Welcome! Register for a free account (or login) > How does it work?
|
|


Jun 19 2009, 03:26 PM
Post
#1
|
|
|
Authentic Member ![]() ![]() Group: Authentic Member Posts: 43 Joined: 9-April 09 Member No.: 85,160 Operating System: Windows XP Pro |
Hi there, I hope everyone is doing well. The above mentioned they is NOD32 tech support.. I've just updated my fathers computer with windows due to the wga problem that is now corrected. The computer is up to date with windows and virus definitions but I'm having problems installing nod32 smart security mainly the firewall will not install. They said that I may have a virus / malaware that needs removal, I just fixed my laptop but I believe due to the network connection this one has it now.
Please let me know what you think I should do. They had me run a removal of Trendmicro but nothing was there. They had me run combofix which found a bunch of random norton protection stuff which I believe needs to be removed as well so any help there is appreciated as well. Below you wil lfind the HJ log, Malaware bytes log, I've done the ATF Cleaner, dds log (attached log is attached), gmer log (actually it won't work propertly scanning etc) and my combofix log. Thanks for your help. J HJ Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 2:16:49 PM, on 6/19/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINNT\System32\inetsrv\inetinfo.exe C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe C:\Program Files\Java\jre6\bin\jqs.exe E:\Program Files\Maxtor\Sync\SyncServices.exe C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe C:\WINNT\System32\nvsvc32.exe C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\wscntfy.exe C:\WINNT\SOUNDMAN.EXE E:\Program Files\Maxtor\ManagerApp\msssort.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Copernic Desktop Search - Home\DesktopSearchService.exe C:\WINNT\system32\ctfmon.exe C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\Bin\HPOstr05.exe C:\WINNT\System32\svchost.exe C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\bin\HPOVDX05.EXE C:\WINNT\system32\hpoipm07.exe C:\WINNT\explorer.exe C:\WINNT\system32\msiexec.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\Program Files\ESET\ESET Smart Security\egui.exe C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE C:\Program Files\ESET\ESET Smart Security\SysInspector.exe C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Program Files\Mozilla Firefox\firefox.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/ O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - e:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SpokeBHO Class - {7C6B6610-6203-49B8-9952-5D2A85B6D179} - C:\Program Files\Spoke Client\3.0.1588.729\SpokeToolBand.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Spoke - {4FC00340-F75E-4EB5-880C-651A8A76965F} - C:\Program Files\Spoke Client\3.0.1588.729\SpokeToolBand.dll O3 - Toolbar: Copernic Desktop Search - Home Toolbar - {4A1C6093-14F9-44D7-860E-5D265CFCA9D9} - C:\Program Files\Copernic Desktop Search - Home\Toolbar\ToolbarContainer101000048.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [mssSort] "E:\Program Files\Maxtor\ManagerApp\msssort.exe" O4 - HKLM\..\Run: [mxomssmenu] "E:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [Copernic Desktop Search - Home] "C:\Program Files\Copernic Desktop Search - Home\DesktopSearchService.exe" /tray O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user') O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ? O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP OfficeJet Series 700 Startup.lnk = C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\Bin\HPOstr05.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: Convert link target to Adobe PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert to existing PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Spoke Company Search - res://C:\Program Files\Spoke Client\3.0.1588.729\SpokeToolBand.dll/searchcompany.htm O8 - Extra context menu item: Spoke Person Search - res://C:\Program Files\Spoke Client\3.0.1588.729\SpokeToolBand.dll/searchperson.htm O8 - Extra context menu item: Spoke Title Search - res://C:\Program Files\Spoke Client\3.0.1588.729\SpokeToolBand.dll/searchtitle.htm O9 - Extra button: TREND MICRO HouseCall - {2B5EA4F8-620A-4A8B-B003-4C8C5EBEA826} - http://uk.trendmicro-europe.com/enterprise...usecall_pre.php (file missing) O9 - Extra button: Attach Web page to ACT! contact - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll (file missing) O9 - Extra 'Tools' menuitem: Attach Web page to ACT! contact... - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll (file missing) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINNT\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINNT\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.snapfish.com/SnapfishActivia.cab O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsupp/as...abs/tgctlsr.cab O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqnbk/downloads/sysinfo.cab O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} (InstallShield Setup Player 2K2) - http://www.napster.com/client/setup.exe O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab O16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) - https://www.ibm.com/pc/support/access/sdcco...ad/IbmEgath.cab O16 - DPF: {7ED7005B-4AF6-4CFF-9AE0-F243C4B8260F} (HouseCallButton.setup) - http://de.trendmicro-europe.com/file_downl...eCallButton.CAB O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - http://ipgweb.cce.hp.com/rdqnbk/downloads/msxml4.cab O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yahoo.com/...utocomplete.cab O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intuit Update Service (IntuitUpdateService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Maxtor Service (Maxtor Sync Services) - Seagate Technology LLC - E:\Program Files\Maxtor\Sync\SyncServices.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe O23 - Service: Symantec RemoteAssist - Symantec, Inc. - C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe -- End of file - 11252 bytes _____________________________________________________________________________ Malawarebytes LOG Malwarebytes' Anti-Malware 1.38 Database version: 2309 Windows 5.1.2600 Service Pack 3 6/19/2009 2:34:28 PM mbam-log-2009-06-19 (14-34-28).txt Scan type: Quick Scan Objects scanned: 103153 Time elapsed: 4 minute(s), 59 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) ____________________________________________________________________ DDS (Ver_09-05-14.01) - NTFSx86 Run by terry at 14:35:37.29 on Fri 06/19/2009 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_14 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1535.900 [GMT -7:00] AV: ESET Smart Security 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} FW: ESET Personal firewall *disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0} ============== Running Processes =============== C:\WINNT\system32\svchost -k DcomLaunch svchost.exe C:\WINNT\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINNT\system32\spoolsv.exe svchost.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINNT\System32\inetsrv\inetinfo.exe C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe C:\WINNT\System32\nvsvc32.exe C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\WINNT\System32\svchost.exe -k imgsvc C:\WINNT\system32\wscntfy.exe C:\WINNT\SOUNDMAN.EXE E:\Program Files\Maxtor\ManagerApp\msssort.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Copernic Desktop Search - Home\DesktopSearchService.exe C:\WINNT\system32\ctfmon.exe C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\Bin\HPOstr05.exe C:\WINNT\System32\svchost.exe -k HTTPFilter C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\bin\HPOVDX05.EXE C:\WINNT\system32\hpoipm07.exe C:\WINNT\explorer.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\Program Files\ESET\ESET Smart Security\egui.exe C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\Program Files\Mozilla Firefox\firefox.exe E:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\WINNT\System32\NOTEPAD.EXE C:\Documents and Settings\terry\Desktop\dds.pif ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ uSearchURL,(Default) = hxxp://www.google.com/search?q=%s BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - e:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll BHO: SpokeBHO Class: {7c6b6610-6203-49b8-9952-5d2a85b6d179} - c:\program files\spoke client\3.0.1588.729\SpokeToolBand.dll BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll TB: Spoke: {4fc00340-f75e-4eb5-880c-651a8a76965f} - c:\program files\spoke client\3.0.1588.729\SpokeToolBand.dll TB: Copernic Desktop Search - Home Toolbar: {4a1c6093-14f9-44d7-860e-5d265cfca9d9} - c:\program files\copernic desktop search - home\toolbar\ToolbarContainer101000048.dll TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll TB: {968631B6-4729-440D-9BF4-251F5593EC9A} - No File EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll EB: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - No File EB: Copernic Desktop Search - Home Toolbar: {4a1c6093-14f9-44d7-860e-5d265cfca9d9} - c:\program files\copernic desktop search - home\toolbar\ToolbarContainer101000048.dll EB: Copernic Desktop Search - Home: {9c3fca1f-99e3-48f2-a7f4-dd3931b2f99a} - c:\program files\copernic desktop search - home\DeskbandIntegration301000049.dll EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File EB: {83B28A74-640D-48F4-9F51-E80EED7CC7E0} - No File uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe uRun: [Copernic Desktop Search - Home] "c:\program files\copernic desktop search - home\DesktopSearchService.exe" /tray uRun: [ctfmon.exe] c:\winnt\system32\ctfmon.exe mRun: [SoundMan] SOUNDMAN.EXE mRun: [NvCplDaemon] RUNDLL32.EXE c:\winnt\system32\NvCpl.dll,NvStartup mRun: [mssSort] "e:\program files\maxtor\managerapp\msssort.exe" mRun: [mxomssmenu] "e:\program files\maxtor\onetouch status\maxmenumgr.exe" mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe" mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice mRunOnce: [Malwarebytes' Anti-Malware] e:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobea~1.lnk - c:\winnt\installer\{ac76ba86-1033-0000-7760-000000000002}\SC_Acrobat.