Malwarebytes, HJT, SAS, msconfig, won't run

tallisall · May 28, 2009

Hi,

A friend brought me his clone machine (AMD Athlon-3200, 512mb ram, xp-pro-sp2) and it is infected with WinPC Defender and System Security. It blocks all of the removal tools that I have tried to load such as Malwarebytes, HJT, SAS, ProcessExplorer, and RootRepeal. It also will not let me run msconfig and the Security Center icon is missing in Control Panel. It did let me backup his docs and other stuff to an external hard drive. I am not sure what to try next. I read some of the posts here, but I lack the knowledge of the forum experts.

I need some help. Thanks in advance.

AdvancedSetup · May 30, 2009

Please take a look at the following posts and see if they help you to resolve this or not.

Potential Malware infection issues to review to get MBAM running

If so then please update and run MBAM and do a Quick Scan.

Update and Scan with Malwarebytes' Anti-Malware

Start MalwareBytes AntiMalware (Vista users must Right click and choose RunAs Admin)
Please DO NOT run MBAM in Safe Mode unless requested to, you MUST run it in normal Windows mode.
- Update Malwarebytes' Anti-Malware
- Select the Update tab
- Click Update
[*]When the update is complete, select the Scanner tab
[*]Select Perform quick scan, then click Scan.
[*]When the scan is complete, click OK, then Show Results to view the results.
[*]Be sure that everything is checked, and click Remove Selected.
[*]When completed, a log will open in Notepad. please copy and paste the log into your next reply
- If you accidently close it, the log file is saved here and will be named like this:
- C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

Then post back the MBAM log and a new Hijackthis log.

Then run DDS

Download

DDS

and save it to your desktop

http://download.bleepingcomputer.com/sUBs/dds.scr

Disable any script blocker if your Anti-Virus/Anti-Malware has it.

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click

dds.scr

to run the tool.

When done, the

DDS.txt

will open.

Click Yes at the next prompt for Optional Scan.

When done, DDS will open two (2) logs:

DDS.txt
Attach.txt

Save both reports to your desktop
Please include the following logs in your next reply:
DDS.txt
and
Attach.txt

tallisall · May 30, 2009

Hi,

I have attempted to run ProcessExplorer and RootRepeal. When I try to launch any exe file the malware pops up a message that says that exe is infected and has been stopped from running. I tried DDS.scr and got the same results. Also it does the same thing with every executable that I have tried. (Word, Excel, Acrobat, etc.) When I tried to bootup in safe mode, it came up for about 30 seconds, then got blue screen of death (system halted, etc) I have not been able to run any exe so far except Windows Explorer

Thanks

AdvancedSetup · May 31, 2009

This sounds like it's been hit with the Virut virus. If it has then you'll need to wipe the box and reinstall Windows.

You can try to download and run this from SAFE MODE and it will tell us for sure.

Please download to your Desktop: Dr.Web CureIt

After the file has downloaded, disable your current Anti-Virus and disconnect from the Internet
Doubleclick the drweb-cureit.exe file, then click the Start button, then the OK button to perform an Express Scan.
This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it.
Once the short scan has finished, Click on the Complete scan radio button.
Then click on the Settings menu on top, the select Change Settings or press the F9 key. You can also change the Language
Choose the Scanning tab and I recomend leaving the Heuristic analysis enabled (this can lead to False Positives though)
On the File types tab ensure you select All files
Click on the Actions tab and set the following:
- Objects Infected objects = Cure, Incurable objects = Move, Suspicious objects = Report
- Infected packages Archive = Move, E-mails = Report, Containers = Move
- Malware Adware = Move, Dialers = Move, Jokes = Move, Riskware = Move, Hacktools = Move
- Do not change the Rename extension - default is: #??
- Leave the default save path for Moved files here: %USERPROFILE%\DoctorWeb\Quarantine\
- Leave prompt on Action checked
[*]On the Log file tab leave the Log to file checked.
[*]Leave the log file path alone: %USERPROFILE%\DoctorWeb\CureIt.log
[*]Log mode = Append
[*]Encoding = ANSI
[*]Details Leave Names of file packers and Statistics checked.
[*]Limit log file size = 2048 KB and leave the check mark on the Maximum log file size.
[*]On the General tab leave the Scan Priority on High
[*]Click the Apply button at the bottom, and then the OK button.
[*]On the right side under the Dr Web Anti-Virus Logo you will see 3 little buttons. Click the left VCR style Start button.
[*]In this mode it will scan Boot sectors of all disks, All removable media, and all local drives
[*]The more files and folders you have the longer the scan will take. On large drives it can take hours to complete.
[*]When the Cure option is selected, an additional context menu will open. Select the necessary action of the program, if the curing fails.
[*]Click 'Yes to all' if it asks if you want to cure/move the files.
[*]This will move it to the %USERPROFILE%\DoctorWeb\Quarantine\ folder if it can't be cured. (in this case we need samples)
[*]After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list
[*]Save the report to your Desktop. The report will be called DrWeb.csv
[*]Close Dr.Web Cureit.
[*]Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot.
[*]After reboot, post the contents of the log from Dr.Web you saved previously to your Desktop in your next reply with a new hijackthis log.

