mplayer2.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mpr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mprapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mrxdav.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mrxsmb.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mrxsmb.sys.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msacm32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadce.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadcer.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadcf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadcfr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadco.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadcor.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadcs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadds.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadds32.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msaddsr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msader15.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msado15.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msado20.tlb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msado21.tlb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msado25.tlb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msado26.tlb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadomd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msador15.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadox.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadp32.acm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msadrh15.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msafd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msapsspc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msasn1.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msaud32.acm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mscandui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mscms.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mscms.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msconf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msconfig.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mscpx32r.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mscpxl32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msctf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msctfime.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msctfp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdadc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdaenum.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdaer.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdaipp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdaora.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdaorar.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdaosp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdaprsr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdaprst.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdaps.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdarem.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdaremr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdart.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdart.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdasc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdasql.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdasqlr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdatl3.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdatsrc.tlb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdatt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdaurl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdfmap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdmo.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdtc.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdtclog.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdtcprx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdtcprx.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdtctm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdtcuiu.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdxm.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdxm.ocx.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msdxmlc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msexch40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msexch40.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msexcl40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msexcl40.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msfs.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msftedit.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msgina.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msgina.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msgpc.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msgr3en.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msgrocm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msgsc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msgslang.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msgsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msh261.drv Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msh263.drv Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mshdc.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mshta.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mshtml.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mshtml.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mshtml.tlb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mshtmled.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mshtmler.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msident.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msidle.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msieftp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msiexec.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msihnd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msimain.sdb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msimg32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msimn.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msimn.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msimtf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msinfo.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msinfo32.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msjet40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msjet40.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msjetol1.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msjint40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msjro.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msjter40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msjtes40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msjtes40.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mskssrv.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mslbui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msltus40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msltus40.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mslwvtts.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msmsgs.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msmsgs.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msmsgs.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msmsgs.inf.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msnetmtg.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msnetobj.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msnmsn.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msnsspc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msobcomm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msobdl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msobe.isp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msobmain.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msobshel.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msobshel.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msobweb.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msoe.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msoe.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msoe.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msoe50.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msoeacct.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msoeacct.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msoeres.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msoert2.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msoert2.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msorc32r.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msorcl32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mspaint.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mspatcha.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mspbde40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mspbde40.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mspclock.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mspmsp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mspmspsv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mspqm.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msprivs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msrating.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msrating.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msrd2x40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msrd2x40.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msrd3x40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msrdp.cab Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msrdp.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msrepl40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msrepl40.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msrle32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mssap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msscds32.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msscp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msscript.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mst120.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mst120.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mst123.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstape.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstask.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstask.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstask.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstee.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstext40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstext40.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstime.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstinit.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstinit.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstlsapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstsc.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstsc.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstscax.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mstsweb.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msutb.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msv1_0.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msvbvm60.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msvcirt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msvcp60.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msvcrt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msvcrt40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msvfw32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msvidctl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msw3prt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mswdat10.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mswebdvd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mswsock.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mswstr10.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msxactps.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msxbde40.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msxbde40.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msxml.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msxml2.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msxml3.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\msyuv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mtxclu.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mtxoci.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\muisetup.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\multimed.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mup.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mutohpen.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mydocs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\mymusic.inf Object is locked skipped

stacy3

Kaspersky 3:

C:\WINDOWS\$NtServicePackUninstall$\nabtsfec.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nabtsfec.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nac.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\narrator.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ncobjapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ncprov.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nddeapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nddeapir.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nddenb32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nddenb32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ndis.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ndisip.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ndisip.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ndisnpp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ndisuio.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ndiswan.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ndptsp.tsp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\net.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\net1.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netac300.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netapi32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netapi32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netbeac.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netbios.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netbt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netbt.sys.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netcfg.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netcfgx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netdde.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netdde.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netid.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netip6.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netman.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netmeet.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netmscli.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netoc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netoc.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netplwiz.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netrap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netrass.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netrtsnt.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netsetup.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netsh.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netshell.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netstat.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nettcpip.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nettun.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netui0.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netui1.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netupnph.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\network.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\netwzc.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\newdev.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\newdev.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nic1394.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nlhtml.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nmas.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nmasnt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nmchat.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nmcom.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nmcom.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nmft.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nmmkcert.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nmnt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nmoldwb.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nmwb.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\notepad.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\npdrmv2.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\npdrmv2.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\npdsplay.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\npfs.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nppagent.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\npptools.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\npwmsdrm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\npwmsdrm.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nslookup.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nt5.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nt5inf.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntchowto.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntdef.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntdetect.com Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntdll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntdll.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntdsapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntevt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntfs.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntio.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntkrnlmp.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntkrnlmp.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntkrpamp.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntkrpamp.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntlanman.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntldr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntlsapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntmarta.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntmsapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntmsdba.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntmsmgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntmssvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntoc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntprint.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntprint.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntprint.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntshrui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntvdm.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntvdm.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nusrmgr.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nusrmgr.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nv4_disp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nv4_disp.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nv4_mini.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nvct.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nvdm.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nvts.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nwlnkipx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\nwprovau.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oakley.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\obeip.dun Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\objsel.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\occache.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ocgen.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ocmsn.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbc32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbc32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbc32gt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbcad32.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbcbcp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbcbcp.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbcconf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbcconf.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbcconf.rsp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbccp32.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbccp32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbccp32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbccr32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbccu32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbcint.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbcji32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbcjt32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbcp32r.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odbctrac.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oddbse32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odexl32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odfox32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odpdx32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\odtext32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oeaccess.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oeimport.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oemig50.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oemiglib.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\offfilt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ohci1394.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ole32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ole32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oleaut32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oledb32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oledb32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oledb32r.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oleprn.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\olepro32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oobe.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oobebaln.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oobeutil.js Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\opengl32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\oschoice.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\osk.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\osk.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\osloader.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\osloader.ntd Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\osuninst.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\p3.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\packager.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\page1.asp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\parport.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\password.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pautoenr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pchealth.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pchshell.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pchshell.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pchsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pci.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pciidex.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pcmcia.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pdh.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\perfctrs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\perfdisk.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\perfmon.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\perfos.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\perfproc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\perm2.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\perm2dll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\perm3.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\perm3dd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\phon.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\phone.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\photowiz.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pid.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pidgen.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pinball.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ping.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pintlgnt.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pjlmon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pngfilt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pngfilt.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pnpscsi.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\polstore.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\portcls.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\powercfg.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\powrprof.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ppa3.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\printing.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\printui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\processr.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\proctexe.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\profmap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\progman.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\proquota.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\provthrd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ps5ui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\psapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\psbase.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\psched.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pscript5.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pstorec.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\pstorsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ptpusd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q323255.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q328310.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q329048.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q329115.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q329170.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q329390.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q329441.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q329834.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q331953.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q810565.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q810577.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q810833.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q811493.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q811630.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q814033.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q815021.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q817287.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q817606.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q819696.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\q828026.cat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\qcap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\qdv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\qdvd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\qedit.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\qedwipes.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\qmgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\qmgr.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\qmgr.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\qmgrprxy.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\qmgrprxy.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\qprocess.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\quartz.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\quartz.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\query.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\query.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\quick.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\racpldlg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ramdisk.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ramdisk.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rasadhlp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rasapi32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rasauto.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\raschap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rasdlg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rasl2tp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rasman.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rasmans.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rasphone.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rasppp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\raspppoe.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\raspptp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\raspptp.sys.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rassapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rastapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rastls.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rcbdyctl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rcimlby.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rcp.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rdbss.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rdbss.sys.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rdchost.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rdpclip.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rdpdd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rdpdr.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rdpsnd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rdpwd.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rdpwd.sys.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rdpwsx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rdsaddin.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rdshost.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\redbook.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\redir.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\reg.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\regapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\regedit.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\regopt.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\regsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\regsvr32.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\regwizc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\related.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\remasst.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\remotepg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\remotesp.tsp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\repdrvfs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\resutils.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\revert.wmz Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rexec.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\riched20.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rndismp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\romanime.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rpcrt4.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rpcrt4.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rrcm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rsaenh.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rsh.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rshx32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rsmps.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rstrui.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rtcdll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rtcshare.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rtipxmib.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rtutils.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\rundll32.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\runonce.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\s3nb.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\safemode.htt Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\safe_better.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\safe_easier.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\safe_faster.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\safe_fr.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\safrcdlg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\safrdm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\safrslv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\samlib.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\samsrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sapi.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\savedump.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sbe.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sbeio.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sbp2port.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\scarddlg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\scardsvr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sccsccp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\scecli.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sceregvl.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\scesrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\schannel.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\schannel.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\schedsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\schedsvc.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sclgntfy.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\scrcons.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\script.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\script_a.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\scrnsave.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\scrobj.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\scrrun.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\scsi.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\scsiport.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sdbinst.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\seclogon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\secrecs.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\secupd.dat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\secupd.sig Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\secur32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\security.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sendcmsg.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sendcmsg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sendmail.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sens.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sensapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\serenum.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\serial.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\servdeps.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\services.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sessmgr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sethc.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\setup.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\setup50.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\setupapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\setupqry.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\setup_wm.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sfc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sfcfiles.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sfc_os.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sfloppy.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shdoclc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shdocvw.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shdocvw.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shell.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shell32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shell32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shfolder.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shgina.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shimeng.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shimgvw.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shlwapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shlwapi.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shl_img.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shmedia.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shmgrate.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shrpubw.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shscrap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shsvcs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shsvcs.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shtml.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shtml.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shutdown.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sigtab.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sigverif.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\simpdata.tlb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sisagp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\skeys.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\skins.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\slayerxp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\slbcsp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\slbiop.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\slip.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\slip.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sl_anet.acm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smartcrd.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smbali.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smbbatt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smbclass.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smi2smir.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smlogcfg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smlogsvc.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smss.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smtpsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sndrec32.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sniffpol.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmp.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmpapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmpcl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmpincl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmpsmir.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmpsnap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmpthrd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\softkbd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sonydcam.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sorttbls.nls Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\spgrmr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\spider.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\splitter.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\spoolss.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\spoolsv.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sptip.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqloledb.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqloledb.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqloledb.rll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqlsrv32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqlsrv32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqlsrv32.rll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqlunirl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqlxmlx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqlxmlx.rll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sr.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srchctls.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srchui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srclient.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srrstr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srrstr.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srv.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srvsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sr_ui.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ss3dfo.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssbezier.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssdpapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssdpsrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssflwbox.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssmarque.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssmypics.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssmyst.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sspipes.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssstars.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sstext3d.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sstub.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_control.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_desktop.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_ending.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_files.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_fr.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_icons.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_menu.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_taskbar.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_windows.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\stdprov.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sti.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\stimon.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sti_ci.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\stobject.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\storprop.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\stream.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\streamip.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\streamip.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\strmdll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\stub_fpsrvadm.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\stub_fpsrvwin.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\svchost.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\swenum.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\swflash.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\swflash.inf.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sxs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sxs.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\synceng.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\syncui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysaudio.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysdm.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysfiles.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysmain.sdb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysmain.sdb.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysmod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysmod_a.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysmon.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysoc.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysocmgr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysrestore.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\syssetup.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\syssetup.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sys_srv.chm Object is locked skipped

stacy3

Kaspersky 4: (end)

