TheTechGuide Forum

General Category => Tech Clinic => Topic started by: SilentD on October 29, 2005, 04:09:35 PM

Title: MsMovies Has Infected my PC
Post by: SilentD on October 29, 2005, 04:09:35 PM
Here is My HJT log and My Kapersky log.

I can not see my system 32 folder or do too much to it.  Can someone help me to get rid of all this. if you can

My thanks

Logfile of HijackThis v1.99.1
Scan saved at 6:21:04 AM, on 10/29/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TweakNow PowerPack\RAM_XP.exe
C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Andrew(The Boss)\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/ (http://\"http://www.google.ca/\")
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hispeed.rogers.com (http://\"http://hispeed.rogers.com\")
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Rogers Hi-Speed Internet
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [RAM Idle Professional] C:\Program Files\TweakNow PowerPack\RAM_XP.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm41442US (http://\"http://bar.mywebsearch.com/menusearch.html?p=ZNxdm41442US\")
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://hispeed.rogers.com
O15 - Trusted IP range: 206.161.125.149
O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone (HKLM)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/kws/kav...can_unicode.cab (http://\"http://www.kaspersky.com/downloads/kws/kavwebscan_unicode.cab\")
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://imgfarm.com/images/nocache/funwebpr...etup1.0.0.8.cab (http://\"http://imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab\")
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe



-------------------------------------------------------------------------------
 KASPERSKY ON-LINE SCANNER REPORT
 Saturday, October 29, 2005 17:38:47
 Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
 Kaspersky On-line Scanner version: 5.0.67.0
 Kaspersky Anti-Virus database last update: 29/10/2005
 Kaspersky Anti-Virus database records: 147514
-------------------------------------------------------------------------------

Scan Settings:
   Scan using the following antivirus database: standard
   Scan Archives: true
   Scan Mail Bases: true

Scan Target - My Computer:
   A:\
   C:\
   D:\
   E:\
   F:\

Scan Statistics:
   Total number of scanned objects: 72018
   Number of viruses found: 9
   Number of infected objects: 1032
   Number of suspicious objects: 0
   Duration of the scan process: 7638 sec