If it won't run then run this.

Download and burn this from a clean computer and run it on the infected computer. Write down what it finds.

Avira AntiVir Rescue System

Requires access to a working computer with a CD/DVD burner to create a bootable CD.

Download the
Avira AntiVir Rescue System
from
here
Place a blank CD in your burner and double-click on the downloaded file named
rescuecd.exe
The program will automatically burn the CD for you.
Place the burned CD into the affected computer and start the computer from this CD.
On the bottom left side of the screen there are 2 flags. Using your mouse click on the British flag to use English.
Click on the
Configuration
button.
- Select
  Scan all files
- Select
  Try to repair infected files
  and
  Rename files, if they cannot be removed
- Select
  Scan for dialers
- Select
  Scan for joke programs (Jokes)
- Select
  Scan for games
- Select
  Scan for spyware (SPR)
[*]
Click on
Virus scanner
[*]
Click on
Start scanner
at the bottom of the screen
[*]
Currently the program does not support saving a log. Write down the amount of items for Records, Suspect files, and Warnings

The Avira AntiVir Rescue System is a Linux-based application that allows accessing computers that cannot be booted anymore and is updated several times a day so that the most recent security updates are always available.

Possible solutions to Screen Resolution and other issues

Please see the post
here
if you're unable to view the entire screen of Avira.
You can also review this one
Fixed Rescue CD Resolution Probs with Dell Video
Currently only the German keyboard is supported.
Command Line not working
English keyboards require work arounds.
Some computers attempt to mount the floppy even though they don't have one. You may need to go in to the BIOS and disable the floppy drive in order to mount your hard drive for scanning.

tallisall · June 1, 2009

Hi,

I downloaded the drweb and the avira antivir rescue system file, and burned the cd. I ran the drweb in safe mode 3 times because it never finished. During 1st run it finished the mem scan and I configured it as per your last post for full scan. It ran for approx. 5 minutes and rebooted. I ran 2nd time and it didnot finish mem scan before it msod with this error-kernel_data_inpage_error stop:0x0000007a. I ran 3rd time and got to complete scan, it ran about 5 minutes and bsod with this error kernek_stack_inpage_error stop: 0x00000077 (0xc000000e, 0x00000000, 0x00437000) I did not know if I should run the Avira disk now or wait for more instructions. Here are the logs from drweb.

=============================================================================

Dr.Web Scanner for Windows v5.00.3 (5.00.3.05144)

Log generated on: 2009-05-31, 16:59:55 [sKRABANEK1][Ray]

Command line: "C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\xs89q.exe" /lng /ini:setup_XP.ini

Operating system: Windows XP Professional x86 (Build 2600), Service Pack 3

=============================================================================

DwShield started

Engine version: 5.00 (5.00.0.12182)