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpoffi~1.lnk - c:\program files\hewlett-packard\hp officejet series 700\bin\HPOstr05.exe uPolicies-explorer: NoViewOnDrive = 0 (0x0) IE: Convert link target to Adobe PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert to existing PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: Spoke Company Search - c:\program files\spoke client\3.0.1588.729\SpokeToolBand.dll/searchcompany.htm IE: Spoke Person Search - c:\program files\spoke client\3.0.1588.729\SpokeToolBand.dll/searchperson.htm IE: Spoke Title Search - c:\program files\spoke client\3.0.1588.729\SpokeToolBand.dll/searchtitle.htm IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {2B5EA4F8-620A-4A8B-B003-4C8C5EBEA826} - {EC4548D7-1F09-4FC2-BB95-E34724CF3D60} http://uk.trendmicro-europe.com/enterprise...usecall_pre.php - http://uk.trendmicro-europe.com/enterprise...;inprocserver32 does not exist! IE: {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL Trusted Zone: overture.com\secure Trusted Zone: turbotax.com Trusted Zone: yahoo.com\marketingsolutions DPF: DirectAnimation Java Classes - file://c:\winnt\java\classes\dajava.cab DPF: Microsoft XML Parser for Java - file://c:\winnt\java\classes\xmldso.cab DPF: {00000055-9980-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/fhg.CAB DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204 DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} - hxxp://download.yahoo.com/dl/installs/yinst0401.cab DPF: {3334504D-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/0/C/8/0C8EDFAB-30BC-4792-898E-2DABE27B2C4D/mp43dmo.CAB DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - hxxp://www.snapfish.com/SnapfishActivia.cab DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} - hxxps://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab DPF: {49232000-16E4-426C-A231-62846947304B} - hxxp://ipgweb.cce.hp.com/rdqnbk/downloads/sysinfo.cab DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} - hxxp://www.napster.com/client/setup.exe DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - hxxp://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab DPF: {74FFE28D-2378-11D5-990C-006094235084} - hxxps://www.ibm.com/pc/support/access/sdccommon/download/IbmEgath.cab DPF: {7ED7005B-4AF6-4CFF-9AE0-F243C4B8260F} - hxxp://de.trendmicro-europe.com/file_downloads/common/housecall/HouseCallButton.CAB DPF: {88D969C0-F192-11D4-A65F-0040963251E5} - hxxp://ipgweb.cce.hp.com/rdqnbk/downloads/msxml4.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - hxxp://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38141.6550347222 DPF: {A8658086-E6AC-4957-BC8E-8D54A7E8A790} - hxxp://www.microsoft.com/security/controls/GDI/0/GDIChk.CAB DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - hxxp://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/autocomplete.cab DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\terry\applic~1\mozilla\firefox\profiles\8jgrxvbj.default\ FF - plugin: c:\program files\mozilla firefox\plugins\npViewpoint.dll FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll FF - plugin: e:\program files\adobe\acrobat 7.0\acrobat\browser\nppdf32.dll ---- FIREFOX POLICIES ---- FF - user.js: browser.cache.disk_cache_ssl - true); user_pref(content.max.tokenizing.time, 2250000); user_pref(content.notify.backoffcount, 5); user_pref(content.notify.interval, 750000); user_pref(content.notify.ontimer, true); user_pref(content.switch.threshold, 750000); user_pref(network.http.max-connections, 48 user_pref(network.http.max-connections-per-server, 16); user_pref(network.http.max-persistent-connections-per-proxy, 16); user_pref(network.http.max-persistent-connections-per-server, 8); FF - user.js: network.http.pipelining - true); user_pref(network.http.pipelining.maxrequests, 8); user_pref(network.http.proxy.pipelining, true); user_pref(nglayout.initialpaint.delay, 750 ============= SERVICES / DRIVERS =============== R1 ehdrv;ehdrv;c:\winnt\system32\drivers\ehdrv.sys [2009-5-14 107256] R1 Start1Driver;Start1Driver;c:\winnt\system32\drivers\Start1Driver.SYS [2009-4-9 5120] R2 ekrn;ESET Service;c:\program files\eset\eset smart security\ekrn.exe [2009-5-14 731840] R2 IntuitUpdateService;Intuit Update Service;c:\program files\common files\intuit\update service\IntuitUpdateService.exe [2008-10-10 13088] R2 Maxtor Sync Services;Maxtor Service;e:\program files\maxtor\sync\SyncServices.exe [2008-8-5 181600] R2 MSSQL$ACT7;SQL Server (ACT7);c:\program files\microsoft sql server\mssql.1\mssql\binn\sqlservr.exe [2008-11-24 29263712] R2 n5lpt.sys;N5 Print Device;c:\winnt\system32\drivers\n5lpt.sys [2004-8-19 21132] R2 nvTUNEP;nVidia WDM TVTuner;c:\winnt\system32\drivers\NVTUNEP.SYS [2004-6-3 15968] R2 nvtvSND;nVidia WDM TVAudio Crossbar;c:\winnt\system32\drivers\NVTVSND.SYS [2004-6-3 13776] R2 Stld;Stld;c:\winnt\system32\drivers\STLD.SYS [2004-8-19 10240] R3 MBAMSwissArmy;MBAMSwissArmy;c:\winnt\system32\drivers\mbamswissarmy.sys [2009-4-10 38160] S2 key5usb;KeyFive USB Reader;c:\winnt\system32\drivers\key5usb.sys [2004-10-26 17332] S2 Start2Driver;Start2Driver; [x] S3 scsiprnt;Microsoft SCSI/1394 Generic Printer Class;c:\winnt\system32\drivers\scsiprnt.sys [2004-8-12 11648] S3 TWKPNP;CHIPDRIVE Plug and Play driver;c:\winnt\system32\drivers\twkpnp.sys --> c:\winnt\system32\drivers\TWKPNP.SYS [?] S4 Procovc;Procovc; [x] ============== File Associations =============== inifile=%SystemRoot%\System32\NOTEPAD.EXE %1" =============== Created Last 30 ================ 2009-06-19 14:14 <DIR> --d----- c:\docume~1\terry\applic~1\ESET 2009-06-19 14:12 <DIR> --d----- c:\program files\ESET 2009-06-19 13:40 <DIR> a-dshr-- C:\cmdcons 2009-06-19 13:39 161,792 a------- c:\winnt\SWREG.exe 2009-06-19 13:39 155,136 a------- c:\winnt\PEV.exe 2009-06-19 13:39 98,816 a------- c:\winnt\sed.exe 2009-06-19 13:12 <DIR> --d----- c:\program files\Windows Installer Clean Up 2009-06-19 12:37 1,089,593 -c------ c:\winnt\system32\dllcache\ntprint.cat 2009-06-19 12:08 <DIR> --d----- c:\winnt\system32\XPSViewer 2009-06-19 12:07 597,504 -c------ c:\winnt\system32\dllcache\printfilterpipelinesvc.exe 2009-06-19 12:07 575,488 -c------ c:\winnt\system32\dllcache\xpsshhdr.dll 2009-06-19 12:07 89,088 -c------ c:\winnt\system32\dllcache\filterpipelineprintproc.dll 2009-06-19 12:07 575,488 -------- c:\winnt\system32\xpsshhdr.dll 2009-06-19 12:07 117,760 -------- c:\winnt\system32\prntvpt.dll 2009-06-19 12:07 1,676,288 -c------ c:\winnt\system32\dllcache\xpssvcs.dll 2009-06-19 12:07 1,676,288 -------- c:\winnt\system32\xpssvcs.dll 2009-06-19 12:07 <DIR> --d----- c:\winnt\SxsCaPendDel 2009-06-18 17:09 3,272 a------- c:\winnt\system32\wbem\Outlook_01c9f0723d4633de.mof 2009-06-18 14:57 <DIR> --dsh--- c:\documents and settings\terry\PrivacIE 2009-06-18 14:56 <DIR> --dsh--- c:\documents and settings\terry\IETldCache 2009-06-18 14:49 12,800 -c------ c:\winnt\system32\dllcache\xpshims.dll 2009-06-18 14:48 1,985,024 -c------ c:\winnt\system32\dllcache\iertutil.dll 2009-06-18 14:48 246,272 -c------ c:\winnt\system32\dllcache\ieproxy.dll 2009-06-18 14:48 11,064,832 -c------ c:\winnt\system32\dllcache\ieframe.dll 2009-06-18 14:48 <DIR> --d----- c:\winnt\ie8updates 2009-06-18 14:48 102,912 -c------ c:\winnt\system32\dllcache\iecompat.dll 2009-06-18 14:46 <DIR> -cd-h--- c:\winnt\ie8 2009-06-18 13:43 268,288 -c------ c:\winnt\system32\dllcache\httpext.dll 2009-06-18 13:38 401,408 -c------ c:\winnt\system32\dllcache\rpcss.dll 2009-06-18 13:38 284,160 -c------ c:\winnt\system32\dllcache\pdh.dll 2009-06-18 13:38 473,600 -c------ c:\winnt\system32\dllcache\fastprox.dll 2009-06-18 13:38 110,592 -c------ c:\winnt\system32\dllcache\services.exe 2009-06-18 13:38 453,120 -c------ c:\winnt\system32\dllcache\wmiprvsd.dll 2009-06-18 13:38 227,840 -c------ c:\winnt\system32\dllcache\wmiprvse.exe 2009-06-18 13:38 729,088 -c------ c:\winnt\system32\dllcache\lsasrv.dll 2009-06-18 13:38 714,752 -c------ c:\winnt\system32\dllcache\ntdll.dll 2009-06-18 13:38 617,472 -c------ c:\winnt\system32\dllcache\advapi32.dll 2009-06-18 13:37 2,560 -------- c:\winnt\system32\xpsp4res.dll 2009-06-18 13:37 1,203,922 -c------ c:\winnt\system32\dllcache\sysmain.sdb 2009-06-18 13:37 215,552 -c------ c:\winnt\system32\dllcache\wordpad.exe 2009-06-18 12:02 <DIR> --d----- c:\docume~1\alluse~1\applic~1\NortonInstaller 2009-06-16 22:11 <DIR> --d----- c:\program files\iPod 2009-06-16 22:11 <DIR> --d----- c:\program files\iTunes 2009-05-26 17:18 90,112 a------- c:\winnt\system32\QuickTimeVR.qtx 2009-05-26 17:18 57,344 a------- c:\winnt\system32\QuickTime.qts ==================== Find3M ==================== 2009-06-19 08:24 3,766 a--sh--- c:\winnt\system32\KGyGaAvL.sys 2009-06-17 11:27 38,160 a------- c:\winnt\system32\drivers\mbamswissarmy.sys 2009-06-17 11:27 19,096 a------- c:\winnt\system32\drivers\mbam.sys 2009-05-21 11:33 410,984 a------- c:\winnt\system32\deploytk.dll 2009-05-14 15:49 55,768 a------- c:\winnt\system32\drivers\epfwtdi.sys 2009-05-14 15:49 33,096 a------- c:\winnt\system32\drivers\epfwndis.sys 2009-05-14 15:49 133,000 a------- c:\winnt\system32\drivers\epfw.sys 2009-05-14 15:47 107,256 a------- c:\winnt\system32\drivers\ehdrv.sys 2009-05-14 15:41 114,472 a------- c:\winnt\system32\drivers\eamon.sys 2009-05-12 22:15 915,456 a------- c:\winnt\system32\wininet.dll 2009-05-07 08:32 345,600 a------- c:\winnt\system32\localspl.dll 2009-04-22 19:24 10,240 a------- c:\winnt\system32\drivers\STLD.SYS 2009-04-22 12:24 17,312 a----r-- c:\winnt\system32\drivers\n5usbprn.sys 2009-04-17 05:26 1,847,168 a------- c:\winnt\system32\win32k.sys 2009-04-15 07:51 585,216 a------- c:\winnt\system32\rpcrt4.dll 2007-03-13 10:09 630,784 ac------ c:\documents and settings\terry\GoToAssist_chat2way__317_en.exe 2006-08-09 10:42 3,198,976 ac------ c:\program files\ViewSonicregistration.exe 2006-04-17 08:37 56 ---shr-- c:\winnt\system32\7465AA47C7.sys 2007-03-14 17:00 88 ---shr-- c:\winnt\system32\C747AA6574.sys ============= FINISH: 14:36:38.28 =============== ________________________________________________________________________________ __ Combo Fix - I belive all these norton protections are a problem and we not removed with norton removal tool. ComboFix 09-06-18.02 - terry 06/19/2009 13:42.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1535.1081 [GMT -7:00] Running from: c:\documents and settings\terry\Desktop\ComboFix.