Infected Object Name - Virus Name
C:\Documents and Settings\Andrew(The Boss)\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-5c0bdf13-451b0dc7.zip/Beyond.class   Infected: Trojan.Java.ClassLoader.k
C:\Documents and Settings\Andrew(The Boss)\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-5c0bdf13-451b0dc7.zip   Infected: Trojan.Java.ClassLoader.k
C:\Documents and Settings\Andrew(The Boss)\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv408.jar-2fa90dc9-1b71f6fd.zip/Matrix.class   Infected: Trojan-Downloader.Java.OpenStream.c
C:\Documents and Settings\Andrew(The Boss)\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv408.jar-2fa90dc9-1b71f6fd.zip   Infected: Trojan-Downloader.Java.OpenStream.c
C:\Documents and Settings\Andrew(The Boss)\Complete\  Busty Policewoman [censored] By Two Horny Studs Insi ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\  Busty Policewoman [censored] By Two Horny Studs Insi ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\03mpgsoftcore.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\03mpgsoftcore.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\04mpgsoftcore.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\04mpgsoftcore.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\10 Beautiful Bigtit Babe Spread Legs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\10 Beautiful Bigtit Babe Spread Legs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\11 Girl Spreads Legs For Penetration.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\11 Girl Spreads Legs For Penetration.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Babe In Heels Spreading Legs Wide.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Babe In Heels Spreading Legs Wide.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Blonde Wearing Skirt And Fish Net.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Blonde Wearing Skirt And Fish Net.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Brunette [censored]s With Legs In The Air.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Brunette [censored]s With Legs In The Air.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Brunette Teenie Spread Legs Wide.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Brunette Teenie Spread Legs Wide.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Cute Babe Teenie Summer In Skirt.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Cute Babe Teenie Summer In Skirt.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 First Timer Is Upskirt [censored] Poked.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 First Timer Is Upskirt [censored] Poked.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Mpg's 6.7mb Policeman Force Anime Lesbian.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Mpg's 6.7mb Policeman Force Anime Lesbian.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Police Woman Sucking An Inmate.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Police Woman Sucking An Inmate.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Sexy Blonde Wearing A Mini Skirt.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Sexy Blonde Wearing A Mini Skirt.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Spreads Legs Wide And Facialized.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Spreads Legs Wide And Facialized.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Supermodel Spreads Wide To Pee.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Supermodel Spreads Wide To Pee.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Sweet Teen Spreads Legs For Cock.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Sweet Teen Spreads Legs For Cock.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Teen In Mini Skirt Is Masturbating.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3 Teen In Mini Skirt Is Masturbating.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3mb Three Policemen Banged Hussy.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\3mb Three Policemen Banged Hussy.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4 Hot Blond [censored]ing Peeled Banana.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4 Hot Blond [censored]ing Peeled Banana.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4 Teen Spreads Legs For A Thick Tool.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4 Teen Spreads Legs For A Thick Tool.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Hidden Cam Public Upskirts.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Hidden Cam Public Upskirts.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Hot Lightspeed Teen Model.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Hot Lightspeed Teen Model.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Lightspeed Hot Teen Teases.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Lightspeed Hot Teen Teases.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Police Babe Pounded.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Police Babe Pounded.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Public Library Upskirting.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Public Library Upskirting.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Public White Pantie Upskirt.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Public White Pantie Upskirt.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Spy Cam Films Thong Upskirt.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Spy Cam Films Thong Upskirt.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Teen In Plaid Skirt [censored]s.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\4mb Teen In Plaid Skirt [censored]s.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Cartoon Babe Legs Spreading.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Cartoon Babe Legs Spreading.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb College Skirts Lesbos Caress.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb College Skirts Lesbos Caress.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Cute Blonde Open Legs For Cock.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Cute Blonde Open Legs For Cock.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Dirty Blonde Spreads Up Legs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Dirty Blonde Spreads Up Legs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Hidden Cam Public Upskirt.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Hidden Cam Public Upskirt.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Legs Spread Wide For Oral.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Legs Spread Wide For Oral.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Lesbos Lick Between The Legs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Lesbos Lick Between The Legs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Opening Legs For A Pounding.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Opening Legs For A Pounding.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Puffy Lesbos Opening Up Legs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Puffy Lesbos Opening Up Legs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Sluts Spread Up Legs At Party.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\5mb Sluts Spread Up Legs At Party.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6 Asian Cutie Spreads Her Cute Legs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6 Asian Cutie Spreads Her Cute Legs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6 Cumbath Followed By Pee Shower.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6 Cumbath Followed By Pee Shower.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Big Titted Bitch Toys And Pees.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Big Titted Bitch Toys And Pees.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Busty Milf Spreads Her Legs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Busty Milf Spreads Her Legs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Devon Spreads Legs By The Lake.