Cant Install / use firewall they say I have malaware or a virus

Hi there, I hope everyone is doing well. The above mentioned they is NOD32 tech support.. I've just updated my fathers computer with windows due to the wga problem that is now corrected. The computer is up to date with windows and virus definitions but I'm having problems installing nod32 smart security mainly the firewall will not install. They said that I may have a virus / malaware that needs removal, I just fixed my laptop but I believe due to the network connection this one has it now.

Please let me know what you think I should do. They had me run a removal of Trendmicro but nothing was there. They had me run combofix which found a bunch of random norton protection stuff which I believe needs to be removed as well so any help there is appreciated as well. Below you wil lfind the HJ log, Malaware bytes log, I've done the ATF Cleaner, dds log (attached log is attached), gmer log (actually it won't work propertly scanning etc) and my combofix log.

Thanks for your help. J

HJ
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:16:49 PM, on 6/19/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINNT\System32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
E:\Program Files\Maxtor\Sync\SyncServices.exe
C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\WINNT\System32\nvsvc32.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\wscntfy.exe
C:\WINNT\SOUNDMAN.EXE
E:\Program Files\Maxtor\ManagerApp\msssort.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Copernic Desktop Search - Home\DesktopSearchService.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\Bin\HPOstr05.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\bin\HPOVDX05.EXE
C:\WINNT\system32\hpoipm07.exe
C:\WINNT\explorer.exe
C:\WINNT\system32\msiexec.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\ESET\ESET Smart Security\SysInspector.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - e:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SpokeBHO Class - {7C6B6610-6203-49B8-9952-5D2A85B6D179} - C:\Program Files\Spoke Client\3.0.1588.729\SpokeToolBand.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Spoke - {4FC00340-F75E-4EB5-880C-651A8A76965F} - C:\Program Files\Spoke Client\3.0.1588.729\SpokeToolBand.dll
O3 - Toolbar: Copernic Desktop Search - Home Toolbar - {4A1C6093-14F9-44D7-860E-5D265CFCA9D9} - C:\Program Files\Copernic Desktop Search - Home\Toolbar\ToolbarContainer101000048.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [mssSort] "E:\Program Files\Maxtor\ManagerApp\msssort.exe"
O4 - HKLM\..\Run: [mxomssmenu] "E:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Copernic Desktop Search - Home] "C:\Program Files\Copernic Desktop Search - Home\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP OfficeJet Series 700 Startup.lnk = C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\Bin\HPOstr05.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Convert link target to Adobe PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://e:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Spoke Company Search - res://C:\Program Files\Spoke Client\3.0.1588.729\SpokeToolBand.dll/searchcompany.htm
O8 - Extra context menu item: Spoke Person Search - res://C:\Program Files\Spoke Client\3.0.1588.729\SpokeToolBand.dll/searchperson.htm
O8 - Extra context menu item: Spoke Title Search - res://C:\Program Files\Spoke Client\3.0.1588.729\SpokeToolBand.dll/searchtitle.htm
O9 - Extra button: TREND MICRO HouseCall - {2B5EA4F8-620A-4A8B-B003-4C8C5EBEA826} - http://uk.trendmicro-europe.com/enterprise…usecall_pre.php (file missing)
O9 - Extra button: Attach Web page to ACT! contact - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll (file missing)
O9 - Extra 'Tools' menuitem: Attach Web page to ACT! contact… - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINNT\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINNT\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.snapfish.com/SnapfishActivia.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsupp/as…abs/tgctlsr.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqnbk/downloads/sysinfo.cab
O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} (InstallShield Setup Player 2K2) - http://www.napster.com/client/setup.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) - https://www.ibm.com/pc/support/access/sdcco…ad/IbmEgath.cab
O16 - DPF: {7ED7005B-4AF6-4CFF-9AE0-F243C4B8260F} (HouseCallButton.setup) - http://de.trendmicro-europe.com/file_downl…eCallButton.CAB
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - http://ipgweb.cce.hp.com/rdqnbk/downloads/msxml4.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yahoo.com/…utocomplete.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intuit Update Service (IntuitUpdateService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Maxtor Service (Maxtor Sync Services) - Seagate Technology LLC - E:\Program Files\Maxtor\Sync\SyncServices.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: Symantec RemoteAssist - Symantec, Inc. - C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe

–
End of file - 11252 bytes
_____________________________________________________________________________
Malawarebytes LOG
Malwarebytes' Anti-Malware 1.38
Database version: 2309
Windows 5.1.2600 Service Pack 3

6/19/2009 2:34:28 PM
mbam-log-2009-06-19 (14-34-28).txt

Scan type: Quick Scan
Objects scanned: 103153
Time elapsed: 4 minute(s), 59 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

____________________________________________________________________

DDS (Ver_09-05-14.01) - NTFSx86
Run by [removed] at 14:35:37.29 on Fri 06/19/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_14
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1535.900 [GMT -7:00]

AV: ESET Smart Security 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personal firewall *disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}

============== Running Processes ===============

C:\WINNT\system32\svchost -k DcomLaunch
svchost.exe
C:\WINNT\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINNT\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINNT\System32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\WINNT\System32\nvsvc32.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINNT\System32\svchost.exe -k imgsvc
C:\WINNT\system32\wscntfy.exe
C:\WINNT\SOUNDMAN.EXE
E:\Program Files\Maxtor\ManagerApp\msssort.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Copernic Desktop Search - Home\DesktopSearchService.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\Bin\HPOstr05.exe
C:\WINNT\System32\svchost.exe -k HTTPFilter
C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\bin\HPOVDX05.EXE
C:\WINNT\system32\hpoipm07.exe
C:\WINNT\explorer.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
E:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINNT\System32\NOTEPAD.EXE
C:\Documents and Settings\terry\Desktop\dds.pif