Engine API version: 2.02

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\f671d3b7 - 8 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\8a30a138 - 4697 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\26c4a9a8 - 2792 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\f4801f85 - 5841 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\2a2c9eb2 - 2260 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\c3507a3b - 4796 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\10f165db - 5098 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\c30d7126 - 4891 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\22607e50 - 5033 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\8da58e3f - 3254 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\12b05264 - 5241 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\420da9c5 - 7585 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\184b18b4 - 5298 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\addf37e1 - 5947 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\70c32e12 - 6039 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\582511ce - 5309 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\53be5c47 - 3511 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\ea3f461d - 2495 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\4574c000 - 4565 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\28359015 - 4467 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\6985649d - 5196 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\9fc197f7 - 2359 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\459ec2c5 - 1938 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\892c9d50 - 3335 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\aca5ce68 - 3185 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\69b3bc95 - 1468 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\3849b0fe - 280 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\cc643a6e - 567 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\c7b99081 - 1194 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\b44f0849 - 423328 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\c69f92cb - 461 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\329cdeb4 - 626 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\ce775dd1 - 425 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\67986041 - 925 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\12e227a1 - 840 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\ca785525 - 3316 virus records

[Virus database] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\15cf1944 - 19303 virus records

Total virus records: 557873

[self-checking] C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\xs89q.exe

Key file: C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\setup.key

License key number: 0010537607

Registered to: A User

License key activates on: 2008-12-05

License key expires on: 2009-06-07

Process in memory: System:4 - OK

Process in memory: \SystemRoot\System32\smss.exe:184 - OK

Process in memory: \??\C:\WINDOWS\system32\csrss.exe:232 - OK

Process in memory: \??\C:\WINDOWS\system32\winlogon.exe:256 - OK

Process in memory: C:\WINDOWS\system32\services.exe:304 - OK

Process in memory: C:\WINDOWS\system32\lsass.exe:316 - OK

Process in memory: C:\WINDOWS\system32\svchost.exe:476 - OK

Process in memory: C:\WINDOWS\system32\svchost.exe:552 - OK

Process in memory: C:\WINDOWS\system32\svchost.exe:608 - OK

Process in memory: C:\WINDOWS\Explorer.EXE:920 - OK

Process in memory: C:\Program Files\Internet Explorer\Iexplore.exe:960 - OK

Process in memory: C:\WINDOWS\system32\ctfmon.exe:1036 - OK

Process in memory: C:\Documents and Settings\Ray\Desktop\drweb-cureit.exe:1216 - OK

Process in memory: C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\68clxk.exe:1284 - OK

Process in memory: C:\DOCUME~1\Ray\LOCALS~1\Temp\RarSFX1\xs89q.exe:1296 - OK

[Memory scanning] No viruses found

Master Boot Record HDD1 - OK

[scan path] c:\documents and settings\all users\application data\13335464\13335464.exe

c:\documents and settings\all users\application data\13335464\13335464.exe packed by FLY-CODE

>c:\documents and settings\all users\application data\13335464\13335464.exe - OK

[scan path] c:\documents and settings\all users\start menu\programs\startup\desktop.ini

c:\documents and settings\all users\start menu\programs\startup\desktop.ini - OK

[scan path] c:\documents and settings\default user\start menu\programs\startup\desktop.ini

c:\documents and settings\default user\start menu\programs\startup\desktop.ini - OK

[scan path] c:\documents and settings\ray\application data\pcdefender.exe

c:\documents and settings\ray\application data\pcdefender.exe infected with Trojan.Packed.2463 - incurable - moved

[scan path] c:\documents and settings\ray\desktop\drweb-cureit.exe

c:\documents and settings\ray\desktop\drweb-cureit.exe - archive ZIP

>c:\documents and settings\ray\desktop\drweb-cureit.exe/be-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/bg-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/cn-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/cs-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/de-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/dwebio16.dll - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/dwebio32.dll packed by ASPACK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/dwebio32.dll - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/el-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm - archive CHM

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/#IDXHDR - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/#ITBITS - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/#IVB - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/#STRINGS - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/#SYSTEM - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/#TOPICS - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/#URLSTR - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/#URLTBL - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/#WINDOWS - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/$FIftiMain - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/$OBJINST - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/$WWAssociativeLinks/BTree - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/$WWAssociativeLinks/Data - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/$WWAssociativeLinks/Map - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/$WWAssociativeLinks/Property - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/$WWKeywordLinks/Property - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/bull.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/butpause2.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/butstart1.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/butstop3.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/com_params.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/CSHelp.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/default.css - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/en-drwebgui.hhc - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/en-drwebgui_popup_text.js - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/helpman_topicinit.js - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/idd_aboutbox.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/idd_curesettings.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/idd_dialog_main.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/idd_dialog_scan.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/idd_dialog_scan_path.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/idd_dialog_stat.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/idd_proppage_actions.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/idd_proppage_common.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/idd_proppage_log.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/idd_proppage_scan.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/idd_proppage_types.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/intro.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/legal.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/open.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/ph_adv.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc01.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc02.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc03.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc_action.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc_action_adv.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc_drweb_logo.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc_general.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc_inf.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc_log.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc_path_mask.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc_scan.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc_stat.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/sc_types.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/scan_params.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/scan_settings.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm/scanning.htm - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/en-drwebgui.chm - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/eo-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/es-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/et-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/fr-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/hu-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/it-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/ja-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/ko-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/lt-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/lv-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/nl-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/no-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/pl-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/pt-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm - archive CHM

