Hi,

When I turn on my pc immediatly 98% of my CPU is occupied...


Sorry about my englis....

I've run some trial ver software, here are the reports of them...



Lavasoft Ad-aware Personal Build 6.181
Logfile created on :sexta-feira, 2 de Julho de 2004 18:15:18
Created with Ad-aware Personal, free for private use.
Using reference-file :01R325 27.06.2004


Ad-aware Settings
=================
Set : Activate in-depth scan (Recommended)
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep scan registry


02-07-2004 18:15:18 - Scan started. (Smart mode)

Listing running processes
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ThreadCreationTime : 02-07-2004 17:14:28
BasePriority : Normal


#:2 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ThreadCreationTime : 02-07-2004 17:14:37
BasePriority : High


#:3 [services.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 02-07-2004 17:14:37
BasePriority : Normal
FileSize : 99 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Aplica
InternalName : services.exe
OriginalFilename : services.exe
ProductName : Sistema operativo Microsoft
Created on : 31-12-1979 23:00:00
Last accessed : 01-07-2004 23:00:00
Last modified : 20-11-2001 12:00:00

#:4 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 02-07-2004 17:14:37
BasePriority : Normal
FileSize : 11 KB
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
OriginalFilename : lsass.exe
ProductName : Microsoft
Created on : 31-12-1979 23:00:00
Last accessed : 01-07-2004 23:00:00
Last modified : 23-09-2002 20:42:48

#:5 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 02-07-2004 17:14:38
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 31-12-1979 23:00:00
Last accessed : 01-07-2004 23:00:00
Last modified : 20-11-2001 12:00:00

#:6 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 02-07-2004 17:14:38
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 31-12-1979 23:00:00
Last accessed : 01-07-2004 23:00:00
Last modified : 20-11-2001 12:00:00

#:7 [explorer.exe]
FilePath : C:\WINDOWS\
ThreadCreationTime : 02-07-2004 17:14:40
BasePriority : Normal
FileSize : 982 KB
FileVersion : 6.00.2800.1106 (xpsp1.020828-1920)
ProductVersion : 6.00.2800.1106
CompanyName : Microsoft Corporation
FileDescription : Explorador do Windows
InternalName : explorer
OriginalFilename : EXPLORER.EXE
ProductName : Sistema operativo Microsoft
Created on : 27-06-2004 16:57:50
Last accessed : 01-07-2004 23:00:00
Last modified : 23-09-2002 20:42:46

#:8 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 02-07-2004 17:14:41
BasePriority : Normal
FileSize : 50 KB
FileVersion : 5.1.2600.0 (XPClient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
OriginalFilename : spoolsv.exe
ProductName : Microsoft
Created on : 31-12-1979 23:00:00
Last accessed : 01-07-2004 23:00:00
Last modified : 20-11-2001 12:00:00

#:9 [ati2evxx.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 02-07-2004 17:14:41
BasePriority : Normal
FileSize : 100 KB
Created on : 30-01-2002 16:11:01
Last accessed : 01-07-2004 23:00:00
Last modified : 28-11-2001 18:23:50

#:10 [pavsrv51.exe]
FilePath : C:\Programas\Panda Software\Panda Antivirus Titanium\
ThreadCreationTime : 02-07-2004 17:14:41
BasePriority : High
FileSize : 264 KB
FileVersion : 6, 3, 0, 531
ProductVersion : 6.3
Copyright : Copyright
CompanyName : Panda Software
FileDescription : Panda Antivirus Service for Windows NT/2000
InternalName : pavsrv
OriginalFilename : pavsrv.exe
ProductName : Panda Antivirus
Created on : 30-06-2004 10:08:42
Last accessed : 01-07-2004 23:00:00
Last modified : 14-05-2003 16:03:36

#:11 [avengine.exe]
FilePath : C:\Programas\Panda Software\Panda Antivirus Titanium\
ThreadCreationTime : 02-07-2004 17:14:42
BasePriority : Normal
FileSize : 100 KB
FileVersion : 6, 3, 0, 492
ProductVersion : 6.3
Copyright : Copyright
CompanyName : Panda Software
FileDescription : Proceso an
InternalName : avengine
OriginalFilename : avengine.exe
ProductName : Panda Antivirus Windows NT/2000
Created on : 30-06-2004 10:08:39
Last accessed : 01-07-2004 23:00:00
Last modified : 14-05-2003 15:59:34

