Virtumonde, Metajuan Removal

karmonex Topic Starter

Post #1February 28, 2009, 10:27 AM UTC last edited February 28, 2009, 3:42 PM UTC

I would greatly appreciate the expertise of an enlightened member to help rid my system (XP/SP3/Firefox) of the insidious Virtumonde and Metajuan plagues. The HJT scan log is attached.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:14:20 AM, on 2/28/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\Program Files\PC Tools Firewall Plus\FWService.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ThreatFire\TFService.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Canon\MultiPASS4\monitr32.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ThreatFire\TFTray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Yahoo!\Yahoo! Music Engine\ymetray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\scrnsave.scr
C:\WINDOWS\explorer.exe
C:\Documents and Settings\John\Desktop\HijackThis\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: {533086a1-6677-572a-d2b4-6645cff02f95} - {59f20ffc-5466-4b2d-a275-77661a680335} - C:\WINDOWS\system32\laozpi.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {9c164efa-1c12-479f-9e57-ffadfece0f4c} - C:\WINDOWS\system32\wezunohi.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [monitr32] C:\Program Files\Canon\MultiPASS4\monitr32.exe I
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exe
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [giyedulare] Rundll32.exe "C:\WINDOWS\system32\wirimiru.dll",s
O4 - HKLM\..\Run: [7427bd70] rundll32.exe "C:\WINDOWS\system32\lidewiti.dll",b
O4 - HKLM\..\Run: [CPM77148eec] Rundll32.exe "c:\windows\system32\delidubu.dll",a
O4 - HKLM\..\RunOnce: [ScanNClnPostRbt] C:\Program Files\Norton Security Scan\Nss.exe /OnReboot
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [cdloader] "C:\Documents and Settings\John\Application Data\mjusbsp\cdloader2.exe" MAGICJACK
O4 - HKUS\S-1-5-19\..\Run: [giyedulare] Rundll32.exe "C:\WINDOWS\system32\wirimiru.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [giyedulare] Rundll32.exe "C:\WINDOWS\system32\wirimiru.dll",s (User 'NETWORK SERVICE')
O4 - Global Startup: EPSON Status Monitor 3 Environment Check(2).lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: ymetray.lnk = C:\Program Files\Yahoo!\Yahoo! Music Engine\ymetray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1105166042193
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL c:\windows\system32\lukuduni.dll dwjbnu.dll dsnipm.dll ikxlof.dll C:\WINDOWS\system32\jafovaje.dll tvorpm.dll rdpxut.dll laozpi.dll c:\windows\system32\delidubu.dll
O20 - Winlogon Notify: nnnoOeFu - nnnoOeFu.dll (file missing)
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\delidubu.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\delidubu.dll
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: GoogleDesktopManager - GEAR Software Inc. - (no file)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MpService - Canon Inc - C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: ThreatFire - PC Tools - C:\Program Files\ThreatFire\TFService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

–
End of file - 10051 bytes

Attachments:

📎hijackthis.txt

Clark76

Post #2February 28, 2009, 3:51 PM UTC

Hello and welcome to the forum. I will be helping you with your problem.
Unless I request you to, please copy and paste all requested logs into your reply instead of attaching them.

—————————

Before we start with the fix I would like to get a more in depth look at your system.

[external image: Posted Image]
Download GMER Rootkit Scanner from here or here.

Extract the contents of the zipped file to desktop.
Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.

[external image: Posted Image]
In the right panel, you will see several boxes that have been checked. Uncheck the following …
- Sections
- IAT/EAT
- Drives/Partition other than Systemdrive (typically C:\)
- Show All (don't miss this one)
Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries

———————————

Please download DDS and save it to your desktop.

Disable any script blocking protection
Double click dds.scr to run the tool.
When done, DDS.txt will open.
Click Yes at the next prompt for Optional Scan.
Save both reports to your desktop.

———————————

Please provide the following logs with your next post:

Gmer.txt
DDS.txt
Attach.txt

karmonex

Post #3February 28, 2009, 8:47 PM UTC

As per instruction, I downloaded to the desktop gmer.exe, it wouldn't open. The hour glass icon appeared then went out. I downloaded dds.scr but it gave a can't-read -must-close error message after the black window opened from the desktop. I'm not sure if script blocking is enabled or not. Clearly, something is preventing these diagnostics from running. Perhaps you could point me to these preliminary obstacles. Thank You

karmonex

Post #4February 28, 2009, 11:01 PM UTC

After a reboot GMER.exe ran OK, but not the dds.scr program. The window opened followed by a memory read error message that said it had to close. Below the GMER.txt file:

GMER 1.0.14.14536 - http://www.gmer.net
Rootkit scan 2009-02-28 14:25:45
Windows 5.1.2600 Service Pack 3

—- System - GMER 1.0.14 —-

SSDT \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.) ZwCreateKey [0xA2B5B7A6]
SSDT \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.) ZwCreateProcess [0xA2B58794]
SSDT \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.) ZwCreateProcessEx [0xA2B58F1E]
SSDT \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.) ZwDeleteKey [0xA2B5C1F0]
SSDT \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.) ZwDeleteValueKey [0xA2B5C42A]
SSDT TfSysMon.sys (ThreatFire System Monitor/PC Tools) ZwOpenKey [0xF767BA3C]
SSDT \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.) ZwRenameKey [0xA2B5D12A]
SSDT \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.) ZwSetValueKey [0xA2B5C83C]
SSDT \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.) ZwTerminateProcess [0xA2B57D0A]
SSDT \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.) ZwWriteVirtualMemory [0xA2B57384]

—- Devices - GMER 1.0.14 —-

AttachedDevice \FileSystem\Ntfs \Ntfs SiWinAcc.sys (Windows Accelerator Driver/Silicon Image, Inc.)
AttachedDevice \FileSystem\Ntfs \Ntfs SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)
AttachedDevice \Driver\Tcpip \Device\Ip pctfw2.sys (PC Tools TDI Driver/PC Tools)
AttachedDevice \Driver\Tcpip \Device\Tcp pctfw2.sys (PC Tools TDI Driver/PC Tools)
AttachedDevice \Driver\Tcpip \Device\Udp pctfw2.sys (PC Tools TDI Driver/PC Tools)
AttachedDevice \Driver\Tcpip \Device\RawIp pctfw2.sys (PC Tools TDI Driver/PC Tools)
AttachedDevice \FileSystem\Fastfat \Fat SiWinAcc.sys (Windows Accelerator Driver/Silicon Image, Inc.)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)

—- Registry - GMER 1.0.14 —-

Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9C164EFA-1C12-479F-9E57-FFADFECE0F4C}\iexplore@Type 3
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9C164EFA-1C12-479F-9E57-FFADFECE0F4C}\iexplore@Count 317