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Devon Spreads Legs By The Lake.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Joanne Rubs And Pees On Ground.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Joanne Rubs And Pees On Ground.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Milf Spreads Her Legs For Cock.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Milf Spreads Her Legs For Cock.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Pissslut Gets Mouthful Of Pee.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Pissslut Gets Mouthful Of Pee.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Police Officer Anal And Facial.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Police Officer Anal And Facial.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Slut Lets Us Peek In Her Cunt.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb Slut Lets Us Peek In Her Cunt.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb You Peek Inside Babe Her [censored].zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\6mb You Peek Inside Babe Her [censored].zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\A Cute Chinese Babe Strips Out Of Her Lime Skirt O.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\A Cute Chinese Babe Strips Out Of Her Lime Skirt O.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\A Pair Of Teen Girlfriends Are Peeing On Each Other.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\A Pair Of Teen Girlfriends Are Peeing On Each Other.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\A Very Cute Petite Asian Police Chick Gets Put On Her K ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\A Very Cute Petite Asian Police Chick Gets Put On Her K ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Barely Legal Teen With Tiny Tits Peels Off Her  ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Barely Legal Teen With Tiny Tits Peels Off Her  ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Couple Get Caught By The Police.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Couple Get Caught By The Police.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Ho Opens Her Legs Open And Starts A Wave.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Ho Opens Her Legs Open And Starts A Wave.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur In Bra & Skirt Gives Blowjob.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur In Bra & Skirt Gives Blowjob.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur In Jail Gets Licked By Police Women.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur In Jail Gets Licked By Police Women.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur In Skirt Gets Licked In Jail.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur In Skirt Gets Licked In Jail.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur In Skirt Gets Trimmed [censored] [censored].zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur In Skirt Gets Trimmed [censored] [censored].zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur In Skirt Gives Blowjob For Facial.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur In Skirt Gives Blowjob For Facial.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur In Skirt Sucks Cock For Cumshot.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur In Skirt Sucks Cock For Cumshot.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur On Bed Spreads Legs & Gets Licked.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur On Bed Spreads Legs & Gets Licked.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Slut In Bath Shows Legs & Boobs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Slut In Bath Shows Legs & Boobs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Slut In Skirt On Bed Shows Legs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Slut In Skirt On Bed Shows Legs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Teen In Skirt Gets [censored] In [censored].zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Teen In Skirt Gets [censored] In [censored].zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Teen Spreading Her Legs And Starts Stroking Her ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Teen Spreading Her Legs And Starts Stroking Her ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Upskirting Action In Public Outdoor.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur Upskirting Action In Public Outdoor.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur With Skirt In Jail Fingered [censored].zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amateur With Skirt In Jail Fingered [censored].zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amazing Babe Toying And Peeing.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Amazing Babe Toying And Peeing.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Ambitious Lesbians Convert Peeholes Into Pleasure.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Ambitious Lesbians Convert Peeholes Into Pleasure.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Ammie Gets Upskirt Bullet.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Ammie Gets Upskirt Bullet.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Angel Works As A Urinal.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Angel Works As A Urinal.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Anime Mother And Daughter Spread Their Legs For The Doc ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Anime Mother And Daughter Spread Their Legs For The Doc ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Aria Gives A Deep Blowjob & Spreads Legs Wide To Get Po ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Aria Gives A Deep Blowjob & Spreads Legs Wide To Get Po ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian And Police Body.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian And Police Body.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian College Schoolgirl Stripping Down And Showin Upsk ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian College Schoolgirl Stripping Down And Showin Upsk ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian Gets A Mouthful Of Pee.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian Gets A Mouthful Of Pee.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian Hottie Throws Her Legs In The Air And Masturbate ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian Hottie Throws Her Legs In The Air And Masturbate ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian Schoolgirl Stripping Down And Showin Upskirt.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian Schoolgirl Stripping Down And Showin Upskirt.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian Slut Cranks Her Legs Up For A Better Ramming.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian Slut Cranks Her Legs Up For A Better Ramming.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian Teen Pee In A Bath.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Asian Teen Pee In A Bath.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe In A Short Skirt Bends Over For His Big Sausage.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe In A Short Skirt Bends Over For His Big Sausage.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe In Skirt Gets Fingered By Police Women.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe In Skirt Gets Fingered By Police Women.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Peeing And Drink It.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Peeing And Drink It.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Peeing Home.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Peeing Home.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Peeing Through Panties.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Peeing Through Panties.