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - e:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: SpokeBHO Class: {7c6b6610-6203-49b8-9952-5d2a85b6d179} - c:\program files\spoke client\3.0.1588.729\SpokeToolBand.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
TB: Spoke: {4fc00340-f75e-4eb5-880c-651a8a76965f} - c:\program files\spoke client\3.0.1588.729\SpokeToolBand.dll
TB: Copernic Desktop Search - Home Toolbar: {4a1c6093-14f9-44d7-860e-5d265cfca9d9} - c:\program files\copernic desktop search - home\toolbar\ToolbarContainer101000048.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: {968631B6-4729-440D-9BF4-251F5593EC9A} - No File
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
EB: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - No File
EB: Copernic Desktop Search - Home Toolbar: {4a1c6093-14f9-44d7-860e-5d265cfca9d9} - c:\program files\copernic desktop search - home\toolbar\ToolbarContainer101000048.dll
EB: Copernic Desktop Search - Home: {9c3fca1f-99e3-48f2-a7f4-dd3931b2f99a} - c:\program files\copernic desktop search - home\DeskbandIntegration301000049.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
EB: {83B28A74-640D-48F4-9F51-E80EED7CC7E0} - No File
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [Copernic Desktop Search - Home] "c:\program files\copernic desktop search - home\DesktopSearchService.exe" /tray
uRun: [ctfmon.exe] c:\winnt\system32\ctfmon.exe
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [NvCplDaemon] RUNDLL32.EXE c:\winnt\system32\NvCpl.dll,NvStartup
mRun: [mssSort] "e:\program files\maxtor\managerapp\msssort.exe"
mRun: [mxomssmenu] "e:\program files\maxtor\onetouch status\maxmenumgr.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice
mRunOnce: [Malwarebytes' Anti-Malware] e:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobea~1.lnk - c:\winnt\installer\{ac76ba86-1033-0000-7760-000000000002}\SC_Acrobat.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpoffi~1.lnk - c:\program files\hewlett-packard\hp officejet series 700\bin\HPOstr05.exe
uPolicies-explorer: NoViewOnDrive = 0 (0x0)
IE: Convert link target to Adobe PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - e:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: E&xport; to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Spoke Company Search - c:\program files\spoke client\3.0.1588.729\SpokeToolBand.dll/searchcompany.htm
IE: Spoke Person Search - c:\program files\spoke client\3.0.1588.729\SpokeToolBand.dll/searchperson.htm
IE: Spoke Title Search - c:\program files\spoke client\3.0.1588.729\SpokeToolBand.dll/searchtitle.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2B5EA4F8-620A-4A8B-B003-4C8C5EBEA826} - {EC4548D7-1F09-4FC2-BB95-E34724CF3D60} http://uk.trendmicro-europe.com/enterprise…usecall_pre.php - http://uk.trendmicro-europe.com/enterprise…;inprocserver32 does not exist!
IE: {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
Trusted Zone: overture.com\secure
Trusted Zone: turbotax.com
Trusted Zone: yahoo.com\marketingsolutions
DPF: DirectAnimation Java Classes - file://c:\winnt\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\winnt\java\classes\xmldso.cab
DPF: {00000055-9980-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/fhg.CAB
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} - hxxp://download.yahoo.com/dl/installs/yinst0401.cab
DPF: {3334504D-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/0/C/8/0C8EDFAB-30BC-4792-898E-2DABE27B2C4D/mp43dmo.CAB
DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - hxxp://www.snapfish.com/SnapfishActivia.cab
DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} - hxxps://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab
DPF: {49232000-16E4-426C-A231-62846947304B} - hxxp://ipgweb.cce.hp.com/rdqnbk/downloads/sysinfo.cab
DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} - hxxp://www.napster.com/client/setup.exe
DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - hxxp://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
DPF: {74FFE28D-2378-11D5-990C-006094235084} - hxxps://www.ibm.com/pc/support/access/sdccommon/download/IbmEgath.cab
DPF: {7ED7005B-4AF6-4CFF-9AE0-F243C4B8260F} - hxxp://de.trendmicro-europe.com/file_downloads/common/housecall/HouseCallButton.CAB
DPF: {88D969C0-F192-11D4-A65F-0040963251E5} - hxxp://ipgweb.cce.hp.com/rdqnbk/downloads/msxml4.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - hxxp://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38141.6550347222
DPF: {A8658086-E6AC-4957-BC8E-8D54A7E8A790} - hxxp://www.microsoft.com/security/controls/GDI/0/GDIChk.CAB
DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - hxxp://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/autocomplete.cab
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\terry\applic~1\mozilla\firefox\profiles\8jgrxvbj.default\
FF - plugin: c:\program files\mozilla firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll
FF - plugin: e:\program files\adobe\acrobat 7.0\acrobat\browser\nppdf32.dll

—- FIREFOX POLICIES —-
FF - user.js: browser.cache.disk_cache_ssl - true); user_pref(content.max.tokenizing.time, 2250000); user_pref(content.notify.backoffcount, 5); user_pref(content.notify.interval, 750000); user_pref(content.notify.ontimer, true); user_pref(content.switch.threshold, 750000); user_pref(network.http.max-connections, 48 user_pref(network.http.max-connections-per-server,
16);
user_pref(network.http.max-persistent-connections-per-proxy,
16);
user_pref(network.http.max-persistent-connections-per-server,
8);
FF - user.js: network.http.pipelining - true); user_pref(network.http.pipelining.maxrequests, 8); user_pref(network.http.proxy.pipelining, true); user_pref(nglayout.initialpaint.delay, 750

============= SERVICES / DRIVERS ===============

R1 ehdrv;ehdrv;c:\winnt\system32\drivers\ehdrv.sys [2009-5-14 107256]
R1 Start1Driver;Start1Driver;c:\winnt\system32\drivers\Start1Driver.SYS [2009-4-9 5120]
R2 ekrn;ESET Service;c:\program files\eset\eset smart security\ekrn.exe [2009-5-14 731840]
R2 IntuitUpdateService;Intuit Update Service;c:\program files\common files\intuit\update service\IntuitUpdateService.exe [2008-10-10 13088]
R2 Maxtor Sync Services;Maxtor Service;e:\program files\maxtor\sync\SyncServices.exe [2008-8-5 181600]
R2 MSSQL$ACT7;SQL Server (ACT7);c:\program files\microsoft sql server\mssql.1\mssql\binn\sqlservr.exe [2008-11-24 29263712]
R2 n5lpt.sys;N5 Print Device;c:\winnt\system32\drivers\n5lpt.sys [2004-8-19 21132]
R2 nvTUNEP;nVidia WDM TVTuner;c:\winnt\system32\drivers\NVTUNEP.SYS [2004-6-3 15968]
R2 nvtvSND;nVidia WDM TVAudio Crossbar;c:\winnt\system32\drivers\NVTVSND.SYS [2004-6-3 13776]
R2 Stld;Stld;c:\winnt\system32\drivers\STLD.SYS [2004-8-19 10240]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\winnt\system32\drivers\mbamswissarmy.sys [2009-4-10 38160]
S2 key5usb;KeyFive USB Reader;c:\winnt\system32\drivers\key5usb.sys [2004-10-26 17332]
S2 Start2Driver;Start2Driver; [x]
S3 scsiprnt;Microsoft SCSI/1394 Generic Printer Class;c:\winnt\system32\drivers\scsiprnt.sys [2004-8-12 11648]
S3 TWKPNP;CHIPDRIVE Plug and Play driver;c:\winnt\system32\drivers\twkpnp.sys –> c:\winnt\system32\drivers\TWKPNP.SYS [?]
S4 Procovc;Procovc; [x]

============== File Associations ===============

inifile=%SystemRoot%\System32\NOTEPAD.EXE %1"