—- Files - GMER 1.0.14 —-

File C:\RECYCLER\NPROTECT 0 bytes
File C:\RECYCLER\NPROTECT\06172003.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172004.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172005.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172006.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172007.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172008.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172009.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172010.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172011.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172014.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172015.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172016.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172017.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172018.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172019.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172020.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172021.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172077.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172078.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172079.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172080.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172081.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172082.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172083.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172084.SQL 3271400 bytes
File C:\RECYCLER\NPROTECT\06172085.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172086.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172088.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172089.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172090.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172091.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172092.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172093.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172094.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172151.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172152.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172153.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172154.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172155.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172156.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172157.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172158.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172159.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172160.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172161.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172162.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172163.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172164.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172165.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172166.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172167.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172326.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172327.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06172328.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172329.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172330.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172331.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172332.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172333.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172334.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172335.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172336.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172337.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172338.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172339.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172340.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172341.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172342.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172362.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172363.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06172364.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172365.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172366.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172367.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172368.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172369.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172370.SQL 6704 bytes
File C:\RECYCLER\NPROTECT\06172371.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172372.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172373.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172374.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172375.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172376.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172377.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172378.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172380.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172381.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172382.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172383.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172384.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172385.SQL 8768 bytes
File C:\RECYCLER\NPROTECT\06172386.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172387.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172388.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172389.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172390.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172391.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172397.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172398.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172399.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172400.SQL 181088 bytes
File C:\RECYCLER\NPROTECT\06172401.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172422.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172423.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172424.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172425.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172426.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172427.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172428.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06172429.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172430.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172431.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172432.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172433.SQL 8768 bytes
File C:\RECYCLER\NPROTECT\06172434.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172435.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172436.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06172437.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172438.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171342.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171343.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171344.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171345.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171346.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171347.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171348.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171349.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171350.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171351.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171352.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171353.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171354.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171355.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171356.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171357.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171358.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171396.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171397.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171398.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171399.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171400.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171401.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171402.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171403.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171404.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171405.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171406.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171407.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171408.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171409.sol 2314 bytes
File C:\RECYCLER\NPROTECT\06171410.sol 61 bytes
File C:\RECYCLER\NPROTECT\06171411.sol 72 bytes
File C:\RECYCLER\NPROTECT\06171412.sol 71 bytes
File C:\RECYCLER\NPROTECT\06171414.sol 105 bytes
File C:\RECYCLER\NPROTECT\06171415.sol 112 bytes
File C:\RECYCLER\NPROTECT\06171416.sol 122 bytes
File C:\RECYCLER\NPROTECT\06171417.sol 134 bytes
File C:\RECYCLER\NPROTECT\06171418.sol 134 bytes
File C:\RECYCLER\NPROTECT\06171419.sol 134 bytes
File C:\RECYCLER\NPROTECT\06171420.sol 134 bytes
File C:\RECYCLER\NPROTECT\06171421.sol 134 bytes
File C:\RECYCLER\NPROTECT\06171422.sol 241 bytes
File C:\RECYCLER\NPROTECT\06171423.sol 241 bytes
File C:\RECYCLER\NPROTECT\06171424.sol 241 bytes
File C:\RECYCLER\NPROTECT\06171425.sol 241 bytes
File C:\RECYCLER\NPROTECT\06171426.sol 241 bytes
File C:\RECYCLER\NPROTECT\06171427.sol 241 bytes
File C:\RECYCLER\NPROTECT\06171428.sol 241 bytes
File C:\RECYCLER\NPROTECT\06171429.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171430.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171432.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171433.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171434.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171435.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171436.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171437.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171438.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171439.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171440.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171441.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171442.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171443.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171444.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171445.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171446.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171447.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171448.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171468.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171469.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171470.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171471.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171472.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171473.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171474.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171475.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171476.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171477.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171478.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171479.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171480.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171481.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171482.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171483.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171484.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171504.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171505.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171506.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171507.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171508.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171509.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171510.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171511.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171512.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171513.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171514.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171515.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171516.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171517.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171518.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171519.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171520.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171522.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171523.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171524.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171525.SQL 9800 bytes
File C:\RECYCLER\NPROTECT\06171526.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171527.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06171528.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171529.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171530.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171531.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171532.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171533.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171534.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171535.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171536.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171537.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171538.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171540.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171541.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171542.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171543.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171544.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171545.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171546.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171547.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171548.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171549.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171550.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171551.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171552.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171553.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171554.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171555.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171556.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171558.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171559.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171560.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171561.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171562.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171563.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171564.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171565.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171566.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171567.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171568.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171569.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171570.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171571.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171572.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171573.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171574.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171576.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171577.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171578.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171579.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171580.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171581.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171582.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171583.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171584.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171585.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171586.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171587.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171588.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171589.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171590.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171591.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171592.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171612.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171613.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171614.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171615.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171616.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171617.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171622.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171623.SQL 160568 bytes
File C:\RECYCLER\NPROTECT\06171624.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171625.SQL 3718736 bytes
File C:\RECYCLER\NPROTECT\06171629.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171630.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171632.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171633.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171634.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171635.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171636.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171656.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171657.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171658.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171659.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171660.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171661.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171662.SQL 8768 bytes
File C:\RECYCLER\NPROTECT\06171666.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06171667.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171668.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171669.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171671.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171672.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171673.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171674.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171675.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171676.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171678.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171679.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171680.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171681.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171682.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171683.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06171684.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06171685.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171686.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171687.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171688.SQL 8768 bytes
File C:\RECYCLER\NPROTECT\06171689.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171690.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171691.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171692.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171693.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06171694.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171696.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171697.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171698.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171699.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171700.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171701.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171702.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171703.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171704.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171705.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171706.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171707.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171708.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171709.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171710.SQL 152360 bytes
File C:\RECYCLER\NPROTECT\06171711.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171712.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171715.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171716.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171717.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171718.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171719.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171720.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171729.DB 8866 bytes
File C:\RECYCLER\NPROTECT\06171730.DB 3869 bytes
File C:\RECYCLER\NPROTECT\06171734.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171735.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171736.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171737.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171738.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171739.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171740.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171741.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171742.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171762.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171763.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171764.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171765.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171766.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171767.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171768.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171769.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171770.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171771.SQL 6704 bytes
File C:\RECYCLER\NPROTECT\06171772.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171773.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171774.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171775.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171776.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171777.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171779.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171781.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171782.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171783.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171784.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171785.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171786.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171787.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171788.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171789.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171790.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171791.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171792.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171793.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171794.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171795.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171796.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171797.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171799.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171800.SQL 3390416 bytes
File C:\RECYCLER\NPROTECT\06171801.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171802.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171803.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171804.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171805.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171806.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171807.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171808.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171809.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171810.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171811.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171812.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171813.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171814.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171815.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171817.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171818.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171819.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171820.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171821.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171822.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171823.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171824.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171825.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171826.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171827.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171828.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171829.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171830.SQL 300104 bytes
File C:\RECYCLER\NPROTECT\06171831.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171832.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171833.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171835.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171836.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171837.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171838.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171839.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171840.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171841.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171842.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171843.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171844.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171845.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171846.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171847.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171848.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171849.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171850.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171851.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171853.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171854.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171855.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171856.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171857.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171858.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171859.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171860.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171861.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171862.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171863.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171864.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171865.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171866.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171867.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171868.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171869.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171889.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171890.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171891.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171892.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171893.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171894.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171895.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171896.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171897.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171898.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171899.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171900.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171901.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171902.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171903.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171904.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171905.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171871.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171872.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171873.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171874.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171875.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171876.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171877.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171878.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171879.SQL 3722840 bytes
File C:\RECYCLER\NPROTECT\06171880.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171881.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171882.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171883.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171884.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171885.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171886.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171887.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171943.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171944.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171945.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171946.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171947.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171948.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171949.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171950.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171951.SQL 6704 bytes
File C:\RECYCLER\NPROTECT\06171952.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171953.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171954.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171955.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171956.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171957.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171958.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171959.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171961.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171962.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171963.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171964.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171965.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171966.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171967.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171968.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171969.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171970.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171971.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171972.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171973.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171974.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171975.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171976.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171977.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171979.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171980.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171981.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171982.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171983.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171984.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171985.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171986.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171987.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171988.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171989.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171990.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171991.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171997.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171998.SQL 193400 bytes
File C:\RECYCLER\NPROTECT\06172000.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172001.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172041.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172042.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172043.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172044.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172045.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172046.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172047.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172048.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172049.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172050.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172051.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172052.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172053.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172054.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172055.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172056.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06172057.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172023.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172024.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172025.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172026.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172027.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172028.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172029.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172030.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172031.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06172032.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172033.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172034.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172035.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172036.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172037.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172038.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172039.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172114.SQL 8768 bytes
File C:\RECYCLER\NPROTECT\06172115.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172116.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172117.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172118.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172119.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172120.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172121.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172122.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172123.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172124.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172125.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172126.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172127.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172128.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172129.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172130.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172132.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172133.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172134.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172135.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172136.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172137.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172138.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172139.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172140.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172141.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172142.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172143.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172144.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172146.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172147.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172148.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172149.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172169.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172170.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172171.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172172.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172173.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172174.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172175.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172176.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172177.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172178.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172179.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172180.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172181.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172182.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172183.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172184.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172185.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172254.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172255.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06172256.SQL 11864 bytes
File C:\RECYCLER\NPROTECT\06172257.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172258.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172259.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172260.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172261.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172262.SQL 6704 bytes
File C:\RECYCLER\NPROTECT\06172263.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172264.SQL 11864 bytes
File C:\RECYCLER\NPROTECT\06172265.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06172266.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172267.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172268.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172269.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172270.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172272.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172273.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172274.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172275.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172276.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172277.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172278.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172279.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172280.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172281.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172282.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172283.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172284.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172285.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172286.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172287.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172288.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172290.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172291.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172292.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172293.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172294.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172295.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172296.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172297.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172298.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172299.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172300.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172301.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172302.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172303.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172304.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172305.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172306.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172308.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172309.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172310.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172311.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172312.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172313.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172314.SQL 8768 bytes
File C:\RECYCLER\NPROTECT\06172315.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172316.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172317.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172318.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172319.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172320.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172321.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172322.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172323.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172324.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172344.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172345.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172346.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172347.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172348.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172349.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172350.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172351.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172352.SQL 9800 bytes
File C:\RECYCLER\NPROTECT\06172353.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172354.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172355.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172356.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172357.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172358.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172359.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172360.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172440.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172441.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172442.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172443.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172444.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06172445.SQL 6704 bytes