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Shaving Her Lovers Legs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Shaving Her Lovers Legs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Spreads Legs & Gets Licked By Lesbo.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Spreads Legs & Gets Licked By Lesbo.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Spreads Legs & Gives Footjob On Bed.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Spreads Legs & Gives Footjob On Bed.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Upskirt Gets [censored] & Shows Creampie.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babe Upskirt Gets [censored] & Shows Creampie.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babelicious Bunnies Make Whoopee With His Carrot.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babelicious Bunnies Make Whoopee With His Carrot.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babes Have Dykish Sex In Their School Plaid Skirts.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Babes Have Dykish Sex In Their School Plaid Skirts.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Bald Gay Sucking Black Policeman.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Bald Gay Sucking Black Policeman.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Banged Older Lady With Legs Pulled Apart.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Banged Older Lady With Legs Pulled Apart.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Barely Legal Upskirted Teen Sucking On Bed.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Barely Legal Upskirted Teen Sucking On Bed.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Beach Bunny Giving Cabana Boys A Little Sneak Peek.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Beach Bunny Giving Cabana Boys A Little Sneak Peek.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Beautiful Nasty Teen In A Sexy Short Skirt Banged Hard  ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Beautiful Nasty Teen In A Sexy Short Skirt Banged Hard  ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Big Boobs Babe Spreads Her Legs Wide And Gets A Deep Po ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Big Boobs Babe Spreads Her Legs Wide And Gets A Deep Po ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Big Meloned Babe Is A' Peelin Her Blueberry Panties.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Big Meloned Babe Is A' Peelin Her Blueberry Panties.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Bit A Skirt Is Jonesin For Her Feet To Be Semen Washed.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Bit A Skirt Is Jonesin For Her Feet To Be Semen Washed.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Bit A Skirt Nibbles At Her Niplets And Warm Tushie.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Bit A Skirt Nibbles At Her Niplets And Warm Tushie.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Black Skirt Is Getting His Dirty Birdy In Wet Yoo Hoo.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Black Skirt Is Getting His Dirty Birdy In Wet Yoo Hoo.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blond Babe Spreads Legs & Gets Licked.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blond Babe Spreads Legs & Gets Licked.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blond Bimbo Peeing & [censored]s Dildo In Cunt.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blond Bimbo Peeing & [censored]s Dildo In Cunt.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blond Gets [censored] In Public By Police Men.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blond Gets [censored] In Public By Police Men.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blond Police Women Gets Bald Cunt Licked.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blond Police Women Gets Bald Cunt Licked.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Amateur Gets [censored] By A Policeman In The W.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Amateur Gets [censored] By A Policeman In The W.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Babe Peeing Outdoors.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Babe Peeing Outdoors.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Babe Squirting Tons Of Hot Pee Out Of Herself.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Babe Squirting Tons Of Hot Pee Out Of Herself.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Getting Off Spread Legs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Getting Off Spread Legs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Is Allowing Legs Spread Wide For Wet Tongue.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Is Allowing Legs Spread Wide For Wet Tongue.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Outdoor [censored] By Police In Cunt.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Outdoor [censored] By Police In Cunt.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Pleasing Police Officer.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Pleasing Police Officer.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Showing Her Legs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Showing Her Legs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Spreads Legs & Gets [censored] In Pool.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde Spreads Legs & Gets [censored] In Pool.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde With Sexy Legs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde With Sexy Legs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde, Bikini Babe Peeling For A Bad Boy Insertion.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blonde, Bikini Babe Peeling For A Bad Boy Insertion.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blondie Peels Off Her Panties And Plays With Herself.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Blondie Peels Off Her Panties And Plays With Herself.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Brunette Hussy Banged By Three Policemen.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Brunette Hussy Banged By Three Policemen.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Brunette Milf In Skirt On Sofa Sucks Dick.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Brunette Milf In Skirt On Sofa Sucks Dick.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Brunette On Bed Spreads Legs & Fingering.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Brunette On Bed Spreads Legs & Fingering.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Brunette Police [censored]s.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Brunette Police [censored]s.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Buddy Spreads Her Legs Open To Insert His Big Shank.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Buddy Spreads Her Legs Open To Insert His Big Shank.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Buddy Spreads Her Legs Wide Open To Dig In Deeper.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Buddy Spreads Her Legs Wide Open To Dig In Deeper.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Bum [censored]s Police Woman.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Bum [censored]s Police Woman.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Busty Amateur Spreads Legs & Gets Licked.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Busty Amateur Spreads Legs & Gets Licked.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Busty Babe [censored] By Police Mistress Femdom.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Busty Babe [censored] By Police Mistress Femdom.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Busty Big Tits Babe Spreads Her Legs Wide Open And Gets ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Busty Big Tits Babe Spreads Her Legs Wide Open And Gets ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Busty Orgy Teen In Short Skirt Outdoor.