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\recycler\NPROTECT c:\winnt\system32\Cache c:\recycler\NPROTECT\00011844.SQL c:\recycler\NPROTECT\00011845.SQL c:\recycler\NPROTECT\00011846.SQL c:\recycler\NPROTECT\00011847.SQL c:\recycler\NPROTECT\00011848.SQL c:\recycler\NPROTECT\00011849.SQL c:\recycler\NPROTECT\00011850.SQL c:\recycler\NPROTECT\00011851.SQL c:\recycler\NPROTECT\00011852.SQL c:\recycler\NPROTECT\00011853.SQL c:\recycler\NPROTECT\00011854.SQL c:\recycler\NPROTECT\00011855.SQL c:\recycler\NPROTECT\00011856.SQL c:\recycler\NPROTECT\00011857.SQL c:\recycler\NPROTECT\00011858.SQL c:\recycler\NPROTECT\00011859.SQL c:\recycler\NPROTECT\00011860.SQL c:\recycler\NPROTECT\00011861.SQL c:\recycler\NPROTECT\00011862.SQL c:\recycler\NPROTECT\00011863.SQL c:\recycler\NPROTECT\00011864.SQL c:\recycler\NPROTECT\00011865.SQL c:\recycler\NPROTECT\00011866.SQL c:\recycler\NPROTECT\00011867.SQL c:\recycler\NPROTECT\00011868.SQL c:\recycler\NPROTECT\00011869.SQL c:\recycler\NPROTECT\00011870.SQL c:\recycler\NPROTECT\00011871.SQL c:\recycler\NPROTECT\00011872.SQL c:\recycler\NPROTECT\00011873.SQL c:\recycler\NPROTECT\00011874.SQL c:\recycler\NPROTECT\00011875.SQL c:\recycler\NPROTECT\00011876.SQL c:\recycler\NPROTECT\00011877.SQL c:\recycler\NPROTECT\00011878.SQL c:\recycler\NPROTECT\00011879.SQL c:\recycler\NPROTECT\00011880.SQL c:\recycler\NPROTECT\00011881.SQL c:\recycler\NPROTECT\00011882.SQL c:\recycler\NPROTECT\00011883.SQL c:\recycler\NPROTECT\00011884.SQL c:\recycler\NPROTECT\00011885.SQL c:\recycler\NPROTECT\00011886.SQL c:\recycler\NPROTECT\00011887.SQL c:\recycler\NPROTECT\00011888.SQL c:\recycler\NPROTECT\00011889.SQL c:\recycler\NPROTECT\00011890.SQL c:\recycler\NPROTECT\00011891.SQL c:\recycler\NPROTECT\00011892.SQL c:\recycler\NPROTECT\00011893.SQL c:\recycler\NPROTECT\00011894.SQL c:\recycler\NPROTECT\00011895.SQL c:\recycler\NPROTECT\00011896.SQL c:\recycler\NPROTECT\00011897.SQL c:\recycler\NPROTECT\00011898.SQL c:\recycler\NPROTECT\00011899.SQL c:\recycler\NPROTECT\00011900.SQL c:\recycler\NPROTECT\00011901.SQL c:\recycler\NPROTECT\00011902.SQL c:\recycler\NPROTECT\00011903.SQL c:\recycler\NPROTECT\00011904.SQL c:\recycler\NPROTECT\00011905.SQL c:\recycler\NPROTECT\00011906.SQL c:\recycler\NPROTECT\00011907.SQL c:\recycler\NPROTECT\00011908.SQL c:\recycler\NPROTECT\00011909.SQL c:\recycler\NPROTECT\00011910.SQL c:\recycler\NPROTECT\00011911.SQL c:\recycler\NPROTECT\00011912.SQL c:\recycler\NPROTECT\00011913.SQL c:\recycler\NPROTECT\00011914.SQL c:\recycler\NPROTECT\00011915.SQL c:\recycler\NPROTECT\00011916.SQL c:\recycler\NPROTECT\00011917.SQL c:\recycler\NPROTECT\00011918.SQL c:\recycler\NPROTECT\00011919.SQL c:\recycler\NPROTECT\00011920.SQL c:\recycler\NPROTECT\00011921.SQL c:\recycler\NPROTECT\00011922.SQL c:\recycler\NPROTECT\00011923.SQL c:\recycler\NPROTECT\00011924.SQL c:\recycler\NPROTECT\00011925.SQL c:\recycler\NPROTECT\00011926.SQL c:\recycler\NPROTECT\00011927.SQL c:\recycler\NPROTECT\00011928.SQL c:\recycler\NPROTECT\00011929.SQL c:\recycler\NPROTECT\00011930.SQL c:\recycler\NPROTECT\00011931.SQL c:\recycler\NPROTECT\00011932.SQL c:\recycler\NPROTECT\00011934.SQL c:\recycler\NPROTECT\00011935.SQL c:\recycler\NPROTECT\00011936.SQL c:\recycler\NPROTECT\00011937.SQL c:\recycler\NPROTECT\00011938.SQL c:\recycler\NPROTECT\00011939.SQL c:\recycler\NPROTECT\00011940.SQL c:\recycler\NPROTECT\00011941.SQL c:\recycler\NPROTECT\00011942.SQL c:\recycler\NPROTECT\00011947.JS c:\recycler\NPROTECT\00011948.JSO c:\recycler\NPROTECT\00011949.JSO c:\recycler\NPROTECT\00011953.JOB c:\recycler\NPROTECT\00011954.JOB c:\recycler\NPROTECT\00011955.nsi c:\recycler\NPROTECT\00011956.NSI c:\recycler\NPROTECT\00011957.msi c:\recycler\NPROTECT\00011958.msi c:\recycler\NPROTECT\00011959.msi c:\recycler\NPROTECT\00011960.msi c:\recycler\NPROTECT\00011961.msi c:\recycler\NPROTECT\00011962.msi c:\recycler\NPROTECT\00011963.msi c:\recycler\NPROTECT\00011964.msi c:\recycler\NPROTECT\00011965.msi c:\recycler\NPROTECT\00011966.msi c:\recycler\NPROTECT\00011967.msi c:\recycler\NPROTECT\00011968.msi c:\recycler\NPROTECT\00011969.msi c:\recycler\NPROTECT\00011970.msi c:\recycler\NPROTECT\00011971.msi c:\recycler\NPROTECT\00011972.msi c:\recycler\NPROTECT\00011973.msi c:\recycler\NPROTECT\00011974.msi c:\recycler\NPROTECT\00011975.msi c:\recycler\NPROTECT\00011976.msi c:\recycler\NPROTECT\00011977.msi c:\recycler\NPROTECT\00011978.dll c:\recycler\NPROTECT\00011979.dll c:\recycler\NPROTECT\00011980.dll c:\recycler\NPROTECT\00011981.dat c:\recycler\NPROTECT\00011982.dll c:\recycler\NPROTECT\00011983.exe c:\recycler\NPROTECT\00011984.dll c:\recycler\NPROTECT\00011985.txt c:\recycler\NPROTECT\00011986.dll c:\recycler\NPROTECT\00011987.ini c:\recycler\NPROTECT\00011988.txt c:\recycler\NPROTECT\00011989.CON c:\recycler\NPROTECT\00011990.dll c:\recycler\NPROTECT\00011991.dll c:\recycler\NPROTECT\00011992.ini c:\recycler\NPROTECT\00011993.dll c:\recycler\NPROTECT\00011994.CON c:\recycler\NPROTECT\00011995.dll c:\recycler\NPROTECT\00011996.CON c:\recycler\NPROTECT\00011997.DLL c:\recycler\NPROTECT\00011998.CON c:\recycler\NPROTECT\00011999.dll c:\recycler\NPROTECT\00012000.CON c:\recycler\NPROTECT\00012001.exe c:\recycler\NPROTECT\00012002.dll c:\recycler\NPROTECT\00012003.CON c:\recycler\NPROTECT\00012004.dll c:\recycler\NPROTECT\00012005.dll c:\recycler\NPROTECT\00012006.dll c:\recycler\NPROTECT\00012007.CON c:\recycler\NPROTECT\00012008.dll c:\recycler\NPROTECT\00012009.dll c:\recycler\NPROTECT\00012010.dll c:\recycler\NPROTECT\00012011.DLL c:\recycler\NPROTECT\00012012.lnk c:\recycler\NPROTECT\00012013.exe c:\recycler\NPROTECT\00012014.dll c:\recycler\NPROTECT\00012015.dll c:\recycler\NPROTECT\00012016.nsi c:\recycler\NPROTECT\00012017.DLL c:\recycler\NPROTECT\00012018.DLL c:\recycler\NPROTECT\00012019.EXE c:\recycler\NPROTECT\00012020.BMP c:\recycler\NPROTECT\00012021.BMP c:\recycler\NPROTECT\00012022.DLL c:\recycler\NPROTECT\00012023.DLL c:\recycler\NPROTECT\00012024.DLL c:\recycler\NPROTECT\00012025.DLL c:\recycler\NPROTECT\00012026.DLL c:\recycler\NPROTECT\00012027.DLL c:\recycler\NPROTECT\00012028.DLL c:\recycler\NPROTECT\00012029.DLL c:\recycler\NPROTECT\00012030.REG c:\recycler\NPROTECT\00012031.BMP c:\recycler\NPROTECT\00012032.BMP c:\recycler\NPROTECT\00012033.txt c:\recycler\NPROTECT\00012034.BMP c:\recycler\NPROTECT\00012035.BMP c:\recycler\NPROTECT\00012036.BMP c:\recycler\NPROTECT\00012037.BMP c:\recycler\NPROTECT\00012038.DLL c:\recycler\NPROTECT\00012039.DLL c:\recycler\NPROTECT\00012040.DLL c:\recycler\NPROTECT\00012041.EXE c:\recycler\NPROTECT\00012042.HLP c:\recycler\NPROTECT\00012043.DLL c:\recycler\NPROTECT\00012044.DLL c:\recycler\NPROTECT\00012045.DLL c:\recycler\NPROTECT\00012046.DLL c:\recycler\NPROTECT\00012047.EXE c:\recycler\NPROTECT\00012048.DLL c:\recycler\NPROTECT\00012049.DLL c:\recycler\NPROTECT\00012050.HLP c:\recycler\NPROTECT\00012051.DLL c:\recycler\NPROTECT\00012052.DLL c:\recycler\NPROTECT\00012053.dll c:\recycler\NPROTECT\00012054.ini c:\recycler\NPROTECT\00012055.DLL c:\recycler\NPROTECT\00012056.DLL c:\recycler\NPROTECT\00012057.DLL c:\recycler\NPROTECT\00012058.dll c:\recycler\NPROTECT\00012059.dll c:\recycler\NPROTECT\00012060.EXE c:\recycler\NPROTECT\00012061.DLL c:\recycler\NPROTECT\00012062.DLL c:\recycler\NPROTECT\00012063.DLL c:\recycler\NPROTECT\00012064.BMP c:\recycler\NPROTECT\00012065.BMP c:\recycler\NPROTECT\00012066.EXE c:\recycler\NPROTECT\00012067.DLL c:\recycler\NPROTECT\00012068.DLL c:\recycler\NPROTECT\00012069.DLL c:\recycler\NPROTECT\00012070.DLL c:\recycler\NPROTECT\00012071.DLL c:\recycler\NPROTECT\00012072.DLL c:\recycler\NPROTECT\00012073.DLL c:\recycler\NPROTECT\00012074.DLL c:\recycler\NPROTECT\00012075.EXE c:\recycler\NPROTECT\00012076.reg c:\recycler\NPROTECT\00012077.BMP c:\recycler\NPROTECT\00012078.DLL c:\recycler\NPROTECT\00012079.DLL c:\recycler\NPROTECT\00012080.dll c:\recycler\NPROTECT\00012081.DLL c:\recycler\NPROTECT\00012082.dll c:\recycler\NPROTECT\00012083.dll c:\recycler\NPROTECT\00012084.DLL c:\recycler\NPROTECT\00012085.dll c:\recycler\NPROTECT\00012086.dll c:\recycler\NPROTECT\00012087.exe c:\recycler\NPROTECT\00012088.EXE c:\recycler\NPROTECT\00012089.txt c:\recycler\NPROTECT\00012090.DLL c:\recycler\NPROTECT\00012091.DLL c:\recycler\NPROTECT\00012092.dll c:\recycler\NPROTECT\00012093.DLL c:\recycler\NPROTECT\00012094.dll c:\recycler\NPROTECT\00012095.DLL c:\recycler\NPROTECT\00012096.dll c:\recycler\NPROTECT\00012097.HLP c:\recycler\NPROTECT\00012098.EXE c:\recycler\NPROTECT\00012099.exe c:\recycler\NPROTECT\00012100.dll c:\recycler\NPROTECT\00012101.exe c:\recycler\NPROTECT\00012102.DLL c:\recycler\NPROTECT\00012103.DLL c:\recycler\NPROTECT\00012104.dll c:\recycler\NPROTECT\00012105.ini c:\recycler\NPROTECT\00012106.dll c:\recycler\NPROTECT\00012107.dll c:\recycler\NPROTECT\00012108.BMP c:\recycler\NPROTECT\00012109.BMP c:\recycler\NPROTECT\00012110.EXE c:\recycler\NPROTECT\00012111.HLP c:\recycler\NPROTECT\00012112.EXE c:\recycler\NPROTECT\00012113.HLP c:\recycler\NPROTECT\00012114.DLL c:\recycler\NPROTECT\00012115.DLL c:\recycler\NPROTECT\00012116.BMP c:\recycler\NPROTECT\00012117.BMP c:\recycler\NPROTECT\00012118.EXE c:\recycler\NPROTECT\00012119.EXE c:\recycler\NPROTECT\00012120.HLP c:\recycler\NPROTECT\00012121.EXE c:\recycler\NPROTECT\00012122.HLP c:\recycler\NPROTECT\00012123.dat c:\recycler\NPROTECT\00012124.dll c:\recycler\NPROTECT\00012125.dll c:\recycler\NPROTECT\00012126.dat c:\recycler\NPROTECT\00012127.dll c:\recycler\NPROTECT\00012128.dll c:\recycler\NPROTECT\00012129.dll c:\recycler\NPROTECT\00012130.dll c:\recycler\NPROTECT\00012131.dat c:\recycler\NPROTECT\00012132.exe c:\recycler\NPROTECT\00012133.dll c:\recycler\NPROTECT\00012134.Loc c:\recycler\NPROTECT\00012135.loc c:\recycler\NPROTECT\00012136.Loc c:\recycler\NPROTECT\00012137.Loc c:\recycler\NPROTECT\00012138.Loc c:\recycler\NPROTECT\00012139.loc c:\recycler\NPROTECT\00012140.loc c:\recycler\NPROTECT\00012141.htm c:\recycler\NPROTECT\00012142.Loc c:\recycler\NPROTECT\00012143.loc c:\recycler\NPROTECT\00012144.loc c:\recycler\NPROTECT\00012145.loc c:\recycler\NPROTECT\00012146.loc c:\recycler\NPROTECT\00012147.exe c:\recycler\NPROTECT\00012148.DLL c:\recycler\NPROTECT\00012149.dll c:\recycler\NPROTECT\00012150.exe c:\recycler\NPROTECT\00012151.hlp c:\recycler\NPROTECT\00012152.dll c:\recycler\NPROTECT\00012153.txt c:\recycler\NPROTECT\00012154.url c:\recycler\NPROTECT\00012155.dll c:\recycler\NPROTECT\00012156.url c:\recycler\NPROTECT\00012157.dll c:\recycler\NPROTECT\00012158.dll c:\recycler\NPROTECT\00012159.dll c:\recycler\NPROTECT\00012160.loc c:\recycler\NPROTECT\00012161.dll c:\recycler\NPROTECT\00012162.dll c:\recycler\NPROTECT\00012163.nsi c:\recycler\NPROTECT\00012164.dll c:\recycler\NPROTECT\00012165.dll c:\recycler\NPROTECT\00012166.dll c:\recycler\NPROTECT\00012167.loc c:\recycler\NPROTECT\00012168.dll c:\recycler\NPROTECT\00012169.DLL c:\recycler\NPROTECT\00012170.chm c:\recycler\NPROTECT\00012171.exe c:\recycler\NPROTECT\00012172.IDX c:\recycler\NPROTECT\00012173.LOG c:\recycler\NPROTECT\00012174.dll c:\recycler\NPROTECT\00012175.LIV c:\recycler\NPROTECT\00012176.EXE c:\recycler\NPROTECT\00012177.DLL c:\recycler\NPROTECT\00012178.EXE c:\recycler\NPROTECT\00012179.DLL c:\recycler\NPROTECT\00012180.EXE c:\recycler\NPROTECT\00012181.DLL c:\recycler\NPROTECT\00012182.EXE c:\recycler\NPROTECT\00012183.EXE c:\recycler\NPROTECT\00012184.DLL c:\recycler\NPROTECT\00012185.EXE c:\recycler\NPROTECT\00012186.EXE c:\recycler\NPROTECT\00012187.dat c:\recycler\NPROTECT\00012188.INF c:\recycler\NPROTECT\00012189.exe c:\recycler\NPROTECT\00012190.ini c:\recycler\NPROTECT\00012191.DLL