File C:\RECYCLER\NPROTECT\06172446.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172447.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172448.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172449.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172450.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172451.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172452.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172453.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172454.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172455.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172456.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172458.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172459.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172460.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172461.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172462.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172463.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172464.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172465.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172466.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172467.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172468.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172469.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172470.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172471.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172472.SQL 2196152 bytes
File C:\RECYCLER\NPROTECT\06172474 1024 bytes
File C:\RECYCLER\NPROTECT\06172475.idx 12288 bytes
File C:\RECYCLER\NPROTECT\06172477.sav 20480 bytes
File C:\RECYCLER\NPROTECT\06172478.1 1024 bytes
File C:\RECYCLER\NPROTECT\06172482.DAT 948 bytes
File C:\RECYCLER\NPROTECT\06172484.sys 371248 bytes
File C:\RECYCLER\NPROTECT\06172492.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172493.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172494.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172495.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06172496.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172497.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172498.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172499.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172500.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172501.SYS 2560 bytes executable
File C:\RECYCLER\NPROTECT\06172503.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172504.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172505.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172507.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172508.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172509.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172510.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172511.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172512.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172513.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172514.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172515.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172516.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172517.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172518.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172519.SQL 3406832 bytes
File C:\RECYCLER\NPROTECT\06172520.h 435 bytes
File C:\RECYCLER\NPROTECT\06172521.ini 1698 bytes
File C:\RECYCLER\NPROTECT\06172529.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172530.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172532.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172533.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172534.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172535.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172536.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172537.SQL 512 bytes
File C:\RECYCLER\NPROTECT\06172538.xml 20365 bytes
File C:\RECYCLER\NPROTECT\06172539.XML 20291 bytes
File C:\RECYCLER\NPROTECT\06172540.zip 1443 bytes
File C:\RECYCLER\NPROTECT\06172555.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172556.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172557.png 17415 bytes
File C:\RECYCLER\NPROTECT\06172565.xml 20630 bytes
File C:\RECYCLER\NPROTECT\06172566.XML 20556 bytes
File C:\RECYCLER\NPROTECT\06172567.zip 1142 bytes
File C:\RECYCLER\NPROTECT\06172571.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172572.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172574.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172575.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172576.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172577.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172578.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172579.SQL 512 bytes
File C:\RECYCLER\NPROTECT\06172592.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172593.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172594.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172595.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172596.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172597.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172598.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172600.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172601.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172602.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172603.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172605.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172606.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172607.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172608.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172609.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172610.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172611.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172612.SQL 1798064 bytes
File C:\RECYCLER\NPROTECT\06172613.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172614.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172615.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172616.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172617.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172618.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172619.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172620.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172621.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172253.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172271.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172289.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172307.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172325.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172343.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172361.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172379.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172402.SQL 850040 bytes
File C:\RECYCLER\NPROTECT\06172421.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172439.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172457.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172476.idx 12288 bytes
File C:\RECYCLER\NPROTECT\06172506.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172531.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172573.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172604.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06172622.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172660.PF 20684 bytes
File C:\RECYCLER\NPROTECT\06172680.PF 21610 bytes
File C:\RECYCLER\NPROTECT\06172700.PF 63188 bytes
File C:\RECYCLER\NPROTECT\06172720.PF 20850 bytes
File C:\RECYCLER\NPROTECT\06171162.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171163.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171164.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171165.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171166.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171167.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171168.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171169.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171170.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171171.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171172.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171173.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171174.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171175.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171176.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171177.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171178.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171180.SQL 8768 bytes
File C:\RECYCLER\NPROTECT\06171181.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171182.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171183.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171184.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171185.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171186.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171187.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171188.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171189.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171190.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171191.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171192.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171193.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171194.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171195.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171196.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171252.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171253.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171254.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171255.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171256.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171257.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171258.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171259.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171260.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171261.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171262.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171263.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171264.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171265.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171266.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171267.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171268.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171270.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171271.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171272.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171273.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171274.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171275.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171276.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171277.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171278.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171279.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171280.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171281.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171282.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171283.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171284.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171285.SQL 6704 bytes
File C:\RECYCLER\NPROTECT\06171286.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172059.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172060.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172061.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172062.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172063.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172064.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172065.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172066.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172067.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172068.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172069.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172070.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172071.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172072.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172073.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172074.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172075.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171136.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171137.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171138.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171139.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171140.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171141.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171142.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171198.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171199.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171200.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171201.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171202.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171203.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171204.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171205.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171206.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171207.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171208.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171209.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171210.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171211.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171212.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171213.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171214.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171288.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171289.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171290.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171291.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171292.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171293.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171294.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171295.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171296.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171297.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171298.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171299.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171300.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171301.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171302.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171303.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171304.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171324.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171325.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171326.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171327.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171328.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171329.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171330.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171331.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171332.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171333.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171334.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171335.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171336.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171337.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171338.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171339.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171340.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171360.SFS 37144 bytes
File C:\RECYCLER\NPROTECT\06171361.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171362.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171363.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171364.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171365.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171366.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171367.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06171368.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171369.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171370.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171371.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171372.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171373.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171374.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171375.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171376.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171216.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171217.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171218.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171219.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171220.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171221.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171222.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171223.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171224.SQL 9800 bytes
File C:\RECYCLER\NPROTECT\06171225.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171226.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171227.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171228.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171229.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171230.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171231.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171232.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171378.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171379.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171380.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171381.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171382.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171383.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171384.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171385.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171386.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171387.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171388.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171389.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171390.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171391.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171392.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171393.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171394.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171450.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171451.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171452.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171453.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171454.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171455.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171456.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171457.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171458.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171459.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171460.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171461.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171462.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171463.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171464.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171465.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171466.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171486.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171487.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171488.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171489.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171490.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171491.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171492.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171493.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171494.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171495.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171496.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171497.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171498.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171499.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171500.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171501.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06171502.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171287.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171305.SQL 6704 bytes
File C:\RECYCLER\NPROTECT\06171323.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171341.SQL 3587408 bytes
File C:\RECYCLER\NPROTECT\06171359.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171377.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06171395.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171413.sol 87 bytes
File C:\RECYCLER\NPROTECT\06171431.sol 250 bytes
File C:\RECYCLER\NPROTECT\06171449.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171467.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171485.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171503.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171521.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171539.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171557.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171907.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171908.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171909.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171910.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171911.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171912.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171913.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171914.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171915.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171916.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171917.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171918.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171919.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171920.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171921.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171922.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171923.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171593.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171611.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171637.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171655.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171677.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171695.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171714.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171743.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171761.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171780.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171798.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171816.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171834.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171852.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171870.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171888.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172187.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172188.SQL 3767984 bytes
File C:\RECYCLER\NPROTECT\06172194 4804 bytes
File C:\RECYCLER\NPROTECT\06172195.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172196.SQL 4847336 bytes
File C:\RECYCLER\NPROTECT\06172197.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172198.SQL 197504 bytes
File C:\RECYCLER\NPROTECT\06172199.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172200.SQL 1186568 bytes
File C:\RECYCLER\NPROTECT\06172201.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172202.SQL 205712 bytes
File C:\RECYCLER\NPROTECT\06172203.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172204.SQL 882872 bytes
File C:\RECYCLER\NPROTECT\06172210.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172211.SQL 140048 bytes
File C:\RECYCLER\NPROTECT\06172212.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172213.SQL 373976 bytes
File C:\RECYCLER\NPROTECT\06172215.SQL 205712 bytes
File C:\RECYCLER\NPROTECT\06172216.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172217.SQL 238544 bytes
File C:\RECYCLER\NPROTECT\06172218.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172219.SQL 246752 bytes
File C:\RECYCLER\NPROTECT\06172220.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172222.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172223.SQL 776168 bytes
File C:\RECYCLER\NPROTECT\06172225.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172226.SQL 275480 bytes
File C:\RECYCLER\NPROTECT\06172227.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172228.SQL 550448 bytes
File C:\RECYCLER\NPROTECT\06172229.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172230.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172232.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172233.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172234.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172236.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172237.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172238.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172239.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172240.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172241.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172242.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172243.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172244.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172245.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172246.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172247.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172248.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172249.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172250.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172251.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172252.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171924.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171942.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171960.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171978.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172002.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172022.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172040.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172058.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172076.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172095.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172113.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172131.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172150.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172168.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172186.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172214.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172403.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172404.SQL 710504 bytes
File C:\RECYCLER\NPROTECT\06172405.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172406.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172408.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172409.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172410.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172411.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172412.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172413.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172414.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172415.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172416.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172417.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172418.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172419.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172420.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172623.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172624.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172625.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172626.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06172627.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172628.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172629.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172630.JS 8497 bytes
File C:\RECYCLER\NPROTECT\06172631.INI 57615 bytes
File C:\RECYCLER\NPROTECT\06172651.PF 18056 bytes
File C:\RECYCLER\NPROTECT\06172652.PF 17560 bytes
File C:\RECYCLER\NPROTECT\06172653.PF 20516 bytes
File C:\RECYCLER\NPROTECT\06172654.PF 27202 bytes
File C:\RECYCLER\NPROTECT\06172655.PF 16366 bytes
File C:\RECYCLER\NPROTECT\06172656.PF 17490 bytes
File C:\RECYCLER\NPROTECT\06172657.PF 23104 bytes
File C:\RECYCLER\NPROTECT\06172658.PF 18262 bytes
File C:\RECYCLER\NPROTECT\06172659.PF 31368 bytes
File C:\RECYCLER\NPROTECT\06171234.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171235.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06171236.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171237.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171238.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171239.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171240.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171241.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171242.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171243.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171244.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171245.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171246.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171247.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171248.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171249.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171250.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171143.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171161.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171179.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171197.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171215.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171233.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171251.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172661.PF 22808 bytes
File C:\RECYCLER\NPROTECT\06172662.PF 19000 bytes
File C:\RECYCLER\NPROTECT\06172663.PF 65266 bytes
File C:\RECYCLER\NPROTECT\06172664.PF 21458 bytes
File C:\RECYCLER\NPROTECT\06172665.PF 6894 bytes
File C:\RECYCLER\NPROTECT\06172666.PF 22548 bytes
File C:\RECYCLER\NPROTECT\06172667.PF 18540 bytes
File C:\RECYCLER\NPROTECT\06172668.PF 43658 bytes
File C:\RECYCLER\NPROTECT\06172669.PF 18186 bytes
File C:\RECYCLER\NPROTECT\06172670.PF 66422 bytes
File C:\RECYCLER\NPROTECT\06172671.PF 22764 bytes
File C:\RECYCLER\NPROTECT\06172672.PF 33722 bytes
File C:\RECYCLER\NPROTECT\06172673.PF 18056 bytes
File C:\RECYCLER\NPROTECT\06172674.PF 21986 bytes
File C:\RECYCLER\NPROTECT\06172675.PF 22132 bytes
File C:\RECYCLER\NPROTECT\06172676.PF 21006 bytes
File C:\RECYCLER\NPROTECT\06172677.PF 20966 bytes
File C:\RECYCLER\NPROTECT\06172678.PF 15800 bytes
File C:\RECYCLER\NPROTECT\06172679.PF 20474 bytes
File C:\RECYCLER\NPROTECT\06171144.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171145.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171146.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171147.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171148.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171149.SQL 6704 bytes
File C:\RECYCLER\NPROTECT\06171150.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171151.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171152.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171153.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171154.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171155.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171156.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171157.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171158.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171159.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171160.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171594.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171595.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171596.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171597.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171598.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171599.SQL 10832 bytes
File C:\RECYCLER\NPROTECT\06171600.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171601.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171602.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171603.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171604.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171605.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171606.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\06171607.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171608.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171609.SQL 7736 bytes
File C:\RECYCLER\NPROTECT\06171610.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171744.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171745.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171746.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171747.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171748.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171749.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171750.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171751.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171752.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171753.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171754.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171755.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171756.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171757.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171758.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171759.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171760.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171306.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171307.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171308.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171309.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171310.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171311.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171312.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171313.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171314.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171315.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171316.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171317.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171318.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171319.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171320.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171321.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171322.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171925.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171926.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171927.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171928.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171929.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171930.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171931.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171932.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171933.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171934.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171935.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171936.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171937.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171938.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171939.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171940.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171941.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172096.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172097.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172098.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172099.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172100.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172101.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172102.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06172103.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172104.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172105.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172106.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172107.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172108.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172109.SQL 6704 bytes
File C:\RECYCLER\NPROTECT\06172110.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172111.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172112.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06171638.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171639.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171640.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171641.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171642.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171643.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171644.SQL 6704 bytes
File C:\RECYCLER\NPROTECT\06171645.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171646.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171647.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171648.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171649.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171650.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171651.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\06171652.SQL 5672 bytes
File C:\RECYCLER\NPROTECT\06171653.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171654.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172681.PF 26476 bytes
File C:\RECYCLER\NPROTECT\06172682.PF 17592 bytes
File C:\RECYCLER\NPROTECT\06172683.PF 40198 bytes
File C:\RECYCLER\NPROTECT\06172684.PF 21616 bytes
File C:\RECYCLER\NPROTECT\06172685.PF 18688 bytes
File C:\RECYCLER\NPROTECT\06172686.PF 22028 bytes
File C:\RECYCLER\NPROTECT\06172687.PF 17580 bytes
File C:\RECYCLER\NPROTECT\06172688.PF 17082 bytes
File C:\RECYCLER\NPROTECT\06172689.PF 21964 bytes
File C:\RECYCLER\NPROTECT\06172690.PF 17516 bytes
File C:\RECYCLER\NPROTECT\06172691.PF 21818 bytes
File C:\RECYCLER\NPROTECT\06172692.PF 12312 bytes
File C:\RECYCLER\NPROTECT\06172693.PF 24988 bytes
File C:\RECYCLER\NPROTECT\06172694.PF 44898 bytes
File C:\RECYCLER\NPROTECT\06172695.PF 28602 bytes
File C:\RECYCLER\NPROTECT\06172696.PF 22014 bytes
File C:\RECYCLER\NPROTECT\06172697.PF 42154 bytes
File C:\RECYCLER\NPROTECT\06172698.PF 28612 bytes
File C:\RECYCLER\NPROTECT\06172699.PF 18064 bytes
File C:\RECYCLER\NPROTECT\06172701.PF 44628 bytes
File C:\RECYCLER\NPROTECT\06172702.PF 18840 bytes
File C:\RECYCLER\NPROTECT\06172703.PF 21366 bytes
File C:\RECYCLER\NPROTECT\06172704.PF 21696 bytes
File C:\RECYCLER\NPROTECT\06172705.PF 21814 bytes
File C:\RECYCLER\NPROTECT\06172706.PF 17568 bytes
File C:\RECYCLER\NPROTECT\06172707.PF 36952 bytes
File C:\RECYCLER\NPROTECT\06172708.PF 17700 bytes
File C:\RECYCLER\NPROTECT\06172709.PF 24582 bytes
File C:\RECYCLER\NPROTECT\06172710.PF 56898 bytes
File C:\RECYCLER\NPROTECT\06172711.PF 19368 bytes
File C:\RECYCLER\NPROTECT\06172712.PF 21424 bytes
File C:\RECYCLER\NPROTECT\06172713.PF 19964 bytes
File C:\RECYCLER\NPROTECT\06172714.PF 21666 bytes
File C:\RECYCLER\NPROTECT\06172715.PF 17446 bytes
File C:\RECYCLER\NPROTECT\06172716.PF 27676 bytes
File C:\RECYCLER\NPROTECT\06172717.PF 23636 bytes
File C:\RECYCLER\NPROTECT\06172718.PF 24320 bytes
File C:\RECYCLER\NPROTECT\06172719.PF 86600 bytes
File C:\RECYCLER\NPROTECT\06172721.PF 33442 bytes
File C:\RECYCLER\NPROTECT\06172722.PF 19562 bytes
File C:\RECYCLER\NPROTECT\06172723.PF 21378 bytes
File C:\RECYCLER\NPROTECT\06172724.PF 29304 bytes
File C:\RECYCLER\NPROTECT\06172725.PF 32730 bytes
File C:\RECYCLER\NPROTECT\06172726.PF 16362 bytes
File C:\RECYCLER\NPROTECT\06172727.PF 57608 bytes
File C:\RECYCLER\NPROTECT\06172728.PF 18602 bytes
File C:\RECYCLER\NPROTECT\06172729.PF 22620 bytes
File C:\RECYCLER\NPROTECT\06172730.PF 23024 bytes
File C:\RECYCLER\NPROTECT\06172731.PF 17444 bytes
File C:\RECYCLER\NPROTECT\06172732.PF 27306 bytes
File C:\RECYCLER\NPROTECT\06172733.PF 19058 bytes
File C:\RECYCLER\NPROTECT\06172734.PF 11742 bytes
File C:\RECYCLER\NPROTECT\06172735.PF 28616 bytes
File C:\RECYCLER\NPROTECT\06172736.PF 49918 bytes
File C:\RECYCLER\NPROTECT\06172737.PF 14500 bytes
File C:\RECYCLER\NPROTECT\06172738.PF 17182 bytes
File C:\RECYCLER\NPROTECT\06172739.PF 16934 bytes
File C:\RECYCLER\NPROTECT\06172740.PF 98802 bytes
File C:\RECYCLER\NPROTECT\06172741.PF 31416 bytes
File C:\RECYCLER\NPROTECT\06172742.PF 33016 bytes
File C:\RECYCLER\NPROTECT\06172743.PF 16878 bytes
File C:\RECYCLER\NPROTECT\06172744.PF 22392 bytes
File C:\RECYCLER\NPROTECT\06172745.PF 25174 bytes
File C:\RECYCLER\NPROTECT\06172746.PF 27690 bytes
File C:\RECYCLER\NPROTECT\06172752.xml 22507 bytes
File C:\RECYCLER\NPROTECT\06172753.XML 22433 bytes
File C:\RECYCLER\NPROTECT\06172754.zip 1521 bytes
File C:\RECYCLER\NPROTECT\06172755.SYS 2560 bytes executable
File C:\RECYCLER\NPROTECT\06172757.SQL 566864 bytes
File C:\RECYCLER\NPROTECT\06172760.h 435 bytes
File C:\RECYCLER\NPROTECT\06172761.ini 1698 bytes
File C:\RECYCLER\NPROTECT\NPROTECT.LOG 646528 bytes
File C:\RECYCLER\NPROTECT\06171269.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171575.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06171906.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\06172235.SQL 2576 bytes