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/#IDXHDR - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/#ITBITS - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/#IVB - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/#STRINGS - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/#SYSTEM - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/#TOPICS - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/#URLSTR - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/#URLTBL - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/#WINDOWS - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/$FIftiMain - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/$OBJINST - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/$WWAssociativeLinks/BTree - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/$WWAssociativeLinks/Data - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/$WWAssociativeLinks/Map - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/$WWAssociativeLinks/Property - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/$WWKeywordLinks/Property - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/bull.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/butpause.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/butstart.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/butstop.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/com_params.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/CSHelp.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/default.css - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/helpman_topicinit.js - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/idd_aboutbox.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/idd_curesettings.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/idd_dialog_main.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/idd_dialog_scan.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/idd_dialog_scan_path.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/idd_dialog_stat.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/idd_proppage_actions.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/idd_proppage_common.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/idd_proppage_log.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/idd_proppage_scan.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/idd_proppage_types.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/intro.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/open.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/ph_adv.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/ru-drwebgui.hhc - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/ru-drwebgui_popup_text.js - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc01.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc02.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc03.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc_action.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc_action_adv.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc_drweb_logo.zoom76.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc_general.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc_inf.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc_log.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc_path_mask.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc_scan.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc_stat.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/sc_types.png - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/scan_params.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/scan_settings.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/scanning.htm - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm/topic.htm - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/ru-drwebgui.chm - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/setup.dll - archive BINARYRES

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/setup.dll/data001 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/setup.dll - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/setup.key - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/setup_me.ini - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/setup_xp.ini - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/sk-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/tr-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/uk-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/uz-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/zh-cureit.dwl - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat - archive ZIP

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/_cureit.ico - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ar-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ar-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ar-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ar-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ar-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ar-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ar.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/be-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/be-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/be-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/be-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/be-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/be-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/be.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/bg-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/bg-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/bg-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/bg-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/bg-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/bg-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/bg.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cn-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cn-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cn-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cn-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cn.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cs-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cs-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cs-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cs-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cs-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cs-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cs.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/de-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/de-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/de-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/de-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/de-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/de-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/de.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/el-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/el-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/el-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/el-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/el-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/el-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/el.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/en-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/en-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/en-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/en-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/en-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/en-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/en.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/eo-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/eo-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/eo-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/eo-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/eo-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/eo-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/eo.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/es-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/es-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/es-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/es-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/es-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/es-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/es.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/et-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/et-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/et-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/et-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/et-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/et-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/et.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fa-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fa-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fa-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fa-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fa-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fa-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fa.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fi-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fi-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fi-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fi-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fi-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fi-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fi.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fr-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fr-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fr-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fr-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fr-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fr-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fr.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hu-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hu-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hu-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hu-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hu-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hu-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hu.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hy-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hy-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hy-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hy-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hy-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hy-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hy.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/it-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/it-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/it-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/it-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/it-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/it.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ja-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ja-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ja-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ja-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ja.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ka-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ka-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ka-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ka-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ka-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ka-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ka.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ko-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ko-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ko-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ko-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ko.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lt-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lt-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lt-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lt-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lt-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lt-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lt.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lv-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lv-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lv-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lv-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lv-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lv-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lv.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/nl-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/nl-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/nl-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/nl-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/nl.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/no-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/no-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/no-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/no.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pl-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pl-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pl-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pl-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pl-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pl-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pl.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pt-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pt-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pt-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pt-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pt-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pt-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pt.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ru-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ru-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ru-banner0.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ru-banner1.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ru-history.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ru-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ru-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ru-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ru-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ru.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sk-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sk-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sk-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sk-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sk-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sk-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sk.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sl-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sl-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sl-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sl-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sl-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sl-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sl.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/th-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/th-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/th-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/th-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/th-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/th-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/th.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/tr-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/tr-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/tr-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/tr-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/tr-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/tr-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/tr.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uk-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uk-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uk-history.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uk-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uk-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uk-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uk-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uk.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uz-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uz-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uz-slogan.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uz-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uz-title.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uz-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uz.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/vi-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/vi-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/vi-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/vi-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/vi.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/zh-2.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/zh-action.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/zh-start.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/zh-update.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/zh.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/_exit.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/_globe.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/_green.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/_help-mirror.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/_help.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/_help0-mirror.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/_help0.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/_history.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/_logo.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/_main-mirror.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/_main.bmp - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ar-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ar-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/be-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/be-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/bg-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/bg-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cn-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cn-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cs-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/cs-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/de-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/de-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/el-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/el-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/en-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/en-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/eo-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/eo-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/es-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/es-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/et-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/et-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fa-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fa-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fi-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fi-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fr-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/fr-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hu-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hu-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hy-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/hy-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/it-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/it-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ja-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ja-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ka-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ka-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ko-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ko-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lt-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lt-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lv-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/lv-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/nl-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/nl-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/no-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/no-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pl-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pl-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pt-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/pt-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ru-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/ru-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sk-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sk-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sl-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/sl-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/th-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/th-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/tr-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/tr-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uk-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uk-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uz-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/uz-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/vi-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/vi-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/zh-help.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/zh-start.txt - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat/68clxk.ini - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.dat - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/68clxk.exe - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/xs89q.exe - archive BINARYRES