#:12 [atiptaxx.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 02-07-2004 17:14:44
BasePriority : Normal
FileSize : 300 KB
FileVersion : 6.13.10.2529
ProductVersion : 6.13.10.2529
Copyright : Copyright (C) 1998-2001 ATI Technologies Inc.
CompanyName : ATI Technologies, Inc.
FileDescription : ATI Desktop Control Panel
InternalName : Atiptaxx.exe
OriginalFilename : Atiptaxx.exe
ProductName : ATI Desktop Component
Created on : 30-01-2002 16:11:08
Last accessed : 01-07-2004 23:00:00
Last modified : 21-12-2001 22:58:30

#:13 [apoint.exe]
FilePath : C:\Programas\Apoint2K\
ThreadCreationTime : 02-07-2004 17:14:44
BasePriority : Normal
FileSize : 116 KB
FileVersion : 5.3.1.106
ProductVersion : 5.3.1.106
Copyright : Copyright (C) 1999-2001 Alps Electric Co., Ltd.
CompanyName : Alps Electric Co., Ltd.
FileDescription : Alps Pointing-device Driver
InternalName : Alps Pointing-device Driver
OriginalFilename : Apoint.exe
ProductName : Alps Pointing-device Driver
Created on : 29-01-2002 10:06:39
Last accessed : 01-07-2004 23:00:00
Last modified : 19-10-2001 19:46:40

#:14 [cepmtray.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 02-07-2004 17:14:44
BasePriority : Normal
FileSize : 80 KB
FileVersion : 1, 3, 0, 0
ProductVersion : 1, 3, 0, 0
Copyright : Copyright (C) 2001
CompanyName : Compal
FileDescription : CeTray MFC Application
InternalName : CeTray
OriginalFilename : CeTray.EXE
ProductName : CeTray Application
Created on : 05-02-2002 12:57:45
Last accessed : 01-07-2004 23:00:00
Last modified : 18-12-2001 8:41:42

#:15 [cpatr10.exe]
FilePath : C:\PROGRA~1\EzButton\
ThreadCreationTime : 02-07-2004 17:14:44
BasePriority : Normal
FileSize : 140 KB
FileVersion : 1.00
ProductVersion : 1.00
Copyright : Copyright
CompanyName : Dritek System Inc.
FileDescription : Compal ATR10 Easy Button ( Multi-Language )
InternalName : CPATR10
OriginalFilename : CPATR10.exe
ProductName : Dritek System Inc. CPATR10 10.29.2001 ( VC60 )
Created on : 29-01-2002 9:59:14
Last accessed : 01-07-2004 23:00:00
Last modified : 24-01-2002 16:50:36

#:16 [ceekey.exe]
FilePath : C:\Programas\TOSHIBA\E-KEY\
ThreadCreationTime : 02-07-2004 17:14:44
BasePriority : Normal
FileSize : 72 KB
FileVersion : 1, 3, 0, 5
ProductVersion : 1, 3, 0, 5
Copyright : Copyright (C) 2001
CompanyName : COMPAL
FileDescription : EKey MFC Application
InternalName : EKey
OriginalFilename : CeEKey.EXE
ProductName : EKey Application
Created on : 18-01-2002 1:19:06
Last accessed : 01-07-2004 23:00:00
Last modified : 18-01-2002 1:19:06

#:17 [rundll32.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 02-07-2004 17:14:45
BasePriority : Normal
FileSize : 31 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Executar uma DLL como uma aplica
InternalName : rundll
OriginalFilename : RUNDLL.EXE
ProductName : Sistema operativo Microsoft
Created on : 31-12-1979 23:00:00
Last accessed : 01-07-2004 23:00:00
Last modified : 20-11-2001 12:00:00

#:18 [vkanjyf.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 02-07-2004 17:14:45
BasePriority : Normal
FileSize : 351 KB
Created on : 27-06-2004 14:15:29
Last accessed : 01-07-2004 23:00:00
Last modified : 27-06-2004 14:15:26

#:19 [directcd.exe]
FilePath : C:\Programas\Adaptec\Easy CD Creator 5\DirectCD\
ThreadCreationTime : 02-07-2004 17:14:45
BasePriority : Normal
FileSize : 640 KB
FileVersion : 5.10 (131)
ProductVersion : 5.10 (131)
Copyright : Copyright
CompanyName : Roxio
FileDescription : DirectCD Application
InternalName : DirectCD
OriginalFilename : Directcd.exe
ProductName : DirectCD
Created on : 17-10-2001 10:50:02
Last accessed : 01-07-2004 23:00:00
Last modified : 17-10-2001 10:50:02