c:\recycler\NPROTECT\00012192.dll c:\recycler\NPROTECT\00012193.DLL c:\recycler\NPROTECT\00012194.txt c:\recycler\NPROTECT\00012195.TXT c:\recycler\NPROTECT\00012196.DLL c:\recycler\NPROTECT\00012197.DLL c:\recycler\NPROTECT\00012198.DLL c:\recycler\NPROTECT\00012199.CPL c:\recycler\NPROTECT\00012200.DLL c:\recycler\NPROTECT\00012201.DLL c:\recycler\NPROTECT\00012202.DLL c:\recycler\NPROTECT\00012203.EXE c:\recycler\NPROTECT\00012204.LOG c:\recycler\NPROTECT\00012205.DLL c:\recycler\NPROTECT\00012206.DLL c:\recycler\NPROTECT\00012207.bin c:\recycler\NPROTECT\00012208.log c:\recycler\NPROTECT\00012209.log c:\recycler\NPROTECT\00012210.dll c:\recycler\NPROTECT\00012211.loc c:\recycler\NPROTECT\00012212.dll c:\recycler\NPROTECT\00012213.loc c:\recycler\NPROTECT\00012214.dll c:\recycler\NPROTECT\00012215.loc c:\recycler\NPROTECT\00012216.dll c:\recycler\NPROTECT\00012217.loc c:\recycler\NPROTECT\00012218.dll c:\recycler\NPROTECT\00012219.loc c:\recycler\NPROTECT\00012220.log c:\recycler\NPROTECT\00012221.dat c:\recycler\NPROTECT\00012222.dll c:\recycler\NPROTECT\00012223.dll c:\recycler\NPROTECT\00012224.dll c:\recycler\NPROTECT\00012225.loc c:\recycler\NPROTECT\00012226.dat c:\recycler\NPROTECT\00012227.xml c:\recycler\NPROTECT\00012228.txt c:\recycler\NPROTECT\00012229.dll c:\recycler\NPROTECT\00012230.dll c:\recycler\NPROTECT\00012231.dll c:\recycler\NPROTECT\00012232.dll c:\recycler\NPROTECT\00012233.dll c:\recycler\NPROTECT\00012234.DAT c:\recycler\NPROTECT\00012235.dat c:\recycler\NPROTECT\00012236.dat c:\recycler\NPROTECT\00012237.sys c:\recycler\NPROTECT\00012238.vxd c:\recycler\NPROTECT\00012239.dll c:\recycler\NPROTECT\00012240.grd c:\recycler\NPROTECT\00012241.sig c:\recycler\NPROTECT\00012242.DAT c:\recycler\NPROTECT\00012243.dat c:\recycler\NPROTECT\00012244.dll c:\recycler\NPROTECT\00012245.dll c:\recycler\NPROTECT\00012246.dll c:\recycler\NPROTECT\00012247.dll c:\recycler\NPROTECT\00012248.dll c:\recycler\NPROTECT\00012249.dll c:\recycler\NPROTECT\00012250.dll c:\recycler\NPROTECT\00012251.dll c:\recycler\NPROTECT\00012252.loc c:\recycler\NPROTECT\00012253.dll c:\recycler\NPROTECT\00012254.dll c:\recycler\NPROTECT\00012255.exe c:\recycler\NPROTECT\00012256.dll c:\recycler\NPROTECT\00012257.dll c:\recycler\NPROTECT\00012258.loc c:\recycler\NPROTECT\00012259.exe c:\recycler\NPROTECT\00012260.dll c:\recycler\NPROTECT\00012261.dll c:\recycler\NPROTECT\00012262.loc c:\recycler\NPROTECT\00012263.dll c:\recycler\NPROTECT\00012264.dll c:\recycler\NPROTECT\00012265.dll c:\recycler\NPROTECT\00012266.loc c:\recycler\NPROTECT\00012267.dll c:\recycler\NPROTECT\00012268.dll c:\recycler\NPROTECT\00012269.loc c:\recycler\NPROTECT\00012270.dll c:\recycler\NPROTECT\00012271.loc c:\recycler\NPROTECT\00012272.dat c:\recycler\NPROTECT\00012273.def c:\recycler\NPROTECT\00012274.dll c:\recycler\NPROTECT\00012275.loc c:\recycler\NPROTECT\00012276.dll c:\recycler\NPROTECT\00012277.loc c:\recycler\NPROTECT\00012278.exe c:\recycler\NPROTECT\00012279.dll c:\recycler\NPROTECT\00012280.dll c:\recycler\NPROTECT\00012281.loc c:\recycler\NPROTECT\00012282.exe c:\recycler\NPROTECT\00012283.loc c:\recycler\NPROTECT\00012284.dll c:\recycler\NPROTECT\00012285.loc c:\recycler\NPROTECT\00012286.dll c:\recycler\NPROTECT\00012287.exe c:\recycler\NPROTECT\00012288.loc c:\recycler\NPROTECT\00012289.exe c:\recycler\NPROTECT\00012290.dll c:\recycler\NPROTECT\00012291.dat c:\recycler\NPROTECT\00012292.dll c:\recycler\NPROTECT\00012293.dll c:\recycler\NPROTECT\00012294.Loc c:\recycler\NPROTECT\00012295.loc c:\recycler\NPROTECT\00012296.Loc c:\recycler\NPROTECT\00012297.Loc c:\recycler\NPROTECT\00012298.Loc c:\recycler\NPROTECT\00012299.loc c:\recycler\NPROTECT\00012300.loc c:\recycler\NPROTECT\00012301.htm c:\recycler\NPROTECT\00012302.Loc c:\recycler\NPROTECT\00012303.loc c:\recycler\NPROTECT\00012304.loc c:\recycler\NPROTECT\00012305.loc c:\recycler\NPROTECT\00012306.loc c:\recycler\NPROTECT\00012307.exe c:\recycler\NPROTECT\00012308.dll c:\recycler\NPROTECT\00012309.dll c:\recycler\NPROTECT\00012310.dll c:\recycler\NPROTECT\00012311.dll c:\recycler\NPROTECT\00012312.TXT c:\recycler\NPROTECT\00012313.dll c:\recycler\NPROTECT\00012314.dat c:\recycler\NPROTECT\00012315.dll c:\recycler\NPROTECT\00012316.DAT c:\recycler\NPROTECT\00012317.LNK c:\recycler\NPROTECT\00012318.LNK c:\recycler\NPROTECT\00012319.LNK c:\recycler\NPROTECT\00012320.LNK c:\recycler\NPROTECT\00012321.LNK c:\recycler\NPROTECT\00012322.LNK c:\recycler\NPROTECT\00012323.LNK c:\recycler\NPROTECT\00012324.LNK c:\recycler\NPROTECT\00012325.LNK c:\recycler\NPROTECT\00012326.LNK c:\recycler\NPROTECT\00012327.LNK c:\recycler\NPROTECT\00012328.LNK c:\recycler\NPROTECT\00012329.LNK c:\recycler\NPROTECT\00012330.LNK c:\recycler\NPROTECT\00012331.lnk c:\recycler\NPROTECT\00012332.LNK c:\recycler\NPROTECT\00012333.loc c:\recycler\NPROTECT\00012334.dll c:\recycler\NPROTECT\00012335.dll c:\recycler\NPROTECT\00012336.dll c:\recycler\NPROTECT\00012337.dll c:\recycler\NPROTECT\00012338.dll c:\recycler\NPROTECT\00012339.dll c:\recycler\NPROTECT\00012340.dll c:\recycler\NPROTECT\00012341.dat c:\recycler\NPROTECT\00012342.dll c:\recycler\NPROTECT\00012343.dll c:\recycler\NPROTECT\00012344.dll c:\recycler\NPROTECT\00012345.dll c:\recycler\NPROTECT\00012346.dll c:\recycler\NPROTECT\00012347.exe c:\recycler\NPROTECT\00012348.dll c:\recycler\NPROTECT\00012349.DLL c:\recycler\NPROTECT\00012350.EXE c:\recycler\NPROTECT\00012351.dll c:\recycler\NPROTECT\00012352.LOC c:\recycler\NPROTECT\00012353.DLL c:\recycler\NPROTECT\00012354.DLL c:\recycler\NPROTECT\00012355.DLL c:\recycler\NPROTECT\00012356.DLL c:\recycler\NPROTECT\00012357.DLL c:\recycler\NPROTECT\00012358.DLL c:\recycler\NPROTECT\00012359.LOC c:\recycler\NPROTECT\00012360.DLL c:\recycler\NPROTECT\00012361.loc c:\recycler\NPROTECT\00012362.dll c:\recycler\NPROTECT\00012363.loc c:\recycler\NPROTECT\00012364.DLL c:\recycler\NPROTECT\00012365.DLL c:\recycler\NPROTECT\00012366.dll c:\recycler\NPROTECT\00012367.loc c:\recycler\NPROTECT\00012368.DLL c:\recycler\NPROTECT\00012369.EXE c:\recycler\NPROTECT\00012370.DAT c:\recycler\NPROTECT\00012371.DLL c:\recycler\NPROTECT\00012372.VXD c:\recycler\NPROTECT\00012373.DLL c:\recycler\NPROTECT\00012374.SYS c:\recycler\NPROTECT\00012375.GRD c:\recycler\NPROTECT\00012376.SIG c:\recycler\NPROTECT\00012377.SPM c:\recycler\NPROTECT\00012378.SYS c:\recycler\NPROTECT\00012379.BIN c:\recycler\NPROTECT\00012380 c:\recycler\NPROTECT\00012381.EXP c:\recycler\NPROTECT\00012382.SYS c:\recycler\NPROTECT\00012383.VXD c:\recycler\NPROTECT\00012384.DLL c:\recycler\NPROTECT\00012385.EXP c:\recycler\NPROTECT\00012386.SYS c:\recycler\NPROTECT\00012387.VXD c:\recycler\NPROTECT\00012388.DLL c:\recycler\NPROTECT\00012389.TXT c:\recycler\NPROTECT\00012390.DAT c:\recycler\NPROTECT\00012391.CAT c:\recycler\NPROTECT\00012392.INF c:\recycler\NPROTECT\00012393.CAT c:\recycler\NPROTECT\00012394.INF c:\recycler\NPROTECT\00012395.DAT c:\recycler\NPROTECT\00012396.DAT c:\recycler\NPROTECT\00012397.DLL c:\recycler\NPROTECT\00012398.VXD c:\recycler\NPROTECT\00012399.DLL c:\recycler\NPROTECT\00012400.SYS c:\recycler\NPROTECT\00012401.GRD c:\recycler\NPROTECT\00012402.SIG c:\recycler\NPROTECT\00012403.SPM c:\recycler\NPROTECT\00012404.SYS c:\recycler\NPROTECT\00012405.BIN c:\recycler\NPROTECT\00012406 c:\recycler\NPROTECT\00012407.EXP c:\recycler\NPROTECT\00012408.SYS c:\recycler\NPROTECT\00012409.VXD c:\recycler\NPROTECT\00012410.DLL c:\recycler\NPROTECT\00012411.EXP c:\recycler\NPROTECT\00012412.SYS c:\recycler\NPROTECT\00012413.VXD c:\recycler\NPROTECT\00012414.DLL c:\recycler\NPROTECT\00012415.TXT c:\recycler\NPROTECT\00012416.DAT c:\recycler\NPROTECT\00012417.CAT c:\recycler\NPROTECT\00012418.INF c:\recycler\NPROTECT\00012419.CAT c:\recycler\NPROTECT\00012420.INF c:\recycler\NPROTECT\00012421.DAT c:\recycler\NPROTECT\00012422.DAT c:\recycler\NPROTECT\00012423.DLL c:\recycler\NPROTECT\00012424.VXD c:\recycler\NPROTECT\00012425.DLL c:\recycler\NPROTECT\00012426.SYS c:\recycler\NPROTECT\00012427.GRD c:\recycler\NPROTECT\00012428.SIG c:\recycler\NPROTECT\00012429.SPM c:\recycler\NPROTECT\00012430.SYS c:\recycler\NPROTECT\00012431.BIN c:\recycler\NPROTECT\00012432 c:\recycler\NPROTECT\00012433.EXP c:\recycler\NPROTECT\00012434.SYS c:\recycler\NPROTECT\00012435.VXD c:\recycler\NPROTECT\00012436.DLL c:\recycler\NPROTECT\00012437.EXP c:\recycler\NPROTECT\00012438.SYS c:\recycler\NPROTECT\00012439.VXD c:\recycler\NPROTECT\00012440.DLL c:\recycler\NPROTECT\00012441.TXT c:\recycler\NPROTECT\00012442.DAT c:\recycler\NPROTECT\00012443.CAT c:\recycler\NPROTECT\00012444.INF c:\recycler\NPROTECT\00012445.CAT c:\recycler\NPROTECT\00012446.INF c:\recycler\NPROTECT\00012447.DAT c:\recycler\NPROTECT\00012448.DAT c:\recycler\NPROTECT\00012449.DLL c:\recycler\NPROTECT\00012450.VXD c:\recycler\NPROTECT\00012451.DLL c:\recycler\NPROTECT\00012452.SYS c:\recycler\NPROTECT\00012453.GRD c:\recycler\NPROTECT\00012454.SIG c:\recycler\NPROTECT\00012455.SPM c:\recycler\NPROTECT\00012456.SYS c:\recycler\NPROTECT\00012457.BIN c:\recycler\NPROTECT\00012458 c:\recycler\NPROTECT\00012459.EXP c:\recycler\NPROTECT\00012460.SYS c:\recycler\NPROTECT\00012461.VXD c:\recycler\NPROTECT\00012462.DLL c:\recycler\NPROTECT\00012463.EXP c:\recycler\NPROTECT\00012464.SYS c:\recycler\NPROTECT\00012465.VXD c:\recycler\NPROTECT\00012466.DLL c:\recycler\NPROTECT\00012467.TXT c:\recycler\NPROTECT\00012468.DAT c:\recycler\NPROTECT\00012469.CAT c:\recycler\NPROTECT\00012470.INF c:\recycler\NPROTECT\00012471.CAT c:\recycler\NPROTECT\00012472.INF c:\recycler\NPROTECT\00012473.DAT c:\recycler\NPROTECT\00012474.DAT c:\recycler\NPROTECT\00012475.DLL c:\recycler\NPROTECT\00012476.VXD c:\recycler\NPROTECT\00012477.DLL c:\recycler\NPROTECT\00012478.SYS c:\recycler\NPROTECT\00012479.GRD c:\recycler\NPROTECT\00012480.SIG c:\recycler\NPROTECT\00012481.SPM c:\recycler\NPROTECT\00012482.SYS c:\recycler\NPROTECT\00012483.BIN c:\recycler\NPROTECT\00012484 c:\recycler\NPROTECT\00012485.EXP c:\recycler\NPROTECT\00012486.SYS c:\recycler\NPROTECT\00012487.VXD c:\recycler\NPROTECT\00012488.DLL c:\recycler\NPROTECT\00012489.EXP c:\recycler\NPROTECT\00012490.SYS c:\recycler\NPROTECT\00012491.VXD c:\recycler\NPROTECT\00012492.DAT c:\recycler\NPROTECT\00012493.DLL c:\recycler\NPROTECT\00012494.VXD c:\recycler\NPROTECT\00012495.DLL c:\recycler\NPROTECT\00012496.SYS c:\recycler\NPROTECT\00012497.GRD c:\recycler\NPROTECT\00012498.SIG c:\recycler\NPROTECT\00012499.SPM c:\recycler\NPROTECT\00012500.SYS c:\recycler\NPROTECT\00012501.DAT c:\recycler\NPROTECT\00012502.DLL c:\recycler\NPROTECT\00012503.VXD c:\recycler\NPROTECT\00012504.DLL c:\recycler\NPROTECT\00012505.SYS c:\recycler\NPROTECT\00012506.GRD c:\recycler\NPROTECT\00012507.SIG c:\recycler\NPROTECT\00012508.SPM c:\recycler\NPROTECT\00012509.SYS