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/xs89q.exe/data001 packed by ASPACK

>>>c:\documents and settings\ray\desktop\drweb-cureit.exe/xs89q.exe/data001 - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/xs89q.exe/data002 - OK

>>c:\documents and settings\ray\desktop\drweb-cureit.exe/xs89q.exe/data003 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/xs89q.exe - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/c7b99081 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/cc643a6e - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/3849b0fe - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/69b3bc95 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/aca5ce68 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/892c9d50 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/459ec2c5 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/9fc197f7 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/6985649d - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/28359015 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/4574c000 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/ea3f461d - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/53be5c47 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/582511ce - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/70c32e12 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/addf37e1 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/184b18b4 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/420da9c5 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/12b05264 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/8da58e3f - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/22607e50 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/c30d7126 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/10f165db - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/c3507a3b - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/2a2c9eb2 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/f4801f85 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/26c4a9a8 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/8a30a138 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/b44f0849 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/15cf1944 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/ca785525 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/f671d3b7 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/12e227a1 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/67986041 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/ce775dd1 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/329cdeb4 - OK

>c:\documents and settings\ray\desktop\drweb-cureit.exe/c69f92cb - OK

c:\documents and settings\ray\desktop\drweb-cureit.exe - OK

[scan path] c:\documents and settings\ray\local settings\temp\hgu8ynfx.dll

c:\documents and settings\ray\local settings\temp\hgu8ynfx.dll packed by ASPACK

>c:\documents and settings\ray\local settings\temp\hgu8ynfx.dll - OK

[scan path] c:\documents and settings\ray\local settings\temp\rarsfx1\68clxk.exe

c:\documents and settings\ray\local settings\temp\rarsfx1\68clxk.exe - OK

[scan path] c:\documents and settings\ray\local settings\temp\rarsfx1\xs89q.exe

c:\documents and settings\ray\local settings\temp\rarsfx1\xs89q.exe - archive BINARYRES

>c:\documents and settings\ray\local settings\temp\rarsfx1\xs89q.exe/data001 packed by ASPACK

>>c:\documents and settings\ray\local settings\temp\rarsfx1\xs89q.exe/data001 - OK

>c:\documents and settings\ray\local settings\temp\rarsfx1\xs89q.exe/data002 - OK