C:\WINDOWS\$NtServicePackUninstall$\t2embed.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tahoma.ttf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tahomabd.ttf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tape.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tape.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tapi3.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tapi32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tapisrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tapisrv.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\taskmgr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpip6.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpmib.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpmon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpmon.ini Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpmonui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcptest.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcptsat.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tdc.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tdi.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tdpipe.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tdtcp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\telnet.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\telnet.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\termdd.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\termmgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\termsrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tffsport.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\themeui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\timedate.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\times.ttf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\timesbd.ttf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tintlgnt.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tip.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tourstart.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tracert.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\triedit.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\trkwks.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tscfgwmi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tscfgwmi.mfl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tscfgwmi.mof Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tscupgrd.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tsddd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tshoot.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tsoc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tsoc.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tsweb1.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tunmp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\twain_32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\txflog.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\udfs.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\udhisapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ulib.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\umandlg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\umpnpmgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\umpnpmgr.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unicdime.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unidrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unidrvui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\uniime.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unimdm.tsp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unimdmat.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\uniplat.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unlock_built.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unlock_fr.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unlock_optimized.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unlock_playing.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unregmp2.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\untfs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\update.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\uploadm.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\upnp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\upnpcont.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\upnphost.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\upnpui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ups.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\url.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\urlmon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\urlmon.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usb8023.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbaudio.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbccgp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbehci.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbehci.sys.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbhub.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbintel.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbmon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbohci.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbport.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbport.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbprint.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbscan.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbstor.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbuhci.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\user32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\user32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\useract.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\userenv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\userinit.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usmtdef.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usp10.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\utilman.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\uxtheme.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vbajet32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vbisurf.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vbscript.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vdmdbg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vdmredir.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\version.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vfwwdm32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vga.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vgx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\viaagp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\viaide.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\videoprt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\viewprov.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\voicepad.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\voicesub.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\volsnap.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vssapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vssvc.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\w32time.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\w95upgnt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wab.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wab32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wab32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wab32res.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wabfind.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wabimp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wabmig.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wacompen.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wadv01nt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wadv02nt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wadv05nt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wanarp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\watchdog.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\watv01nt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\watv02nt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\watv03nt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\watv04nt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemcntl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemcomn.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemcons.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemcore.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemdisp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemess.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemperf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemprox.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemtest.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemupgd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wch7xxnt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wdigest.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wdmaud.drv Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wdmaud.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\webcheck.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\webclnt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\webclnt.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\webfldrs.msi Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\webpub.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\webvw.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\welcome.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wextract.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\whatnewp.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\whatsnew.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiaacmgr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiadefui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiadss.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiascr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiaservc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiashext.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiavideo.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\win32k.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\win32k.sys.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\win32spl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\win32spl.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winar30.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winbrand.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\windows.chq Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winhlp32.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winhttp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winhttp.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winime.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wininet.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wininet.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winipsec.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winmm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winntbbu.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winrnr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winscard.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winspool.drv Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winsrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winsrv.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winsta.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wintrust.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winver.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wkssvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wldap32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wlnotify.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmaccess.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmadmod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmadmoe.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmasf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmdm.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmfsdk.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiadap.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiapres.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiaprpl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiapsrv.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmicookr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmidcprv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmipcima.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmipdskq.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmipiprt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmipjobj.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiprov.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiprvsd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiprvse.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmipsess.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmisvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiutils.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmnetmgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmp.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmp.inf.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmp.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmpcd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmpcore.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmplayer.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmploc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmpns.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmpocm.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmpshell.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmpui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmsdmod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmsdmoe.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmstream.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmv8ds32.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmvcore.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmvdmod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmvds32.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wordpad.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wordpad.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wordpad.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wow32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wow32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wpabaln.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wpnpinst.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ws2help.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wscript.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wshcon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wshext.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wship6.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wshom.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wshrm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wshtcpip.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wsiintxx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wsnmp32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wsock32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wstcodec.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wstcodec.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wstdecod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wtsapi32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wuau.adm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wuau.adm.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wuauclt.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wuaueng.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wuauhelp.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wuauhelp.chm.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wuauserv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wvchntxx.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wzcdlg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wzcsapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wzcsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xactsrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xcopy.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xenroll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xolehlp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xpob2res.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xpsp1res.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xpsp2res.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xpsp2res.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\zipfldr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\zipfldr.dll.000 Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{03BF9AD5-897D-44D2-BE5C-D3378F5400C7}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\SYSTEM32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\SYSTEM32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\AppEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SecEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SysEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\H323LOG.TXT Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\WIADEBUG.LOG Object is locked skipped
C:\WINDOWS\WIASERVC.LOG Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

Trogan

Hi Stacy! Can you do the following please...

Find and Delete the following folder:

C:\Documents and Settings\All Users\Documents\backup << this folder

I would like to see another log from HijackThis.

• Run Hijackthis.
• Click on Open the Misc Tools section.
• Check the two white boxes next to Generate StartupList log
• Now, click on Generate StartupList log
• Press YES at the confirmation box
• Copy and paste the entire contents of Notepad here

stacy3

Hi there again, Trogan.

Here is the first part of the log:

StartupList report, 11/01/06, 8:42:22 AM
StartupList version: 1.52.2
Started from : C:\Program Files\Hijackthis\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options
* Including empty and uninteresting sections
* Showing rarely important sections
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Folding@Home\winFAH.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Folding@Home\FahCore_82.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Hijackthis\HijackThis.exe

---

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\Stacy\Start Menu\Programs\Startup]
Folding@Home 5.03.lnk = ?

Shell folders AltStartup:
*Folder not found*

User shell folders Startup:
*Folder not found*

User shell folders AltStartup:
*Folder not found*

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
*No files*

Shell folders Common AltStartup:
*Folder not found*

User shell folders Common Startup:
*Folder not found*

User shell folders Alternate Common Startup:
*Folder not found*

---

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

[HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

[HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
*Registry value not found*

[HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

HPDJ Taskbar Utility = C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
HPHUPD05 = C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
ccApp = "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
URLLSTCK.exe = "C:\Program Files\Norton Internet Security\UrlLstCk.exe"
SunJavaUpdateSched = "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
!AVG Anti-Spyware = "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce

*No values found*

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

*No values found*

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

*No values found*

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

*Registry key not found*

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MSMSGS = "C:\Program Files\Messenger\msmsgs.exe" /background

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce

*Registry key not found*

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

*Registry key not found*

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

*No values found*

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

*Registry key not found*

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run

*Registry key not found*

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run

*Registry key not found*

---

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

[OptionalComponents]
*No values found*

---

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
*No subkeys found*

---

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
*No subkeys found*

---

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
*No subkeys found*

---

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*Registry key not found*

---

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
*No subkeys found*

---

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
*Registry key not found*

---

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
*Registry key not found*

---

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
*No subkeys found*

---

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*Registry key not found*

---

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run
*Registry key not found*

---

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run
*Registry key not found*

---

File association entry for .EXE:
HKEY_CLASSES_ROOT\exefile\shell\open\command

(Default) = "%1" %*

---

File association entry for .COM:
HKEY_CLASSES_ROOT\comfile\shell\open\command

(Default) = "%1" %*

---

File association entry for .BAT:
HKEY_CLASSES_ROOT\batfile\shell\open\command

(Default) = "%1" %*

---

File association entry for .PIF:
HKEY_CLASSES_ROOT\piffile\shell\open\command

(Default) = "%1" %*

---

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = "%1" /S

---

File association entry for .HTA:
HKEY_CLASSES_ROOT\htafile\shell\open\command

(Default) = C:\WINDOWS\System32\mshta.exe "%1" %*

---

File association entry for .TXT:
HKEY_CLASSES_ROOT\txtfile\shell\open\command

(Default) = %SystemRoot%\system32\NOTEPAD.EXE %1

---

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)

[>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP

[>{26923b43-4d38-484f-9b9e-de460746276c}] *
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE

[>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] *
StubPath = RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

[>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] *
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

[{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] *
StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

[{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

[{4b218e3e-bc98-4770-93d3-2731b9329278}] *
StubPath = %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection MarketplaceLinkInstall 896 %systemroot%\inf\ie.inf

[{5945c046-1e7d-11d1-bc44-00c04fd912be}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

[{6BF52A52-394A-11d3-B153-00C04F79FAA6}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub

[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

[{89820200-ECBD-11cf-8B85-00AA005B4340}] *
StubPath = regsvr32.exe /s /n /i:U shell32.dll

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = %SystemRoot%\system32\ie4uinit.exe

---

Enumerating ICQ Agent Autostart apps:
HKCU\Software\Mirabilis\ICQ\Agent\Apps

*Registry key not found*

---

Load/Run keys from C:\WINDOWS\WIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=

---

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\System32\sstext3d.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry value not found*

---

stacy3

And here is the rest! Thank you!!!!!!

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present
C:\WINDOWS\Fonts\Explorer.exe: not present

---

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

---

Verifying REGEDIT.EXE integrity:

- Regedit.exe found in C:\WINDOWS
- .reg open command is normal (regedit.exe %1)
- Company name OK: 'Microsoft Corporation'
- Original filename OK: 'REGEDIT.EXE'
- File description: 'Registry Editor'

Registry check passed

---

Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll - {02478D38-C3F9-4efb-9B51-7695ECA05670}
(no name) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
(no name) - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
Norton Internet Security 2006 - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll - {9ECB9560-04F9-4bbc-943D-298DDF1699E1}
NAV Helper - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD}
(no name) - C:\Program Files\Microsoft Money\System\mnyviewer.dll - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC}

---

Enumerating Task Scheduler jobs:

Disk Cleanup.job
HP DArC Task #Hewlett-Packard#7200#CN3862C21CI5.job
HP Usg Daily.job
Norton AntiVirus - Run Full System Scan - Stacy.job

---

Enumerating Download Program Files:

[Microsoft XML Parser for Java]
CODEBASE = file://C:\WINDOWS\Java\classes\xmldso.cab
OSD = C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd

[QuickTime Object]
InProcServer32 = C:\Program Files\QuickTime\QTPlugin.ocx
CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab

[CKAVWebScan Object]
InProcServer32 = C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
CODEBASE = http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\SYSTEM32\Macromed\Director\SwDir.dll
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab

[LSSupCtl Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\LSSupCtl.dll
CODEBASE = http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab

[Trend Micro ActiveX Scan Agent 6.5]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\Housecall_ActiveX.dll
CODEBASE = http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab

[YInstStarter Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\yinsthelper.dll
CODEBASE = http://download.yahoo.com/dl/installs/yinst.cab

[{33564D57-9980-0010-8000-00AA00389B71}]
CODEBASE = http://codecs.microsoft.com/codecs/i386/wmv9dmo.cab

[{3451DEDE-631F-421C-8127-FD793AFC6CC8}]
CODEBASE = http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab

[Office Update Installation Engine]
InProcServer32 = C:\WINDOWS\opuc.dll
CODEBASE = http://office.microsoft.com/officeupdate/content/opuc.cab

[Symantec SmartIssue]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\tgctlsi.dll
CODEBASE = http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab

[Symantec Script Runner Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\tgctlsr.dll
CODEBASE = http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab

[Java Plug-in 1.5.0_09]
InProcServer32 = C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
CODEBASE = http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab

[ActiveScan Installer Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\asinst.dll
CODEBASE = http://acs.pandasoftware.com/activescan/as5free/asinst.cab

[FujifilmUploader Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\FujifilmUploadClient.dll
CODEBASE = http://photo.walmart.com/photo/uploads/FujifilmUploadClient.cab