—- EOF - GMER 1.0.14 —-

Clark76

Post #5March 1, 2009, 12:36 AM UTC

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
See this link for instructions on how to do this:
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Please include the C:\ComboFix.txt in your next reply for further review.

karmonex

Post #6March 1, 2009, 4:45 AM UTC

I followed the guidelines for ComboFix.exe. But then when I tried to run the program that same error message appeared. It reads: The instruction at 0x77f3258e referenced memory at 0x77f3258e. The memory could not be "read". Click OK to terminate program. So dds.scr and ComboFix won't run for the same reason. <_<

Clark76

Post #7March 1, 2009, 1:02 PM UTC

Lets see if we have more luck in safe mode running ComboFix Restart your computer and boot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work. Login on your usual account. Make sure to close any open browsers. ——————————– Once you are in safe mode try running ComboFix again. Let me know how it goes.

karmonex

Post #8March 2, 2009, 2:52 AM UTC

Thanks. I ran ComboFix in safemode/network. It followed the format in the guidelines more or less and ended up shutting down everything and restarting. After the restart it was in standard mode. But the combofix window came up and said it was preparing a log. Then suddenly, it said there was a fatal exception and it shut down again. After restarting, I searched for ComboFix.txt. Here it is: ComboFix 09-03-01.01 - John 2009-03-01 17:56:08.1 - NTFSx86 NETWORK Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1535.1270 [GMT -8:00] Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe AV: Spyware Doctor with AntiVirus *On-access scanning disabled* (Updated) FW: PC Tools Firewall Plus *disabled* . Did the program automatically "fix" certain issues? Wouldn't we expect to see more in the text file? Spayware Doctor's intelli-scan which ran on start-up after ComboFix didn't report virtumonde for the first time in a long time. Instead there were a bunch of low level adware infections which were fixed by Spyware Doctor. I am curious to know what steps you will recomend now………

Clark76

Post #9March 2, 2009, 2:58 AM UTC

Odd?! There was nothing else located in the log file located here: C:\ComboFix.txt

ComboFix was updated today so we are going to see if running a fresh copy might help. Please delete your current copy of ComboFix.exe which should be located on your desktop.

Download Combofix from any of the links below, and save it to your desktop.

Link 1
Link 2
Link 3

**Note: It is important that it is saved directly to your desktop**

——————————————————————–

1. Disconnect from the internet.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

——————————————————————–

Double click on ComboFix.exe & follow the prompts.

When finished, it will produce a report for you.
Please post the C:\ComboFix.txt so we can continue cleaning the system.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall

karmonex

Post #10March 2, 2009, 6:17 AM UTC

Thanks. Well, I re-ran Combofix.exe from the link that you provided. This time the .txt file generated. Behold:

ComboFix 09-03-01.01 - John 2009-03-01 21:48:46.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1535.1007 [GMT -8:00]
Running from: c:\documents and settings\[removed]\Desktop\downloaded\ComboFix.exe
AV: Spyware Doctor with AntiVirus *On-access scanning disabled* (Updated)
FW: PC Tools Firewall Plus *disabled*
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
—- Previous Run ——-
.
c:\windows\system32\abegeyof.ini
c:\windows\system32\abimapid.ini
c:\windows\system32\afugosoj.ini
c:\windows\system32\afuzovig.ini
c:\windows\system32\agironof.ini
c:\windows\system32\ahufepop.ini
c:\windows\system32\akawebug.ini
c:\windows\system32\akimajur.ini
c:\windows\system32\akisakek.ini
c:\windows\system32\akonifay.ini
c:\windows\system32\alifiyan.ini
c:\windows\system32\alokafeh.ini
c:\windows\system32\alovewum.ini
c:\windows\system32\amowemep.ini
c:\windows\system32\anewewij.ini
c:\windows\system32\anubidob.ini
c:\windows\system32\apurabaf.ini
c:\windows\system32\apuvumad.ini
c:\windows\system32\aranujik.ini
c:\windows\system32\avatonik.ini
c:\windows\system32\awehanud.ini
c:\windows\system32\ayelisey.ini
c:\windows\system32\azujuwed.ini
c:\windows\system32\befuluzi.dll.tmp
c:\windows\system32\bugudesi.dll
c:\windows\system32\denakaku.dll.tmp
c:\windows\system32\ebilizod.ini
c:\windows\system32\ebolawuk.ini
c:\windows\system32\egagafaf.ini
c:\windows\system32\egiguzaw.ini
c:\windows\system32\egutikof.ini
c:\windows\system32\ejinazov.ini
c:\windows\system32\eligunof.ini
c:\windows\system32\emovubap.ini
c:\windows\system32\enefidub.ini
c:\windows\system32\epenukov.ini
c:\windows\system32\epidijez.ini
c:\windows\system32\eropomad.ini
c:\windows\system32\esaluzis.ini
c:\windows\system32\etatesel.ini
c:\windows\system32\evegetuy.ini
c:\windows\system32\eyemepil.ini
c:\windows\system32\eyololif.ini
c:\windows\system32\eyugufeb.ini
c:\windows\system32\eziseriy.ini
c:\windows\system32\ezufatek.ini
c:\windows\system32\fimijole.dll.tmp
c:\windows\system32\getovojo.dll
c:\windows\system32\haheboye.dll
c:\windows\system32\hudivika.dll.tmp
c:\windows\system32\hufemute.dll.tmp
c:\windows\system32\hupojoyu.dll.tmp
c:\windows\system32\ibitidaj.ini
c:\windows\system32\iboyigah.ini
c:\windows\system32\idurosov.ini
c:\windows\system32\ifinavun.ini
c:\windows\system32\ifitejul.ini
c:\windows\system32\ifodujuf.ini
c:\windows\system32\igaripen.ini
c:\windows\system32\ijobihap.ini
c:\windows\system32\ikamuhaf.ini
c:\windows\system32\imatopof.ini
c:\windows\system32\imotaray.ini
c:\windows\system32\ipesakom.ini
c:\windows\system32\irikizag.ini
c:\windows\system32\isafazag.ini
c:\windows\system32\isanobab.ini
c:\windows\system32\isegutil.ini
c:\windows\system32\isidonis.ini
c:\windows\system32\isuvilum.ini
c:\windows\system32\itadubet.ini
c:\windows\system32\itarahaj.ini
c:\windows\system32\ivosagor.ini
c:\windows\system32\iwitisig.ini
c:\windows\system32\iwodofos.ini
c:\windows\system32\iyinuvob.ini
c:\windows\system32\izewivut.ini
c:\windows\system32\izotusof.ini
c:\windows\system32\jafovaje.dll
c:\windows\system32\juvoguru.dll
c:\windows\system32\kanupele.dll
c:\windows\system32\kiwifizo.dll
c:\windows\system32\laozpi.dll
c:\windows\system32\lavejipu.dll
c:\windows\system32\ligasuta.dll
c:\windows\system32\nanazine.dll
c:\windows\system32\nohiyizi.dll.tmp
c:\windows\system32\nutedemu.dll
c:\windows\system32\obomogiz.ini
c:\windows\system32\odatopad.ini
c:\windows\system32\odimakon.ini
c:\windows\system32\ohijihoz.ini
c:\windows\system32\ojehunib.ini
c:\windows\system32\ojimolil.ini
c:\windows\system32\okagezon.ini
c:\windows\system32\oleperas.ini
c:\windows\system32\onofolin.ini
c:\windows\system32\opededur.ini
c:\windows\system32\oribamas.ini
c:\windows\system32\orinetus.ini
c:\windows\system32\orinetus.ini2
c:\windows\system32\oripabem.ini
c:\windows\system32\oripolok.ini
c:\windows\system32\oritifom.ini
c:\windows\system32\osiwayom.ini
c:\windows\system32\ovohodod.ini
c:\windows\system32\ozoralek.ini
c:\windows\system32\pepurudo.dll
c:\windows\system32\qvrwxm.dll
c:\windows\system32\rdpxut.dll
c:\windows\system32\sihosido.dll
c:\windows\system32\sisifeme.dll
c:\windows\system32\tepasafo.dll
c:\windows\system32\titohoru.dll
c:\windows\system32\tubuyiru.dll.tmp
c:\windows\system32\ubahuhat.ini
c:\windows\system32\udefivum.ini
c:\windows\system32\udokowug.ini
c:\windows\system32\ugeruwaw.ini
c:\windows\system32\uhavekem.ini
c:\windows\system32\ujikohed.ini
c:\windows\system32\ujobevel.ini
c:\windows\system32\ukafunuw.ini
c:\windows\system32\ukehubeb.ini
c:\windows\system32\ukemevig.ini
c:\windows\system32\uloyovaw.ini
c:\windows\system32\ulukotep.ini
c:\windows\system32\umapazug.ini
c:\windows\system32\umedetun.ini
c:\windows\system32\umegizul.ini
c:\windows\system32\umilawev.ini
c:\windows\system32\unuhutun.ini
c:\windows\system32\upiverim.ini
c:\windows\system32\uruwotoz.ini
c:\windows\system32\utatoden.ini
c:\windows\system32\utemulus.ini
c:\windows\system32\uvebapum.ini
c:\windows\system32\uvehetik.ini
c:\windows\system32\uvobiwoh.ini
c:\windows\system32\uwayawov.ini
c:\windows\system32\uwuwevag.ini
c:\windows\system32\uzabefan.ini
c:\windows\system32\vepazasu.dll
c:\windows\system32\wirimiru.dll
c:\windows\system32\wuduzuli.dll.tmp
c:\windows\system32\zihurake.dll
c:\windows\system32\zimizapa.dll.tmp
E:\Autorun.inf
F:\Autorun.inf

.
((((((((((((((((((((((((( Files Created from 2009-02-02 to 2009-03-02 )))))))))))))))))))))))))))))))
.

2009-03-01 18:03 . 2009-03-01 18:03 d——– c:\windows\LastGood
2009-03-01 17:25 . 2009-03-01 21:23 d——– C:\32788R22FWJFW.3.tmp
2009-03-01 17:15 . 2009-03-01 21:23 d——– C:\32788R22FWJFW.2.tmp
2009-03-01 17:03 . 2009-03-01 21:23 d——– C:\32788R22FWJFW.1.tmp
2009-03-01 17:01 . 2009-03-01 21:23 d——– C:\32788R22FWJFW.0.tmp
2009-02-28 14:07 . 2009-02-28 14:07 250 –a—— c:\windows\gmer.ini
2009-02-14 04:38 . 2009-02-14 04:38 2,098 —hs—- c:\windows\system32\dupefomu.dll
2009-02-03 04:53 . 2009-02-03 04:53 2,098 —hs—- c:\windows\system32\lozohana.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-02 05:47 ——— d—a-w c:\documents and settings\All Users\Application Data\TEMP
2009-03-02 05:46 ——— d—–w c:\program files\Spyware Doctor
2009-03-01 17:41 ——— d—–w c:\documents and settings\All Users\Application Data\Google Updater
2009-03-01 04:10 ——— d—–w c:\program files\Canon
2009-03-01 03:06 ——— d—–w c:\program files\Norton Security Scan
2009-02-28 19:44 ——— d—–w c:\program files\Common Files\Symantec Shared
2009-02-28 03:35 ——— d—–w c:\program files\Norton SystemWorks
2009-02-24 08:09 51,520 —-a-w c:\windows\system32\drivers\TfFsMon.sys
2009-02-24 08:09 38,208 —-a-w c:\windows\system32\drivers\TfSysMon.sys
2009-02-24 08:09 33,088 —-a-w c:\windows\system32\drivers\TfNetMon.sys
2009-02-24 08:09 12,608 —-a-w c:\windows\system32\drivers\TfKbMon.sys
2009-02-19 04:57 ——— d—–w c:\documents and settings\John\Application Data\Apple Computer
2009-02-19 02:35 ——— d—–w c:\program files\ThreatFire
2009-01-31 23:26 ——— d—–w c:\program files\PhotoScape
2009-01-24 10:27 ——— d—–w c:\documents and settings\Sarah\Application Data\Apple Computer
2009-01-22 23:44 2,098 –sh–w c:\windows\system32\vevesadi.dll
2009-01-20 08:49 ——— d—–w c:\program files\Google
2009-01-17 01:29 102,664 —-a-w c:\windows\system32\drivers\tmcomm.sys
2009-01-02 04:52 ——— d—–w c:\documents and settings\Sarah\Application Data\PCToolsFirewallPlus
2008-12-25 14:27 2,098 –sh–w c:\windows\system32\pigenuri.exe
2007-07-19 08:15 135,680 —-a-w c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2005-01-08 06:55 32 –sha-w c:\windows\{3551838C-E11B-4BE1-BA09-E6A53F2C03DF}.dat
2005-01-08 06:54 32 –sha-w c:\windows\{87A2C44E-4F56-4210-AECC-6D68753A00C0}.dat
2005-01-08 06:55 32 –sha-w c:\windows\{EA0E0525-2803-4A7A-B83A-3535E4189C2F}.dat
2008-09-19 09:05 6,144 –sha-w c:\windows\system32\fiwiseju.dll
1601-01-01 00:12 70,656 –sha-w c:\windows\system32\jepazeje.dll
2008-09-23 19:24 6,144 –sha-w c:\windows\system32\vateziva.dll
2005-01-08 06:55 32 –sha-w c:\windows\system32\{26A73A93-5F18-41A5-9D5F-02B7E3DA050E}.dat
2005-01-08 06:55 32 –sha-w c:\windows\system32\{A6514358-8F0E-4966-9561-BF4AABC84A1C}.dat
2005-01-08 06:54 32 –sha-w c:\windows\system32\{B2EE205E-E40F-46CC-A541-32355393B995}.dat
.