c:\recycler\NPROTECT\00012510.BIN c:\recycler\NPROTECT\00012511 c:\recycler\NPROTECT\00012512.EXP c:\recycler\NPROTECT\00012513.SYS c:\recycler\NPROTECT\00012514.VXD c:\recycler\NPROTECT\00012515.DLL c:\recycler\NPROTECT\00012516.EXP c:\recycler\NPROTECT\00012517.SYS c:\recycler\NPROTECT\00012518.VXD c:\recycler\NPROTECT\00012519.DLL c:\recycler\NPROTECT\00012520.TXT c:\recycler\NPROTECT\00012521.DAT c:\recycler\NPROTECT\00012522.CAT c:\recycler\NPROTECT\00012523.INF c:\recycler\NPROTECT\00012524.CAT c:\recycler\NPROTECT\00012525.INF c:\recycler\NPROTECT\00012526.DAT c:\recycler\NPROTECT\00012527.DAT c:\recycler\NPROTECT\00012528.DAT c:\recycler\NPROTECT\00012529.DAT c:\recycler\NPROTECT\00012530.TXT c:\recycler\NPROTECT\00012531.DAT c:\recycler\NPROTECT\00012532.DAT c:\recycler\NPROTECT\00012533.DAT c:\recycler\NPROTECT\00012534.DAT c:\recycler\NPROTECT\00012535.DAT c:\recycler\NPROTECT\00012536.GRD c:\recycler\NPROTECT\00012537.SIG c:\recycler\NPROTECT\00012538.INF c:\recycler\NPROTECT\00012539.DAT c:\recycler\NPROTECT\00012540.DAT c:\recycler\NPROTECT\00012541.DAT c:\recycler\NPROTECT\00012542.DAT c:\recycler\NPROTECT\00012543.DAT c:\recycler\NPROTECT\00012544.DAT c:\recycler\NPROTECT\00012545.DAT c:\recycler\NPROTECT\00012546.DAT c:\recycler\NPROTECT\00012547.DAT c:\recycler\NPROTECT\00012548.DAT c:\recycler\NPROTECT\00012549.dat c:\recycler\NPROTECT\00012550.TXT c:\recycler\NPROTECT\00012551.DAT c:\recycler\NPROTECT\00012552.DAT c:\recycler\NPROTECT\00012553.DLL c:\recycler\NPROTECT\00012554.VXD c:\recycler\NPROTECT\00012555.DLL c:\recycler\NPROTECT\00012556.SYS c:\recycler\NPROTECT\00012557.GRD c:\recycler\NPROTECT\00012558.SIG c:\recycler\NPROTECT\00012559.SPM c:\recycler\NPROTECT\00012560.SYS c:\recycler\NPROTECT\00012561.BIN c:\recycler\NPROTECT\00012562 c:\recycler\NPROTECT\00012563.EXP c:\recycler\NPROTECT\00012564.SYS c:\recycler\NPROTECT\00012565.VXD c:\recycler\NPROTECT\00012566.DLL c:\recycler\NPROTECT\00012567.EXP c:\recycler\NPROTECT\00012568.SYS c:\recycler\NPROTECT\00012569.VXD c:\recycler\NPROTECT\00012570.DLL c:\recycler\NPROTECT\00012571.TXT c:\recycler\NPROTECT\00012572.DAT c:\recycler\NPROTECT\00012573.CAT c:\recycler\NPROTECT\00012574.INF c:\recycler\NPROTECT\00012575.CAT c:\recycler\NPROTECT\00012576.INF c:\recycler\NPROTECT\00012577.DAT c:\recycler\NPROTECT\00012578.DAT c:\recycler\NPROTECT\00012579.DAT c:\recycler\NPROTECT\00012580.DAT c:\recycler\NPROTECT\00012581.TXT c:\recycler\NPROTECT\00012582.DAT c:\recycler\NPROTECT\00012583.DAT c:\recycler\NPROTECT\00012584.DAT c:\recycler\NPROTECT\00012585.DAT c:\recycler\NPROTECT\00012586.DAT c:\recycler\NPROTECT\00012587.GRD c:\recycler\NPROTECT\00012588.SIG c:\recycler\NPROTECT\00012589.INF c:\recycler\NPROTECT\00012590.DAT c:\recycler\NPROTECT\00012591.DAT c:\recycler\NPROTECT\00012592.DAT c:\recycler\NPROTECT\00012593.DAT c:\recycler\NPROTECT\00012594.DAT c:\recycler\NPROTECT\00012595.DAT c:\recycler\NPROTECT\00012596.DAT c:\recycler\NPROTECT\00012597.DAT c:\recycler\NPROTECT\00012598.DAT c:\recycler\NPROTECT\00012599.DAT c:\recycler\NPROTECT\00012600.dat c:\recycler\NPROTECT\00012601.TXT c:\recycler\NPROTECT\00012602.DAT c:\recycler\NPROTECT\00012603.DAT c:\recycler\NPROTECT\00012604.DLL c:\recycler\NPROTECT\00012605.VXD c:\recycler\NPROTECT\00012606.DLL c:\recycler\NPROTECT\00012607.SYS c:\recycler\NPROTECT\00012608.GRD c:\recycler\NPROTECT\00012609.SIG c:\recycler\NPROTECT\00012610.SPM c:\recycler\NPROTECT\00012611.SYS c:\recycler\NPROTECT\00012612.BIN c:\recycler\NPROTECT\00012613 c:\recycler\NPROTECT\00012614.EXP c:\recycler\NPROTECT\00012615.SYS c:\recycler\NPROTECT\00012616.VXD c:\recycler\NPROTECT\00012617.DLL c:\recycler\NPROTECT\00012618.EXP c:\recycler\NPROTECT\00012619.SYS c:\recycler\NPROTECT\00012620.VXD c:\recycler\NPROTECT\00012621.DLL c:\recycler\NPROTECT\00012622.TXT c:\recycler\NPROTECT\00012623.DAT c:\recycler\NPROTECT\00012624.CAT c:\recycler\NPROTECT\00012625.INF c:\recycler\NPROTECT\00012626.CAT c:\recycler\NPROTECT\00012627.INF c:\recycler\NPROTECT\00012628.DAT c:\recycler\NPROTECT\00012629.DAT c:\recycler\NPROTECT\00012630.DAT c:\recycler\NPROTECT\00012631.DAT c:\recycler\NPROTECT\00012632.TXT c:\recycler\NPROTECT\00012633.DAT c:\recycler\NPROTECT\00012634.DAT c:\recycler\NPROTECT\00012635.DAT c:\recycler\NPROTECT\00012636.DAT c:\recycler\NPROTECT\00012637.DAT c:\recycler\NPROTECT\00012638.GRD c:\recycler\NPROTECT\00012639.SIG c:\recycler\NPROTECT\00012640.INF c:\recycler\NPROTECT\00012641.DAT c:\recycler\NPROTECT\00012642.DAT c:\recycler\NPROTECT\00012643.DAT c:\recycler\NPROTECT\00012644.DAT c:\recycler\NPROTECT\00012645.DAT c:\recycler\NPROTECT\00012646.DAT c:\recycler\NPROTECT\00012647.DAT c:\recycler\NPROTECT\00012648.DAT c:\recycler\NPROTECT\00012649.DAT c:\recycler\NPROTECT\00012650.DAT c:\recycler\NPROTECT\00012651.dat c:\recycler\NPROTECT\00012652.TXT c:\recycler\NPROTECT\00012653.DAT c:\recycler\NPROTECT\00012654.DAT c:\recycler\NPROTECT\00012655.DLL c:\recycler\NPROTECT\00012656.VXD c:\recycler\NPROTECT\00012657.DLL c:\recycler\NPROTECT\00012658.SYS c:\recycler\NPROTECT\00012659.GRD c:\recycler\NPROTECT\00012660.SIG c:\recycler\NPROTECT\00012661.SPM c:\recycler\NPROTECT\00012662.SYS c:\recycler\NPROTECT\00012663.BIN c:\recycler\NPROTECT\00012664 c:\recycler\NPROTECT\00012665.EXP c:\recycler\NPROTECT\00012666.SYS c:\recycler\NPROTECT\00012667.VXD c:\recycler\NPROTECT\00012668.DLL c:\recycler\NPROTECT\00012669.EXP c:\recycler\NPROTECT\00012670.SYS c:\recycler\NPROTECT\00012671.VXD c:\recycler\NPROTECT\00012672.DLL c:\recycler\NPROTECT\00012673.TXT c:\recycler\NPROTECT\00012674.DAT c:\recycler\NPROTECT\00012675.CAT c:\recycler\NPROTECT\00012676.INF c:\recycler\NPROTECT\00012677.CAT c:\recycler\NPROTECT\00012678.INF c:\recycler\NPROTECT\00012679.DAT c:\recycler\NPROTECT\00012680.DAT c:\recycler\NPROTECT\00012681.DAT c:\recycler\NPROTECT\00012682.DAT c:\recycler\NPROTECT\00012683.TXT c:\recycler\NPROTECT\00012684.DAT c:\recycler\NPROTECT\00012685.DAT c:\recycler\NPROTECT\00012686.DAT c:\recycler\NPROTECT\00012687.DAT c:\recycler\NPROTECT\00012688.DAT c:\recycler\NPROTECT\00012689.GRD c:\recycler\NPROTECT\00012690.SIG c:\recycler\NPROTECT\00012691.INF c:\recycler\NPROTECT\00012692.DAT c:\recycler\NPROTECT\00012693.DAT c:\recycler\NPROTECT\00012694.DAT c:\recycler\NPROTECT\00012695.DAT c:\recycler\NPROTECT\00012696.DAT c:\recycler\NPROTECT\00012697.DAT c:\recycler\NPROTECT\00012698.DAT c:\recycler\NPROTECT\00012699.DAT c:\recycler\NPROTECT\00012700.DAT c:\recycler\NPROTECT\00012701.DAT c:\recycler\NPROTECT\00012702.dat c:\recycler\NPROTECT\00012703.TXT c:\recycler\NPROTECT\00012704.DAT c:\recycler\NPROTECT\00012705.dat c:\recycler\NPROTECT\00012706.DLL c:\recycler\NPROTECT\00012707.DLL c:\recycler\NPROTECT\00012708.SYS c:\recycler\NPROTECT\00012709.GRD c:\recycler\NPROTECT\00012710.SIG c:\recycler\NPROTECT\00012711.SPM c:\recycler\NPROTECT\00012712.SYS c:\recycler\NPROTECT\00012713.BIN c:\recycler\NPROTECT\00012714 c:\recycler\NPROTECT\00012715.SYS c:\recycler\NPROTECT\00012716.DLL c:\recycler\NPROTECT\00012717.SYS c:\recycler\NPROTECT\00012718.DLL c:\recycler\NPROTECT\00012719.TXT c:\recycler\NPROTECT\00012720.DAT c:\recycler\NPROTECT\00012721.CAT c:\recycler\NPROTECT\00012722.INF c:\recycler\NPROTECT\00012723.CAT c:\recycler\NPROTECT\00012724.INF c:\recycler\NPROTECT\00012725.DAT c:\recycler\NPROTECT\00012726.DAT c:\recycler\NPROTECT\00012727.DAT c:\recycler\NPROTECT\00012728.DAT c:\recycler\NPROTECT\00012729.TXT c:\recycler\NPROTECT\00012730.DAT c:\recycler\NPROTECT\00012731.DAT c:\recycler\NPROTECT\00012732.DAT c:\recycler\NPROTECT\00012733.DAT c:\recycler\NPROTECT\00012734.DAT c:\recycler\NPROTECT\00012735.GRD c:\recycler\NPROTECT\00012736.SIG c:\recycler\NPROTECT\00012737.INF c:\recycler\NPROTECT\00012738.DAT c:\recycler\NPROTECT\00012739.DAT c:\recycler\NPROTECT\00012740.DAT c:\recycler\NPROTECT\00012741.DAT c:\recycler\NPROTECT\00012742.DAT c:\recycler\NPROTECT\00012743.DAT c:\recycler\NPROTECT\00012744.DAT c:\recycler\NPROTECT\00012745.DAT c:\recycler\NPROTECT\00012746.DAT c:\recycler\NPROTECT\00012747.DAT c:\recycler\NPROTECT\00012748.TXT c:\recycler\NPROTECT\00012749.DAT c:\recycler\NPROTECT\00012750.dat c:\recycler\NPROTECT\00012751.dat c:\recycler\NPROTECT\00012752.dat c:\recycler\NPROTECT\00012753.dll c:\recycler\NPROTECT\00012754.dll c:\recycler\NPROTECT\00012755.dll c:\recycler\NPROTECT\00012756.exe c:\recycler\NPROTECT\00012757.loc c:\recycler\NPROTECT\00012758.dll c:\recycler\NPROTECT\00012759.dll c:\recycler\NPROTECT\00012760.EXE c:\recycler\NPROTECT\00012761.LOC c:\recycler\NPROTECT\00012762.EXE c:\recycler\NPROTECT\00012763.LOC c:\recycler\NPROTECT\00012764.EXE c:\recycler\NPROTECT\00012765.LOC c:\recycler\NPROTECT\00012766.dll c:\recycler\NPROTECT\00012767.dll c:\recycler\NPROTECT\00012768.dll c:\recycler\NPROTECT\00012769.dll c:\recycler\NPROTECT\00012770.exe c:\recycler\NPROTECT\00012771.loc c:\recycler\NPROTECT\00012772.dll c:\recycler\NPROTECT\00012773.dll c:\recycler\NPROTECT\00012774.EXE c:\recycler\NPROTECT\00012775.LOC c:\recycler\NPROTECT\00012776.dll c:\recycler\NPROTECT\00012777.dll c:\recycler\NPROTECT\00012778.DAT c:\recycler\NPROTECT\00012779.dll c:\recycler\NPROTECT\00012780.cat c:\recycler\NPROTECT\00012781.inf c:\recycler\NPROTECT\00012782.sys c:\recycler\NPROTECT\00012783.cat c:\recycler\NPROTECT\00012784.inf c:\recycler\NPROTECT\00012785.sys c:\recycler\NPROTECT\00012786.dll c:\recycler\NPROTECT\00012787.dat c:\recycler\NPROTECT\00012788.dat c:\recycler\NPROTECT\00012789.sys c:\recycler\NPROTECT\00012790.vxd c:\recycler\NPROTECT\00012791.dll c:\recycler\NPROTECT\00012792.grd c:\recycler\NPROTECT\00012793.sig c:\recycler\NPROTECT\00012794.DAT c:\recycler\NPROTECT\00012795.dat c:\recycler\NPROTECT\00012796.DAT c:\recycler\NPROTECT\00012797.dll c:\recycler\NPROTECT\00012798.cat c:\recycler\NPROTECT\00012799.inf c:\recycler\NPROTECT\00012800.sys c:\recycler\NPROTECT\00012801.cat c:\recycler\NPROTECT\00012802.inf c:\recycler\NPROTECT\00012803.sys c:\recycler\NPROTECT\00012804.dll c:\recycler\NPROTECT\00012805.dat c:\recycler\NPROTECT\00012806.dat c:\recycler\NPROTECT\00012807.sys c:\recycler\NPROTECT\00012808.vxd c:\recycler\NPROTECT\00012809.dll c:\recycler\NPROTECT\00012810.grd c:\recycler\NPROTECT\00012811.sig c:\recycler\NPROTECT\00012812.DAT c:\recycler\NPROTECT\00012813.dat c:\recycler\NPROTECT\00012814.dat c:\recycler\NPROTECT\00012815.dll c:\recycler\NPROTECT\00012816.cat c:\recycler\NPROTECT\00012817.inf c:\recycler\NPROTECT\00012818.sys c:\recycler\NPROTECT\00012819.cat c:\recycler\NPROTECT\00012820.inf c:\recycler\NPROTECT\00012821.sys c:\recycler\NPROTECT\00012822.dll c:\recycler\NPROTECT\00012823.dat c:\recycler\NPROTECT\00012824.dat c:\recycler\NPROTECT\00012825.sys c:\recycler\NPROTECT\00012826.vxd