[Java Plug-in 1.5.0_09]
InProcServer32 = C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
CODEBASE = http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab

[Java Plug-in 1.5.0_09]
InProcServer32 = C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll
CODEBASE = http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx
CODEBASE = http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab

[Yahoo! Companion]
InProcServer32 = C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll
CODEBASE = http://us.dl1.yimg.com/download.yahoo.com/dl/toolbar/my/yiebio5_0_2_7.cab

---

Enumerating Winsock LSP files:

NameSpace #1: C:\WINDOWS\System32\mswsock.dll
NameSpace #2: C:\WINDOWS\System32\winrnr.dll
NameSpace #3: C:\WINDOWS\System32\mswsock.dll
Protocol #1: C:\WINDOWS\system32\mswsock.dll
Protocol #2: C:\WINDOWS\system32\mswsock.dll
Protocol #3: C:\WINDOWS\system32\mswsock.dll
Protocol #4: C:\WINDOWS\system32\rsvpsp.dll
Protocol #5: C:\WINDOWS\system32\rsvpsp.dll
Protocol #6: C:\WINDOWS\system32\mswsock.dll
Protocol #7: C:\WINDOWS\system32\mswsock.dll
Protocol #8: C:\WINDOWS\system32\mswsock.dll
Protocol #9: C:\WINDOWS\system32\mswsock.dll
Protocol #10: C:\WINDOWS\system32\mswsock.dll
Protocol #11: C:\WINDOWS\system32\mswsock.dll
Protocol #12: C:\WINDOWS\system32\mswsock.dll
Protocol #13: C:\WINDOWS\system32\mswsock.dll
Protocol #14: C:\WINDOWS\system32\mswsock.dll
Protocol #15: C:\WINDOWS\system32\mswsock.dll
Protocol #16: C:\WINDOWS\system32\mswsock.dll
Protocol #17: C:\WINDOWS\system32\mswsock.dll
Protocol #18: C:\WINDOWS\system32\mswsock.dll
Protocol #19: C:\WINDOWS\system32\mswsock.dll