>c:\documents and settings\ray\local settings\temp\rarsfx1\xs89q.exe/data003 - OK

c:\documents and settings\ray\local settings\temp\rarsfx1\xs89q.exe - OK

[scan path] c:\windows\system32\drivers\uacylkdvjbphewxngi.sys

c:\windows\system32\drivers\uacylkdvjbphewxngi.sys packed by PESTUB

>c:\windows\system32\drivers\uacylkdvjbphewxngi.sys packed by FLY-CODE

>>c:\windows\system32\drivers\uacylkdvjbphewxngi.sys - OK

[scan path] c:\windows\system32\fontext.dll

c:\windows\system32\fontext.dll - archive BINARYRES

>c:\windows\system32\fontext.dll/data001 packed by MS COMPRESS

>>c:\windows\system32\fontext.dll/data001 - OK

>c:\windows\system32\fontext.dll/data002 packed by MS COMPRESS

>>c:\windows\system32\fontext.dll/data002 - OK

c:\windows\system32\fontext.dll - OK

[scan path] c:\windows\system32\macromed\flash\flash9f.ocx

c:\windows\system32\macromed\flash\flash9f.ocx packed by ZLIB

>c:\windows\system32\macromed\flash\flash9f.ocx - archive BINARYRES

>>c:\windows\system32\macromed\flash\flash9f.ocx/data001 - OK

>>c:\windows\system32\macromed\flash\flash9f.ocx/data002 - OK

>>c:\windows\system32\macromed\flash\flash9f.ocx/data003 - OK

>>c:\windows\system32\macromed\flash\flash9f.ocx/data004 - OK

>c:\windows\system32\macromed\flash\flash9f.ocx - OK

-----------------------------------------------------------------------------

Scan statistics

-----------------------------------------------------------------------------

Scanned: 1102

Infected: 1

Modifications: 0

Suspicious: 0

Adware: 0

Dialers: 0

Jokes: 0

Riskware: 0

Hacktools: 0

Cured: 0

Deleted: 0

Renamed: 0

Moved: 1

Ignored: 0

Scan speed: 1472 Kb/s

Scan time: 00:02:09

-----------------------------------------------------------------------------

[scan path] C:\

C:\Google Updater.exe packed by PECOMPACT

>>C:\Google Updater.exe/data004 probably infected with DLOADER.Trojan

>C:\Google Updater.exe - archive contains infected objects - moved

C:\b6d153a670857559c8aa63b15a95ef\MRT.exe packed by BINARYRES

>C:\b6d153a670857559c8aa63b15a95ef\MRT.exe packed by BINARYRES

C:\Documents and Settings\All Users\Application Data\13335464\13335464.exe packed by FLY-CODE

>C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.6.2.9\iTunes.msi/stream000 packed by PESTUB

>>C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.6.2.9\iTunes.msi/stream002/iTunes.exe packed by ZLIB

>>C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.6.2.9\QuickTime.msi/stream000/QuickTimePlayer.exe packed by FLY-CODE

C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe packed by BINARYRES

C:\Documents and Settings\All Users\Application Data\NOS\Adobe_Downloads\nos_21278.dat packed by FLY-CODE

C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\C2CD97BCD8524DE79DC188FA2460C61A\Install_SpontaniaVideoCollaboration.exe packed by BINARYRES

C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\C2CD97BCD8524DE79DC188FA2460C61A\uninst.exe packed by BINARYRES

C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Game List.swf packed by ZLIB

>>>C:\Documents and Settings\All Users\Application Data\Skype\{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}\Skype.msi/stream002/PluginManagerUtils/data002 packed by ZLIB

>>C:\Documents and Settings\All Users\Application Data\Skype\{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}\Skype.msi/stream002/Easygame01 packed by ZLIB

Thanks

tallisall · June 1, 2009

Hi,

I have tried to run drweb 3 times in safe mode. 1st time it finished mem scan, then configured per your postand did full scan. After approx 5 min. it rebooted. Reran 2nd time in safe mode and halfway thru the mem scan I got the bsod with error message stop: kernel_data_inpage_error 0x0000007a (0xc03dd9d0). Reboot in safe mode ran 3rd time. Finished mem scan, configed and started full. It ran approx 5 min. and bsod with kernel_stach_inpage_error 0x00000077 (0xc000000e, 0x00000000, 0x00437000). I have not tried the Avira cd yet. I found the log files of drweb and tried to post them but they are to large. I cut the 1st one down and have included it. If you need to see them all I could possibly zip the 3rd since it looks like it has all 3 runs.

Thanks,