#:20 [update.exe]
FilePath : C:\Programas\Digital Patrol\Digital Patrol Scanner 5.0\
ThreadCreationTime : 02-07-2004 17:14:45
BasePriority : Normal
FileSize : 591 KB
Created on : 14-06-2004 22:45:44
Last accessed : 01-07-2004 23:00:00
Last modified : 14-06-2004 22:45:44

#:21 [apvxdwin.exe]
FilePath : C:\Programas\Panda Software\Panda Antivirus Titanium\
ThreadCreationTime : 02-07-2004 17:14:45
BasePriority : Normal
FileSize : 188 KB
FileVersion : 3.06.03
ProductVersion : 2.05.05
CompanyName : Panda Software International
FileDescription : ApVxdWin
InternalName : ApVxdWin.exe
OriginalFilename : ApVxdWin.exe
ProductName : Panda Antivirus Titanium
Created on : 30-06-2004 10:08:39
Last accessed : 01-07-2004 23:00:00
Last modified : 25-06-2003 17:59:12

#:22 [ctfmon.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 02-07-2004 17:14:46
BasePriority : Normal
FileSize : 13 KB
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
CompanyName : Microsoft Corporation
FileDescription : CTF Loader
InternalName : CTFMON
OriginalFilename : CTFMON.EXE
ProductName : Microsoft
Created on : 27-06-2004 16:57:34
Last accessed : 01-07-2004 23:00:00
Last modified : 23-09-2002 20:42:46

#:23 [msmsgs.exe]
FilePath : C:\Programas\Messenger\
ThreadCreationTime : 02-07-2004 17:14:46
BasePriority : Normal
FileSize : 1476 KB
FileVersion : 4.7.0041
ProductVersion : Version 4.7
Copyright : Copyright (c) Microsoft Corporation 1997-2001
CompanyName : Microsoft Corporation
FileDescription : Messenger
InternalName : msmsgs
OriginalFilename : msmsgs.exe
ProductName : Messenger
Created on : 27-06-2004 17:02:47
Last accessed : 01-07-2004 23:00:00
Last modified : 23-09-2002 20:42:48

#:24 [vkanjyf.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 02-07-2004 17:14:46
BasePriority : Normal
FileSize : 351 KB
Created on : 27-06-2004 14:15:29
Last accessed : 01-07-2004 23:00:00
Last modified : 27-06-2004 14:15:26

#:25 [apntex.exe]
FilePath : C:\Programas\Apoint2K\
ThreadCreationTime : 02-07-2004 17:14:56
BasePriority : Normal
FileSize : 32 KB
FileVersion : 5.0.1.13
ProductVersion : 5.0.1.13
Copyright : Copyright (C) 1998-2001 Alps Electric Co., Ltd.
CompanyName : Alps Electric Co., Ltd.
FileDescription : Alps Pointing-device Driver for Windows NT/2000
InternalName : Alps Pointing-device Driver for Windows NT/2000
OriginalFilename : ApntEx.exe
ProductName : Alps Pointing-device Driver for Windows NT/2000
Created on : 29-01-2002 10:06:36
Last accessed : 01-07-2004 23:00:00
Last modified : 13-07-2001 9:44:24

#:26 [pavproxy.exe]
FilePath : C:\Programas\Panda Software\Panda Antivirus Titanium\
ThreadCreationTime : 02-07-2004 17:14:59
BasePriority : Normal
FileSize : 144 KB
FileVersion : 3, 6, 10, 24
ProductVersion : 3, 6, 10, 24
Copyright : Copyright
CompanyName : Panda Software
FileDescription : PavProxy
InternalName : PavProxy
OriginalFilename : PavProxy.exe
ProductName : Mail Resident
Created on : 30-06-2004 10:08:41
Last accessed : 01-07-2004 23:00:00
Last modified : 12-06-2003 12:44:32

#:27 [ad-aware.exe]
FilePath : C:\PROGRA~1\LAVASOFT\AD-AWA~1\
ThreadCreationTime : 02-07-2004 17:15:07
BasePriority : Normal
FileSize : 668 KB
FileVersion : 6.0.1.181
ProductVersion : 6.0.0.0
Copyright : Copyright
CompanyName : Lavasoft Sweden
FileDescription : Ad-aware 6 core application
InternalName : Ad-aware.exe
OriginalFilename : Ad-aware.exe
ProductName : Lavasoft Ad-aware Plus
Created on : 29-06-2004 0:34:44
Last accessed : 01-07-2004 23:00:00
Last modified : 12-07-2003 20:00:20