---

Enumerating Windows NT/2000/XP services

abp480n5: System32\DRIVERS\ABP480N5.SYS (system)
Intel(r) 82801 Audio Driver Install Service (WDM): system32\drivers\ac97intc.sys (manual start)
Microsoft ACPI Driver: System32\DRIVERS\ACPI.sys (system)
adpu160m: System32\DRIVERS\adpu160m.sys (system)
aeaudio: system32\drivers\aeaudio.sys (manual start)
Microsoft Kernel Acoustic Echo Canceller: system32\drivers\aec.sys (manual start)
AFD Networking Support Environment: \SystemRoot\System32\drivers\afd.sys (system)
Intel AGP Bus Filter: System32\DRIVERS\agp440.sys (system)
Compaq AGP Bus Filter: System32\DRIVERS\agpCPQ.sys (system)
Aha154x: System32\DRIVERS\aha154x.sys (system)
aic78u2: System32\DRIVERS\aic78u2.sys (system)
aic78xx: System32\DRIVERS\aic78xx.sys (system)
Alerter: %SystemRoot%\System32\svchost.exe -k LocalService (disabled)
Application Layer Gateway Service: %SystemRoot%\System32\alg.exe (manual start)
AliIde: System32\DRIVERS\aliide.sys (system)
ALI AGP Bus Filter: System32\DRIVERS\alim1541.sys (system)
AMD AGP Bus Filter Driver: System32\DRIVERS\amdagp.sys (system)
amsint: System32\DRIVERS\amsint.sys (system)
Application Management: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
asc: System32\DRIVERS\asc.sys (system)
asc3350p: System32\DRIVERS\asc3350p.sys (system)
asc3550: System32\DRIVERS\asc3550.sys (system)
RAS Asynchronous Media Driver: System32\DRIVERS\asyncmac.sys (manual start)
Standard IDE/ESDI Hard Disk Controller: System32\DRIVERS\atapi.sys (system)
ati2mpaa: System32\DRIVERS\ati2mpaa.sys (manual start)
ati2mtaa: System32\DRIVERS\ati2mtaa.sys (manual start)
ATM ARP Client Protocol: System32\DRIVERS\atmarpc.sys (manual start)
Windows Audio: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Audio Stub Driver: System32\DRIVERS\audstub.sys (manual start)
Automatic LiveUpdate Scheduler: "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" (autostart)
AVG Anti-Spyware Driver: \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys (system)
AVG Anti-Spyware Guard: C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe (autostart)
AVG Anti-Spyware Clean Driver: System32\DRIVERS\AvgAsCln.sys (system)
BCM V.92 56K Modem: System32\DRIVERS\BCMSM.sys (manual start)
Background Intelligent Transfer Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Computer Browser: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
cbidf: System32\DRIVERS\cbidf2k.sys (system)
Closed Caption Decoder: System32\DRIVERS\CCDECODE.sys (manual start)
Symantec Event Manager: "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe" (autostart)
Symantec Internet Security Password Validation: "C:\Program Files\Norton Internet Security\ccPwdSvc.exe" (manual start)
Symantec Network Proxy: "C:\Program Files\Common Files\Symantec Shared\ccProxy.exe" (autostart)
Symantec Settings Manager: "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe" (autostart)
cd20xrnt: System32\DRIVERS\cd20xrnt.sys (system)
CD-ROM Driver: System32\DRIVERS\cdrom.sys (system)
Indexing Service: C:\WINDOWS\System32\cisvc.exe (manual start)
ClipBook: %SystemRoot%\system32\clipsrv.exe (disabled)
CmdIde: System32\DRIVERS\cmdide.sys (system)
COM Host: "C:\Program Files\Norton Internet Security\comHost.exe" (manual start)
COM+ System Application: C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} (manual start)
Cpqarray: System32\DRIVERS\cpqarray.sys (system)
Cryptographic Services: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
dac2w2k: System32\DRIVERS\dac2w2k.sys (system)
dac960nt: System32\DRIVERS\dac960nt.sys (system)
DCOM Server Process Launcher: %SystemRoot%\system32\svchost -k DcomLaunch (autostart)
DHCP Client: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Disk Driver: System32\DRIVERS\disk.sys (system)
DAVICOM 9102(A) PCI Fast Ethernet Based NT Driver: System32\DRIVERS\DM9PCI5.SYS (manual start)
Logical Disk Manager Administrative Service: %SystemRoot%\System32\dmadmin.exe /com (manual start)
dmboot: System32\drivers\dmboot.sys (disabled)
dmio: System32\drivers\dmio.sys (disabled)
dmload: System32\drivers\dmload.sys (disabled)
Logical Disk Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Microsoft Kernel DLS Syntheiszer: system32\drivers\DMusic.sys (manual start)
DNS Client: %SystemRoot%\System32\svchost.exe -k NetworkService (autostart)
dpti2o: System32\DRIVERS\dpti2o.sys (system)
Microsoft Kernel DRM Audio Descrambler: system32\drivers\drmkaud.sys (manual start)
Symantec Eraser Control driver: \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (system)
3Com EtherLink XL 90XB/C Adapter Driver: System32\DRIVERS\el90xbc5.sys (manual start)
EraserUtilDrv10631: \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilDrv10631.sys (manual start)
EraserUtilRebootDrv: \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (manual start)
Error Reporting Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Event Log: %SystemRoot%\system32\services.exe (autostart)
COM+ Event System: C:\WINDOWS\System32\svchost.exe -k netsvcs (manual start)
Fast User Switching Compatibility: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Floppy Disk Controller Driver: System32\DRIVERS\fdc.sys (manual start)
FinePix Digital Camera 020717: System32\Drivers\V4CB011D.SYS (manual start)
Floppy Disk Driver: System32\DRIVERS\flpydisk.sys (manual start)
FltMgr: system32\drivers\fltmgr.sys (system)
Volume Manager Driver: System32\DRIVERS\ftdisk.sys (system)
GEARAspiWDM: System32\Drivers\GEARAspiWDM.sys (manual start)
Generic Packet Classifier: System32\DRIVERS\msgpc.sys (manual start)
Help and Support: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Human Interface Device Access: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
hpn: System32\DRIVERS\hpn.sys (system)
hpt3xx: System32\DRIVERS\hpt3xx.sys (system)
IEEE-1284.4 Driver HPZid412: System32\DRIVERS\HPZid412.sys (manual start)
Print Class Driver for IEEE-1284.4 HPZipr12: System32\DRIVERS\HPZipr12.sys (manual start)
USB to IEEE-1284.4 Translation Driver HPZius12: System32\DRIVERS\HPZius12.sys (manual start)
HTTP: System32\Drivers\HTTP.sys (manual start)
HTTP SSL: %SystemRoot%\System32\svchost.exe -k HTTPFilter (manual start)
i2omp: System32\DRIVERS\i2omp.sys (system)
i8042 Keyboard and PS/2 Mouse Port Driver: System32\DRIVERS\i8042prt.sys (system)
i81x: System32\DRIVERS\i81xnt5.sys (manual start)
iAimFP0: System32\DRIVERS\wADV01nt.sys (manual start)
iAimFP1: System32\DRIVERS\wADV02NT.sys (manual start)
iAimFP2: System32\DRIVERS\wADV05NT.sys (manual start)
iAimFP3: System32\DRIVERS\wSiINTxx.sys (manual start)
iAimFP4: System32\DRIVERS\wVchNTxx.sys (manual start)
iAimTV0: System32\DRIVERS\wATV01nt.sys (manual start)
iAimTV1: System32\DRIVERS\wATV02NT.sys (manual start)
iAimTV2: System32\DRIVERS\wATV03nt.sys (manual start)
iAimTV3: System32\DRIVERS\wATV04nt.sys (manual start)
iAimTV4: System32\DRIVERS\wCh7xxNT.sys (manual start)
InstallDriver Table Manager: "C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" (manual start)
IMAPI CD-Burning COM Service: C:\WINDOWS\System32\imapi.exe (manual start)
ini910u: System32\DRIVERS\ini910u.sys (system)
IntelIde: System32\DRIVERS\intelide.sys (system)
Intel Processor Driver: System32\DRIVERS\intelppm.sys (system)
IPv6 Windows Firewall Driver: system32\drivers\ip6fw.sys (manual start)
IP Traffic Filter Driver: System32\DRIVERS\ipfltdrv.sys (manual start)
IP in IP Tunnel Driver: System32\DRIVERS\ipinip.sys (manual start)
IP Network Address Translator: System32\DRIVERS\ipnat.sys (manual start)
iPodService: C:\Program Files\iPod\bin\iPodService.exe (manual start)
IPSEC driver: System32\DRIVERS\ipsec.sys (system)
IR Enumerator Service: System32\DRIVERS\irenum.sys (manual start)
PnP ISA/EISA Bus Driver: System32\DRIVERS\isapnp.sys (system)
Keyboard Class Driver: System32\DRIVERS\kbdclass.sys (system)
Microsoft Kernel Wave Audio Mixer: system32\drivers\kmixer.sys (manual start)
Server: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Workstation: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
LiveUpdate: "C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE" (manual start)
TCP/IP NetBIOS Helper: %SystemRoot%\System32\svchost.exe -k LocalService (autostart)
Messenger: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
NetMeeting Remote Desktop Sharing: C:\WINDOWS\System32\mnmsrvc.exe (manual start)
Unimodem Streaming Filter Device: system32\drivers\MODEMCSA.sys (manual start)
Mouse Class Driver: System32\DRIVERS\mouclass.sys (system)
mraid35x: System32\DRIVERS\mraid35x.sys (system)
WebDav Client Redirector: System32\DRIVERS\mrxdav.sys (manual start)
MRXSMB: System32\DRIVERS\mrxsmb.sys (system)
Distributed Transaction Coordinator: C:\WINDOWS\System32\msdtc.exe (manual start)
Windows Installer: C:\WINDOWS\System32\msiexec.exe /V (manual start)
Microsoft Streaming Service Proxy: system32\drivers\MSKSSRV.sys (manual start)
Microsoft Streaming Clock Proxy: system32\drivers\MSPCLOCK.sys (manual start)
Microsoft Streaming Quality Manager Proxy: system32\drivers\MSPQM.sys (manual start)
Microsoft System Management BIOS Driver: System32\DRIVERS\mssmbios.sys (manual start)
Microsoft Streaming Tee/Sink-to-Sink Converter: system32\drivers\MSTEE.sys (manual start)
NABTS/FEC VBI Codec: System32\DRIVERS\NABTSFEC.sys (manual start)
Norton AntiVirus Auto-Protect Service: "C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe" (autostart)
NAVENG: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20061031.020\NAVENG.Sys (manual start)
NAVEX15: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20061031.020\NavEx15.Sys (manual start)
Microsoft TV/Video Connection: System32\DRIVERS\NdisIP.sys (manual start)
Remote Access NDIS TAPI Driver: System32\DRIVERS\ndistapi.sys (manual start)
NDIS Usermode I/O Protocol: System32\DRIVERS\ndisuio.sys (manual start)
Remote Access NDIS WAN Driver: System32\DRIVERS\ndiswan.sys (manual start)
NetBIOS Interface: System32\DRIVERS\netbios.sys (system)
NetBT: System32\DRIVERS\netbt.sys (system)
Network DDE: %SystemRoot%\system32\netdde.exe (disabled)
Network DDE DSDM: %SystemRoot%\system32\netdde.exe (disabled)
Net Logon: %SystemRoot%\System32\lsass.exe (manual start)
Network Connections: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Network Location Awareness (NLA): %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Norton Protection Center Service: "C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE" (manual start)
NT LM Security Support Provider: %SystemRoot%\System32\lsass.exe (manual start)
Removable Storage: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
nv: System32\DRIVERS\nv4_mini.sys (manual start)
nv4: System32\DRIVERS\nv4.sys (manual start)
IPX Traffic Filter Driver: System32\DRIVERS\nwlnkflt.sys (manual start)
IPX Traffic Forwarder Driver: System32\DRIVERS\nwlnkfwd.sys (manual start)
OMCI: \SystemRoot\SYSTEM32\DRIVERS\OMCI.SYS (system)
Intel PentiumIII Processor Driver: System32\DRIVERS\p3.sys (system)
Parallel port driver: System32\DRIVERS\parport.sys (manual start)
PCI Bus Driver: System32\DRIVERS\pci.sys (system)
PCIIde: System32\DRIVERS\pciide.sys (system)
perc2: System32\DRIVERS\perc2.sys (system)
perc2hib: System32\DRIVERS\perc2hib.sys (system)
Padus ASPI Shell: system32\drivers\pfc.sys (manual start)
Plug and Play: %SystemRoot%\system32\services.exe (autostart)
Pml Driver HPZ12: C:\WINDOWS\System32\HPZipm12.exe (manual start)
IPSEC Services: %SystemRoot%\System32\lsass.exe (autostart)
WAN Miniport (PPTP): System32\DRIVERS\raspptp.sys (manual start)
Processor Driver: System32\DRIVERS\processr.sys (system)
Protected Storage: %SystemRoot%\system32\lsass.exe (autostart)
QoS Packet Scheduler: System32\DRIVERS\psched.sys (manual start)
Direct Parallel Link Driver: System32\DRIVERS\ptilink.sys (manual start)
ql1080: System32\DRIVERS\ql1080.sys (system)
Ql10wnt: System32\DRIVERS\ql10wnt.sys (system)
ql12160: System32\DRIVERS\ql12160.sys (system)
ql1240: System32\DRIVERS\ql1240.sys (system)
ql1280: System32\DRIVERS\ql1280.sys (system)
Remote Access Auto Connection Driver: System32\DRIVERS\rasacd.sys (system)
Remote Access Auto Connection Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
WAN Miniport (L2TP): System32\DRIVERS\rasl2tp.sys (manual start)
Remote Access Connection Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Remote Access PPPOE Driver: System32\DRIVERS\raspppoe.sys (manual start)
Direct Parallel: System32\DRIVERS\raspti.sys (manual start)
Rdbss: System32\DRIVERS\rdbss.sys (system)
RDPCDD: System32\DRIVERS\RDPCDD.sys (system)
Terminal Server Device Redirector Driver: System32\DRIVERS\rdpdr.sys (manual start)
Remote Desktop Help Session Manager: C:\WINDOWS\system32\sessmgr.exe (manual start)
Digital CD Audio Playback Filter Driver: System32\DRIVERS\redbook.sys (system)
Routing and Remote Access: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
Remote Procedure Call (RPC) Locator: %SystemRoot%\System32\locator.exe (manual start)
Remote Procedure Call (RPC): %SystemRoot%\system32\svchost -k rpcss (autostart)
QoS RSVP: %SystemRoot%\System32\rsvp.exe (manual start)
Security Accounts Manager: %SystemRoot%\system32\lsass.exe (autostart)
SAVRT: \??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRT.SYS (manual start)
SAVRTPEL: \??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRTPEL.SYS (system)
Symantec AVScan: "C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe" (manual start)
Smart Card: %SystemRoot%\System32\SCardSvr.exe (manual start)
CanoScan FBP Port Driver: \??\C:\WINDOWS\System32\drivers\ScFBPNT.SYS (autostart)
Task Scheduler: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Secdrv: System32\DRIVERS\secdrv.sys (manual start)
Secondary Logon: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
System Event Notification: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Serenum Filter Driver: System32\DRIVERS\serenum.sys (manual start)
Serial port driver: System32\DRIVERS\serial.sys (system)
Windows Firewall/Internet Connection Sharing (ICS): %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Shell Hardware Detection: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
SIS AGP Bus Filter: System32\DRIVERS\sisagp.sys (system)
BDA Slip De-Framer: System32\DRIVERS\SLIP.sys (manual start)
smwdm: system32\drivers\smwdm.sys (manual start)
Symantec Network Drivers Service: "C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe" (autostart)
Sony USB Filter Driver (SONYPVU1): System32\DRIVERS\SONYPVU1.SYS (manual start)
Sparrow: System32\DRIVERS\sparrow.sys (system)
SPBBCDrv: \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (system)
Symantec SPBBCSvc: "C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe" (autostart)
Microsoft Kernel Audio Splitter: system32\drivers\splitter.sys (manual start)
Print Spooler: %SystemRoot%\system32\spoolsv.exe (autostart)
ViviCam 35: System32\Drivers\Capt905c.sys (manual start)
System Restore Filter Driver: System32\DRIVERS\sr.sys (system)
System Restore Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Srv: System32\DRIVERS\srv.sys (manual start)
SSDP Discovery Service: %SystemRoot%\System32\svchost.exe -k LocalService (manual start)
Windows Image Acquisition (WIA): %SystemRoot%\System32\svchost.exe -k imgsvc (autostart)
BDA IPSink: System32\DRIVERS\StreamIP.sys (manual start)
Software Bus Driver: System32\DRIVERS\swenum.sys (manual start)
Microsoft Kernel GS Wavetable Synthesizer: system32\drivers\swmidi.sys (manual start)
MS Software Shadow Copy Provider: C:\WINDOWS\System32\dllhost.exe /Processid:{422750EB-86AA-4173-8A7E-FEBADE226929} (manual start)
Symantec Core LC: "C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe" (autostart)
symc810: System32\DRIVERS\symc810.sys (system)
symc8xx: System32\DRIVERS\symc8xx.sys (system)
SYMDNS: \SystemRoot\System32\Drivers\SYMDNS.SYS (manual start)
SymEvent: \??\C:\Program Files\Symantec\SYMEVENT.SYS (manual start)
SYMFW: \SystemRoot\System32\Drivers\SYMFW.SYS (manual start)
SYMIDS: \SystemRoot\System32\Drivers\SYMIDS.SYS (manual start)
SYMIDSCO: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\idsdefs\20061025.029\symidsco.sys (manual start)
symlcbrd: \??\C:\WINDOWS\system32\drivers\symlcbrd.sys (autostart)
SYMNDIS: \SystemRoot\System32\Drivers\SYMNDIS.SYS (manual start)
SYMREDRV: \SystemRoot\System32\Drivers\SYMREDRV.SYS (manual start)
SYMTDI: \SystemRoot\System32\Drivers\SYMTDI.SYS (system)
sym_hi: System32\DRIVERS\sym_hi.sys (system)
sym_u3: System32\DRIVERS\sym_u3.sys (system)
Microsoft Kernel System Audio Device: system32\drivers\sysaudio.sys (manual start)
Performance Logs and Alerts: %SystemRoot%\system32\smlogsvc.exe (manual start)
Telephony: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
TCP/IP Protocol Driver: System32\DRIVERS\tcpip.sys (system)
Terminal Device Driver: System32\DRIVERS\termdd.sys (system)
Terminal Services: %SystemRoot%\System32\svchost -k DComLaunch (manual start)
Themes: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
TosIde: System32\DRIVERS\toside.sys (system)
Distributed Link Tracking Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
ultra: System32\DRIVERS\ultra.sys (system)
Microcode Update Driver: System32\DRIVERS\update.sys (manual start)
Universal Plug and Play Device Host: %SystemRoot%\System32\svchost.exe -k LocalService (manual start)
Uninterruptible Power Supply: %SystemRoot%\System32\ups.exe (manual start)
Microsoft USB Generic Parent Driver: System32\DRIVERS\usbccgp.sys (manual start)
Scientific-Atlanta USB Cable Modem Driver: system32\DRIVERS\Sacm2A.sys (manual start)
Microsoft USB 2.0 Enhanced Host Controller Miniport Driver: System32\DRIVERS\usbehci.sys (manual start)
USB Root Hub (usbport): System32\DRIVERS\usbhub.sys (manual start)
Microsoft USB PRINTER Class: System32\DRIVERS\usbprint.sys (manual start)
USB Scanner Driver: System32\DRIVERS\usbscan.sys (manual start)
USB Mass Storage Driver: System32\DRIVERS\USBSTOR.SYS (manual start)
Microsoft USB Universal Host Controller Miniport Driver: System32\DRIVERS\usbuhci.sys (manual start)
VGA Display Controller.: \SystemRoot\System32\drivers\vga.sys (system)
VIA AGP Bus Filter: System32\DRIVERS\viaagp.sys (system)
ViaIde: System32\DRIVERS\viaide.sys (system)
Volume Shadow Copy: %SystemRoot%\System32\vssvc.exe (manual start)
Windows Time: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Remote Access IP ARP Driver: System32\DRIVERS\wanarp.sys (manual start)
WAN Miniport (ATW): System32\DRIVERS\wanatw4.sys (manual start)
Microsoft WINMM WDM Audio Compatibility Driver: system32\drivers\wdmaud.sys (manual start)
WebClient: %SystemRoot%\System32\svchost.exe -k LocalService (autostart)
Windows Management Instrumentation: %systemroot%\system32\svchost.exe -k netsvcs (autostart)
Portable Media Serial Number Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
WMI Performance Adapter: C:\WINDOWS\System32\wbem\wmiapsrv.exe (manual start)
Windows Media Player Network Sharing Service: C:\Program Files\Windows Media Player\WMPNetwk.exe (manual start)
Security Center: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
World Standard Teletext Codec: System32\DRIVERS\WSTCODEC.SYS (manual start)
Automatic Updates: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Windows Driver Foundation - User-mode Driver Framework Platform Driver: system32\DRIVERS\WudfPf.sys (manual start)
Windows Driver Foundation - User-mode Driver Framework Reflector: system32\DRIVERS\wudfrd.sys (manual start)
Windows Driver Foundation - User-mode Driver Framework: %SystemRoot%\system32\svchost.exe -k WudfServiceGroup (manual start)
Wireless Zero Configuration: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Network Provisioning Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)

---

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk *

Windows NT 'Wininit.ini':
PendingFileRenameOperations: *Registry value not found*

---

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: *Registry key not found*
SysTray: C:\WINDOWS\System32\stobject.dll

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

*No values found*

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

*No values found*

---

End of report, 41,753 bytes
Report generated in 1.610 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

Trogan

That looks fine to me. Lets try this:

1. Download this file - combofix.exe
2. Double click combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you. Post that log in your next reply

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

stacy3

Here ya go Trogan - sorry - it's been a bit hectic around here...