((((((((((((((((((((((((((((((((((((((((((((( AWF ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
—-a-w 39,792 2007-10-11 03:51:55 c:\program files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe
—-a-w 39,792 2008-01-12 05:16:38 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

—-a-w 1,937,408 2005-01-04 22:17:22 c:\program files\Ahead\Nero BackItUp\bak\NBJ.exe

—-a-w 163,840 2005-10-21 23:13:40 c:\program files\Common Files\Roxio Shared\SharedCOM8\bak\RoxWatchTray.exe

—-a-w 1,836,544 2007-07-20 11:02:00 c:\program files\Google\Google Desktop Search\bak\GoogleDesktop.exe

—-a-w 579,072 2007-12-20 18:10:25 c:\program files\Grisoft\AVG Free\bak\avgcc.exe

—-a-w 267,064 2007-09-26 21:42:04 c:\program files\iTunes\bak\iTunesHelper.exe
—-a-w 290,088 2008-11-20 21:20:54 c:\program files\iTunes\iTunesHelper.exe

—-a-w 286,720 2007-06-29 13:24:52 c:\program files\K-Lite Codec Pack\QuickTime\bak\qttask.exe
—-a-w 413,696 2008-11-04 18:30:50 c:\program files\K-Lite Codec Pack\QuickTime\QTTask.exe

—-a-w 1,687,552 2005-10-21 04:47:58 c:\program files\Roxio\Easy Media Creator 8\Drag to Disc\bak\DrgToDsc.exe

—-a-w 1,038,336 2004-05-12 09:03:00 c:\program files\Spybot - Search & Destroy\bak\TeaTimer.exe

—-a-w 1,065,288 2007-10-02 23:27:04 c:\program files\Spyware Doctor\bak\SDTrayApp.exe

—-a-w 4,662,776 2006-12-01 05:49:04 c:\program files\Yahoo!\Messenger\bak\YAHOOM~1.EXE

.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Yahoo! Pager"="c:\progra~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" [N/A]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-05-02 68856]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-13 1695232]
"cdloader"="c:\documents and settings\John\Application Data\mjusbsp\cdloader2.exe" [2008-06-12 50520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"QuickTime Task"="c:\program files\K-Lite Codec Pack\QuickTime\QTTask.exe" [2008-11-04 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"ThreatFire"="c:\program files\ThreatFire\TFTray.exe" [2009-02-02 263440]
"00PCTFW"="c:\program files\PC Tools Firewall Plus\FirewallGUI.exe" [2008-12-11 2652056]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
EPSON Status Monitor 3 Environment Check(2).lnk - c:\windows\system32\spool\drivers\w32x86\3\E_SRCV02.EXE [2005-03-19 135680]
ymetray.lnk - c:\program files\Yahoo!\Yahoo! Music Engine\ymetray.exe [2007-10-03 54512]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.3iv2"= 3ivxVfWCodec.dll
"VIDC.VP31"= vp31vfw.dll
"msacm.l3fhg"= mp3fhg.acm

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Google Updater.lnk]
backup=c:\windows\pss\Google Updater.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Logitech Desktop Messenger.lnk]
backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioDragToDisc
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DA]
–a—— 2006-02-01 17:13 147456 c:\program files\DesktopAssistant\DA.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\fxredir]
c:\windows\system32\fxredir.exe [N/A]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
–a—— 2008-11-20 13:20 290088 c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
–a—— 2008-04-13 16:12 1695232 c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBJ]
c:\program files\Ahead\Nero BackItUp\NBJ.exe [N/A]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
–a—— 2001-07-09 10:50 155648 c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OmniPage]
–a—— 1998-10-12 18:13 44032 c:\program files\Caere\OmniPagePro90\OPware32.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
–a—— 2005-11-10 13:03 36975 c:\program files\Java\jre1.5.0_06\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher]
–a—— 2002-05-29 01:59 520192 c:\program files\Logitech\iTouch\iTouch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\UnrealTournament\\System\\UnrealTournament.exe"=
"c:\\Program Files\\Yahoo!\\Yahoo! Music Engine\\YahooMusicEngine.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Documents and Settings\\John\\Application Data\\mjusbsp\\magicJack.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\WINDOWS\\system32\\ati2evxx.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\iPod\\bin\\iPodService.exe"=

R0 si3112r;Silicon Image SiI 3112 SATARaid Controller;c:\windows\system32\drivers\SI3112r.sys [2005-01-07 97920]
R0 SiWinAcc;SiWinAcc;c:\windows\system32\drivers\SiWinAcc.sys [2005-01-07 10240]
R0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [2008-12-30 51520]
R0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [2008-12-30 38208]
R1 pctfw2;pctfw2;c:\windows\system32\drivers\pctfw2.sys [2008-12-26 160792]
R2 AdobeActiveFileMonitor;Adobe Active File Monitor;c:\program files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-04 98304]
R2 NProtectService;Norton Unerase Protection;c:\program files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE [2005-01-07 135168]
R2 PhotoshopElementsDeviceConnect;Photoshop Elements Device Connect;c:\program files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe [2004-10-04 118784]
R2 ThreatFire;ThreatFire;c:\program files\ThreatFire\TFService.exe service –> c:\program files\ThreatFire\TFService.exe service [?]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2007-10-22 24652]
R3 fixustor;fixustor;c:\windows\system32\drivers\fixustor.sys [2005-09-27 6016]
R3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [2008-12-30 33088]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2008-12-26 356920]

— Other Services/Drivers In Memory —

*Deregistered* - mchInjDrv
.
Contents of the 'Scheduled Tasks' folder

2009-02-28 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2009-02-28 c:\windows\Tasks\Norton SystemWorks One Button Checkup.job
- c:\program files\Norton SystemWorks\OBC.exe [2002-08-29 00:53]

2009-03-02 c:\windows\Tasks\RegCure Program Check.job
- c:\program files\RegCure\RegCure.exe [2008-04-21 13:21]

2009-02-26 c:\windows\Tasks\RegCure.job
- c:\program files\RegCure\RegCure.exe [2008-04-21 13:21]

2009-03-01 c:\windows\Tasks\Symantec NetDetect.job
- c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2004-12-14 12:24]
.
- - - - ORPHANS REMOVED - - - -

BHO-{9c164efa-1c12-479f-9e57-ffadfece0f4c} - c:\windows\system32\wezunohi.dll
BHO-{be897744-bb12-407e-b319-36fe1d3c00b4} - c:\windows\system32\qvrwxm.dll
Notify-nnnoOeFu - nnnoOeFu.dll

.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.yahoo.com/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
LSP: c:\program files\Common Files\PC Tools\LSP\PCTLsp.dll
FF - ProfilePath - c:\documents and settings\John\Application Data\Mozilla\Firefox\Profiles\5bjqi4gh. UserJohn\
FF - prefs.js: browser.search.selectedEngine - The Free Dictionary
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\progra~1\Yahoo!\Common\npyaxmpb.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1368.5602\npCIDetect13.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava11.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava12.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava13.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava14.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava32.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJPI150_06.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPOJI610.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin2.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin3.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin4.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin5.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin6.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin7.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npmozax.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npOGAPlugin.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint_.dll
FF - plugin: c:\program files\Picasa2\npPicasa2.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-01 21:52:29
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_USERS\S-1-5-21-746137067-1004336348-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9C164EFA-1C12-479F-9E57-FFADFECE0F4C}\iexplore]
@DACL=(02 0000)
"Type"=dword:00000003
"Count"=dword:0000013d
"Time"=hex:d9,07,02,00,06,00,0e,00,13,00,12,00,03,00,c8,01
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(1272)
c:\windows\system32\Ati2evxx.dll
c:\program files\ThreatFire\TFWAH.dll
c:\program files\ThreatFire\TFNI.dll

- - - - - - - > 'lsass.exe'(1352)
c:\program files\Common Files\PC Tools\LSP\PCTLsp.dll
c:\program files\ThreatFire\TFWAH.dll
.
Completion time: 2009-03-01 21:55:27
ComboFix-quarantined-files.txt 2009-03-02 05:55:21

Pre-Run: 10,228,981,760 bytes free
Post-Run: 10,214,551,552 bytes free

394 — E O F — 2008-11-19 11:00:45

Interestingly, the first downloaded Combofix.exe icon had vanished from the desktop. I did a search and in the folder C:\windows\prefetch the file combofix.exe-09c65d31.pf came up. ?????

This time the new v. ComboFix program ran from the normal boot mode.

Clark76

Post #11March 3, 2009, 3:34 AM UTC

Sorry for the delay,

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the codebox below into it:

http://forums.whatthetech.com/Virtumonde_Metajuan_Removal_t100494.html&pid=534015#entry534015

File::
C:\32788R22FWJFW.3.tmp
C:\32788R22FWJFW.2.tmp
C:\32788R22FWJFW.1.tmp
C:\32788R22FWJFW.0.tmp
c:\program files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe
c:\program files\Ahead\Nero BackItUp\bak\NBJ.exe
c:\program files\Common Files\Roxio Shared\SharedCOM8\bak\RoxWatchTray.exe
c:\program files\Google\Google Desktop Search\bak\GoogleDesktop.exe
c:\program files\Grisoft\AVG Free\bak\avgcc.exe
c:\program files\iTunes\bak\iTunesHelper.exe
c:\program files\K-Lite Codec Pack\QuickTime\bak\qttask.exe
c:\program files\Roxio\Easy Media Creator 8\Drag to Disc\bak\DrgToDsc.exe
c:\program files\Spybot - Search & Destroy\bak\TeaTimer.exe
c:\program files\Spyware Doctor\bak\SDTrayApp.exe
c:\program files\Yahoo!\Messenger\bak\YAHOOM~1.EXE

Collect::
c:\windows\system32\dupefomu.dll
c:\windows\system32\lozohana.dll
c:\windows\system32\vevesadi.dll
c:\windows\system32\pigenuri.exe
c:\windows\system32\fiwiseju.dll
c:\windows\system32\jepazeje.dll
c:\windows\system32\vateziva.dll

Save this as "CFScript"

[external image: Posted Image]

Refering to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall

**Note**

When CF finishes running, the ComboFix log will open along with a message box–do not be alarmed. With the above script, ComboFix will capture files to submit for analysis.

Ensure you are connected to the internet and click OK on the message box.

————————————-

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.

Download the latest version of Java Runtime Environment (JRE) 6 and save it to your desktop.
Scroll down to where it says "Java SE Runtime Environment (JRE) 6 Update 12. The Java SE Runtime Environment (JRE) allows end-users to run Java applications."
Click the "Download" button to the right.
Select the Windows platform from the dropdown menu.
Read the License Agreement and then check the box that says: " I agree to the Java SE Runtime Environment 6 with JavaFX License Agreement". Click on Continue.The page will refresh.
Click on the link to download Windows Offline Installation and save the file to your desktop.
Close any programs you may have running - especially your web browser.
Go to Start > Settings > Control Panel, double-click on Add/Remove Programs and remove all older versions of Java.
Check (highlight) any item with Java Runtime Environment (JRE or J2SE or Java™ 6) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java versions.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-6u12-windows-i586-p.exe to install the newest version.