Memory scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0


Started registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0


Started deep registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Deep registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0

Tracking Cookie Object recognized!
Type : File
Data : ana@mysearch[1].txt
Object : C:\Documents and Settings\Ana\Cookies\

Created on : 02-07-2004 0:23:45
Last accessed : 01-07-2004 23:00:00
Last modified : 02-07-2004 0:23:46



Tracking Cookie Object recognized!
Type : File
Data : ana@tribalfusion[1].txt
Object : C:\Documents and Settings\Ana\Cookies\

Created on : 02-07-2004 0:23:48
Last accessed : 01-07-2004 23:00:00
Last modified : 02-07-2004 0:23:50



Tracking Cookie Object recognized!
Type : File
Data : ana@tracking.thunderdownloads[1].txt
Object : C:\Documents and Settings\Ana\Cookies\

Created on : 02-07-2004 0:22:45
Last accessed : 01-07-2004 23:00:00
Last modified : 02-07-2004 0:22:46


¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯


Deep scanning and examining files (C
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯


Performing conditional scans..
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Conditional scan result:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 3


18:17:19 Scan complete

Summary of this scan
Total scanning time :00:02:00:713
Objects scanned :40102
Objects identified :3
Objects ignored :0
New objects :3


--------------------------------------------------------------------------------------


Report generated by Spybot: 2004-07-02 18:27

DoubleClick: Tracking cookie (Internet Explorer: Ana) (Cookie, nothing done)


BFast: Tracking cookie (Internet Explorer: Ana) (Cookie, nothing done)


DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3


--- Spybot - Search && Destroy version: 1.3 ---
2004-05-12 Includes\Cookies.sbi
2004-05-12 Includes\Dialer.sbi
2004-05-12 Includes\Hijackers.sbi
2004-05-12 Includes\Keyloggers.sbi
2004-05-12 Includes\LSP.sbi
2004-05-12 Includes\Malware.sbi
2004-05-12 Includes\Revision.sbi
2004-05-12 Includes\Security.sbi
2004-05-12 Includes\Spybots.sbi
2004-05-12 Includes\Tracks.uti
2004-05-12 Includes\Trojans.sbi

--------------------------------------------------------------------------------------

Logfile of HijackThis v1.97.7
Scan saved at 18:30:57, on 02-07-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Programas\Panda Software\Panda Antivirus Titanium\Pavsrv51.exe
C:\Programas\Panda Software\Panda Antivirus Titanium\AVENGINE.EXE
C:\WINDOWS\System32\atiptaxx.exe
C:\Programas\Apoint2K\Apoint.exe
C:\WINDOWS\System32\CePMTray.exe
C:\PROGRA~1\EzButton\CPATR10.EXE
C:\Programas\TOSHIBA\E-KEY\CeEKey.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System32\vkanjyf.exe
C:\Programas\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Programas\Digital Patrol\Digital Patrol Scanner 5.0\update.exe
C:\Programas\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Programas\Messenger\msmsgs.exe
C:\Programas\Apoint2K\Apntex.exe
C:\Programas\Panda Software\Panda Antivirus Titanium\pavProxy.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programas\Digital Patrol\Digital Patrol Scanner 5.0\scanner.exe
C:\WINDOWS\System32\taskmgr.exe
C:\Documents and Settings\Ana\Definições locais\Temp\Directório temporário 4 para hijackthis.zip\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pt/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hiperligações
O2 - BHO: (no name) - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem219.dll (file missing)
O2 - BHO: (no name) - {0000607D-D204-42C7-8E46-216055BF9918} - (no file)
O2 - BHO: My Search BHO - {014DA6C1-189F-421a-88CD-07CFE51CFF10} - C:\Programas\MySearch\bar\1.bin\S4BAR.DLL
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programas\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [SoundFusion] RunDll32 cwaprops.cpl,CrystalControlWnd
O4 - HKLM\..\Run: [Apoint] C:\Programas\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [CeEPOWER] C:\WINDOWS\System32\CePMTray.exe
O4 - HKLM\..\Run: [CPATR10] C:\PROGRA~1\EzButton\CPATR10.EXE
O4 - HKLM\..\Run: [CeEKey.exe] C:\Programas\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [AME_CSA] rundll32 amecsa.cpl,RUN_DLL
O4 - HKLM\..\Run: [Cryptographic Service] C:\WINDOWS\System32\chyxw.exe
O4 - HKLM\..\Run: [Microsoft IT Update] win64.exe
O4 - HKLM\..\Run: [MSN Update] dllconfg.exe
O4 - HKLM\..\Run: [Microsoft Update Machine] vkanjyf.exe
O4 - HKLM\..\Run: [Microsoft IIS] C:\WINDOWS\system32\syshost.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Programas\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Digital Patrol Update 5] C:\Programas\Digital Patrol\Digital Patrol Scanner 5.0\update.exe /autoupdate
O4 - HKLM\..\Run: [APVXDWIN] "C:\Programas\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [My Search Bar Eq] "C:\Programas\MySearch\bar\s4bareq.exe" /r
O4 - HKLM\..\RunServices: [Microsoft IT Update] win64.exe
O4 - HKLM\..\RunServices: [MSN Update] dllconfg.exe
O4 - HKLM\..\RunServices: [Microsoft Update Machine] vkanjyf.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programas\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Microsoft IT Update] win64.exe
O4 - HKCU\..\Run: [MSN Update] dllconfg.exe
O4 - HKCU\..\Run: [Microsoft Update Machine] vkanjyf.exe
O4 - HKCU\..\Run: [Microsoft Update] winsys32.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...165.3958217593
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab

--------------------------------------------------------------------------------------

Digital Patrol Scanner report
Created: 02 Jul 2004 in 18:29:12

Program Information:
[i] Digital Patrol Scanner version 5.00.08
[i] StopAPI version: 4.11.0.790
[i] Kernel version: 4.0.57
[i] Signature Check: 1.0.1.2 ProcessList: 1.0.0.1
[i] UnZIP: 2.8 UnRAR: 4.0.1 UnARJ: 1.0.1.14 UnMSCAB: 1.0.601.0 TheBAT: 1.0.0.3 Outlook Express: 1.0.0.7 Outlook Express v4: 1.0.1.4

[*] Scanning started: 02 Jul 2004 in 18:29:12[*] Antivirus database of 30 Jun 2004. Viruses: 42972.

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat can't open file
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat can't open file
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor.zip/cd_clint.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CommonName.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\PowerScan.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\PowerScan.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_0_124000.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_0_124100.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_0_124200.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_0_124300.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_143600.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_0_145900.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_0_146000.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_1_122100.gif archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_4_150900.gif archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_4_151000.gif archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_0_124000.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_0_124100.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_0_124200.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_0_124300.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_0_145900.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_0_0_146000.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_144300.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_108200.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_108300.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_109100.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_0_124000.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_0_124100.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_0_124200.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_0_124300.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_0_145900.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_0_146000.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_0_124000.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_0_124100.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_0_124200.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_0_124300.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_0_145900.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_0_146000.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_1_122100.gif archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_4_150800.gif archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_4_151000.gif archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_0_124000.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_0_124100.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_0_124200.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_0_124300.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_0_145900.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_0_146000.swf archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_1_122100.gif archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_0_124000.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_0_124100.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_0_124200.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_0_124300.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_0_145900.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_0_146000.htm archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_4_150900.gif archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_3_4_151000.gif archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_4_151100.gif archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/B_329_2_4_150900.gif archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor1.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator.zip/GatorPdpSetup.log archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor2.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor2.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor3.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor3.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\nCase.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\nCase.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit1.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit1.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit2.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit2.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eBatesMoneyMaker.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eBatesMoneyMaker.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr.zip/rvupdmgr.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr.zip/updmgr.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr.zip/simgr.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr.zip/data1.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr.zip/data2.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr1.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr1.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINDashBar.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINDashBar.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator1.zip/GStartup.lnk archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator1.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator2.zip/GMT.exe.manifest archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator2.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator3.zip/CMEDiagnostics.log archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator3.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator4.zip/GatorSupportInfo.txt archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator4.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator5.zip/mepgh.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator5.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator6.zip/mepcmeft.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator6.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator7.zip/meprca.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator7.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator8.zip/mepcme.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator8.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator9.zip/Helper.wav archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator9.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator10.zip/FillIn.wav archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator10.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator11.zip/Gator.log archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator11.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/GMT.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/GatorStubSetup.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/GUninstaller.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/egIEEngine.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/EGIEProcess.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/EGNSEngine.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/EGGCEngine.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/GatorRes.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/Data\User1.gud archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/Gator.log archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/scripts\meperr.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/scripts\mepgus.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/scripts\mepcat.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/scripts\mepoem.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/scripts\mepsnd-ksa.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/scripts\mepsnd-ksa.dat.bak archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/scripts\sitehash4.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/scripts\mepsnd-gs.dat.bak archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/scripts\mepsnd-gs.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/mepbs.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/mepimg.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\BannerHash3.