Stacy - 06-11-02 8:25:01.24 Service Pack 2
ComboFix 06.10.19 - Running from: "C:\Documents and Settings\Stacy\Desktop"

((((((((((((((((((((((((((((((( Files Created from 2006-10-02 to 2006-11-02 ))))))))))))))))))))))))))))))))))


2006-10-06 15:30 3,968 --a

---

C:\WINDOWS\SYSTEM32\DRIVERS\AvgAsCln.sys
2006-10-05 09:23 53,248 --a

---

C:\WINDOWS\SYSTEM32\Process.exe
2006-10-05 09:23 40,960 --a

---

C:\WINDOWS\SYSTEM32\swsc.exe
2006-10-05 09:23 288,417 --a

---

C:\WINDOWS\SYSTEM32\SrchSTS.exe
2006-10-05 09:23 135,168 --a

---

C:\WINDOWS\SYSTEM32\swreg.exe


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-11-02 07:51

---

d

---

C:\Program Files\Mozilla Firefox
2006-11-01 08:42

---

d

---

C:\Program Files\Hijackthis
2006-10-31 21:11

---

d

---

C:\Program Files\Norton Internet Security
2006-10-30 13:59

---

d

---

C:\Program Files\Symantec
2006-10-30 13:49

---

d

---

C:\Program Files\Messenger
2006-10-30 13:47

---

d

---

C:\Program Files\Internet Explorer
2006-10-30 13:45

---

d

---

C:\Program Files\Folding@Home
2006-10-30 13:43

---

d

---

C:\Program Files\Common Files\Symantec Shared
2006-10-30 13:27

---

d

---

C:\Documents and Settings\Stacy\Application Data\Symantec
2006-10-30 13:02

---

d

---

C:\Program Files\SpywareBlaster
2006-10-30 12:55

---

d

---

C:\Program Files\microsoft frontpage
2006-10-26 17:09

---

d

---

C:\Program Files\QuickTime
2006-10-26 17:09

---

d

---

C:\Program Files\Picasa2
2006-10-26 17:09

---

d

---

C:\Program Files\OfficeUpdate11
2006-10-26 17:08

---

d

---

C:\Program Files\Modem Helper
2006-10-26 17:08

---

d

---

C:\Program Files\FinePixViewer
2006-10-26 17:07

---

d

---

C:\Program Files\Common Files\Vbox
2006-10-26 17:07

---

d

---

C:\Program Files\Common Files
2006-10-26 17:06

---

d

---

C:\Program Files\Adelphia eSupport Assistant
2006-10-12 16:55

---

d

---

C:\Program Files\Mindscape
2006-10-09 16:57

---

d

---

C:\Program Files\Davidson
2006-10-06 15:30

---

d

---

C:\Program Files\Grisoft
2006-10-06 14:56

---

d

---

C:\Program Files\Java
2006-10-06 14:55

---

d

---

C:\Program Files\Common Files\Java
2006-10-05 17:57

---

d

---

C:\Program Files\Kid's Typing Skills
2006-10-05 09:58

---

d

---

C:\Program Files\Common Files\Softwin
2006-10-05 09:38

---

d

---

C:\Program Files\Windows Media Player
2006-10-05 09:38

---

d

---

C:\Program Files\MUSICMATCH
2006-10-05 09:38

---

d

---

C:\Program Files\Movie Maker
2006-10-05 09:38

---

d

---

C:\Program Files\Dell Modem-On-Hold
2006-10-05 09:38

---

d

---

C:\Program Files\Classic PhoneTools
2006-10-02 08:10

---

d

---

C:\Program Files\Hasbro Interactive
2006-10-02 08:09

---

d

---

C:\Program Files\InstallShield Installation Information
2006-10-02 08:09

---

d

---

C:\Program Files\Disney Interactive
2006-10-02 08:07

---

d

---

C:\Program Files\The Learning Company
2006-09-28 17:16

---

d

---

C:\Program Files\iTunes
2006-09-28 12:13

---

d

---

C:\Documents and Settings\Stacy\Application Data\AdobeUM
2006-09-28 10:06

---

d

---

C:\Documents and Settings\Stacy\Application Data\Lavasoft
2006-09-28 10:05

---

d

---

C:\Program Files\Lavasoft
2006-09-15 21:04 48816 --a

---

C:\WINDOWS\SYSTEM32\S32EVNT1.DLL
2006-09-15 21:04 109744 --a

---

C:\WINDOWS\SYSTEM32\DRIVERS\SYMEVENT.SYS
2006-09-13 00:01 1084416 --a

---

C:\WINDOWS\SYSTEM32\msxml3.dll
2006-09-10 06:48

---

d

---

C:\Program Files\iPod
2006-09-06 08:00

---

d

---

C:\Documents and Settings\Stacy\Application Data\Adobe
2006-09-04 13:44 10344 --a

---

C:\WINDOWS\SYSTEM32\DRIVERS\symlcbrd.sys
2006-08-25 10:45 617472

---

C:\WINDOWS\SYSTEM32\comctl32.dll
2006-08-21 07:21 16896 --a

---

C:\WINDOWS\SYSTEM32\fltlib.dll
2006-08-21 04:14 23040 --a

---

C:\WINDOWS\SYSTEM32\fltmc.exe
2006-08-16 06:58 100352 --a

---

C:\WINDOWS\SYSTEM32\6to4svc.dll
2006-08-07 15:02 534208 --a

---

C:\WINDOWS\SYSTEM32\SymNeti.dll
2006-08-07 15:02 161472 --a

---

C:\WINDOWS\SYSTEM32\SymRedir.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"HPDJ Taskbar Utility"="C:\\WINDOWS\\System32\\spool\\drivers\\w32x86\\3\\hpztsb09.exe"
"HPHUPD05"="C:\\Program Files\\Hewlett-Packard\\{45B6180B-DCAB-4093-8EE8-6164457517F0}\\hphupd05.exe"
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"URLLSTCK.exe"="\"C:\\Program Files\\Norton Internet Security\\UrlLstCk.exe\""
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000005

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/tb_smiley_1.gif&quot;
"SubscribedURL"="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/tb_smiley_1.gif&quot;
"FriendlyName"=""
"Flags"=dword:00000001
"Position"=hex:2c,00,00,00,6a,02,00,00,df,00,00,00,16,00,00,00,16,00,00,00,e8,\
03,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:01,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,6a,02,00,00,df,00,00,00,16,00,00,00,16,00,\
00,00,01,00,00,40
"RestoredStateInfo"=hex:dc,ff,a4,01,86,bb,e9,77,b0,8d,e8,77,ff,ff,ff,ff,83,9a,\
e7,77,68,5a,35,04

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\1]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,de,02,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,50,00,00,00,00,00,00,00,d0,02,00,00,36,02,\
00,00,04,00,00,40
"RestoredStateInfo"=hex:18,00,00,00,50,00,00,00,00,00,00,00,d0,02,00,00,36,02,\
00,00,01,00,00,00

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegedit"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=hex:91,00,00,00

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
"CDRAutoRun"=dword:00000000

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
"CDRAutoRun"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adelphia eSupport Assistant.lnk]
"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Adelphia eSupport Assistant.lnk"
"backup"="C:\\WINDOWS\\pss\\Adelphia eSupport Assistant.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\PROGRA~1\\ADELPH~1\\bin\\matcli.exe -boot"
"item"="Adelphia eSupport Assistant"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^America Online 7.0 Tray Icon.lnk]
"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\America Online 7.0 Tray Icon.lnk"
"backup"="C:\\WINDOWS\\pss\\America Online 7.0 Tray Icon.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\PROGRA~1\\AMERIC~1.0\\aoltray.exe -check"
"item"="America Online 7.0 Tray Icon"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk]
"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Digital Line Detect.lnk"
"backup"="C:\\WINDOWS\\pss\\Digital Line Detect.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\PROGRA~1\\DIGITA~1\\DLG.exe "
"item"="Digital Line Detect"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Microsoft Office.lnk"
"backup"="C:\\WINDOWS\\pss\\Microsoft Office.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\PROGRA~1\\MICROS~2\\Office10\\OSA.EXE -b -l"
"item"="Microsoft Office"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Photo Explosion Calendar Checker.lnk]
"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Photo Explosion Calendar Checker.lnk"
"backup"="C:\\WINDOWS\\pss\\Photo Explosion Calendar Checker.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\WINDOWS\\Installer\\{B8F19DA6-0BCD-48FC-9998-C6ACEAEEDEFE}\\PhotoExplosionCalendarChecker.exe "
"item"="Photo Explosion Calendar Checker"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Stacy^Start Menu^Programs^Startup^PowerReg SchedulerV2.exe]
"path"="C:\\Documents and Settings\\Stacy\\Start Menu\\Programs\\Startup\\PowerReg SchedulerV2.exe"
"backup"="C:\\WINDOWS\\pss\\PowerReg SchedulerV2.exeStartup"
"location"="Startup"
"command"="C:\\Documents and Settings\\Stacy\\Start Menu\\Programs\\Startup\\PowerReg SchedulerV2.exe"
"item"="PowerReg SchedulerV2"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdaptecDirectCD]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="DirectCD"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\Roxio\\Easy CD Creator 5\\DirectCD\\DirectCD.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="hpcmpmgr"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\HP\\hpcoretech\\hpcmpmgr.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="HPWuSchd2"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\Hewlett-Packard\\HP Software Update\\HPWuSchd2.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MoneyAgent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Money Express"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\Microsoft Money\\System\\Money Express.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MoneyStartUp10.0]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Activation"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\Microsoft Money\\System\\Activation.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Motive SmartBridge]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="MotiveSB"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\ADELPH~1\\SMARTB~1\\MotiveSB.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="qttask"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="jusched"
"hkey"="HKLM"
"command"="C:\\Program Files\\Java\\j2re1.4.2_05\\bin\\jusched.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="realsched"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="ypager"
"hkey"="HKCU"
"command"="C:\\Program Files\\Yahoo!\\Messenger\\ypager.exe -quiet"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\Disk Cleanup.job
C:\WINDOWS\tasks\HP DArC Task #Hewlett-Packard#7200#CN3862C21CI5.job
C:\WINDOWS\tasks\HP Usg Daily.job
C:\WINDOWS\tasks\Norton AntiVirus - Run Full System Scan - Stacy.job

Completion time: 06-11-02 8:28:04.82
C:\ComboFix.txt ... 06-11-02 08:28

Trogan

That log looks fine to me. Could you run a AVG anti-spyware scan in Safe Mode and post a log back here please. Make sure you update it first.

stacy3

done. Here is the log, Trogan. Thanks.