=============== Created Last 30 ================

2009-06-19 14:14 –d—– c:\docume~1\terry\applic~1\ESET
2009-06-19 14:12 –d—– c:\program files\ESET
2009-06-19 13:40 a-dshr– C:\cmdcons
2009-06-19 13:39 161,792 a——- c:\winnt\SWREG.exe
2009-06-19 13:39 155,136 a——- c:\winnt\PEV.exe
2009-06-19 13:39 98,816 a——- c:\winnt\sed.exe
2009-06-19 13:12 –d—– c:\program files\Windows Installer Clean Up
2009-06-19 12:37 1,089,593 -c—— c:\winnt\system32\dllcache\ntprint.cat
2009-06-19 12:08 –d—– c:\winnt\system32\XPSViewer
2009-06-19 12:07 597,504 -c—— c:\winnt\system32\dllcache\printfilterpipelinesvc.exe
2009-06-19 12:07 575,488 -c—— c:\winnt\system32\dllcache\xpsshhdr.dll
2009-06-19 12:07 89,088 -c—— c:\winnt\system32\dllcache\filterpipelineprintproc.dll
2009-06-19 12:07 575,488 ——– c:\winnt\system32\xpsshhdr.dll
2009-06-19 12:07 117,760 ——– c:\winnt\system32\prntvpt.dll
2009-06-19 12:07 1,676,288 -c—— c:\winnt\system32\dllcache\xpssvcs.dll
2009-06-19 12:07 1,676,288 ——– c:\winnt\system32\xpssvcs.dll
2009-06-19 12:07 –d—– c:\winnt\SxsCaPendDel
2009-06-18 17:09 3,272 a——- c:\winnt\system32\wbem\Outlook_01c9f0723d4633de.mof
2009-06-18 14:57 –dsh— c:\documents and settings\terry\PrivacIE
2009-06-18 14:56 –dsh— c:\documents and settings\terry\IETldCache
2009-06-18 14:49 12,800 -c—— c:\winnt\system32\dllcache\xpshims.dll
2009-06-18 14:48 1,985,024 -c—— c:\winnt\system32\dllcache\iertutil.dll
2009-06-18 14:48 246,272 -c—— c:\winnt\system32\dllcache\ieproxy.dll
2009-06-18 14:48 11,064,832 -c—— c:\winnt\system32\dllcache\ieframe.dll
2009-06-18 14:48 –d—– c:\winnt\ie8updates
2009-06-18 14:48 102,912 -c—— c:\winnt\system32\dllcache\iecompat.dll
2009-06-18 14:46 -cd-h— c:\winnt\ie8
2009-06-18 13:43 268,288 -c—— c:\winnt\system32\dllcache\httpext.dll
2009-06-18 13:38 401,408 -c—— c:\winnt\system32\dllcache\rpcss.dll
2009-06-18 13:38 284,160 -c—— c:\winnt\system32\dllcache\pdh.dll
2009-06-18 13:38 473,600 -c—— c:\winnt\system32\dllcache\fastprox.dll
2009-06-18 13:38 110,592 -c—— c:\winnt\system32\dllcache\services.exe
2009-06-18 13:38 453,120 -c—— c:\winnt\system32\dllcache\wmiprvsd.dll
2009-06-18 13:38 227,840 -c—— c:\winnt\system32\dllcache\wmiprvse.exe
2009-06-18 13:38 729,088 -c—— c:\winnt\system32\dllcache\lsasrv.dll
2009-06-18 13:38 714,752 -c—— c:\winnt\system32\dllcache\ntdll.dll
2009-06-18 13:38 617,472 -c—— c:\winnt\system32\dllcache\advapi32.dll
2009-06-18 13:37 2,560 ——– c:\winnt\system32\xpsp4res.dll
2009-06-18 13:37 1,203,922 -c—— c:\winnt\system32\dllcache\sysmain.sdb
2009-06-18 13:37 215,552 -c—— c:\winnt\system32\dllcache\wordpad.exe
2009-06-18 12:02 –d—– c:\docume~1\alluse~1\applic~1\NortonInstaller
2009-06-16 22:11 –d—– c:\program files\iPod
2009-06-16 22:11 –d—– c:\program files\iTunes
2009-05-26 17:18 90,112 a——- c:\winnt\system32\QuickTimeVR.qtx
2009-05-26 17:18 57,344 a——- c:\winnt\system32\QuickTime.qts

==================== Find3M ====================

2009-06-19 08:24 3,766 a–sh— c:\winnt\system32\KGyGaAvL.sys
2009-06-17 11:27 38,160 a——- c:\winnt\system32\drivers\mbamswissarmy.sys
2009-06-17 11:27 19,096 a——- c:\winnt\system32\drivers\mbam.sys
2009-05-21 11:33 410,984 a——- c:\winnt\system32\deploytk.dll
2009-05-14 15:49 55,768 a——- c:\winnt\system32\drivers\epfwtdi.sys
2009-05-14 15:49 33,096 a——- c:\winnt\system32\drivers\epfwndis.sys
2009-05-14 15:49 133,000 a——- c:\winnt\system32\drivers\epfw.sys
2009-05-14 15:47 107,256 a——- c:\winnt\system32\drivers\ehdrv.sys
2009-05-14 15:41 114,472 a——- c:\winnt\system32\drivers\eamon.sys
2009-05-12 22:15 915,456 a——- c:\winnt\system32\wininet.dll
2009-05-07 08:32 345,600 a——- c:\winnt\system32\localspl.dll
2009-04-22 19:24 10,240 a——- c:\winnt\system32\drivers\STLD.SYS
2009-04-22 12:24 17,312 a—-r– c:\winnt\system32\drivers\n5usbprn.sys
2009-04-17 05:26 1,847,168 a——- c:\winnt\system32\win32k.sys
2009-04-15 07:51 585,216 a——- c:\winnt\system32\rpcrt4.dll
2007-03-13 10:09 630,784 ac—— c:\documents and settings\terry\GoToAssist_chat2way__317_en.exe
2006-08-09 10:42 3,198,976 ac—— c:\program files\ViewSonicregistration.exe
2006-04-17 08:37 56 —shr– c:\winnt\system32\7465AA47C7.sys
2007-03-14 17:00 88 —shr– c:\winnt\system32\C747AA6574.sys

============= FINISH: 14:36:38.28 ===============
________________________________________________________________________________
__


Combo Fix - I belive all these norton protections are a problem and we not removed with norton removal tool.