After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)
- On the General tab, under Temporary Internet Files, click the Settings button.
- Next, click on the Delete Files button
- There are two options in the window to clear the cache - Leave BOTH CheckedApplications and Applets
  Trace and Log Files
Click OK on Delete Temporary Files Window
Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
Click OK to leave the Temporary Files Window
Click OK to leave the Java Control Panel.

————————————-

Establish an internet connection & perform an online scan with Firefox or Internet Explorer at Kaspersky Online Scanner

**Note**

To optimize scanning time and produce a more sensible report for review:

Close any open programs
Turn off the real time scanner of any existing antivirus program while performing the online scan.

Click Accept, when prompted to download and install the program files and database of malware definitions.

Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database.
Please be patient as this can take several minutes.
Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
Click View scan report at the bottom.
Click the Save Report As… button.
Click the Save as Text button to save the file to your desktop so that you may post it in your next reply.

————————————–

Please provide the following logs with your next post:

C:\ComboFix.txt
Kaspersky Report

Also include an update on how your system is running

karmonex

Post #12March 3, 2009, 3:33 PM UTC last edited March 3, 2009, 10:53 PM UTC

ThanksClark. I'm running late but here are two reports. The revised ComboFix and a partial critical areas Kaspersky:

ComboFix 09-03-01.01 - John 2009-03-03 0:54:26.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1535.1105 [GMT -8:00]
Running from: c:\documents and settings\[removed]\Desktop\downloaded\ComboFix.exe
Command switches used :: c:\documents and settings\John\Desktop\CFScript.txt
AV: Spyware Doctor with AntiVirus *On-access scanning disabled* (Updated)
FW: PC Tools Firewall Plus *disabled*
* Created a new restore point

FILE ::
C:\32788R22FWJFW.0.tmp
C:\32788R22FWJFW.1.tmp
C:\32788R22FWJFW.2.tmp
C:\32788R22FWJFW.3.tmp
c:\program files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe
c:\program files\Ahead\Nero BackItUp\bak\NBJ.exe
c:\program files\Common Files\Roxio Shared\SharedCOM8\bak\RoxWatchTray.exe
c:\program files\Google\Google Desktop Search\bak\GoogleDesktop.exe
c:\program files\Grisoft\AVG Free\bak\avgcc.exe
c:\program files\iTunes\bak\iTunesHelper.exe
c:\program files\K-Lite Codec Pack\QuickTime\bak\qttask.exe
c:\program files\Roxio\Easy Media Creator 8\Drag to Disc\bak\DrgToDsc.exe
c:\program files\Spybot - Search & Destroy\bak\TeaTimer.exe
c:\program files\Spyware Doctor\bak\SDTrayApp.exe
c:\program files\Yahoo!\Messenger\bak\YAHOOM~1.EXE
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe
c:\program files\Ahead\Nero BackItUp\bak\NBJ.exe
c:\program files\Common Files\Roxio Shared\SharedCOM8\bak\RoxWatchTray.exe
c:\program files\Google\Google Desktop Search\bak\GoogleDesktop.exe
c:\program files\Grisoft\AVG Free\bak\avgcc.exe
c:\program files\iTunes\bak\iTunesHelper.exe
c:\program files\K-Lite Codec Pack\QuickTime\bak\qttask.exe
c:\program files\Roxio\Easy Media Creator 8\Drag to Disc\bak\DrgToDsc.exe
c:\program files\Spybot - Search & Destroy\bak\TeaTimer.exe
c:\program files\Spyware Doctor\bak\SDTrayApp.exe
c:\program files\Yahoo!\Messenger\bak\YAHOOM~1.EXE
c:\windows\system32\dupefomu.dll
c:\windows\system32\fiwiseju.dll
c:\windows\system32\jepazeje.dll
c:\windows\system32\lozohana.dll
c:\windows\system32\pigenuri.exe
c:\windows\system32\vateziva.dll
c:\windows\system32\vevesadi.dll

.
((((((((((((((((((((((((( Files Created from 2009-02-03 to 2009-03-03 )))))))))))))))))))))))))))))))
.

2009-03-01 22:39 . 2009-03-01 22:39 d——– c:\program files\SDHelper (Spybot - Search & Destroy)
2009-03-01 22:39 . 2009-03-01 22:39 d——– c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2009-03-01 22:39 . 2009-03-01 22:39 d——– c:\program files\File Scanner Library (Spybot - Search & Destroy)
2009-03-01 17:25 . 2009-03-01 21:23 d——– C:\32788R22FWJFW.3.tmp
2009-03-01 17:15 . 2009-03-01 21:23 d——– C:\32788R22FWJFW.2.tmp
2009-03-01 17:03 . 2009-03-01 21:23 d——– C:\32788R22FWJFW.1.tmp
2009-03-01 17:01 . 2009-03-01 21:23 d——– C:\32788R22FWJFW.0.tmp
2009-02-28 14:07 . 2009-02-28 14:07 250 –a—— c:\windows\gmer.ini

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-03 08:51 ——— d—a-w c:\documents and settings\All Users\Application Data\TEMP
2009-03-03 08:51 ——— d—–w c:\program files\Spyware Doctor
2009-03-02 18:41 ——— d—–w c:\documents and settings\All Users\Application Data\Google Updater
2009-03-02 15:11 ——— d—–w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-03-02 07:02 ——— d—–w c:\program files\Spybot - Search & Destroy
2009-03-02 06:29 ——— d—–w c:\program files\Common Files\Symantec Shared
2009-03-02 06:28 ——— d—–w c:\program files\Norton Security Scan
2009-03-01 04:10 ——— d—–w c:\program files\Canon
2009-02-28 03:35 ——— d—–w c:\program files\Norton SystemWorks
2009-02-24 08:09 51,520 —-a-w c:\windows\system32\drivers\TfFsMon.sys
2009-02-24 08:09 38,208 —-a-w c:\windows\system32\drivers\TfSysMon.sys
2009-02-24 08:09 33,088 —-a-w c:\windows\system32\drivers\TfNetMon.sys
2009-02-24 08:09 12,608 —-a-w c:\windows\system32\drivers\TfKbMon.sys
2009-02-19 04:57 ——— d—–w c:\documents and settings\John\Application Data\Apple Computer
2009-02-19 02:35 ——— d—–w c:\program files\ThreatFire
2009-01-31 23:26 ——— d—–w c:\program files\PhotoScape
2009-01-24 10:27 ——— d—–w c:\documents and settings\Sarah\Application Data\Apple Computer
2009-01-20 08:49 ——— d—–w c:\program files\Google
2009-01-17 01:29 102,664 —-a-w c:\windows\system32\drivers\tmcomm.sys
2007-07-19 08:15 135,680 —-a-w c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2005-01-08 06:55 32 –sha-w c:\windows\{3551838C-E11B-4BE1-BA09-E6A53F2C03DF}.dat
2005-01-08 06:54 32 –sha-w c:\windows\{87A2C44E-4F56-4210-AECC-6D68753A00C0}.dat
2005-01-08 06:55 32 –sha-w c:\windows\{EA0E0525-2803-4A7A-B83A-3535E4189C2F}.dat
2005-01-08 06:55 32 –sha-w c:\windows\system32\{26A73A93-5F18-41A5-9D5F-02B7E3DA050E}.dat
2005-01-08 06:55 32 –sha-w c:\windows\system32\{A6514358-8F0E-4966-9561-BF4AABC84A1C}.dat
2005-01-08 06:54 32 –sha-w c:\windows\system32\{B2EE205E-E40F-46CC-A541-32355393B995}.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{49115F90-0737-0C77-D410-29823043948A}"= "c:\windows\system32\msdxm.ocx" [2004-08-03 844314]

[HKEY_CLASSES_ROOT\clsid\{49115f90-0737-0c77-d410-29823043948a}]
[HKEY_CLASSES_ROOT\AMtoolbar.AMtoolbar.1]
[HKEY_CLASSES_ROOT\AMtoolbar.AMtoolbar]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-05-02 68856]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-13 1695232]
"cdloader"="c:\documents and settings\John\Application Data\mjusbsp\cdloader2.exe" [2008-06-12 50520]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"QuickTime Task"="c:\program files\K-Lite Codec Pack\QuickTime\QTTask.exe" [2008-11-04 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"ThreatFire"="c:\program files\ThreatFire\TFTray.exe" [2009-02-02 263440]
"00PCTFW"="c:\program files\PC Tools Firewall Plus\FirewallGUI.exe" [2008-12-11 2652056]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
EPSON Status Monitor 3 Environment Check(2).lnk - c:\windows\system32\spool\drivers\w32x86\3\E_SRCV02.EXE [2005-03-19 135680]
ymetray.lnk - c:\program files\Yahoo!\Yahoo! Music Engine\ymetray.exe [2007-10-03 54512]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.3iv2"= 3ivxVfWCodec.dll
"VIDC.VP31"= vp31vfw.dll
"msacm.l3fhg"= mp3fhg.acm

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Google Updater.lnk]
backup=c:\windows\pss\Google Updater.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Logitech Desktop Messenger.lnk]
backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DA]
–a—— 2006-02-01 17:13 147456 c:\program files\DesktopAssistant\DA.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
–a—— 2008-11-20 13:20 290088 c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
–a—— 2008-04-13 16:12 1695232 c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
–a—— 2001-07-09 10:50 155648 c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OmniPage]
–a—— 1998-10-12 18:13 44032 c:\program files\Caere\OmniPagePro90\OPware32.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
–a—— 2005-11-10 13:03 36975 c:\program files\Java\jre1.5.0_06\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher]
–a—— 2002-05-29 01:59 520192 c:\program files\Logitech\iTouch\iTouch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\UnrealTournament\\System\\UnrealTournament.exe"=
"c:\\Program Files\\Yahoo!\\Yahoo! Music Engine\\YahooMusicEngine.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Documents and Settings\\John\\Application Data\\mjusbsp\\magicJack.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\WINDOWS\\system32\\ati2evxx.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\iPod\\bin\\iPodService.exe"=