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Busty Orgy Teen In Short Skirt Outdoor.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Busty Teen In Skirt Gets Beaver Licked.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Busty Teen In Skirt Gets Beaver Licked.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cheeky Skirt Is Filling Her Gullet With His Strange Br ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cheeky Skirt Is Filling Her Gullet With His Strange Br ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Chesty Model In A Cumbath Followed By Pee Shower.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Chesty Model In A Cumbath Followed By Pee Shower.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Chick Has To Go So She Takes A Hot Pee In The Forest.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Chick Has To Go So She Takes A Hot Pee In The Forest.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Chick Likes Drinking Her Friend's Pee From Glass Bowl.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Chick Likes Drinking Her Friend's Pee From Glass Bowl.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Closeup Of Some Chick Peeing In The Toilet.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Closeup Of Some Chick Peeing In The Toilet.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cocoa Cutie Is Holds Her Legs Up For Heavy Pumping.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cocoa Cutie Is Holds Her Legs Up For Heavy Pumping.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\College Babe Gets Her Mini Skirt Lifted And Her A.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\College Babe Gets Her Mini Skirt Lifted And Her A.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\College Schoolgirl In Skirt Gets [censored] By Teachers.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\College Schoolgirl In Skirt Gets [censored] By Teachers.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\College Schoolgirl Spread Legs Gets Cunt Fingered.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\College Schoolgirl Spread Legs Gets Cunt Fingered.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Couple Of Skirts Waiting For Their Turn For A Pony Rid ....zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Couple Of Skirts Waiting For Their Turn For A Pony Rid ....zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cracker Opens Up Her Legs And Slides In A Mega Toy.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cracker Opens Up Her Legs And Slides In A Mega Toy.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Crazy Girl With Glasses On Drinks Pee And Sucks Dick.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Crazy Girl With Glasses On Drinks Pee And Sucks Dick.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Curious Trio Are Pulling Back Curtains To Take A Peek.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Curious Trio Are Pulling Back Curtains To Take A Peek.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Curly Blonde Enjoys The Taste Of Pee Pee.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Curly Blonde Enjoys The Taste Of Pee Pee.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Amateur In Skirt Gives Blowjob Hardcore Movie.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Amateur In Skirt Gives Blowjob Hardcore Movie.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Blond Spreads Legs & Gets Licked.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Blond Spreads Legs & Gets Licked.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Blonde Drinks Pee From Pervert Guy.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Blonde Drinks Pee From Pervert Guy.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Blonde Pees In Her Pants At The Doctors.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Blonde Pees In Her Pants At The Doctors.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Brunette Taking A Pee In The Forest.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Brunette Taking A Pee In The Forest.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Girl Is Peeing In A Filthy Cleaning Lady's Bucket.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Girl Is Peeing In A Filthy Cleaning Lady's Bucket.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Girl Likes Taking A Peepee Outside In The Wood.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Girl Likes Taking A Peepee Outside In The Wood.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Girl Taking A Pee In Her Own Lovely Face.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Girl Taking A Pee In Her Own Lovely Face.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Honey Enjoys Licking Her Own Pee Off The Table.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Honey Enjoys Licking Her Own Pee Off The Table.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Honey Gets Horney And Takes A Peepee.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Honey Gets Horney And Takes A Peepee.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Lesbo Teen Spreads Legs & Gets Licked.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Lesbo Teen Spreads Legs & Gets Licked.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Soccer Mom Is Spreading Her Legs And Scores.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Soccer Mom Is Spreading Her Legs And Scores.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Teen Chick [censored] With Police Officer.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Teen Chick [censored] With Police Officer.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Teen Gal Spreads Her Legs.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Teen Gal Spreads Her Legs.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Teen In A Mega Short School Skirt Masturbates.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cute Teen In A Mega Short School Skirt Masturbates.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cutie Girl Drinks Her Own Yummy Golden Pee.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cutie Girl Drinks Her Own Yummy Golden Pee.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cutie Is Drinking Steamy Pee On The Floor From Friend.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cutie Is Drinking Steamy Pee On The Floor From Friend.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cutie Is Playing With Camera While Getting Peed On.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cutie Is Playing With Camera While Getting Peed On.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cutie Peels Off Her Panties And Gets Twat Sticky Wet.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cutie Peels Off Her Panties And Gets Twat Sticky Wet.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cutie Pie Is Lifting Her Legs Up For A Good Porking.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Cutie Pie Is Lifting Her Legs Up For A Good Porking.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Dark Haired Bbw Spreads Legs On Sofa.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Dark Haired Bbw Spreads Legs On Sofa.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Darling Skirt Gets Stripped And Shagged With Gusto.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Darling Skirt Gets Stripped And Shagged With Gusto.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Dirty Bit Of Skirt Hikes It Up For A Taste Of His Meat.zip/Video.exe   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Dirty Bit Of Skirt Hikes It Up For A Taste Of His Meat.zip   Infected: Trojan-Dropper.Win32.WinAD.h
C:\Documents and Settings\Andrew(The Boss)\Complete\Dirty Bl
Title: MsMovies Has Infected my PC
Post by: guestolo on October 29, 2005, 08:07:59 PM
Kaspersky's seems too have got most of the bad files, but you cut out the bottom of the log, so I'm not sure