ComboFix 09-06-18.02 - terry 06/19/2009 13:42.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1535.1081 [GMT -7:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\recycler\NPROTECT
c:\winnt\system32\Cache
c:\recycler\NPROTECT\00011844.SQL
c:\recycler\NPROTECT\00011845.SQL
c:\recycler\NPROTECT\00011846.SQL
c:\recycler\NPROTECT\00011847.SQL
c:\recycler\NPROTECT\00011848.SQL
c:\recycler\NPROTECT\00011849.SQL
c:\recycler\NPROTECT\00011850.SQL
c:\recycler\NPROTECT\00011851.SQL
c:\recycler\NPROTECT\00011852.SQL
c:\recycler\NPROTECT\00011853.SQL
c:\recycler\NPROTECT\00011854.SQL
c:\recycler\NPROTECT\00011855.SQL
c:\recycler\NPROTECT\00011856.SQL
c:\recycler\NPROTECT\00011857.SQL
c:\recycler\NPROTECT\00011858.SQL
c:\recycler\NPROTECT\00011859.SQL
c:\recycler\NPROTECT\00011860.SQL
c:\recycler\NPROTECT\00011861.SQL
c:\recycler\NPROTECT\00011862.SQL
c:\recycler\NPROTECT\00011863.SQL
c:\recycler\NPROTECT\00011864.SQL
c:\recycler\NPROTECT\00011865.SQL
c:\recycler\NPROTECT\00011866.SQL
c:\recycler\NPROTECT\00011867.SQL
c:\recycler\NPROTECT\00011868.SQL
c:\recycler\NPROTECT\00011869.SQL
c:\recycler\NPROTECT\00011870.SQL
c:\recycler\NPROTECT\00011871.SQL
c:\recycler\NPROTECT\00011872.SQL
c:\recycler\NPROTECT\00011873.SQL
c:\recycler\NPROTECT\00011874.SQL
c:\recycler\NPROTECT\00011875.SQL
c:\recycler\NPROTECT\00011876.SQL
c:\recycler\NPROTECT\00011877.SQL
c:\recycler\NPROTECT\00011878.SQL
c:\recycler\NPROTECT\00011879.SQL
c:\recycler\NPROTECT\00011880.SQL
c:\recycler\NPROTECT\00011881.SQL
c:\recycler\NPROTECT\00011882.SQL
c:\recycler\NPROTECT\00011883.SQL
c:\recycler\NPROTECT\00011884.SQL
c:\recycler\NPROTECT\00011885.SQL
c:\recycler\NPROTECT\00011886.SQL
c:\recycler\NPROTECT\00011887.SQL
c:\recycler\NPROTECT\00011888.SQL
c:\recycler\NPROTECT\00011889.SQL
c:\recycler\NPROTECT\00011890.SQL
c:\recycler\NPROTECT\00011891.SQL
c:\recycler\NPROTECT\00011892.SQL
c:\recycler\NPROTECT\00011893.SQL
c:\recycler\NPROTECT\00011894.SQL
c:\recycler\NPROTECT\00011895.SQL
c:\recycler\NPROTECT\00011896.SQL
c:\recycler\NPROTECT\00011897.SQL
c:\recycler\NPROTECT\00011898.SQL
c:\recycler\NPROTECT\00011899.SQL
c:\recycler\NPROTECT\00011900.SQL
c:\recycler\NPROTECT\00011901.SQL
c:\recycler\NPROTECT\00011902.SQL
c:\recycler\NPROTECT\00011903.SQL
c:\recycler\NPROTECT\00011904.SQL
c:\recycler\NPROTECT\00011905.SQL
c:\recycler\NPROTECT\00011906.SQL
c:\recycler\NPROTECT\00011907.SQL
c:\recycler\NPROTECT\00011908.SQL
c:\recycler\NPROTECT\00011909.SQL
c:\recycler\NPROTECT\00011910.SQL
c:\recycler\NPROTECT\00011911.SQL
c:\recycler\NPROTECT\00011912.SQL
c:\recycler\NPROTECT\00011913.SQL
c:\recycler\NPROTECT\00011914.SQL
c:\recycler\NPROTECT\00011915.SQL
c:\recycler\NPROTECT\00011916.SQL
c:\recycler\NPROTECT\00011917.SQL
c:\recycler\NPROTECT\00011918.SQL
c:\recycler\NPROTECT\00011919.SQL
c:\recycler\NPROTECT\00011920.SQL
c:\recycler\NPROTECT\00011921.SQL
c:\recycler\NPROTECT\00011922.SQL
c:\recycler\NPROTECT\00011923.SQL
c:\recycler\NPROTECT\00011924.SQL
c:\recycler\NPROTECT\00011925.SQL
c:\recycler\NPROTECT\00011926.SQL
c:\recycler\NPROTECT\00011927.SQL
c:\recycler\NPROTECT\00011928.SQL
c:\recycler\NPROTECT\00011929.SQL
c:\recycler\NPROTECT\00011930.SQL
c:\recycler\NPROTECT\00011931.SQL
c:\recycler\NPROTECT\00011932.SQL
c:\recycler\NPROTECT\00011934.SQL
c:\recycler\NPROTECT\00011935.SQL
c:\recycler\NPROTECT\00011936.SQL
c:\recycler\NPROTECT\00011937.SQL
c:\recycler\NPROTECT\00011938.SQL
c:\recycler\NPROTECT\00011939.SQL
c:\recycler\NPROTECT\00011940.SQL
c:\recycler\NPROTECT\00011941.SQL
c:\recycler\NPROTECT\00011942.SQL
c:\recycler\NPROTECT\00011947.JS
c:\recycler\NPROTECT\00011948.JSO
c:\recycler\NPROTECT\00011949.JSO
c:\recycler\NPROTECT\00011953.JOB
c:\recycler\NPROTECT\00011954.JOB
c:\recycler\NPROTECT\00011955.nsi
c:\recycler\NPROTECT\00011956.NSI
c:\recycler\NPROTECT\00011957.msi
c:\recycler\NPROTECT\00011958.msi
c:\recycler\NPROTECT\00011959.msi
c:\recycler\NPROTECT\00011960.msi
c:\recycler\NPROTECT\00011961.msi
c:\recycler\NPROTECT\00011962.msi
c:\recycler\NPROTECT\00011963.msi
c:\recycler\NPROTECT\00011964.msi
c:\recycler\NPROTECT\00011965.msi
c:\recycler\NPROTECT\00011966.msi
c:\recycler\NPROTECT\00011967.msi
c:\recycler\NPROTECT\00011968.msi
c:\recycler\NPROTECT\00011969.msi
c:\recycler\NPROTECT\00011970.msi
c:\recycler\NPROTECT\00011971.msi
c:\recycler\NPROTECT\00011972.msi
c:\recycler\NPROTECT\00011973.msi
c:\recycler\NPROTECT\00011974.msi
c:\recycler\NPROTECT\00011975.msi
c:\recycler\NPROTECT\00011976.msi
c:\recycler\NPROTECT\00011977.msi