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gd\Q0TASJbQBgAAALeq-toBgnpj.gdt2 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gd\Q0TASJbQBgAAALeq-toBgnpj.gbt2 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gd\Q0SCKB1oCQAAAKHWkWlfOIK5PUg2Lov0Nhk===.gdt2 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gd\Q0SCKB1oCQAAAKHWkWlfOIK5PUg2Lov0Nhk===.gbt2 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gd\Q0SXiX9rCQAAAO5ggSPtyQwdIZ0-5NocXaE===.gdt2 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gd\Q0SXiX9rCQAAAO5ggSPtyQwdIZ0-5NocXaE===.gbt2 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gg\1209-11.grp2 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gg\1322-2.grp2 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\ga\1.ga archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\ga\446.ga archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\ga\1151.ga archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\ga\1309.ga archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gb\20813\20813.gbd3 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gb\20813\20813.ph archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gb\20813\22513.1\content22513-0.html archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gb\20813\22513.1\educha_p_v1_020304.gif archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gb\20814\20814.gbd3 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gb\23294\23294.gbd3 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gb\23148\23148.gbd3 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gb\18845\18845.gbd3 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gb\22367\22367.gbd3 archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/1l429d7875\gbaxl2.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator13.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator12.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator12.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/CMESys.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/CMEIIAPI.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/GAppMgr.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/GController.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/GDwldEng.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/GIocl.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/GIoclClient.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/GMTProxy.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/GObjs.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/GStore.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/GStoreServer.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/Gtools.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/store\core\svclist archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/store\core\col archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/store\core\syscfg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/store\core\appllist archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/store\core\appmgr.cfg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/store\core\appmgrgui.zip archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/store\core\hfixcfg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/store\core\odm.cfg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/store\core\locappllist archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator15.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator14.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GAINGator14.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\nCase1.zip/msbb.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\nCase1.zip/log0.txt archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\nCase1.zip/log.bak.txt archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\nCase1.zip/FLEOK\msbb.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\nCase1.zip/FLEOK\log.bak.txt archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\nCase1.zip/aurl.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\nCase1.zip/ncmyb.dll archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\nCase1.zip/kyf.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\nCase1.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar1.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar1.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar2.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar2.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar3.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar3.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar4.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar4.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar5.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar5.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar6.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar6.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar7.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar7.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar8.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar8.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar9.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\GigaTechSuperBar9.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\KeenValuePerfectNav.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\KeenValuePerfectNav.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\KeenValuePerfectNav1.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\KeenValuePerfectNav1.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\KeenValuePerfectNav2.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\KeenValuePerfectNav2.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\KeenValuePerfectNav3.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\KeenValuePerfectNav3.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\KeenValuePerfectNav4.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\KeenValuePerfectNav4.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\KeenValuePerfectNav5.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\KeenValuePerfectNav5.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav1.zip/Srng.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav1.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav2.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav2.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav3.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav3.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav4.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav4.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav5.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav5.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav6.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ShopNav6.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor4.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Cydoor4.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WurldMedia.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WurldMedia.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit3.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit3.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit4.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit4.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit5.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit5.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit6.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit6.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit7.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit7.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit8.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit8.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr2.zip/rvupdmgr.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr2.zip/updmgr.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr2.zip/simgr.exe archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr2.zip/data1.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr2.zip/data2.dat archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr2.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr3.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eUniverseUpdMgr3.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit9.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit9.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit10.zip/sbRecovery.reg archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit10.zip/sbRecovery.ini archive: password protected
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit11.zip/sbRecovery.reg archive: password protected
C:\Documents a