Can you do this please,
Right click an empty spot on the desktop and left click NEW>>Folder
A new folder will be placed on the desktop, name it BFU

Download and Unzip P2PNetwork.zip to the BFU folder
So you now have  Metallica's script file p2pnetwork.bfu extracted to the BFU folder
[attachment=417:attachment]

Download and UNZIP to the BFU folder
BFU.zip (http://\"http://castlecops.com/zx/Merijn/bfu.zip\")
So you now have BFU.exe extracted

Download and InstallAd-Aware SE Personal 1.06 (http://\"ftp://ftp.download.com/pub/win95/utilities/aawsepersonal.exe\")

Open Ad-Aware, ensure to click the  check for updates now link and Connect to download the latest updates
Don't run a scan yet, we'll need it in a bit

==Download and Install this small program
to help clean your temp folders,cookies, etc...
Windows Cleanup! 4.0 (http://\"http://downloads.stevengould.org/cleanup/CleanUp40.exe\")

Please Print this out or save these instructions to a Notepad file and save it to your Desktop
RESTART your Computer in SAFE MODE (http://\"http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001060608000039?OpenDocument&ExpandSection=4#_Section4\")
You can do this by tapping the F8 key as the system is restarting, just before Windows loads, or use the link
I supplied for a more detailed explanation

In safe mode
Open the BFU folder
Double click to run BFU.exe
Use the "Open Script file" button (the folder icon next to Scriptfile to execute)
Navigate to p2pnetwork.bfu in the BFU folder
Right click p2pnetwork.bfu and choose Select
In Brute Force Uninstaller select Execute
Let it finish then Exit

Set Windows To Show Hidden Files and Folders
    * Click Start.
    * Open My Computer.
    * Select the Tools menu and click Folder Options.
    * Select the View Tab.
    * Under the Hidden files and folders heading select Show hidden files and folders.
    * Uncheck the Hide protected operating system files (recommended) option.
    * Uncheck the Hide Extensions for known file types
    * Click Yes to confirm.
    * Click OK.