c:\recycler\NPROTECT\00011978.dll
c:\recycler\NPROTECT\00011979.dll
c:\recycler\NPROTECT\00011980.dll
c:\recycler\NPROTECT\00011981.dat
c:\recycler\NPROTECT\00011982.dll
c:\recycler\NPROTECT\00011983.exe
c:\recycler\NPROTECT\00011984.dll
c:\recycler\NPROTECT\00011985.txt
c:\recycler\NPROTECT\00011986.dll
c:\recycler\NPROTECT\00011987.ini
c:\recycler\NPROTECT\00011988.txt
c:\recycler\NPROTECT\00011989.CON
c:\recycler\NPROTECT\00011990.dll
c:\recycler\NPROTECT\00011991.dll
c:\recycler\NPROTECT\00011992.ini
c:\recycler\NPROTECT\00011993.dll
c:\recycler\NPROTECT\00011994.CON
c:\recycler\NPROTECT\00011995.dll
c:\recycler\NPROTECT\00011996.CON
c:\recycler\NPROTECT\00011997.DLL
c:\recycler\NPROTECT\00011998.CON
c:\recycler\NPROTECT\00011999.dll
c:\recycler\NPROTECT\00012000.CON
c:\recycler\NPROTECT\00012001.exe
c:\recycler\NPROTECT\00012002.dll
c:\recycler\NPROTECT\00012003.CON
c:\recycler\NPROTECT\00012004.dll
c:\recycler\NPROTECT\00012005.dll
c:\recycler\NPROTECT\00012006.dll
c:\recycler\NPROTECT\00012007.CON
c:\recycler\NPROTECT\00012008.dll
c:\recycler\NPROTECT\00012009.dll
c:\recycler\NPROTECT\00012010.dll
c:\recycler\NPROTECT\00012011.DLL
c:\recycler\NPROTECT\00012012.lnk
c:\recycler\NPROTECT\00012013.exe
c:\recycler\NPROTECT\00012014.dll
c:\recycler\NPROTECT\00012015.dll
c:\recycler\NPROTECT\00012016.nsi
c:\recycler\NPROTECT\00012017.DLL
c:\recycler\NPROTECT\00012018.DLL
c:\recycler\NPROTECT\00012019.EXE
c:\recycler\NPROTECT\00012020.BMP
c:\recycler\NPROTECT\00012021.BMP
c:\recycler\NPROTECT\00012022.DLL
c:\recycler\NPROTECT\00012023.DLL
c:\recycler\NPROTECT\00012024.DLL
c:\recycler\NPROTECT\00012025.DLL
c:\recycler\NPROTECT\00012026.DLL
c:\recycler\NPROTECT\00012027.DLL
c:\recycler\NPROTECT\00012028.DLL
c:\recycler\NPROTECT\00012029.DLL
c:\recycler\NPROTECT\00012030.REG
c:\recycler\NPROTECT\00012031.BMP
c:\recycler\NPROTECT\00012032.BMP
c:\recycler\NPROTECT\00012033.txt
c:\recycler\NPROTECT\00012034.BMP
c:\recycler\NPROTECT\00012035.BMP
c:\recycler\NPROTECT\00012036.BMP
c:\recycler\NPROTECT\00012037.BMP
c:\recycler\NPROTECT\00012038.DLL
c:\recycler\NPROTECT\00012039.DLL
c:\recycler\NPROTECT\00012040.DLL
c:\recycler\NPROTECT\00012041.EXE
c:\recycler\NPROTECT\00012042.HLP
c:\recycler\NPROTECT\00012043.DLL
c:\recycler\NPROTECT\00012044.DLL
c:\recycler\NPROTECT\00012045.DLL
c:\recycler\NPROTECT\00012046.DLL
c:\recycler\NPROTECT\00012047.EXE
c:\recycler\NPROTECT\00012048.DLL
c:\recycler\NPROTECT\00012049.DLL
c:\recycler\NPROTECT\00012050.HLP
c:\recycler\NPROTECT\00012051.DLL
c:\recycler\NPROTECT\00012052.DLL
c:\recycler\NPROTECT\00012053.dll
c:\recycler\NPROTECT\00012054.ini
c:\recycler\NPROTECT\00012055.DLL
c:\recycler\NPROTECT\00012056.DLL
c:\recycler\NPROTECT\00012057.DLL
c:\recycler\NPROTECT\00012058.dll
c:\recycler\NPROTECT\00012059.dll
c:\recycler\NPROTECT\00012060.EXE
c:\recycler\NPROTECT\00012061.DLL
c:\recycler\NPROTECT\00012062.DLL
c:\recycler\NPROTECT\00012063.DLL
c:\recycler\NPROTECT\00012064.BMP
c:\recycler\NPROTECT\00012065.BMP
c:\recycler\NPROTECT\00012066.EXE
c:\recycler\NPROTECT\00012067.DLL
c:\recycler\NPROTECT\00012068.DLL
c:\recycler\NPROTECT\00012069.DLL
c:\recycler\NPROTECT\00012070.DLL
c:\recycler\NPROTECT\00012071.DLL
c:\recycler\NPROTECT\00012072.DLL
c:\recycler\NPROTECT\00012073.DLL
c:\recycler\NPROTECT\00012074.DLL
c:\recycler\NPROTECT\00012075.EXE
c:\recycler\NPROTECT\00012076.reg
c:\recycler\NPROTECT\00012077.BMP
c:\recycler\NPROTECT\00012078.DLL
c:\recycler\NPROTECT\00012079.DLL
c:\recycler\NPROTECT\00012080.dll
c:\recycler\NPROTECT\00012081.DLL
c:\recycler\NPROTECT\00012082.dll
c:\recycler\NPROTECT\00012083.dll
c:\recycler\NPROTECT\00012084.DLL
c:\recycler\NPROTECT\00012085.dll
c:\recycler\NPROTECT\00012086.dll
c:\recycler\NPROTECT\00012087.exe
c:\recycler\NPROTECT\00012088.EXE
c:\recycler\NPROTECT\00012089.txt
c:\recycler\NPROTECT\00012090.DLL
c:\recycler\NPROTECT\00012091.DLL
c:\recycler\NPROTECT\00012092.dll
c:\recycler\NPROTECT\00012093.DLL
c:\recycler\NPROTECT\00012094.dll
c:\recycler\NPROTECT\00012095.DLL
c:\recycler\NPROTECT\00012096.dll
c:\recycler\NPROTECT\00012097.HLP
c:\recycler\NPROTECT\00012098.EXE
c:\recycler\NPROTECT\00012099.exe
c:\recycler\NPROTECT\00012100.dll
c:\recycler\NPROTECT\00012101.exe
c:\recycler\NPROTECT\00012102.DLL
c:\recycler\NPROTECT\00012103.DLL
c:\recycler\NPROTECT\00012104.dll
c:\recycler\NPROTECT\00012105.ini
c:\recycler\NPROTECT\00012106.dll
c:\recycler\NPROTECT\00012107.dll
c:\recycler\NPROTECT\00012108.BMP
c:\recycler\NPROTECT\00012109.BMP
c:\recycler\NPROTECT\00012110.EXE