c:\recycler\NPROTECT\00012827.dll c:\recycler\NPROTECT\00012828.grd c:\recycler\NPROTECT\00012829.sig c:\recycler\NPROTECT\00012830.dat c:\recycler\NPROTECT\00012831.dat c:\recycler\NPROTECT\00012832.dat c:\recycler\NPROTECT\00012833.dat c:\recycler\NPROTECT\00012834.dll c:\recycler\NPROTECT\00012835.dll c:\recycler\NPROTECT\00012836.dll c:\recycler\NPROTECT\00012837.grd c:\recycler\NPROTECT\00012838.sig c:\recycler\NPROTECT\00012839.spm c:\recycler\NPROTECT\00012840.grd c:\recycler\NPROTECT\00012841.sig c:\recycler\NPROTECT\00012842.spm c:\recycler\NPROTECT\00012843.grd c:\recycler\NPROTECT\00012844.sig c:\recycler\NPROTECT\00012845.spm c:\recycler\NPROTECT\00012846.grd c:\recycler\NPROTECT\00012847.sig c:\recycler\NPROTECT\00012848.spm c:\recycler\NPROTECT\00012849.grd c:\recycler\NPROTECT\00012850.sig c:\recycler\NPROTECT\00012851.spm c:\recycler\NPROTECT\00012852.grd c:\recycler\NPROTECT\00012853.sig c:\recycler\NPROTECT\00012854.spm c:\recycler\NPROTECT\00012855.grd c:\recycler\NPROTECT\00012856.sig c:\recycler\NPROTECT\00012857.spm c:\recycler\NPROTECT\00012858.grd c:\recycler\NPROTECT\00012859.sig c:\recycler\NPROTECT\00012860.spm c:\recycler\NPROTECT\00012861.grd c:\recycler\NPROTECT\00012862.sig c:\recycler\NPROTECT\00012863.spm c:\recycler\NPROTECT\00012864.GRD c:\recycler\NPROTECT\00012865.SIG c:\recycler\NPROTECT\00012866.SPM c:\recycler\NPROTECT\00012867.grd c:\recycler\NPROTECT\00012868.sig c:\recycler\NPROTECT\00012869.spm c:\recycler\NPROTECT\00012870.grd c:\recycler\NPROTECT\00012871.sig c:\recycler\NPROTECT\00012872.spm c:\recycler\NPROTECT\00012873.grd c:\recycler\NPROTECT\00012874.sig c:\recycler\NPROTECT\00012875.spm c:\recycler\NPROTECT\00012876.grd c:\recycler\NPROTECT\00012877.sig c:\recycler\NPROTECT\00012878.spm c:\recycler\NPROTECT\00012879.grd c:\recycler\NPROTECT\00012880.sig c:\recycler\NPROTECT\00012881.spm c:\recycler\NPROTECT\00012882.grd c:\recycler\NPROTECT\00012883.sig c:\recycler\NPROTECT\00012884.spm c:\recycler\NPROTECT\00012885.grd c:\recycler\NPROTECT\00012886.sig c:\recycler\NPROTECT\00012887.spm c:\recycler\NPROTECT\00012888.GRD c:\recycler\NPROTECT\00012889.SIG c:\recycler\NPROTECT\00012890.SPM c:\recycler\NPROTECT\00012891.grd c:\recycler\NPROTECT\00012892.sig c:\recycler\NPROTECT\00012893.spm c:\recycler\NPROTECT\00012894.grd c:\recycler\NPROTECT\00012895.sig c:\recycler\NPROTECT\00012896.spm c:\recycler\NPROTECT\00012897.grd c:\recycler\NPROTECT\00012898.sig c:\recycler\NPROTECT\00012899.spm c:\recycler\NPROTECT\00012900.grd c:\recycler\NPROTECT\00012901.sig c:\recycler\NPROTECT\00012902.spm c:\recycler\NPROTECT\00012903.grd c:\recycler\NPROTECT\00012904.sig c:\recycler\NPROTECT\00012905.spm c:\recycler\NPROTECT\00012906.grd c:\recycler\NPROTECT\00012907.sig c:\recycler\NPROTECT\00012908.spm c:\recycler\NPROTECT\00012909.grd c:\recycler\NPROTECT\00012910.sig c:\recycler\NPROTECT\00012911.spm c:\recycler\NPROTECT\00012912.grd c:\recycler\NPROTECT\00012913.sig c:\recycler\NPROTECT\00012914.spm c:\recycler\NPROTECT\00012915.grd c:\recycler\NPROTECT\00012916.sig c:\recycler\NPROTECT\00012917.spm c:\recycler\NPROTECT\00012918.grd c:\recycler\NPROTECT\00012919.sig c:\recycler\NPROTECT\00012920.spm c:\recycler\NPROTECT\00012921.GRD c:\recycler\NPROTECT\00012922.SIG c:\recycler\NPROTECT\00012923.SPM c:\recycler\NPROTECT\00012924.grd c:\recycler\NPROTECT\00012925.sig c:\recycler\NPROTECT\00012926.spm c:\recycler\NPROTECT\00012927.grd c:\recycler\NPROTECT\00012928.sig c:\recycler\NPROTECT\00012929.spm c:\recycler\NPROTECT\00012930.grd c:\recycler\NPROTECT\00012931.sig c:\recycler\NPROTECT\00012932.spm c:\recycler\NPROTECT\00012933.grd c:\recycler\NPROTECT\00012934.sig c:\recycler\NPROTECT\00012935.spm c:\recycler\NPROTECT\00012936.grd c:\recycler\NPROTECT\00012937.sig c:\recycler\NPROTECT\00012938.spm c:\recycler\NPROTECT\00012939.grd c:\recycler\NPROTECT\00012940.sig c:\recycler\NPROTECT\00012941.spm c:\recycler\NPROTECT\00012942.grd c:\recycler\NPROTECT\00012943.sig c:\recycler\NPROTECT\00012944.spm c:\recycler\NPROTECT\00012945.grd c:\recycler\NPROTECT\00012946.sig c:\recycler\NPROTECT\00012947.spm c:\recycler\NPROTECT\00012948.grd c:\recycler\NPROTECT\00012949.sig c:\recycler\NPROTECT\00012950.spm c:\recycler\NPROTECT\00012951.grd c:\recycler\NPROTECT\00012952.sig c:\recycler\NPROTECT\00012953.spm c:\recycler\NPROTECT\00012954.grd c:\recycler\NPROTECT\00012955.sig c:\recycler\NPROTECT\00012956.spm c:\recycler\NPROTECT\00012957.grd c:\recycler\NPROTECT\00012958.sig c:\recycler\NPROTECT\00012959.spm c:\recycler\NPROTECT\00012960.GRD c:\recycler\NPROTECT\00012961.SIG c:\recycler\NPROTECT\00012962.SPM c:\recycler\NPROTECT\00012963.grd c:\recycler\NPROTECT\00012964.sig c:\recycler\NPROTECT\00012965.spm c:\recycler\NPROTECT\00012966.grd c:\recycler\NPROTECT\00012967.sig c:\recycler\NPROTECT\00012968.spm c:\recycler\NPROTECT\00012969.grd c:\recycler\NPROTECT\00012970.sig c:\recycler\NPROTECT\00012971.spm c:\recycler\NPROTECT\00012972.grd c:\recycler\NPROTECT\00012973.sig c:\recycler\NPROTECT\00012974.spm c:\recycler\NPROTECT\00012975.grd c:\recycler\NPROTECT\00012976.sig c:\recycler\NPROTECT\00012977.spm c:\recycler\NPROTECT\00012978.grd c:\recycler\NPROTECT\00012979.sig c:\recycler\NPROTECT\00012980.spm c:\recycler\NPROTECT\00012981.grd c:\recycler\NPROTECT\00012982.sig c:\recycler\NPROTECT\00012983.spm c:\recycler\NPROTECT\00012984.grd c:\recycler\NPROTECT\00012985.sig c:\recycler\NPROTECT\00012986.spm c:\recycler\NPROTECT\00012987.grd c:\recycler\NPROTECT\00012988.sig c:\recycler\NPROTECT\00012989.spm c:\recycler\NPROTECT\00012990.grd c:\recycler\NPROTECT\00012991.sig c:\recycler\NPROTECT\00012992.spm c:\recycler\NPROTECT\00012993.grd c:\recycler\NPROTECT\00012994.sig c:\recycler\NPROTECT\00012995.spm c:\recycler\NPROTECT\00012996.grd c:\recycler\NPROTECT\00012997.sig c:\recycler\NPROTECT\00012998.spm c:\recycler\NPROTECT\00012999.grd c:\recycler\NPROTECT\00013000.sig c:\recycler\NPROTECT\00013001.spm c:\recycler\NPROTECT\00013002.grd c:\recycler\NPROTECT\00013003.sig c:\recycler\NPROTECT\00013004.spm c:\recycler\NPROTECT\00013005.grd c:\recycler\NPROTECT\00013006.sig c:\recycler\NPROTECT\00013007.spm c:\recycler\NPROTECT\00013008.grd c:\recycler\NPROTECT\00013009.sig c:\recycler\NPROTECT\00013010.spm c:\recycler\NPROTECT\00013011.grd c:\recycler\NPROTECT\00013012.sig c:\recycler\NPROTECT\00013013.spm c:\recycler\NPROTECT\00013014.GRD c:\recycler\NPROTECT\00013015.SIG c:\recycler\NPROTECT\00013016.SPM c:\recycler\NPROTECT\00013017.grd c:\recycler\NPROTECT\00013018.sig c:\recycler\NPROTECT\00013019.spm c:\recycler\NPROTECT\00013020.grd c:\recycler\NPROTECT\00013021.sig c:\recycler\NPROTECT\00013022.spm c:\recycler\NPROTECT\00013023.grd c:\recycler\NPROTECT\00013024.sig c:\recycler\NPROTECT\00013025.spm c:\recycler\NPROTECT\00013026.grd c:\recycler\NPROTECT\00013027.sig c:\recycler\NPROTECT\00013028.spm c:\recycler\NPROTECT\00013029.grd c:\recycler\NPROTECT\00013030.sig c:\recycler\NPROTECT\00013031.spm c:\recycler\NPROTECT\00013032.grd c:\recycler\NPROTECT\00013033.sig c:\recycler\NPROTECT\00013034.spm c:\recycler\NPROTECT\00013035.dll c:\recycler\NPROTECT\00013036.dll c:\recycler\NPROTECT\00013037.kc c:\recycler\NPROTECT\00013038.CAT c:\recycler\NPROTECT\00013039.inf c:\recycler\NPROTECT\00013040.sys c:\recycler\NPROTECT\00013041.dll c:\recycler\NPROTECT\00013042.dll c:\recycler\NPROTECT\00013043.dll c:\recycler\NPROTECT\00013044.dat c:\recycler\NPROTECT\00013045.dll c:\recycler\NPROTECT\00013046.exe c:\recycler\NPROTECT\00013047.exe c:\recycler\NPROTECT\00013048.dll c:\recycler\NPROTECT\00013049.dll c:\recycler\NPROTECT\00013050.dll c:\recycler\NPROTECT\00013051.dll c:\recycler\NPROTECT\00013052.dll c:\recycler\NPROTECT\00013053.dll c:\recycler\NPROTECT\00013054.loc c:\recycler\NPROTECT\00013055.dat c:\recycler\NPROTECT\00013056.ico c:\recycler\NPROTECT\00013057.dll c:\recycler\NPROTECT\00013058.dll c:\recycler\NPROTECT\00013059.dll c:\recycler\NPROTECT\00013060.exe c:\recycler\NPROTECT\00013061.dll c:\recycler\NPROTECT\00013062.dll c:\recycler\NPROTECT\00013063.dll c:\recycler\NPROTECT\00013064.exe c:\recycler\NPROTECT\00013065.dll c:\recycler\NPROTECT\00013066.txt c:\recycler\NPROTECT\00013067.dll c:\recycler\NPROTECT\00013068.dll c:\recycler\NPROTECT\00013069.exe c:\recycler\NPROTECT\00013070.tlb c:\recycler\NPROTECT\00013071.dll c:\recycler\NPROTECT\00013072.dll c:\recycler\NPROTECT\00013073.dll c:\recycler\NPROTECT\00013074.dll c:\recycler\NPROTECT\00013075.dll c:\recycler\NPROTECT\00013076.dll c:\recycler\NPROTECT\00013077.exe c:\recycler\NPROTECT\00013078.Loc c:\recycler\NPROTECT\00013079.dll c:\recycler\NPROTECT\00013080.dll c:\recycler\NPROTECT\00013081.dll c:\recycler\NPROTECT\00013082.loc c:\recycler\NPROTECT\00013083.dll c:\recycler\NPROTECT\00013084.loc c:\recycler\NPROTECT\00013085.exe c:\recycler\NPROTECT\00013086.dll c:\recycler\NPROTECT\00013087.dll c:\recycler\NPROTECT\00013088.loc c:\recycler\NPROTECT\00013089.dll c:\recycler\NPROTECT\00013090.loc c:\recycler\NPROTECT\00013091.exe c:\recycler\NPROTECT\00013092.loc c:\recycler\NPROTECT\00013093.dll c:\recycler\NPROTECT\00013094.loc c:\recycler\NPROTECT\00013095.dll c:\recycler\NPROTECT\00013096.dll c:\recycler\NPROTECT\00013097.dll c:\recycler\NPROTECT\00013098.ocx c:\recycler\NPROTECT\00013099.dll c:\recycler\NPROTECT\00013100.dll c:\recycler\NPROTECT\00013101.dll c:\recycler\NPROTECT\00013102.exe c:\recycler\NPROTECT\00013103.dat c:\recycler\NPROTECT\00013104.dll c:\recycler\NPROTECT\00013105.dll c:\recycler\NPROTECT\00013106.chm c:\recycler\NPROTECT\00013107.chm c:\recycler\NPROTECT\00013108.CHM c:\recycler\NPROTECT\00013109.chm c:\recycler\NPROTECT\00013110.dll c:\recycler\NPROTECT\00013111.chm c:\recycler\NPROTECT\00013112.dll c:\recycler\NPROTECT\00013113.chm c:\recycler\NPROTECT\00013114.dll c:\recycler\NPROTECT\00013115.chm c:\recycler\NPROTECT\00013116.chm c:\recycler\NPROTECT\00013117.chm c:\recycler\NPROTECT\00013118.chm c:\recycler\NPROTECT\00013119.chm c:\recycler\NPROTECT\00013120.chm c:\recycler\NPROTECT\00013121.chm c:\recycler\NPROTECT\00013122.dll c:\recycler\NPROTECT\00013123.chm c:\recycler\NPROTECT\00013124.chm c:\recycler\NPROTECT\00013125.CHM c:\recycler\NPROTECT\00013126.chm c:\recycler\NPROTECT\00013127.dll c:\recycler\NPROTECT\00013128.chm c:\recycler\NPROTECT\00013129.dll c:\recycler\NPROTECT\00013130.chm c:\recycler\NPROTECT\00013131.dll c:\recycler\NPROTECT\00013132.chm c:\recycler\NPROTECT\00013133.dll c:\recycler\NPROTECT\00013134.chm c:\recycler\NPROTECT\00013135.dll c:\recycler\NPROTECT\00013136.chm c:\recycler\NPROTECT\00013137.chw c:\recycler\NPROTECT\00013138.chm c:\recycler\NPROTECT\00013139.dll c:\recycler\NPROTECT\00013140.chm c:\recycler\NPROTECT\00013141.chm c:\recycler\NPROTECT\00013142.chm c:\recycler\NPROTECT\00013143.chm