Find and delete the following folder if it still exists
C:\Documents and Settings\Andrew(The Boss)\Complete <-this folder

==Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).
Set the program up as follows:
Click "Options..."
Move the arrow down to "Custom CleanUp!"
Put a check next to the following (Make sure nothing else is checked!):

    * Empty Recycle Bins
    * Delete Cookies
    * Delete Prefetch files
    * Cleanup! All Users

Click OK
Close down your browser window
Press the CleanUp! button to start the program.
When it's done, decline to log off or restart the computer

Do another scan with Hijackthis and put a check next to these entries:

O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm41442US (http://\"http://bar.mywebsearch.com/menusearch.html?p=ZNxdm41442US\")

O15 - Trusted IP range: 206.161.125.149
O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://imgfarm.com/images/nocache/funwebpr...etup1.0.0.8.cab (http://\"http://imgfarm.com/images/nocache/funwebpr...etup1.0.0.8.cab\")


After you have ticked the above entries, close All other open windows,
Leave Hijackthis open and click FIX CHECKED
OK the prompt and exit Hijackthis

Open Ad-Aware
Click START
Click the radio button to Perform a Full system scan then click NEXT
When it's finished scanning
At this point you should either right click on the screen and and choose the "Select All" Objects option or individually put a checkmark in each objects checkbox
click on the Next button. Ad-Aware SE will now present you with a confirmation box as to whether or not you would like to remove the objects you have just selected. Press the "OK" button

Restart back to Normal mode

Can you run another scan at Kapersky's and post the whole report please

Also post a new hijackthis log
Title: MsMovies Has Infected my PC
Post by: SilentD on October 30, 2005, 06:09:56 PM
here is my new Hijack and Kapersky

Logfile of HijackThis v1.99.1
Scan saved at 7:04:29 PM, on 10/30/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TweakNow PowerPack\RAM_XP.exe
C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\PROGRA~1\KASPER~1\KASPER~1\KASPER~3\OESpamTest.ExE
C:\Program Files\Kaspersky Lab\Kaspersky Security Suite\Kaspersky Anti-Hacker\KAVPF.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/ (http://\"http://www.google.ca/\")
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hispeed.rogers.com (http://\"http://hispeed.rogers.com\")
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Rogers Hi-Speed Internet
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [RAM Idle Professional] C:\Program Files\TweakNow PowerPack\RAM_XP.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Security Suite\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKLM\..\Run: [OESpamTest] C:\PROGRA~1\KASPER~1\KASPER~1\KASPER~3\OESpamTest.ExE
O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Security Suite\Kaspersky Anti-Hacker\KAVPF.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://hispeed.rogers.com
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/kws/kav...can_unicode.cab (http://\"http://www.kaspersky.com/downloads/kws/kavwebscan_unicode.cab\")
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Security Suite\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe



-------------------------------------------------------------------------------
 KASPERSKY ON-LINE SCANNER REPORT
 Sunday, October 30, 2005 19:01:28
 Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
 Kaspersky On-line Scanner version: 5.0.67.0
 Kaspersky Anti-Virus database last update: 30/10/2005
 Kaspersky Anti-Virus database records: 157250
-------------------------------------------------------------------------------

Scan Settings:
   Scan using the following antivirus database: extended
   Scan Archives: true
   Scan Mail Bases: true

Scan Target - My Computer:
   A:\
   C:\
   D:\
   E:\
   F:\

Scan Statistics:
   Total number of scanned objects: 70015
   Number of viruses found: 3
   Number of infected objects: 16
   Number of suspicious objects: 0
   Duration of the scan process: 6508 sec