c:\recycler\NPROTECT\00012111.HLP
c:\recycler\NPROTECT\00012112.EXE
c:\recycler\NPROTECT\00012113.HLP
c:\recycler\NPROTECT\00012114.DLL
c:\recycler\NPROTECT\00012115.DLL
c:\recycler\NPROTECT\00012116.BMP
c:\recycler\NPROTECT\00012117.BMP
c:\recycler\NPROTECT\00012118.EXE
c:\recycler\NPROTECT\00012119.EXE
c:\recycler\NPROTECT\00012120.HLP
c:\recycler\NPROTECT\00012121.EXE
c:\recycler\NPROTECT\00012122.HLP
c:\recycler\NPROTECT\00012123.dat
c:\recycler\NPROTECT\00012124.dll
c:\recycler\NPROTECT\00012125.dll
c:\recycler\NPROTECT\00012126.dat
c:\recycler\NPROTECT\00012127.dll
c:\recycler\NPROTECT\00012128.dll
c:\recycler\NPROTECT\00012129.dll
c:\recycler\NPROTECT\00012130.dll
c:\recycler\NPROTECT\00012131.dat
c:\recycler\NPROTECT\00012132.exe
c:\recycler\NPROTECT\00012133.dll
c:\recycler\NPROTECT\00012134.Loc
c:\recycler\NPROTECT\00012135.loc
c:\recycler\NPROTECT\00012136.Loc
c:\recycler\NPROTECT\00012137.Loc
c:\recycler\NPROTECT\00012138.Loc
c:\recycler\NPROTECT\00012139.loc
c:\recycler\NPROTECT\00012140.loc
c:\recycler\NPROTECT\00012141.htm
c:\recycler\NPROTECT\00012142.Loc
c:\recycler\NPROTECT\00012143.loc
c:\recycler\NPROTECT\00012144.loc
c:\recycler\NPROTECT\00012145.loc
c:\recycler\NPROTECT\00012146.loc
c:\recycler\NPROTECT\00012147.exe
c:\recycler\NPROTECT\00012148.DLL
c:\recycler\NPROTECT\00012149.dll
c:\recycler\NPROTECT\00012150.exe
c:\recycler\NPROTECT\00012151.hlp
c:\recycler\NPROTECT\00012152.dll
c:\recycler\NPROTECT\00012153.txt
c:\recycler\NPROTECT\00012154.url
c:\recycler\NPROTECT\00012155.dll
c:\recycler\NPROTECT\00012156.url
c:\recycler\NPROTECT\00012157.dll
c:\recycler\NPROTECT\00012158.dll
c:\recycler\NPROTECT\00012159.dll
c:\recycler\NPROTECT\00012160.loc
c:\recycler\NPROTECT\00012161.dll
c:\recycler\NPROTECT\00012162.dll
c:\recycler\NPROTECT\00012163.nsi
c:\recycler\NPROTECT\00012164.dll
c:\recycler\NPROTECT\00012165.dll
c:\recycler\NPROTECT\00012166.dll
c:\recycler\NPROTECT\00012167.loc
c:\recycler\NPROTECT\00012168.dll
c:\recycler\NPROTECT\00012169.DLL
c:\recycler\NPROTECT\00012170.chm
c:\recycler\NPROTECT\00012171.exe
c:\recycler\NPROTECT\00012172.IDX
c:\recycler\NPROTECT\00012173.LOG
c:\recycler\NPROTECT\00012174.dll
c:\recycler\NPROTECT\00012175.LIV
c:\recycler\NPROTECT\00012176.EXE
c:\recycler\NPROTECT\00012177.DLL
c:\recycler\NPROTECT\00012178.EXE
c:\recycler\NPROTECT\00012179.DLL
c:\recycler\NPROTECT\00012180.EXE
c:\recycler\NPROTECT\00012181.DLL
c:\recycler\NPROTECT\00012182.EXE
c:\recycler\NPROTECT\00012183.EXE
c:\recycler\NPROTECT\00012184.DLL
c:\recycler\NPROTECT\00012185.EXE
c:\recycler\NPROTECT\00012186.EXE
c:\recycler\NPROTECT\00012187.dat
c:\recycler\NPROTECT\00012188.INF
c:\recycler\NPROTECT\00012189.exe
c:\recycler\NPROTECT\00012190.ini
c:\recycler\NPROTECT\00012191.DLL
c:\recycler\NPROTECT\00012192.dll
c:\recycler\NPROTECT\00012193.DLL
c:\recycler\NPROTECT\00012194.txt
c:\recycler\NPROTECT\00012195.TXT
c:\recycler\NPROTECT\00012196.DLL
c:\recycler\NPROTECT\00012197.DLL
c:\recycler\NPROTECT\00012198.DLL
c:\recycler\NPROTECT\00012199.CPL
c:\recycler\NPROTECT\00012200.DLL
c:\recycler\NPROTECT\00012201.DLL
c:\recycler\NPROTECT\00012202.DLL
c:\recycler\NPROTECT\00012203.EXE
c:\recycler\NPROTECT\00012204.LOG
c:\recycler\NPROTECT\00012205.DLL
c:\recycler\NPROTECT\00012206.DLL
c:\recycler\NPROTECT\00012207.bin
c:\recycler\NPROTECT\00012208.log
c:\recycler\NPROTECT\00012209.log
c:\recycler\NPROTECT\00012210.dll
c:\recycler\NPROTECT\00012211.loc
c:\recycler\NPROTECT\00012212.dll
c:\recycler\NPROTECT\00012213.loc
c:\recycler\NPROTECT\00012214.dll
c:\recycler\NPROTECT\00012215.loc
c:\recycler\NPROTECT\00012216.dll
c:\recycler\NPROTECT\00012217.loc
c:\recycler\NPROTECT\00012218.dll
c:\recycler\NPROTECT\00012219.loc
c:\recycler\NPROTECT\00012220.log
c:\recycler\NPROTECT\00012221.dat
c:\recycler\NPROTECT\00012222.dll
c:\recycler\NPROTECT\00012223.dll
c:\recycler\NPROTECT\00012224.dll
c:\recycler\NPROTECT\00012225.loc
c:\recycler\NPROTECT\00012226.dat
c:\recycler\NPROTECT\00012227.xml
c:\recycler\NPROTECT\00012228.txt
c:\recycler\NPROTECT\00012229.dll
c:\recycler\NPROTECT\00012230.dll
c:\recycler\NPROTECT\00012231.dll
c:\recycler\NPROTECT\00012232.dll
c:\recycler\NPROTECT\00012233.dll
c:\recycler\NPROTECT\00012234.DAT
c:\recycler\NPROTECT\00012235.dat
c:\recycler\NPROTECT\00012236.dat
c:\recycler\NPROTECT\00012237.sys
c:\recycler\NPROTECT\00012238.vxd
c:\recycler\NPROTECT\00012239.dll
c:\recycler\NPROTECT\00012240.grd
c:\recycler\NPROTECT\00012241.sig
c:\recycler\NPROTECT\00012242.DAT
c:\recycler\NPROTECT\00012243.dat
