Tech Support Guy banner
Cancel
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice

Trojan.W32.looksky - Please confirm if Trojan removed from pc

750 Views 1 Reply 1 Participant Last post by  msant777, 
M
Hello,

I am helping my brother-in-law with his infected pc. I searched for this specific trojan in the forums and a possible fix, so I followed the instructions by downloading and running SmitFraudFix and SuperAntiSpyWare. If someone could take a look at the logs below to confirm the trojan has been wiped out. The pc is no longer displaying popups like it used to, but I would just like to get confirmation from the experts here at TechSupportGuy.
PC Specs: Windows XP SP2 Media Center Edition

Please see HJT log below...I have to post the other two separately because there were too many characters in this post.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:16:23 PM, on 9/30/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\HP\KBD\KBD.EXE
c:\windows\system\hpsysdrv.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\ClamWin\bin\ClamTray.exe
C:\Program Files\ClamWin\bin\ClamWin.exe
C:\Program Files\ClamWin\bin\clamscan.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?T...=Q405&bd=pavilion&pf=desktop&parm1=seconduser
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [LXCFCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCFtime.dll,[email protected]
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ClamWin] "C:\Program Files\ClamWin\bin\ClamTray.exe" --logon
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SecurePCCleaner] C:\Program Files\SecurePCCleaner\GDC.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: lxcf_device - - C:\WINDOWS\system32\lxcfcoms.exe

--
End of file - 6411 bytes

Thanks a ton!
See less See more
Save
Like
Status
Not open for further replies.
1 - 2 of 2 Posts
M
Here are the other two logs:

SmitFraudFix
SmitFraudFix v2.354

Scan done at 19:43:17.03, Tue 09/30/2008
Run from C:\Documents and Settings\HP_Administrator\Desktop\Virus fix\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process

»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
C:\WINDOWS\nsduo.dll deleted.
C:\WINDOWS\msmdev.dll deleted.

»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.

»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

C:\WINDOWS\main_uninstaller.exe Deleted
C:\WINDOWS\msmhost.dll Deleted
Deleting [HKEY_CLASSES_ROOT\CLSID\{2860EE7F-5D89-4167-9566-CA2A9C7A8092}]
C:\WINDOWS\privacy_danger\ Deleted
C:\DOCUME~1\HP_ADM~1\Desktop\Error Cleaner.url Deleted
C:\DOCUME~1\HP_ADM~1\Desktop\Privacy Protector.url Deleted
C:\DOCUME~1\HP_ADM~1\Desktop\Spyware?Malware Protection.url Deleted
C:\DOCUME~1\HP_ADM~1\FAVORI~1\Error Cleaner.url Deleted
C:\DOCUME~1\HP_ADM~1\FAVORI~1\Privacy Protector.url Deleted
C:\DOCUME~1\HP_ADM~1\FAVORI~1\Spyware?Malware Protection.url Deleted
C:\Program Files\VideoAccessCodec\ Deleted

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» AntiXPVSTFix

AntiXPVSTFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» RK

»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{69C96EA3-5457-4186-AEDF-9637CCA7E217}: DhcpNameServer=68.105.28.11 68.105.29.11 68.105.28.12
HKLM\SYSTEM\CS1\Services\Tcpip\..\{69C96EA3-5457-4186-AEDF-9637CCA7E217}: DhcpNameServer=68.105.28.11 68.105.29.11 68.105.28.12
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=68.105.28.11 68.105.29.11 68.105.28.12
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=68.105.28.11 68.105.29.11 68.105.28.12

»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» End

SUPERAntiSpyware
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 09/30/2008 at 09:06 PM

Application Version : 4.21.1004

Core Rules Database Version : 3583
Trace Rules Database Version: 1571

Scan type : Complete Scan
Total Scan Time : 01:14:40

Memory items scanned : 420
Memory threats detected : 0
Registry items scanned : 5695
Registry threats detected : 5
File items scanned : 104107
File threats detected : 187

Adware.Tracking Cookie
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][4].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][3].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][2].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\HP_Administrator\Cookies\[email protected][1].txt

Adware.Mirar/NetNucleus
C:\WINDOWS\Downloaded Program Files\WinATS.inf

Malware.LocusSoftware Inc/ConfidentSurf
HKCR\CLSID\{B33DE756-DEEE-4D7A-87DB-1D905BA2AA21}
HKCR\CLSID\{B33DE756-DEEE-4D7A-87DB-1D905BA2AA21}\InprocServer32
HKCR\CLSID\{B33DE756-DEEE-4D7A-87DB-1D905BA2AA21}\InprocServer32#ThreadingModel
HKCR\Folder\shellex\contextmenuhandlers\secure_del
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved#{B33DE756-DEEE-4D7A-87DB-1D905BA2AA21} [ secure_del ]