---

AVG Anti-Spyware - Scan Report

---

+ Created at: 10:46:34 AM 11/3/2006

+ Scan result:



:mozilla.329:C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.335:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.54:C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.83:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.51:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Burstbeacon : No action taken.
:mozilla.50:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.52:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.53:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.17:C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.18:C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.19:C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.20:C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.58:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.72:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.42:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Myaffiliateprogram : No action taken.
:mozilla.256:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.257:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.258:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.259:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.260:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.264:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.265:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.68:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.74:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.79:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.80:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.293:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\default.0xv\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.298:C:\Documents and Settings\Will\Application Data\Mozilla\Firefox\Profiles\default.9ux\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.32:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.33:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.189:C:\Documents and Settings\Stacy\Application Data\Mozilla\Firefox\Profiles\default.vw7\cookies.txt -> TrackingCookie.Zedo : No action taken.


::Report end

Trogan

Can you tell me how things are please?

stacy3

Hi Trogan - things are the same as they have been actually - I, today, have 7 emails with strange attachments, and another message of a message of mine that was blocked by the recipient (that I never sent and don't know the recipeint)...I will send it to you in Private due to email addresses (?), OK?

These seem to be the only things that are suspicious at all, and continue to be, I guess...

Stacy

Trogan

Thanks for the PM.

This may be a long shot, but would you consider changing your Password just to check if things better themselves?

stacy3

I will consider anything...

my password to get my mail?

Trogan

Yep, your Yahoo password.

stacy3

Well, that didn't work...

I got 18 of the emails from classmates (many addresses are no longer even valid) with attachments and yet another of the failed delivery attempts ...yesterday, after I changed the password.

sheesh, this is too weird.

Trogan

Lets check another log...

Run HijackThis, click on Open the Misc Tools Section, put a checkmark in List also minor sections and List empty sections. Click on Generate StartupList log, anwser Yes and copy/paste the content in your reply.
Click Back and Click on Scan. When the scan is finished, click Save Log and paste the content in your reply.

stacy3

Good morning Trogan - here is the startup list:

StartupList report, 11/08/06, 9:10:05 AM
StartupList version: 1.52.2
Started from : C:\Program Files\Hijackthis\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options
* Including empty and uninteresting sections
* Showing rarely important sections
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Folding@Home\winFAH.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Folding@Home\FahCore_78.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Hijackthis\HijackThis.exe

---

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\Stacy\Start Menu\Programs\Startup]
Folding@Home 5.03.lnk = ?

Shell folders AltStartup:
*Folder not found*

User shell folders Startup:
*Folder not found*

User shell folders AltStartup:
*Folder not found*

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
*No files*

Shell folders Common AltStartup:
*Folder not found*

User shell folders Common Startup:
*Folder not found*

User shell folders Alternate Common Startup:
*Folder not found*

---

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

[HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

[HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
*Registry value not found*

[HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

HPDJ Taskbar Utility = C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
HPHUPD05 = C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
ccApp = "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
URLLSTCK.exe = "C:\Program Files\Norton Internet Security\UrlLstCk.exe"
SunJavaUpdateSched = "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
!AVG Anti-Spyware = "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
Symantec PIF AlertEng = "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce

*No values found*

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

*No values found*

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

*No values found*

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

*Registry key not found*

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MSMSGS = "C:\Program Files\Messenger\msmsgs.exe" /background

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce

*Registry key not found*

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

*Registry key not found*

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

*No values found*

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

*Registry key not found*

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run

*Registry key not found*

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run

*Registry key not found*

---

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

[OptionalComponents]
*No values found*

---

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
*No subkeys found*

---

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
*No subkeys found*

---

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
*No subkeys found*

---

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*Registry key not found*

---

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
*No subkeys found*

---

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
*Registry key not found*

---

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
*Registry key not found*

---

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
*No subkeys found*

---

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*Registry key not found*

---

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run
*Registry key not found*

---

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run
*Registry key not found*

---

File association entry for .EXE:
HKEY_CLASSES_ROOT\exefile\shell\open\command

(Default) = "%1" %*

---

File association entry for .COM:
HKEY_CLASSES_ROOT\comfile\shell\open\command

(Default) = "%1" %*

---

File association entry for .BAT:
HKEY_CLASSES_ROOT\batfile\shell\open\command

(Default) = "%1" %*

---

File association entry for .PIF:
HKEY_CLASSES_ROOT\piffile\shell\open\command

(Default) = "%1" %*

---

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = "%1" /S

---

File association entry for .HTA:
HKEY_CLASSES_ROOT\htafile\shell\open\command

(Default) = C:\WINDOWS\System32\mshta.exe "%1" %*

---

File association entry for .TXT:
HKEY_CLASSES_ROOT\txtfile\shell\open\command

(Default) = %SystemRoot%\system32\NOTEPAD.EXE %1

---

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)

[>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP

[>{26923b43-4d38-484f-9b9e-de460746276c}] *
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE

[>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] *
StubPath = RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

[>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] *
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

[{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] *
StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

[{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

[{4b218e3e-bc98-4770-93d3-2731b9329278}] *
StubPath = %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection MarketplaceLinkInstall 896 %systemroot%\inf\ie.inf

[{5945c046-1e7d-11d1-bc44-00c04fd912be}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

[{6BF52A52-394A-11d3-B153-00C04F79FAA6}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub

[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

[{89820200-ECBD-11cf-8B85-00AA005B4340}] *
StubPath = regsvr32.exe /s /n /i:U shell32.dll

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = %SystemRoot%\system32\ie4uinit.exe

---

Enumerating ICQ Agent Autostart apps:
HKCU\Software\Mirabilis\ICQ\Agent\Apps

*Registry key not found*

---

Load/Run keys from C:\WINDOWS\WIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=

---

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\System32\sstext3d.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry value not found*

---

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present
C:\WINDOWS\Fonts\Explorer.exe: not present

---

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

---

Verifying REGEDIT.EXE integrity:

- Regedit.exe found in C:\WINDOWS
- .reg open command is normal (regedit.exe %1)
- Company name OK: 'Microsoft Corporation'
- Original filename OK: 'REGEDIT.EXE'
- File description: 'Registry Editor'

Registry check passed

---

Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll - {02478D38-C3F9-4efb-9B51-7695ECA05670}
(no name) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
(no name) - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
Norton Internet Security 2006 - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll - {9ECB9560-04F9-4bbc-943D-298DDF1699E1}
NAV Helper - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD}
(no name) - C:\Program Files\Microsoft Money\System\mnyviewer.dll - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC}

---

Enumerating Task Scheduler jobs:

Disk Cleanup.job
HP DArC Task #Hewlett-Packard#7200#CN3862C21CI5.job
HP Usg Daily.job
Norton AntiVirus - Run Full System Scan - Stacy.job

---

Enumerating Download Program Files:

[Microsoft XML Parser for Java]
CODEBASE = file://C:\WINDOWS\Java\classes\xmldso.cab
OSD = C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd

[QuickTime Object]
InProcServer32 = C:\Program Files\QuickTime\QTPlugin.ocx
CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab

[CKAVWebScan Object]
InProcServer32 = C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
CODEBASE = http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\SYSTEM32\Macromed\Director\SwDir.dll
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab

[LSSupCtl Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\LSSupCtl.dll
CODEBASE = http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab

[Trend Micro ActiveX Scan Agent 6.5]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\Housecall_ActiveX.dll
CODEBASE = http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab

[YInstStarter Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\yinsthelper.dll
CODEBASE = http://download.yahoo.com/dl/installs/yinst.cab

[{33564D57-9980-0010-8000-00AA00389B71}]
CODEBASE = http://codecs.microsoft.com/codecs/i386/wmv9dmo.cab

[{3451DEDE-631F-421C-8127-FD793AFC6CC8}]
CODEBASE = http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab

[Office Update Installation Engine]
InProcServer32 = C:\WINDOWS\opuc.dll
CODEBASE = http://office.microsoft.com/officeupdate/content/opuc.cab

[Symantec SmartIssue]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\tgctlsi.dll
CODEBASE = http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab

[Symantec Script Runner Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\tgctlsr.dll
CODEBASE = http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab

[Java Plug-in 1.5.0_09]
InProcServer32 = C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
CODEBASE = http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab

[ActiveScan Installer Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\asinst.dll
CODEBASE = http://acs.pandasoftware.com/activescan/as5free/asinst.cab

[FujifilmUploader Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\FujifilmUploadClient.dll
CODEBASE = http://photo.walmart.com/photo/uploads/FujifilmUploadClient.cab

[Java Plug-in 1.5.0_09]
InProcServer32 = C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
CODEBASE = http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab

[Java Plug-in 1.5.0_09]
InProcServer32 = C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll
CODEBASE = http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx
CODEBASE = http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab

[Yahoo! Companion]
InProcServer32 = C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll
CODEBASE = http://us.dl1.yimg.com/download.yahoo.com/dl/toolbar/my/yiebio5_0_2_7.cab

---

Enumerating Winsock LSP files:

NameSpace #1: C:\WINDOWS\System32\mswsock.dll
NameSpace #2: C:\WINDOWS\System32\winrnr.dll
NameSpace #3: C:\WINDOWS\System32\mswsock.dll
Protocol #1: C:\WINDOWS\system32\mswsock.dll
Protocol #2: C:\WINDOWS\system32\mswsock.dll
Protocol #3: C:\WINDOWS\system32\mswsock.dll
Protocol #4: C:\WINDOWS\system32\rsvpsp.dll
Protocol #5: C:\WINDOWS\system32\rsvpsp.dll
Protocol #6: C:\WINDOWS\system32\mswsock.dll
Protocol #7: C:\WINDOWS\system32\mswsock.dll
Protocol #8: C:\WINDOWS\system32\mswsock.dll
Protocol #9: C:\WINDOWS\system32\mswsock.dll
Protocol #10: C:\WINDOWS\system32\mswsock.dll
Protocol #11: C:\WINDOWS\system32\mswsock.dll
Protocol #12: C:\WINDOWS\system32\mswsock.dll
Protocol #13: C:\WINDOWS\system32\mswsock.dll
Protocol #14: C:\WINDOWS\system32\mswsock.dll
Protocol #15: C:\WINDOWS\system32\mswsock.dll
Protocol #16: C:\WINDOWS\system32\mswsock.dll
Protocol #17: C:\WINDOWS\system32\mswsock.dll
Protocol #18: C:\WINDOWS\system32\mswsock.dll
Protocol #19: C:\WINDOWS\system32\mswsock.dll