c:\recycler\NPROTECT\00012244.dll
c:\recycler\NPROTECT\00012245.dll
c:\recycler\NPROTECT\00012246.dll
c:\recycler\NPROTECT\00012247.dll
c:\recycler\NPROTECT\00012248.dll
c:\recycler\NPROTECT\00012249.dll
c:\recycler\NPROTECT\00012250.dll
c:\recycler\NPROTECT\00012251.dll
c:\recycler\NPROTECT\00012252.loc
c:\recycler\NPROTECT\00012253.dll
c:\recycler\NPROTECT\00012254.dll
c:\recycler\NPROTECT\00012255.exe
c:\recycler\NPROTECT\00012256.dll
c:\recycler\NPROTECT\00012257.dll
c:\recycler\NPROTECT\00012258.loc
c:\recycler\NPROTECT\00012259.exe
c:\recycler\NPROTECT\00012260.dll
c:\recycler\NPROTECT\00012261.dll
c:\recycler\NPROTECT\00012262.loc
c:\recycler\NPROTECT\00012263.dll
c:\recycler\NPROTECT\00012264.dll
c:\recycler\NPROTECT\00012265.dll
c:\recycler\NPROTECT\00012266.loc
c:\recycler\NPROTECT\00012267.dll
c:\recycler\NPROTECT\00012268.dll
c:\recycler\NPROTECT\00012269.loc
c:\recycler\NPROTECT\00012270.dll
c:\recycler\NPROTECT\00012271.loc
c:\recycler\NPROTECT\00012272.dat
c:\recycler\NPROTECT\00012273.def
c:\recycler\NPROTECT\00012274.dll
c:\recycler\NPROTECT\00012275.loc
c:\recycler\NPROTECT\00012276.dll
c:\recycler\NPROTECT\00012277.loc
c:\recycler\NPROTECT\00012278.exe
c:\recycler\NPROTECT\00012279.dll
c:\recycler\NPROTECT\00012280.dll
c:\recycler\NPROTECT\00012281.loc
c:\recycler\NPROTECT\00012282.exe
c:\recycler\NPROTECT\00012283.loc
c:\recycler\NPROTECT\00012284.dll
c:\recycler\NPROTECT\00012285.loc
c:\recycler\NPROTECT\00012286.dll
c:\recycler\NPROTECT\00012287.exe
c:\recycler\NPROTECT\00012288.loc
c:\recycler\NPROTECT\00012289.exe
c:\recycler\NPROTECT\00012290.dll
c:\recycler\NPROTECT\00012291.dat
c:\recycler\NPROTECT\00012292.dll
c:\recycler\NPROTECT\00012293.dll
c:\recycler\NPROTECT\00012294.Loc
c:\recycler\NPROTECT\00012295.loc
c:\recycler\NPROTECT\00012296.Loc
c:\recycler\NPROTECT\00012297.Loc
c:\recycler\NPROTECT\00012298.Loc
c:\recycler\NPROTECT\00012299.loc
c:\recycler\NPROTECT\00012300.loc
c:\recycler\NPROTECT\00012301.htm
c:\recycler\NPROTECT\00012302.Loc
c:\recycler\NPROTECT\00012303.loc
c:\recycler\NPROTECT\00012304.loc
c:\recycler\NPROTECT\00012305.loc
c:\recycler\NPROTECT\00012306.loc
c:\recycler\NPROTECT\00012307.exe
c:\recycler\NPROTECT\00012308.dll
c:\recycler\NPROTECT\00012309.dll
c:\recycler\NPROTECT\00012310.dll
c:\recycler\NPROTECT\00012311.dll
c:\recycler\NPROTECT\00012312.TXT
c:\recycler\NPROTECT\00012313.dll
c:\recycler\NPROTECT\00012314.dat
c:\recycler\NPROTECT\00012315.dll
c:\recycler\NPROTECT\00012316.DAT
c:\recycler\NPROTECT\00012317.LNK
c:\recycler\NPROTECT\00012318.LNK
c:\recycler\NPROTECT\00012319.LNK
c:\recycler\NPROTECT\00012320.LNK
c:\recycler\NPROTECT\00012321.LNK
c:\recycler\NPROTECT\00012322.LNK
c:\recycler\NPROTECT\00012323.LNK
c:\recycler\NPROTECT\00012324.LNK
c:\recycler\NPROTECT\00012325.LNK
c:\recycler\NPROTECT\00012326.LNK
c:\recycler\NPROTECT\00012327.LNK
c:\recycler\NPROTECT\00012328.LNK
c:\recycler\NPROTECT\00012329.LNK
c:\recycler\NPROTECT\00012330.LNK
c:\recycler\NPROTECT\00012331.lnk
c:\recycler\NPROTECT\00012332.LNK
c:\recycler\NPROTECT\00012333.loc
c:\recycler\NPROTECT\00012334.dll
c:\recycler\NPROTECT\00012335.dll
c:\recycler\NPROTECT\00012336.dll
c:\recycler\NPROTECT\00012337.dll
c:\recycler\NPROTECT\00012338.dll
c:\recycler\NPROTECT\00012339.dll
c:\recycler\NPROTECT\00012340.dll
c:\recycler\NPROTECT\00012341.dat
c:\recycler\NPROTECT\00012342.dll
c:\recycler\NPROTECT\00012343.dll
c:\recycler\NPROTECT\00012344.dll
c:\recycler\NPROTECT\00012345.dll
c:\recycler\NPROTECT\00012346.dll
c:\recycler\NPROTECT\00012347.exe
c:\recycler\NPROTECT\00012348.dll
c:\recycler\NPROTECT\00012349.DLL
c:\recycler\NPROTECT\00012350.EXE
c:\recycler\NPROTECT\00012351.dll
c:\recycler\NPROTECT\00012352.LOC
c:\recycler\NPROTECT\00012353.DLL
c:\recycler\NPROTECT\00012354.DLL
c:\recycler\NPROTECT\00012355.DLL
c:\recycler\NPROTECT\00012356.DLL
c:\recycler\NPROTECT\00012357.DLL
c:\recycler\NPROTECT\00012358.DLL
c:\recycler\NPROTECT\00012359.LOC
c:\recycler\NPROTECT\00012360.DLL
c:\recycler\NPROTECT\00012361.loc
c:\recycler\NPROTECT\00012362.dll
c:\recycler\NPROTECT\00012363.loc
c:\recycler\NPROTECT\00012364.DLL
c:\recycler\NPROTECT\00012365.DLL
c:\recycler\NPROTECT\00012366.dll
c:\recycler\NPROTECT\00012367.loc
c:\recycler\NPROTECT\00012368.DLL
c:\recycler\NPROTECT\00012369.EXE
c:\recycler\NPROTECT\00012370.DAT
c:\recycler\NPROTECT\00012371.DLL
c:\recycler\NPROTECT\00012372.VXD
c:\recycler\NPROTECT\00012373.DLL
c:\recycler\NPROTECT\00012374.SYS
c:\recycler\NPROTECT\00012375.GRD