R0 si3112r;Silicon Image SiI 3112 SATARaid Controller;c:\windows\system32\drivers\SI3112r.sys [2005-01-07 97920]
R0 SiWinAcc;SiWinAcc;c:\windows\system32\drivers\SiWinAcc.sys [2005-01-07 10240]
R0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [2008-12-30 51520]
R0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [2008-12-30 38208]
R1 pctfw2;pctfw2;c:\windows\system32\drivers\pctfw2.sys [2008-12-26 160792]
R2 AdobeActiveFileMonitor;Adobe Active File Monitor;c:\program files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-04 98304]
R2 NProtectService;Norton Unerase Protection;c:\program files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE [2005-01-07 135168]
R2 PhotoshopElementsDeviceConnect;Photoshop Elements Device Connect;c:\program files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe [2004-10-04 118784]
R2 ThreatFire;ThreatFire;c:\program files\ThreatFire\TFService.exe service –> c:\program files\ThreatFire\TFService.exe service [?]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2007-10-22 24652]
R3 fixustor;fixustor;c:\windows\system32\drivers\fixustor.sys [2005-09-27 6016]
R3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [2008-12-30 33088]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2008-12-26 356920]

— Other Services/Drivers In Memory —

*Deregistered* - mchInjDrv
.
Contents of the 'Scheduled Tasks' folder

2009-02-28 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2009-02-28 c:\windows\Tasks\Norton SystemWorks One Button Checkup.job
- c:\program files\Norton SystemWorks\OBC.exe [2002-08-29 00:53]

2009-03-03 c:\windows\Tasks\RegCure Program Check.job
- c:\program files\RegCure\RegCure.exe [2008-04-21 13:21]

2009-02-26 c:\windows\Tasks\RegCure.job
- c:\program files\RegCure\RegCure.exe [2008-04-21 13:21]

2009-03-03 c:\windows\Tasks\Symantec NetDetect.job
- c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2004-12-14 12:24]
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-Yahoo! Pager - c:\progra~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
MSConfigStartUp-fxredir - c:\windows\system32\fxredir.exe
MSConfigStartUp-NBJ - c:\program files\Ahead\Nero BackItUp\NBJ.exe

.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.yahoo.com/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
LSP: c:\program files\Common Files\PC Tools\LSP\PCTLsp.dll
FF - ProfilePath - c:\documents and settings\John\Application Data\Mozilla\Firefox\Profiles\5bjqi4gh. UserJohn\
FF - prefs.js: browser.search.selectedEngine - The Free Dictionary
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\progra~1\Yahoo!\Common\npyaxmpb.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1368.5602\npCIDetect13.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava11.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava12.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava13.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava14.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava32.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJPI150_06.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPOJI610.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin2.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin3.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin4.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin5.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin6.dll
FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin7.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npmozax.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npOGAPlugin.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint_.dll
FF - plugin: c:\program files\Picasa2\npPicasa2.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-03 00:58:20
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_USERS\S-1-5-21-746137067-1004336348-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9C164EFA-1C12-479F-9E57-FFADFECE0F4C}\iexplore]
@DACL=(02 0000)
"Type"=dword:00000003
"Count"=dword:0000013d
"Time"=hex:d9,07,02,00,06,00,0e,00,13,00,12,00,03,00,c8,01
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(1280)
c:\windows\system32\Ati2evxx.dll
c:\program files\ThreatFire\TFWAH.dll
c:\program files\ThreatFire\TFNI.dll

- - - - - - - > 'lsass.exe'(1344)
c:\program files\Common Files\PC Tools\LSP\PCTLsp.dll
c:\program files\ThreatFire\TFWAH.dll
.
Completion time: 2009-03-03 1:01:00
ComboFix-quarantined-files.txt 2009-03-03 09:00:56
ComboFix2.txt 2009-03-02 05:55:30

Pre-Run: 11,171,209,216 bytes free
Post-Run: 11,054,505,984 bytes free

254 — E O F — 2008-11-19 11:00:45

karmonex

Post #13March 3, 2009, 3:41 PM UTC

——————————————————————————– KASPERSKY ONLINE SCANNER 7 REPORT Tuesday, March 3, 2009 Operating System: Microsoft Windows XP Professional Service Pack 3 (build 2600) Kaspersky Online Scanner 7 version: 7.0.25.0 Program database last update: Tuesday, March 03, 2009 10:23:22 Records in database: 1864804 ——————————————————————————– Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yes Scan area - Critical Areas: C:\Documents and Settings\All Users\Start Menu\Programs\Startup C:\Documents and Settings\John\Start Menu\Programs\Startup C:\Program Files C:\WINDOWS Continued: Scan statistics: Files scanned: 55435 Threat name: 1 Infected objects: 4 Suspicious objects: 0 Duration of the scan: 00:57:22 File name / Threat name / Threats count C:\WINDOWS\system32\gadagore.dll.tmp Infected: Packed.Win32.Krap.f 1 C:\WINDOWS\system32\kiwasuge.dll.tmp Infected: Packed.Win32.Krap.f 1 C:\WINDOWS\system32\rahobofo.dll.tmp Infected: Packed.Win32.Krap.f 1 C:\WINDOWS\system32\sizulase.dll.tmp Infected: Packed.Win32.Krap.f 1 The selected area was scanned.

Clark76

Post #14March 3, 2009, 11:07 PM UTC

Hello again

It looks like you still need to uninstall your older versions of Java and install the newest version. See my previous post about this.

—————————

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text (including the link) in the codebox below into it:

http://forums.whatthetech.com/Virtumonde_Metajuan_Removal_t100494.html&pid=534446#entry534446

collect::
C:\WINDOWS\system32\gadagore.dll.tmp
C:\WINDOWS\system32\kiwasuge.dll.tmp
C:\WINDOWS\system32\rahobofo.dll.tmp 
C:\WINDOWS\system32\sizulase.dll.tmp

Save this as "CFScript"

[external image: Posted Image]

Refering to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall

**Note**

When CF finishes running, the ComboFix log will open along with a message box–do not be alarmed. With the above script, ComboFix will capture files to submit for analysis.

Ensure you are connected to the internet and click OK on the message box.

———————————————–

Go here to run an online scannner from ESET.

Note: You will need to use Internet explorer for this scan
Turn off the real time scanner of any existing antivirus program while performing the online scan
Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the activex control to install
Click Start
Make sure that the option Remove found threats is unticked, and the option Scan unwanted applications is checked
Click Scan
Wait for the scan to finish
Use notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
Copy and paste that log as a reply to this topic and also let me know how things are now.

———————————————–

Please provide the following logs with your next post:

C:\ComboFix.txt
C:\Program Files\EsetOnlineScanner\log.txt

Also include an update on how your system is running

karmonex

Post #15March 4, 2009, 3:56 AM UTC

Thanks Clark, Java6u12 now shows as the version installed in Control Panel. Meanwhile, the Kaspersky scan finished running the My computer portion. I'll forward this along while I work on the new tasks you gave me. Kaspersky Scan My computer: ——————————————————————————– KASPERSKY ONLINE SCANNER 7 REPORT Tuesday, March 3, 2009 Operating System: Microsoft Windows XP Professional Service Pack 3 (build 2600) Kaspersky Online Scanner 7 version: 7.0.25.0 Program database last update: Tuesday, March 03, 2009 10:23:22 Records in database: 1864804 ——————————————————————————– Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yes Scan area - My Computer: C:\ D:\ E:\ F:\ G:\ H:\ I:\ J:\ Scan statistics: Files scanned: 80363 Threat name: 7 Infected objects: 21 Suspicious objects: 0 Duration of the scan: 01:08:36 File name / Threat name / Threats count C:\Qoobox\Quarantine\C\WINDOWS\system32\befuluzi.dll.tmp.vir Infected: Packed.Win32.Mondera.b 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\denakaku.dll.tmp.vir Infected: Packed.Win32.Mondera.b 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\fimijole.dll.tmp.vir Infected: Packed.Win32.Mondera.b 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\hudivika.dll.tmp.vir Infected: Packed.Win32.Mondera.b 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\hufemute.dll.tmp.vir Infected: Packed.Win32.Mondera.c 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\hupojoyu.dll.tmp.vir Infected: Packed.Win32.Mondera.b 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\juvoguru.dll.vir Infected: Trojan.Win32.Agent.bfdf 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\kiwifizo.dll.vir Infected: Packed.Win32.Mondera.b 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\nohiyizi.dll.tmp.vir Infected: Packed.Win32.Mondera.b 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\nutedemu.dll.vir Infected: Trojan.Win32.Monder.bjcd 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\tepasafo.dll.vir Infected: Trojan.Win32.Agent.bfdf 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\tubuyiru.dll.tmp.vir Infected: Packed.Win32.Mondera.c 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\vepazasu.dll.vir Infected: Trojan-Downloader.Win32.Agent.bhiy 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\wuduzuli.dll.tmp.vir Infected: Packed.Win32.Mondera.b 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\zihurake.dll.vir Infected: Packed.Win32.Mondera.b 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\zimizapa.dll.tmp.vir Infected: Packed.Win32.Mondera.b 1 C:\Qoobox\Quarantine\[4]-[removed] Infected: Trojan-Spy.Win32.Agent.pni 1 C:\WINDOWS\system32\gadagore.dll.tmp Infected: Packed.Win32.Krap.f 1 C:\WINDOWS\system32\kiwasuge.dll.tmp Infected: Packed.Win32.Krap.f 1 C:\WINDOWS\system32\rahobofo.dll.tmp Infected: Packed.Win32.Krap.f 1 C:\WINDOWS\system32\sizulase.dll.tmp Infected: Packed.Win32.Krap.f 1 The selected area was scanned. The machine runs erratically…sometimes it locks up, sometimes just slow, CPU usage is at 100% at times. Sometimes it seems OK. <_<

✨ Ask AI

Ask AI