c:\recycler\NPROTECT\00013144.chm c:\recycler\NPROTECT\00013145.chm c:\recycler\NPROTECT\00013146.chm c:\recycler\NPROTECT\00013147.chm c:\recycler\NPROTECT\00013148.chm c:\recycler\NPROTECT\00013149.chm c:\recycler\NPROTECT\00013150.chm c:\recycler\NPROTECT\00013151.chm c:\recycler\NPROTECT\00013152.dll c:\recycler\NPROTECT\00013153.chm c:\recycler\NPROTECT\00013154.chm c:\recycler\NPROTECT\00013155.chm c:\recycler\NPROTECT\00013156.chm c:\recycler\NPROTECT\00013157.chm c:\recycler\NPROTECT\00013158.chm c:\recycler\NPROTECT\00013159.chm c:\recycler\NPROTECT\00013160.chm c:\recycler\NPROTECT\00013161.chm c:\recycler\NPROTECT\00013162.chm c:\recycler\NPROTECT\00013163.chm c:\recycler\NPROTECT\00013164.dll c:\recycler\NPROTECT\00013165.chm c:\recycler\NPROTECT\00013166.chm c:\recycler\NPROTECT\00013167.dll c:\recycler\NPROTECT\00013168.chm c:\recycler\NPROTECT\00013169.chm c:\recycler\NPROTECT\00013170.chw c:\recycler\NPROTECT\00013171.dll c:\recycler\NPROTECT\00013172.chm c:\recycler\NPROTECT\00013173.dll c:\recycler\NPROTECT\00013174.chm c:\recycler\NPROTECT\00013175.dll c:\recycler\NPROTECT\00013176.chm c:\recycler\NPROTECT\00013177.dll c:\recycler\NPROTECT\00013178.chm c:\recycler\NPROTECT\00013179.dll c:\recycler\NPROTECT\00013180.chm c:\recycler\NPROTECT\00013181.dll c:\recycler\NPROTECT\00013182.chm c:\recycler\NPROTECT\00013183.dll c:\recycler\NPROTECT\00013184.chm c:\recycler\NPROTECT\00013185.chm c:\recycler\NPROTECT\00013186.chm c:\recycler\NPROTECT\00013187.dll c:\recycler\NPROTECT\00013188.chm c:\recycler\NPROTECT\00013189.chm c:\recycler\NPROTECT\00013190.chm c:\recycler\NPROTECT\00013191.chm c:\recycler\NPROTECT\00013192.chm c:\recycler\NPROTECT\00013193.DLL c:\recycler\NPROTECT\00013194.DLL c:\recycler\NPROTECT\00013195.EXE c:\recycler\NPROTECT\00013196.DLL c:\recycler\NPROTECT\00013197.DLL c:\recycler\NPROTECT\00013198.DLL c:\recycler\NPROTECT\00013199.DLL c:\recycler\NPROTECT\00013200.DLL c:\recycler\NPROTECT\00013201.DLL c:\recycler\NPROTECT\00013202.sys c:\recycler\NPROTECT\00013203.DAT c:\recycler\NPROTECT\00013204 c:\recycler\NPROTECT\00013205.dll c:\recycler\NPROTECT\00013206.CAC c:\recycler\NPROTECT\00013207.exe c:\recycler\NPROTECT\00013208.exe c:\recycler\NPROTECT\00013209.dll c:\recycler\NPROTECT\00013210.dll c:\recycler\NPROTECT\00013211.dll c:\recycler\NPROTECT\00013212.dll c:\recycler\NPROTECT\00013213.dll c:\recycler\NPROTECT\00013214.dll c:\recycler\NPROTECT\00013215.dll c:\recycler\NPROTECT\00013216.dll c:\recycler\NPROTECT\00013217.dll c:\recycler\NPROTECT\00013218.dll c:\recycler\NPROTECT\00013219.DLL c:\recycler\NPROTECT\00013220.dll c:\recycler\NPROTECT\00013221.dll c:\recycler\NPROTECT\00013222.dll c:\recycler\NPROTECT\00013223.dll c:\recycler\NPROTECT\00013224.DLL c:\recycler\NPROTECT\00013225.dll c:\recycler\NPROTECT\00013226.dll c:\recycler\NPROTECT\00013227.dll c:\recycler\NPROTECT\00013228.dll c:\recycler\NPROTECT\00013229.DLL c:\recycler\NPROTECT\00013230.DLL c:\recycler\NPROTECT\00013231.sys c:\recycler\NPROTECT\00013232.sys c:\recycler\NPROTECT\00013233.inf c:\recycler\NPROTECT\00013234.cat c:\recycler\NPROTECT\00013235.sys c:\recycler\NPROTECT\00013236.sys c:\recycler\NPROTECT\00013237.sys c:\recycler\NPROTECT\00013238.sys c:\recycler\NPROTECT\00013239.SYS c:\recycler\NPROTECT\00013240.INF c:\recycler\NPROTECT\00013241.CAT c:\recycler\NPROTECT\00013242.sys c:\recycler\NPROTECT\00013243.sys c:\recycler\NPROTECT\00013244.inf c:\recycler\NPROTECT\00013245.cat c:\recycler\NPROTECT\00013246.sys c:\recycler\NPROTECT\00013247.inf c:\recycler\NPROTECT\00013248.cat c:\recycler\NPROTECT\00013249.sys c:\recycler\NPROTECT\00013250.inf c:\recycler\NPROTECT\00013251.cat c:\recycler\NPROTECT\00013252.SYS c:\recycler\NPROTECT\00013253.SYS c:\recycler\NPROTECT\00013254.sys c:\recycler\NPROTECT\00013255.inf c:\recycler\NPROTECT\00013256.cat c:\recycler\NPROTECT\00013257.LNK c:\recycler\NPROTECT\00013258.htm c:\recycler\NPROTECT\00013259.HTM c:\recycler\NPROTECT\00013260.dll c:\recycler\NPROTECT\00013261.exe c:\recycler\NPROTECT\00013262.dll c:\recycler\NPROTECT\00013263.dll c:\recycler\NPROTECT\00013264.dll c:\recycler\NPROTECT\00013265.DLL c:\recycler\NPROTECT\00013266.EXE c:\recycler\NPROTECT\00013267.dll c:\recycler\NPROTECT\00013268.dll c:\recycler\NPROTECT\00013269.dll c:\recycler\NPROTECT\00013270.DLL c:\recycler\NPROTECT\00013271.DLL c:\recycler\NPROTECT\00013272.dll c:\recycler\NPROTECT\00013273.exe c:\recycler\NPROTECT\00013274.loc c:\recycler\NPROTECT\00013275.dll c:\recycler\NPROTECT\00013276.dll c:\recycler\NPROTECT\00013277.dll c:\recycler\NPROTECT\00013278.log c:\recycler\NPROTECT\00013279.dll c:\recycler\NPROTECT\00013280.exe c:\recycler\NPROTECT\00013281.log c:\recycler\NPROTECT\00013282.log c:\recycler\NPROTECT\00013283.log c:\recycler\NPROTECT\00013284.log c:\recycler\NPROTECT\00013285.log c:\recycler\NPROTECT\00013286.exe c:\recycler\NPROTECT\00013287.loc c:\recycler\NPROTECT\00013288.exe c:\recycler\NPROTECT\00013289.exe c:\recycler\NPROTECT\00013290.loc c:\recycler\NPROTECT\00013291.dll c:\recycler\NPROTECT\00013292.DLL c:\recycler\NPROTECT\00013293.DLL c:\recycler\NPROTECT\00013294.DLL c:\recycler\NPROTECT\00013295.dll c:\recycler\NPROTECT\00013296.dll c:\recycler\NPROTECT\00013297.dll c:\recycler\NPROTECT\00013298.dll c:\recycler\NPROTECT\00013299.dll c:\recycler\NPROTECT\00013300.dll c:\recycler\NPROTECT\00013301.dll c:\recycler\NPROTECT\00013302.dat c:\recycler\NPROTECT\00013303.dll c:\recycler\NPROTECT\00013304.dll c:\recycler\NPROTECT\00013305.DLL c:\recycler\NPROTECT\00013306.tpl c:\recycler\NPROTECT\00013307.log c:\recycler\NPROTECT\00013308.DLL c:\recycler\NPROTECT\00013309.DLL c:\recycler\NPROTECT\00013310.dll c:\recycler\NPROTECT\00013311.dll c:\recycler\NPROTECT\00013312.DLL c:\recycler\NPROTECT\00013313.EXE c:\recycler\NPROTECT\00013314.HLP c:\recycler\NPROTECT\00013315.exe c:\recycler\NPROTECT\00013316.DAT c:\recycler\NPROTECT\00013317.DLL c:\recycler\NPROTECT\00013318.dll c:\recycler\NPROTECT\00013319.dll c:\recycler\NPROTECT\00013320.rul c:\recycler\NPROTECT\00013321.DLL c:\recycler\NPROTECT\00013322.dll c:\recycler\NPROTECT\00013323.rul c:\recycler\NPROTECT\00013324.dll c:\recycler\NPROTECT\00013325.dll c:\recycler\NPROTECT\00013326.exe c:\recycler\NPROTECT\00013327.dll c:\recycler\NPROTECT\00013328.dll c:\recycler\NPROTECT\00013329.exe c:\recycler\NPROTECT\00013330.dll c:\recycler\NPROTECT\00013331.dll c:\recycler\NPROTECT\00013332.dll c:\recycler\NPROTECT\00013333.dll c:\recycler\NPROTECT\00013334.dll c:\recycler\NPROTECT\00013335.exe c:\recycler\NPROTECT\00013336.dll c:\recycler\NPROTECT\00013337.dll c:\recycler\NPROTECT\00013338.dll c:\recycler\NPROTECT\00013339.exe c:\recycler\NPROTECT\00013340.dll c:\recycler\NPROTECT\00013341.dll c:\recycler\NPROTECT\00013342.dll c:\recycler\NPROTECT\00013343.exe c:\recycler\NPROTECT\00013344.dll c:\recycler\NPROTECT\00013345.dll c:\recycler\NPROTECT\00013346.LNK c:\recycler\NPROTECT\00013347.LNK c:\recycler\NPROTECT\00013348.DLL c:\recycler\NPROTECT\00013349.CAT c:\recycler\NPROTECT\00013350.INF c:\recycler\NPROTECT\00013351.SYS c:\recycler\NPROTECT\NPROTECT.LOG c:\winnt\IE4 Error Log.txt c:\winnt\patch.exe c:\winnt\system32\nfr.assembly c:\winnt\system32\nfr.gpref c:\winnt\system32\WgaLogon.dll C:\xcrashdump.dat . ((((((((((((((((((((((((( Files Created from 2009-05-19 to 2009-06-19 ))))))))))))))))))))))))))))))) . 2009-06-19 20:12 . 2009-06-19 20:12 3584 ----a-r- c:\documents and settings\terry\Application Data\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe 2009-06-19 20:12 . 2009-06-19 20:12 -------- d-----w- c:\program files\Windows Installer Clean Up 2009-06-19 19:08 . 2009-06-19 19:08 -------- d-----w- c:\winnt\system32\XPSViewer 2009-06-19 19:08 . 2009-06-19 19:08 -------- d-----w- c:\program files\MSBuild 2009-06-19 19:08 . 2009-06-19 19:08 -------- d-----w- c:\program files\Reference Assemblies 2009-06-19 19:07 . 2008-07-06 12:06 89088 -c----w- c:\winnt\system32\dllcache\filterpipelineprintproc.dll 2009-06-19 19:07 . 2008-07-06 12:06 575488 -c----w- c:\winnt\system32\dllcache\xpsshhdr.dll 2009-06-19 19:07 . 2008-07-06 12:06 575488 ------w- c:\winnt\system32\xpsshhdr.dll 2009-06-19 19:07 . 2008-07-06 12:06 117760 ------w- c:\winnt\system32\prntvpt.dll 2009-06-19 19:07 . 2008-07-06 10:50 597504 -c----w- c:\winnt\system32\dllcache\printfilterpipelinesvc.exe 2009-06-19 19:07 . 2008-07-06 12:06 1676288 -c----w- c:\winnt\system32\dllcache\xpssvcs.dll 2009-06-19 19:07 . 2008-07-06 12:06 1676288 ------w- c:\winnt\system32\xpssvcs.dll 2009-06-19 19:07 . 2009-06-19 19:30 -------- d-----w- c:\winnt\SxsCaPendDel 2009-06-18 21:57 . 2009-06-18 21:57 -------- d-sh--w- c:\documents and settings\terry\PrivacIE 2009-06-18 21:56 . 2009-06-18 21:56 -------- d-sh--w- c:\documents and settings\terry\IETldCache 2009-06-18 21:49 . 2009-04-30 21:22 12800 -c----w- c:\winnt\system32\dllcache\xpshims.dll 2009-06-18 21:48 . 2009-04-30 21:22 1985024 -c----w- c:\winnt\system32\dllcache\iertutil.dll 2009-06-18 21:48 . 2009-04-30 21:22 246272 -c----w- c:\winnt\system32\dllcache\ieproxy.dll 2009-06-18 21:48 . 2009-04-30 21:22 11064832 -c----w- c:\winnt\system32\dllcache\ieframe.dll 2009-06-18 21:48 . 2009-06-18 21:48 -------- d-----w- c:\winnt\ie8updates 2009-06-18 21:48 . 2009-05-12 05:11 102912 -c----w- c:\winnt\system32\dllcache\iecompat.dll 2009-06-18 21:46 . 2009-06-18 21:48 -------- dc-h--w- c:\winnt\ie8 2009-06-18 20:43 . 2009-05-21 18:46 268288 -c----w- c:\winnt\system32\dllcache\httpext.dll 2009-06-18 20:38 . 2009-03-06 14:22 284160 -c----w- c:\winnt\system32\dllcache\pdh.dll 2009-06-18 20:38 . 2009-02-09 12:10 401408 -c----w- c:\winnt\system32\dllcache\rpcss.dll 2009-06-18 20:38 . 2009-02-09 12:10 473600 -c----w- c:\winnt\system32\dllcache\fastprox.dll 2009-06-18 20:38 . 2009-02-06 11:11 110592 -c----w- c:\winnt\system32\dllcache\services.exe 2009-06-18 20:38 . 2009-02-09 12:10 453120 -c----w- c:\winnt\system32\dllcache\wmiprvsd.dll 2009-06-18 20:38 . 2009-02-06 10:10 227840 -c----w- c:\winnt\system32\dllcache\wmiprvse.exe 2009-06-18 20:38 . 2009-02-09 12:10 729088 -c----w- c:\winnt\system32\dllcache\lsasrv.dll 2009-06-18 20:38 . 2009-02-09 12:10 714752 -c----w- c:\winnt\system32\dllcache\ntdll.dll 2009-06-18 20:38 . 2009-02-09 12:10 617472 -c----w- c:\winnt\system32\dllcache\advapi32.dll 2009-06-18 20:37 . 2008-05-03 11:55 2560 ------w- c:\winnt\system32\xpsp4res.dll 2009-06-18 20:37 . 2008-04-21 12:08 215552 -c----w- c:\winnt\system32\dllcache\wordpad.exe 2009-06-18 19:32 . 2009-06-18 19:32 -------- d-----w- c:\documents and settings\LocalService\Application Data\ESET 2009-06-18 19:02 . 2009-06-18 19:02 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller 2009-06-17 05:11 . 2009-06-17 05:11 -------- d-----w- c:\program files\iPod 2009-06-17 05:11 . 