Malware.LocusSoftware Inc/BestSellerAntivirus
C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR\APPLICATION DATA\INSTALLER_EN[1].EXE
C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\ST0NW3CJ\INSTALLER_EN[1].EXE

Malware.LocusSoftware Inc/ErrClean
C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR\LOCAL SETTINGS\TEMP\NI.UGDC_0003_N108M2407\SETUP.EXE

Malware.Ultimate Defender
C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\67QJATY3\UDEFENDER_SETUP[1].EXE
C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\S5GDURCT\UDEFENDER_SETUP[1].EXE
C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\S5GDURCT\UDEFENDER_SETUP[2].EXE

Adware.MovieLand/MediaPipe
C:\PROGRAM FILES\FSUPPORT\NOTIFIER.EXE
C:\PROGRAM FILES\LICENSE_MANAGER\LICENSE_MANAGER.EXE

Malware.LocusSoftware Inc/Gen
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP108\A0012347.EXE

Trojan.Unclassified-Packed/Suspicious
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP108\A0012767.DLL

Trojan.Net-MSV/VPS-H
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP110\A0012912.DLL

Trojan.Unknown Origin
C:\WINDOWS\BROWSER.EXE

Trace.Known Threat Sources
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\GJXBI6N1\WinAntiVirusPro2007FreeInstall[1].exe
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\cut4_4[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\shadow_left2[1].png
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\clickr[1].htm
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\top_bg[1].jpg
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\bord_lr2[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\bttn[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\line[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\dvd[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\cut3[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\ind_txt[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\ind_tbl_bord[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\img3[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\clickr[1].htm
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\orng_cut1[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\03[1].swf
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\main_top[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\ind_img1[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\load_bttn[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\warning[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\shadow_con_right[1].png
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\name[1].jpg
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\UD_SecurityAdmin-levels[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\list[1].jpg
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\cd[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\spacer[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\orng_cut2[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\bg[2].jpg
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\buy_n[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\load_flash_bg[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\cuts3[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\cuts4[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\3[1].htm
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\main_top2[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\cut1_4[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\txt[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\ind_txt_bg[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\li[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\cut2[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\support[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\index[5].htm
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\download[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\cut1[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\shadow_bottom[1].png
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\logo[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\shadow_con_right[1].png
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\load_pointer[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\load_txt[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\css_land[1].css
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\cuts1[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\load_txt2[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\logo[1].jpg
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\cut3_2[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\shadow_con_left[1].png
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\txt[1].jpg
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\orng_cut3[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\box_cut3[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\cut2_2[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\download_bttn[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\6[1].htm
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\ind_img5[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\shadow_right[1].png
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\bord_bttm[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\css[1].css
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\bttn[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\shadow_cut1[1].png
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\ind_img3[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\bg[2].jpg
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\img1[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\con3[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\shadow_cut3[1].png
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\shadow_bottom[1].png
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\hd_bg[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\cut3_4[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\hd[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\bg[1].jpg
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\bg3[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\2[1].htm
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\shadow_cut4[1].png
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\bttn[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\cuts1[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\con1[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\5[1].htm
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\home[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\bg[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\box_bttm_bord[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\ind_img4[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\minify[1].php
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\spacer[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\load_bg[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\bg_tbl[1].jpg
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\orng_cut4[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\load_img1[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\con4[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\ind_box[1].jpg
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\bg[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\load_txt3[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\main[1].htm
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\cut1_2[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\ind_box1[1].jpg
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\box_cut4[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\detector[1].htm
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\window[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\home_s[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\down_n[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\02[1].swf
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\main[2].htm
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\spacer[2].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\cuts3[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\cut2_4[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\img2[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\minify[1].php
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\shadow_left[1].png
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\logo[1].jpg
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\5[1].htm
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\defender[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\cuts2[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\list[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\67QJATY3\cut4[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HWZMP65\con2[1].gif
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\ST0NW3CJ\shadow_bottom3[1].png
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\S5GDURCT\bg_main[1].gif

Thanks!!
See less See more
Save
Like
1 - 2 of 2 Posts
Status
Not open for further replies.
Tech Support Guy
A forum community dedicated to tech experts and enthusiasts. Come join the discussion about articles, computer security, Mac, Microsoft, Linux, hardware, networking, gaming, reviews, accessories, and more!
Full Forum Listing
Explore Our Forums
Hardware Virus & Other Malware Removal Off Topic Lounge Thread Games & Discussion Networking
Top