---

Enumerating Windows NT/2000/XP services

abp480n5: System32\DRIVERS\ABP480N5.SYS (system)
Intel(r) 82801 Audio Driver Install Service (WDM): system32\drivers\ac97intc.sys (manual start)
Microsoft ACPI Driver: System32\DRIVERS\ACPI.sys (system)
adpu160m: System32\DRIVERS\adpu160m.sys (system)
aeaudio: system32\drivers\aeaudio.sys (manual start)
Microsoft Kernel Acoustic Echo Canceller: system32\drivers\aec.sys (manual start)
AFD Networking Support Environment: \SystemRoot\System32\drivers\afd.sys (system)
Intel AGP Bus Filter: System32\DRIVERS\agp440.sys (system)
Compaq AGP Bus Filter: System32\DRIVERS\agpCPQ.sys (system)
Aha154x: System32\DRIVERS\aha154x.sys (system)
aic78u2: System32\DRIVERS\aic78u2.sys (system)
aic78xx: System32\DRIVERS\aic78xx.sys (system)
Alerter: %SystemRoot%\System32\svchost.exe -k LocalService (disabled)
Application Layer Gateway Service: %SystemRoot%\System32\alg.exe (manual start)
AliIde: System32\DRIVERS\aliide.sys (system)
ALI AGP Bus Filter: System32\DRIVERS\alim1541.sys (system)
AMD AGP Bus Filter Driver: System32\DRIVERS\amdagp.sys (system)
amsint: System32\DRIVERS\amsint.sys (system)
Application Management: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
asc: System32\DRIVERS\asc.sys (system)
asc3350p: System32\DRIVERS\asc3350p.sys (system)
asc3550: System32\DRIVERS\asc3550.sys (system)
RAS Asynchronous Media Driver: System32\DRIVERS\asyncmac.sys (manual start)
Standard IDE/ESDI Hard Disk Controller: System32\DRIVERS\atapi.sys (system)
ati2mpaa: System32\DRIVERS\ati2mpaa.sys (manual start)
ati2mtaa: System32\DRIVERS\ati2mtaa.sys (manual start)
ATM ARP Client Protocol: System32\DRIVERS\atmarpc.sys (manual start)
Windows Audio: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Audio Stub Driver: System32\DRIVERS\audstub.sys (manual start)
Automatic LiveUpdate Scheduler: "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" (autostart)
AVG Anti-Spyware Driver: \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys (system)
AVG Anti-Spyware Guard: C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe (autostart)
AVG Anti-Spyware Clean Driver: System32\DRIVERS\AvgAsCln.sys (system)
BCM V.92 56K Modem: System32\DRIVERS\BCMSM.sys (manual start)
Background Intelligent Transfer Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Computer Browser: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
cbidf: System32\DRIVERS\cbidf2k.sys (system)
Closed Caption Decoder: System32\DRIVERS\CCDECODE.sys (manual start)
Symantec Event Manager: "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe" (autostart)
Symantec Internet Security Password Validation: "C:\Program Files\Norton Internet Security\ccPwdSvc.exe" (manual start)
Symantec Network Proxy: "C:\Program Files\Common Files\Symantec Shared\ccProxy.exe" (autostart)
Symantec Settings Manager: "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe" (autostart)
cd20xrnt: System32\DRIVERS\cd20xrnt.sys (system)
CD-ROM Driver: System32\DRIVERS\cdrom.sys (system)
Indexing Service: C:\WINDOWS\System32\cisvc.exe (manual start)
ClipBook: %SystemRoot%\system32\clipsrv.exe (disabled)
CmdIde: System32\DRIVERS\cmdide.sys (system)
COM Host: "C:\Program Files\Norton Internet Security\comHost.exe" (manual start)
COM+ System Application: C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} (manual start)
Cpqarray: System32\DRIVERS\cpqarray.sys (system)
Cryptographic Services: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
dac2w2k: System32\DRIVERS\dac2w2k.sys (system)
dac960nt: System32\DRIVERS\dac960nt.sys (system)
DCOM Server Process Launcher: %SystemRoot%\system32\svchost -k DcomLaunch (autostart)
DHCP Client: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Disk Driver: System32\DRIVERS\disk.sys (system)
DAVICOM 9102(A) PCI Fast Ethernet Based NT Driver: System32\DRIVERS\DM9PCI5.SYS (manual start)
Logical Disk Manager Administrative Service: %SystemRoot%\System32\dmadmin.exe /com (manual start)
dmboot: System32\drivers\dmboot.sys (disabled)
dmio: System32\drivers\dmio.sys (disabled)
dmload: System32\drivers\dmload.sys (disabled)
Logical Disk Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Microsoft Kernel DLS Syntheiszer: system32\drivers\DMusic.sys (manual start)
DNS Client: %SystemRoot%\System32\svchost.exe -k NetworkService (autostart)
dpti2o: System32\DRIVERS\dpti2o.sys (system)
Microsoft Kernel DRM Audio Descrambler: system32\drivers\drmkaud.sys (manual start)
Symantec Eraser Control driver: \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (system)
3Com EtherLink XL 90XB/C Adapter Driver: System32\DRIVERS\el90xbc5.sys (manual start)
EraserUtilRebootDrv: \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (manual start)
Error Reporting Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Event Log: %SystemRoot%\system32\services.exe (autostart)
COM+ Event System: C:\WINDOWS\System32\svchost.exe -k netsvcs (manual start)
Fast User Switching Compatibility: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Floppy Disk Controller Driver: System32\DRIVERS\fdc.sys (manual start)
FinePix Digital Camera 020717: System32\Drivers\V4CB011D.SYS (manual start)
Floppy Disk Driver: System32\DRIVERS\flpydisk.sys (manual start)
FltMgr: system32\drivers\fltmgr.sys (system)
Volume Manager Driver: System32\DRIVERS\ftdisk.sys (system)
GEARAspiWDM: System32\Drivers\GEARAspiWDM.sys (manual start)
Generic Packet Classifier: System32\DRIVERS\msgpc.sys (manual start)
Help and Support: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Human Interface Device Access: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
hpn: System32\DRIVERS\hpn.sys (system)
hpt3xx: System32\DRIVERS\hpt3xx.sys (system)
IEEE-1284.4 Driver HPZid412: System32\DRIVERS\HPZid412.sys (manual start)
Print Class Driver for IEEE-1284.4 HPZipr12: System32\DRIVERS\HPZipr12.sys (manual start)
USB to IEEE-1284.4 Translation Driver HPZius12: System32\DRIVERS\HPZius12.sys (manual start)
HTTP: System32\Drivers\HTTP.sys (manual start)
HTTP SSL: %SystemRoot%\System32\svchost.exe -k HTTPFilter (manual start)
i2omp: System32\DRIVERS\i2omp.sys (system)
i8042 Keyboard and PS/2 Mouse Port Driver: System32\DRIVERS\i8042prt.sys (system)
i81x: System32\DRIVERS\i81xnt5.sys (manual start)
iAimFP0: System32\DRIVERS\wADV01nt.sys (manual start)
iAimFP1: System32\DRIVERS\wADV02NT.sys (manual start)
iAimFP2: System32\DRIVERS\wADV05NT.sys (manual start)
iAimFP3: System32\DRIVERS\wSiINTxx.sys (manual start)
iAimFP4: System32\DRIVERS\wVchNTxx.sys (manual start)
iAimTV0: System32\DRIVERS\wATV01nt.sys (manual start)
iAimTV1: System32\DRIVERS\wATV02NT.sys (manual start)
iAimTV2: System32\DRIVERS\wATV03nt.sys (manual start)
iAimTV3: System32\DRIVERS\wATV04nt.sys (manual start)
iAimTV4: System32\DRIVERS\wCh7xxNT.sys (manual start)
InstallDriver Table Manager: "C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" (manual start)
IMAPI CD-Burning COM Service: C:\WINDOWS\System32\imapi.exe (manual start)
ini910u: System32\DRIVERS\ini910u.sys (system)
IntelIde: System32\DRIVERS\intelide.sys (system)
Intel Processor Driver: System32\DRIVERS\intelppm.sys (system)
IPv6 Windows Firewall Driver: system32\drivers\ip6fw.sys (manual start)
IP Traffic Filter Driver: System32\DRIVERS\ipfltdrv.sys (manual start)
IP in IP Tunnel Driver: System32\DRIVERS\ipinip.sys (manual start)
IP Network Address Translator: System32\DRIVERS\ipnat.sys (manual start)
iPodService: C:\Program Files\iPod\bin\iPodService.exe (manual start)
IPSEC driver: System32\DRIVERS\ipsec.sys (system)
IR Enumerator Service: System32\DRIVERS\irenum.sys (manual start)
PnP ISA/EISA Bus Driver: System32\DRIVERS\isapnp.sys (system)
Keyboard Class Driver: System32\DRIVERS\kbdclass.sys (system)
Microsoft Kernel Wave Audio Mixer: system32\drivers\kmixer.sys (manual start)
Server: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Workstation: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
LiveUpdate: "C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE" (manual start)
TCP/IP NetBIOS Helper: %SystemRoot%\System32\svchost.exe -k LocalService (autostart)
Messenger: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
NetMeeting Remote Desktop Sharing: C:\WINDOWS\System32\mnmsrvc.exe (manual start)
Unimodem Streaming Filter Device: system32\drivers\MODEMCSA.sys (manual start)
Mouse Class Driver: System32\DRIVERS\mouclass.sys (system)
mraid35x: System32\DRIVERS\mraid35x.sys (system)
WebDav Client Redirector: System32\DRIVERS\mrxdav.sys (manual start)
MRXSMB: System32\DRIVERS\mrxsmb.sys (system)
Distributed Transaction Coordinator: C:\WINDOWS\System32\msdtc.exe (manual start)
Windows Installer: C:\WINDOWS\System32\msiexec.exe /V (manual start)
Microsoft Streaming Service Proxy: system32\drivers\MSKSSRV.sys (manual start)
Microsoft Streaming Clock Proxy: system32\drivers\MSPCLOCK.sys (manual start)
Microsoft Streaming Quality Manager Proxy: system32\drivers\MSPQM.sys (manual start)
Microsoft System Management BIOS Driver: System32\DRIVERS\mssmbios.sys (manual start)
Microsoft Streaming Tee/Sink-to-Sink Converter: system32\drivers\MSTEE.sys (manual start)
NABTS/FEC VBI Codec: System32\DRIVERS\NABTSFEC.sys (manual start)
Norton AntiVirus Auto-Protect Service: "C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe" (autostart)
NAVENG: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20061107.019\NAVENG.Sys (manual start)
NAVEX15: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20061107.019\NavEx15.Sys (manual start)
Microsoft TV/Video Connection: System32\DRIVERS\NdisIP.sys (manual start)
Remote Access NDIS TAPI Driver: System32\DRIVERS\ndistapi.sys (manual start)
NDIS Usermode I/O Protocol: System32\DRIVERS\ndisuio.sys (manual start)
Remote Access NDIS WAN Driver: System32\DRIVERS\ndiswan.sys (manual start)
NetBIOS Interface: System32\DRIVERS\netbios.sys (system)
NetBT: System32\DRIVERS\netbt.sys (system)
Network DDE: %SystemRoot%\system32\netdde.exe (disabled)
Network DDE DSDM: %SystemRoot%\system32\netdde.exe (disabled)
Net Logon: %SystemRoot%\System32\lsass.exe (manual start)
Network Connections: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Network Location Awareness (NLA): %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Norton LiveConnect Service: "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll" (autostart)
Norton Protection Center Service: "C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE" (manual start)
NT LM Security Support Provider: %SystemRoot%\System32\lsass.exe (manual start)
Removable Storage: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
nv: System32\DRIVERS\nv4_mini.sys (manual start)
nv4: System32\DRIVERS\nv4.sys (manual start)