2009-06-17 05:12 -------- d-----w- c:\program files\iTunes 2009-06-17 04:58 . 2009-06-17 04:58 75048 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.2.0.23\SetupAdmin.exe 2009-06-12 05:00 . 2009-06-12 05:00 3371383 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe 2009-06-11 16:54 . 2009-06-11 16:54 152576 ----a-w- c:\documents and settings\terry\Application Data\Sun\Java\jre1.6.0_14\lzma.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-06-19 20:11 . 2008-01-18 16:30 -------- d-----w- c:\program files\MSECache 2009-06-19 15:53 . 2005-02-21 01:09 1080 ----a-w- c:\winnt\AUTOLNCH.REG 2009-06-19 15:24 . 2006-04-17 15:26 3766 --sha-w- c:\winnt\system32\KGyGaAvL.sys 2009-06-18 19:03 . 2008-06-05 14:45 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec 2009-06-18 18:50 . 2009-03-04 16:05 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft 2009-06-18 18:50 . 2004-08-26 22:12 -------- d-----w- c:\program files\Lavasoft 2009-06-18 18:49 . 2009-03-11 02:10 -------- d-----w- c:\program files\Spybot - Search & Destroy 2009-06-18 18:49 . 2004-06-04 03:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-06-18 18:11 . 2008-06-05 19:43 -------- d-----w- c:\program files\Common Files\Symantec Shared 2009-06-17 16:46 . 2007-12-11 17:14 1878984 -c--a-w- c:\documents and settings\terry\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\fpupdatepl.exe 2009-06-17 05:11 . 2007-12-26 15:47 -------- d-----w- c:\program files\Common Files\Apple 2009-06-17 05:06 . 2005-04-14 16:16 -------- d-----w- c:\program files\QuickTime 2009-06-11 16:55 . 2004-08-03 20:10 -------- d-----w- c:\program files\Java 2009-05-26 20:20 . 2009-04-10 18:36 40160 ----a-w- c:\winnt\system32\drivers\mbamswissarmy.sys 2009-05-26 20:19 . 2009-04-10 18:37 19096 ----a-w- c:\winnt\system32\drivers\mbam.sys 2009-05-21 18:33 . 2009-04-09 19:07 410984 ----a-w- c:\winnt\system32\deploytk.dll 2009-05-13 05:15 . 2004-12-08 00:37 915456 ----a-w- c:\winnt\system32\wininet.dll 2009-05-07 15:32 . 2002-08-28 19:41 345600 ----a-w- c:\winnt\system32\localspl.dll 2009-04-28 00:31 . 2009-04-28 00:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Maxtor 2009-04-28 00:31 . 2004-06-03 22:47 -------- d--h--w- c:\program files\InstallShield Installation Information 2009-04-28 00:30 . 2009-04-28 00:30 -------- d-----w- c:\documents and settings\terry\Application Data\Maxtor Quick Start 2009-04-23 02:24 . 2004-08-19 16:56 10240 ----a-w- c:\winnt\system32\drivers\STLD.SYS 2009-04-22 19:24 . 2004-08-19 18:04 17312 ----a-r- c:\winnt\system32\drivers\n5usbprn.sys 2009-04-22 14:05 . 2009-04-22 14:04 -------- d-----w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} 2009-04-17 13:47 . 2005-02-21 00:27 78008 ----a-w- c:\documents and settings\terry\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-04-17 12:26 . 2002-08-28 18:14 1847168 ----a-w- c:\winnt\system32\win32k.sys 2009-04-15 14:51 . 2004-06-03 23:07 585216 ----a-w- c:\winnt\system32\rpcrt4.dll 2009-04-09 19:04 . 2009-04-09 19:04 152576 ----a-w- c:\documents and settings\terry\Application Data\Sun\Java\jre1.6.0_13\lzma.dll 2006-08-09 17:42 . 2007-03-11 02:57 3198976 -c--a-w- c:\program files\ViewSonicregistration.exe 2006-04-17 15:37 . 2006-04-17 15:26 56 --sh--r- c:\winnt\system32\7465AA47C7.sys 2007-03-15 00:00 . 2007-03-10 20:24 88 --sh--r- c:\winnt\system32\C747AA6574.sys . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MSSOverlay] @="{b75ab0c8-03d5-4592-9821-a48d54d66b14}" [HKEY_CLASSES_ROOT\CLSID\{b75ab0c8-03d5-4592-9821-a48d54d66b14}] 2008-08-05 14:54 91488 -c--a-w- e:\program files\Maxtor\ManagerApp\MssShellExt.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-14 68856] "Copernic Desktop Search - Home"="c:\program files\Copernic Desktop Search - Home\DesktopSearchService.exe" [2008-12-11 1588224] "ctfmon.exe"="c:\winnt\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\winnt\system32\NvCpl.dll" [2003-10-06 5058560] "mssSort"="e:\program files\Maxtor\ManagerApp\msssort.exe" [2008-08-05 1647960] "mxomssmenu"="e:\program files\Maxtor\OneTouch Status\maxmenumgr.exe" [2008-08-05 169312] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-21 148888] "SoundMan"="SOUNDMAN.EXE" - c:\winnt\SOUNDMAN.EXE [2004-02-26 65024] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-23 39264] c:\documents and settings\All Users\Start Menu\Programs\Startup\ Adobe Acrobat Speed Launcher.lnk - c:\winnt\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe [2007-3-10 25214] Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2004-6-3 110592] HP OfficeJet Series 700 Startup.lnk - c:\program files\Hewlett-Packard\HP OfficeJet Series 700\Bin\HPOstr05.exe [2005-2-24 1175552] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoViewOnDrive"= 0 (0x0) [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks 2002 Delivery Agent.lnk] path=c:\documents and settings\All Users\Start Menu\Programs\Startup\QuickBooks 2002 Delivery Agent.lnk backup=c:\winnt\pss\QuickBooks 2002 Delivery Agent.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "LiveUpdate"=3 (0x3) "MDM"=2 (0x2) "iPod Service"=3 (0x3) "IDriverT"=3 (0x3) [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\WINNT\\system32\\fxsclnt.exe"= "c:\\Program Files\\ACT\\ACT for Windows\\Act8.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009 R1 Start1Driver;Start1Driver;c:\winnt\system32\drivers\Start1Driver.SYS [4/9/2009 9:31 AM 5120] R2 IntuitUpdateService;Intuit Update Service;c:\program files\Common Files\Intuit\Update Service\IntuitUpdateService.exe [10/10/2008 5:45 AM 13088] R2 Maxtor Sync Services;Maxtor Service;e:\program files\Maxtor\Sync\SyncServices.exe [8/5/2008 7:54 AM 181600] R2 MSSQL$ACT7;SQL Server (ACT7);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [11/24/2008 10:31 PM 29263712] R2 n5lpt.sys;N5 Print Device;c:\winnt\system32\drivers\n5lpt.sys [8/19/2004 9:56 AM 21132] R2 nvTUNEP;nVidia WDM TVTuner;c:\winnt\system32\drivers\NVTUNEP.SYS [6/3/2004 3:47 PM 15968] R2 nvtvSND;nVidia WDM TVAudio Crossbar;c:\winnt\system32\drivers\NVTVSND.SYS [6/3/2004 3:47 PM 13776] R2 Stld;Stld;c:\winnt\system32\drivers\STLD.SYS [8/19/2004 9:56 AM 10240] S2 key5usb;KeyFive USB Reader;c:\winnt\system32\drivers\key5usb.sys [10/26/2004 10:16 AM 17332] S2 Start2Driver;Start2Driver; [x] S3 scsiprnt;Microsoft SCSI/1394 Generic Printer Class;c:\winnt\system32\drivers\scsiprnt.sys [8/12/2004 10:17 AM 11648] S3 TWKPNP;CHIPDRIVE Plug and Play driver;c:\winnt\system32\DRIVERS\TWKPNP.SYS --> c:\winnt\system32\DRIVERS\TWKPNP.SYS [?] S4 Procovc;Procovc; [x] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] "c:\winnt\system32\rundll32.exe" "c:\winnt\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP . Contents of the 'Scheduled Tasks' folder 2009-06-17 c:\winnt\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 19:34] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.com/ uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Convert link target to Adobe PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert to existing PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 IE: Spoke Company Search - c:\program files\Spoke Client\3.0.1588.729\SpokeToolBand.dll/searchcompany.htm IE: Spoke Person Search - c:\program files\Spoke Client\3.0.1588.729\SpokeToolBand.dll/searchperson.htm IE: Spoke Title Search - c:\program files\Spoke Client\3.0.1588.729\SpokeToolBand.dll/searchtitle.htm Trusted Zone: overture.com\secure Trusted Zone: turbotax.com Trusted Zone: yahoo.com\marketingsolutions DPF: DirectAnimation Java Classes - file://c:\winnt\Java\classes\dajava.cab DPF: Microsoft XML Parser for Java - file://c:\winnt\Java\classes\xmldso.cab FF - ProfilePath - . . ------- File Associations ------- . inifile=%SystemRoot%\System32\NOTEPAD.EXE %1" . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-06-19 14:02 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\S-1-5-21-1645522239-1972579041-1801674531-1010\Software\Microsoft\SystemCertificates\AddressBook*] @Allowed: (Read) (RestrictedCode) @Allowed: (Read) (RestrictedCode) [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\WPAEvents] @Denied: (Full) (LocalSystem) "OOBETimer"=hex:ff,d5,71,d6,8b,6a,8d,6f,d5,33,93,fd . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'explorer.exe'(2592) c:\winnt\system32\WININET.dll e:\program files\Maxtor\ManagerApp\MssShellExt.dll c:\winnt\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll c:\winnt\system32\webcheck.dll c:\winnt\system32\IEFRAME.dll . ------------------------ Other Running Processes ------------------------ . c:\winnt\system32\scardsvr.exe c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\winnt\system32\inetsrv\inetinfo.exe c:\program files\Java\jre6\bin\jqs.exe c:\winnt\system32\nvsvc32.exe c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe c:\winnt\system32\wscntfy.exe e:\program files\Adobe\Acrobat 7.0\Acrobat\acrobat_sl.exe c:\program files\Hewlett-Packard\HP OfficeJet Series 700\Bin\hpovdx05.exe c:\winnt\system32\hpoipm07.exe . ************************************************************************** . Completion time: 2009-06-19 14:08 - machine was rebooted ComboFix-quarantined-files.txt 2009-06-19 21:08 Pre-Run: 3,442,647,040 bytes free Post-Run: 3,175,776,256 bytes free WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINNT [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINNT="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn 1750 --- E O F --- 2009-06-18 23:52[code][/code] This post has been edited by jdurham05: Jun 19 2009, 03:50 PM
Attached File(s)
|
|
|
|
jdurham05 Cant Install / use firewall they say I have malaware or a virus Jun 19 2009, 03:26 PM
shelf life hi,
Looks like you had malware at one time. I don... Jun 21 2009, 03:13 PM
jdurham05 I have tried to use germ but it has issues. What I... Jun 22 2009, 12:02 PM
shelf life You dont want to check the show all option.
you m... Jun 22 2009, 05:03 PM
jdurham05 So I had to try and use Gmer because the one just ... Jun 23 2009, 04:15 PM
jdurham05 So I had to try and use Gmer because the one just ... Jun 23 2009, 04:15 PM
shelf life hi,
the GMER log looks fine. There is reference t... Jun 24 2009, 03:45 PM
jdurham05 I agree using a seperate firewall maybe the easies... Jun 25 2009, 12:40 AM
shelf life QUOTE The Norton and Trend Micro are from a few ye... Jun 26 2009, 04:09 PM![]() ![]() |
Similar Topics
| Topic Title | Replies | Topic Starter | Views | Last Action | |||
|---|---|---|---|---|---|---|---|
![]() |
38 | 3streamMusic | 861 | 11 minutes ago Last post by: 3streamMusic |
|||
![]() |
7 | ZeroMovement | 99 | Today, 02:26 PM Last post by: RPMcMurphy |
|||
![]() |
11 | ladyixnay | 609 | Today, 01:48 PM Last post by: oldman960 |
|||
![]() |
8 | kaxfenix | 152 | Today, 01:22 PM Last post by: RPMcMurphy |
|||
|
Time is now: 20th March 2010 - 04:47 PM |