Infected Object Name - Virus Name
C:\Documents and Settings\Andrew(The Boss)\Desktop\Rogers\Application Programs\setup_ares.exe/data0037/NHInstall.exe   Infected: not-a-virus:AdWare.Win32.NavExcel.d
C:\Documents and Settings\Andrew(The Boss)\Desktop\Rogers\Application Programs\setup_ares.exe/data0037   Infected: not-a-virus:AdWare.Win32.NavExcel.d
C:\Documents and Settings\Andrew(The Boss)\Desktop\Rogers\Application Programs\setup_ares.exe/data0038   Infected: not-a-virus:AdWare.Win32.NavExcel.i
C:\Documents and Settings\Andrew(The Boss)\Desktop\Rogers\Application Programs\setup_ares.exe   Infected: not-a-virus:AdWare.Win32.NavExcel.i
C:\MIRC\mirc.exe   Infected: not-a-virus:Client-IRC.Win32.mIRC.616
C:\MIRC\mirc616.exe/data0001.bin   Infected: not-a-virus:Client-IRC.Win32.mIRC.616
C:\MIRC\mirc616.exe   Infected: not-a-virus:Client-IRC.Win32.mIRC.616
C:\MIRC\ngnm616a.zip/ngnm616.rar/mirc616.exe/data0001.bin   Infected: not-a-virus:Client-IRC.Win32.mIRC.616
C:\MIRC\ngnm616a.zip/ngnm616.rar/mirc616.exe   Infected: not-a-virus:Client-IRC.Win32.mIRC.616
C:\MIRC\ngnm616a.zip/ngnm616.rar   Infected: not-a-virus:Client-IRC.Win32.mIRC.616
C:\MIRC\ngnm616a.zip   Infected: not-a-virus:Client-IRC.Win32.mIRC.616
D:\Downloads of Ares\mIRC.v6.16.WinALL.Incl.Keygen-NGEN.rar/ngnm616a.zip/ngnm616.rar/mirc616.exe/data0001.bin   Infected: not-a-virus:Client-IRC.Win32.mIRC.616
D:\Downloads of Ares\mIRC.v6.16.WinALL.Incl.Keygen-NGEN.rar/ngnm616a.zip/ngnm616.rar/mirc616.exe   Infected: not-a-virus:Client-IRC.Win32.mIRC.616
D:\Downloads of Ares\mIRC.v6.16.WinALL.Incl.Keygen-NGEN.rar/ngnm616a.zip/ngnm616.rar   Infected: not-a-virus:Client-IRC.Win32.mIRC.616
D:\Downloads of Ares\mIRC.v6.16.WinALL.Incl.Keygen-NGEN.rar/ngnm616a.zip   Infected: not-a-virus:Client-IRC.Win32.mIRC.616
D:\Downloads of Ares\mIRC.v6.16.WinALL.Incl.Keygen-NGEN.rar   Infected: not-a-virus:Client-IRC.Win32.mIRC.616

Scan process completed.


I think you got everthing, thanks very much /biggrin.gif\' class=\'bbc_emoticon\' alt=\':D\' />
Title: MsMovies Has Infected my PC
Post by: guestolo on October 30, 2005, 07:15:32 PM
Good work, for some final cleanup

If everything is running better, please do the following
You should disable system restore>>Reboot your computer>>and then reenable it
This will clear all your restore points and ensure you don't restore any nasties
How to Disable and Re-enable System Restore feature (http://\"http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm\")

Once System Restore is reenabled

You should set up protection against future attacks
SpywareBlaster 3.4 by JavaCool (http://\"http://www.javacoolsoftware.com/spywareblaster.html\")
*Will block bad ActiveX Controls
*Block Malevolent cookies in Internet Explorer and Firefox
*Restrict actions of potentially dangerous sites in Internet Explorer
After installation, Check for updates and then click the "Enable all protection"

IE-SPYAD puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all.
Here is a tutorial and download link
TUTORIAL==Link to Tutorial (http://\"http://www.bleepingcomputer.com/forums/index.php?showtutorial=53\")
Download link (http://\"https://netfiles.uiuc.edu/ehowes/www/resource.htm#IESPYAD\")

With both, Check for updates every couple of weeks
Keep the link to IE-Spyad bookmarked so you can check for updates
SpywareBlaster, after every update just simply click the "enable all protection"
IE-Spyad is compatible with SP2