IPX Traffic Filter Driver: System32\DRIVERS\nwlnkflt.sys (manual start)
IPX Traffic Forwarder Driver: System32\DRIVERS\nwlnkfwd.sys (manual start)
OMCI: \SystemRoot\SYSTEM32\DRIVERS\OMCI.SYS (system)
Intel PentiumIII Processor Driver: System32\DRIVERS\p3.sys (system)
Parallel port driver: System32\DRIVERS\parport.sys (manual start)
PCI Bus Driver: System32\DRIVERS\pci.sys (system)
PCIIde: System32\DRIVERS\pciide.sys (system)
perc2: System32\DRIVERS\perc2.sys (system)
perc2hib: System32\DRIVERS\perc2hib.sys (system)
Padus ASPI Shell: system32\drivers\pfc.sys (manual start)
Plug and Play: %SystemRoot%\system32\services.exe (autostart)
Pml Driver HPZ12: C:\WINDOWS\System32\HPZipm12.exe (manual start)
IPSEC Services: %SystemRoot%\System32\lsass.exe (autostart)
WAN Miniport (PPTP): System32\DRIVERS\raspptp.sys (manual start)
Processor Driver: System32\DRIVERS\processr.sys (system)
Protected Storage: %SystemRoot%\system32\lsass.exe (autostart)
QoS Packet Scheduler: System32\DRIVERS\psched.sys (manual start)
Direct Parallel Link Driver: System32\DRIVERS\ptilink.sys (manual start)
ql1080: System32\DRIVERS\ql1080.sys (system)
Ql10wnt: System32\DRIVERS\ql10wnt.sys (system)
ql12160: System32\DRIVERS\ql12160.sys (system)
ql1240: System32\DRIVERS\ql1240.sys (system)
ql1280: System32\DRIVERS\ql1280.sys (system)
Remote Access Auto Connection Driver: System32\DRIVERS\rasacd.sys (system)
Remote Access Auto Connection Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
WAN Miniport (L2TP): System32\DRIVERS\rasl2tp.sys (manual start)
Remote Access Connection Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Remote Access PPPOE Driver: System32\DRIVERS\raspppoe.sys (manual start)
Direct Parallel: System32\DRIVERS\raspti.sys (manual start)
Rdbss: System32\DRIVERS\rdbss.sys (system)
RDPCDD: System32\DRIVERS\RDPCDD.sys (system)
Terminal Server Device Redirector Driver: System32\DRIVERS\rdpdr.sys (manual start)
Remote Desktop Help Session Manager: C:\WINDOWS\system32\sessmgr.exe (manual start)
Digital CD Audio Playback Filter Driver: System32\DRIVERS\redbook.sys (system)
Routing and Remote Access: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
Remote Procedure Call (RPC) Locator: %SystemRoot%\System32\locator.exe (manual start)
Remote Procedure Call (RPC): %SystemRoot%\system32\svchost -k rpcss (autostart)
QoS RSVP: %SystemRoot%\System32\rsvp.exe (manual start)
Security Accounts Manager: %SystemRoot%\system32\lsass.exe (autostart)
SAVRT: \??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRT.SYS (manual start)
SAVRTPEL: \??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRTPEL.SYS (system)
Symantec AVScan: "C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe" (manual start)
Smart Card: %SystemRoot%\System32\SCardSvr.exe (manual start)
CanoScan FBP Port Driver: \??\C:\WINDOWS\System32\drivers\ScFBPNT.SYS (autostart)
Task Scheduler: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Secdrv: System32\DRIVERS\secdrv.sys (manual start)
Secondary Logon: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
System Event Notification: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Serenum Filter Driver: System32\DRIVERS\serenum.sys (manual start)
Serial port driver: System32\DRIVERS\serial.sys (system)
Windows Firewall/Internet Connection Sharing (ICS): %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Shell Hardware Detection: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
SIS AGP Bus Filter: System32\DRIVERS\sisagp.sys (system)
BDA Slip De-Framer: System32\DRIVERS\SLIP.sys (manual start)
smwdm: system32\drivers\smwdm.sys (manual start)
Symantec Network Drivers Service: "C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe" (autostart)
Sony USB Filter Driver (SONYPVU1): System32\DRIVERS\SONYPVU1.SYS (manual start)
Sparrow: System32\DRIVERS\sparrow.sys (system)
SPBBCDrv: \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (system)
Symantec SPBBCSvc: "C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe" (autostart)
Microsoft Kernel Audio Splitter: system32\drivers\splitter.sys (manual start)
Print Spooler: %SystemRoot%\system32\spoolsv.exe (autostart)
ViviCam 35: System32\Drivers\Capt905c.sys (manual start)
System Restore Filter Driver: System32\DRIVERS\sr.sys (system)
System Restore Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Srv: System32\DRIVERS\srv.sys (manual start)
SSDP Discovery Service: %SystemRoot%\System32\svchost.exe -k LocalService (manual start)
Windows Image Acquisition (WIA): %SystemRoot%\System32\svchost.exe -k imgsvc (autostart)
BDA IPSink: System32\DRIVERS\StreamIP.sys (manual start)
Software Bus Driver: System32\DRIVERS\swenum.sys (manual start)
Microsoft Kernel GS Wavetable Synthesizer: system32\drivers\swmidi.sys (manual start)
MS Software Shadow Copy Provider: C:\WINDOWS\System32\dllhost.exe /Processid:{422750EB-86AA-4173-8A7E-FEBADE226929} (manual start)
Symantec Core LC: "C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe" (autostart)
symc810: System32\DRIVERS\symc810.sys (system)
symc8xx: System32\DRIVERS\symc8xx.sys (system)
SYMDNS: \SystemRoot\System32\Drivers\SYMDNS.SYS (manual start)
SymEvent: \??\C:\Program Files\Symantec\SYMEVENT.SYS (manual start)
SYMFW: \SystemRoot\System32\Drivers\SYMFW.SYS (manual start)
SYMIDS: \SystemRoot\System32\Drivers\SYMIDS.SYS (manual start)
SYMIDSCO: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\idsdefs\20061025.029\symidsco.sys (manual start)
symlcbrd: \??\C:\WINDOWS\system32\drivers\symlcbrd.sys (autostart)
SYMNDIS: \SystemRoot\System32\Drivers\SYMNDIS.SYS (manual start)
SYMREDRV: \SystemRoot\System32\Drivers\SYMREDRV.SYS (manual start)
SYMTDI: \SystemRoot\System32\Drivers\SYMTDI.SYS (system)
sym_hi: System32\DRIVERS\sym_hi.sys (system)
sym_u3: System32\DRIVERS\sym_u3.sys (system)
Microsoft Kernel System Audio Device: system32\drivers\sysaudio.sys (manual start)
Performance Logs and Alerts: %SystemRoot%\system32\smlogsvc.exe (manual start)
Telephony: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
TCP/IP Protocol Driver: System32\DRIVERS\tcpip.sys (system)
Terminal Device Driver: System32\DRIVERS\termdd.sys (system)
Terminal Services: %SystemRoot%\System32\svchost -k DComLaunch (manual start)
Themes: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
TosIde: System32\DRIVERS\toside.sys (system)
Distributed Link Tracking Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
ultra: System32\DRIVERS\ultra.sys (system)
Microcode Update Driver: System32\DRIVERS\update.sys (manual start)
Universal Plug and Play Device Host: %SystemRoot%\System32\svchost.exe -k LocalService (manual start)
Uninterruptible Power Supply: %SystemRoot%\System32\ups.exe (manual start)
Microsoft USB Generic Parent Driver: System32\DRIVERS\usbccgp.sys (manual start)
Scientific-Atlanta USB Cable Modem Driver: system32\DRIVERS\Sacm2A.sys (manual start)
Microsoft USB 2.0 Enhanced Host Controller Miniport Driver: System32\DRIVERS\usbehci.sys (manual start)
USB Root Hub (usbport): System32\DRIVERS\usbhub.sys (manual start)
Microsoft USB PRINTER Class: System32\DRIVERS\usbprint.sys (manual start)
USB Scanner Driver: System32\DRIVERS\usbscan.sys (manual start)
USB Mass Storage Driver: System32\DRIVERS\USBSTOR.SYS (manual start)
Microsoft USB Universal Host Controller Miniport Driver: System32\DRIVERS\usbuhci.sys (manual start)
VGA Display Controller.: \SystemRoot\System32\drivers\vga.sys (system)
VIA AGP Bus Filter: System32\DRIVERS\viaagp.sys (system)
ViaIde: System32\DRIVERS\viaide.sys (system)
Volume Shadow Copy: %SystemRoot%\System32\vssvc.exe (manual start)
Windows Time: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Remote Access IP ARP Driver: System32\DRIVERS\wanarp.sys (manual start)
WAN Miniport (ATW): System32\DRIVERS\wanatw4.sys (manual start)
Microsoft WINMM WDM Audio Compatibility Driver: system32\drivers\wdmaud.sys (manual start)
WebClient: %SystemRoot%\System32\svchost.exe -k LocalService (autostart)
Windows Management Instrumentation: %systemroot%\system32\svchost.exe -k netsvcs (autostart)
Portable Media Serial Number Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
WMI Performance Adapter: C:\WINDOWS\System32\wbem\wmiapsrv.exe (manual start)
Windows Media Player Network Sharing Service: C:\Program Files\Windows Media Player\WMPNetwk.exe (manual start)
Security Center: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
World Standard Teletext Codec: System32\DRIVERS\WSTCODEC.SYS (manual start)
Automatic Updates: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Windows Driver Foundation - User-mode Driver Framework Platform Driver: system32\DRIVERS\WudfPf.sys (manual start)
Windows Driver Foundation - User-mode Driver Framework Reflector: system32\DRIVERS\wudfrd.sys (manual start)
Windows Driver Foundation - User-mode Driver Framework: %SystemRoot%\system32\svchost.exe -k WudfServiceGroup (manual start)
Wireless Zero Configuration: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Network Provisioning Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)

---

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk *

Windows NT 'Wininit.ini':
PendingFileRenameOperations: *Registry value not found*

---

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: *Registry key not found*
SysTray: C:\WINDOWS\System32\stobject.dll

---

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

*No values found*

---

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

*No values found*

---

End of report, 42,222 bytes
Report generated in 0.422 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

stacy3

And here is the Log:

Logfile of HijackThis v1.99.1
Scan saved at 9:14:41 AM, on 11/08/06
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Folding@Home\winFAH.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Folding@Home\FahCore_78.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] "C:\Program Files\Norton Internet Security\UrlLstCk.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Folding@Home 5.03.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O15 - Trusted Zone: http://home.comcast.net
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://photo.walmart.com/photo/uploads/FujifilmUploadClient.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Companion) - http://us.dl1.yimg.com/download.yahoo.com/dl/toolbar/my/yiebio5_0_2_7.cab
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton LiveConnect Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

Trogan

Hi Stacy! I'm sorry for the delay. I've been a bit busy the last two days, and trying to read the log takes some time. Fortunately, the log looks clean to me.

Let me see what I can find out and I'll get back to you.