c:\recycler\NPROTECT\00012376.SIG
c:\recycler\NPROTECT\00012377.SPM
c:\recycler\NPROTECT\00012378.SYS
c:\recycler\NPROTECT\00012379.BIN
c:\recycler\NPROTECT\00012380
c:\recycler\NPROTECT\00012381.EXP
c:\recycler\NPROTECT\00012382.SYS
c:\recycler\NPROTECT\00012383.VXD
c:\recycler\NPROTECT\00012384.DLL
c:\recycler\NPROTECT\00012385.EXP
c:\recycler\NPROTECT\00012386.SYS
c:\recycler\NPROTECT\00012387.VXD
c:\recycler\NPROTECT\00012388.DLL
c:\recycler\NPROTECT\00012389.TXT
c:\recycler\NPROTECT\00012390.DAT
c:\recycler\NPROTECT\00012391.CAT
c:\recycler\NPROTECT\00012392.INF
c:\recycler\NPROTECT\00012393.CAT
c:\recycler\NPROTECT\00012394.INF
c:\recycler\NPROTECT\00012395.DAT
c:\recycler\NPROTECT\00012396.DAT
c:\recycler\NPROTECT\00012397.DLL
c:\recycler\NPROTECT\00012398.VXD
c:\recycler\NPROTECT\00012399.DLL
c:\recycler\NPROTECT\00012400.SYS
c:\recycler\NPROTECT\00012401.GRD
c:\recycler\NPROTECT\00012402.SIG
c:\recycler\NPROTECT\00012403.SPM
c:\recycler\NPROTECT\00012404.SYS
c:\recycler\NPROTECT\00012405.BIN
c:\recycler\NPROTECT\00012406
c:\recycler\NPROTECT\00012407.EXP
c:\recycler\NPROTECT\00012408.SYS
c:\recycler\NPROTECT\00012409.VXD
c:\recycler\NPROTECT\00012410.DLL
c:\recycler\NPROTECT\00012411.EXP
c:\recycler\NPROTECT\00012412.SYS
c:\recycler\NPROTECT\00012413.VXD
c:\recycler\NPROTECT\00012414.DLL
c:\recycler\NPROTECT\00012415.TXT
c:\recycler\NPROTECT\00012416.DAT
c:\recycler\NPROTECT\00012417.CAT
c:\recycler\NPROTECT\00012418.INF
c:\recycler\NPROTECT\00012419.CAT
c:\recycler\NPROTECT\00012420.INF
c:\recycler\NPROTECT\00012421.DAT
c:\recycler\NPROTECT\00012422.DAT
c:\recycler\NPROTECT\00012423.DLL
c:\recycler\NPROTECT\00012424.VXD
c:\recycler\NPROTECT\00012425.DLL
c:\recycler\NPROTECT\00012426.SYS
c:\recycler\NPROTECT\00012427.GRD
c:\recycler\NPROTECT\00012428.SIG
c:\recycler\NPROTECT\00012429.SPM
c:\recycler\NPROTECT\00012430.SYS
c:\recycler\NPROTECT\00012431.BIN
c:\recycler\NPROTECT\00012432
c:\recycler\NPROTECT\00012433.EXP
c:\recycler\NPROTECT\00012434.SYS
c:\recycler\NPROTECT\00012435.VXD
c:\recycler\NPROTECT\00012436.DLL
c:\recycler\NPROTECT\00012437.EXP
c:\recycler\NPROTECT\00012438.SYS
c:\recycler\NPROTECT\00012439.VXD
c:\recycler\NPROTECT\00012440.DLL
c:\recycler\NPROTECT\00012441.TXT
c:\recycler\NPROTECT\00012442.DAT
c:\recycler\NPROTECT\00012443.CAT
c:\recycler\NPROTECT\00012444.INF
c:\recycler\NPROTECT\00012445.CAT
c:\recycler\NPROTECT\00012446.INF
c:\recycler\NPROTECT\00012447.DAT
c:\recycler\NPROTECT\00012448.DAT
c:\recycler\NPROTECT\00012449.DLL
c:\recycler\NPROTECT\00012450.VXD
c:\recycler\NPROTECT\00012451.DLL
c:\recycler\NPROTECT\00012452.SYS
c:\recycler\NPROTECT\00012453.GRD
c:\recycler\NPROTECT\00012454.SIG
c:\recycler\NPROTECT\00012455.SPM
c:\recycler\NPROTECT\00012456.SYS
c:\recycler\NPROTECT\00012457.BIN
c:\recycler\NPROTECT\00012458
c:\recycler\NPROTECT\00012459.EXP
c:\recycler\NPROTECT\00012460.SYS
c:\recycler\NPROTECT\00012461.VXD
c:\recycler\NPROTECT\00012462.DLL
c:\recycler\NPROTECT\00012463.EXP
c:\recycler\NPROTECT\00012464.SYS
c:\recycler\NPROTECT\00012465.VXD
c:\recycler\NPROTECT\00012466.DLL
c:\recycler\NPROTECT\00012467.TXT
c:\recycler\NPROTECT\00012468.DAT
c:\recycler\NPROTECT\00012469.CAT
c:\recycler\NPROTECT\00012470.INF
c:\recycler\NPROTECT\00012471.CAT
c:\recycler\NPROTECT\00012472.INF
c:\recycler\NPROTECT\00012473.DAT
c:\recycler\NPROTECT\00012474.DAT
c:\recycler\NPROTECT\00012475.DLL
c:\recycler\NPROTECT\00012476.VXD
c:\recycler\NPROTECT\00012477.DLL
c:\recycler\NPROTECT\00012478.SYS
c:\recycler\NPROTECT\00012479.GRD
c:\recycler\NPROTECT\00012480.SIG
c:\recycler\NPROTECT\00012481.SPM
c:\recycler\NPROTECT\00012482.SYS
c:\recycler\NPROTECT\00012483.BIN
c:\recycler\NPROTECT\00012484
c:\recycler\NPROTECT\00012485.EXP
c:\recycler\NPROTECT\00012486.SYS
c:\recycler\NPROTECT\00012487.VXD
c:\recycler\NPROTECT\00012488.DLL
c:\recycler\NPROTECT\00012489.EXP
c:\recycler\NPROTECT\00012490.SYS
c:\recycler\NPROTECT\00012491.VXD
c:\recycler\NPROTECT\00012492.DAT
c:\recycler\NPROTECT\00012493.DLL
c:\recycler\NPROTECT\00012494.VXD
c:\recycler\NPROTECT\00012495.DLL
c:\recycler\NPROTECT\00012496.SYS
c:\recycler\NPROTECT\00012497.GRD
c:\recycler\NPROTECT\00012498.SIG
c:\recycler\NPROTECT\00012499.SPM
c:\recycler\NPROTECT\00012500.SYS
c:\recycler\NPROTECT\00012501.DAT
c:\recycler\NPROTECT\00012502.DLL
c:\recycler\NPROTECT\00012503.VXD
c:\recycler\NPROTECT\00012504.DLL
c:\recycler\NPROTECT\00012505.SYS
c:\recycler\NPROTECT\00012506.GRD
c:\recycler\NPROTECT\00012507.SIG
c:\recycler\NPROTECT\00012508.SPM
c:\recycler\NPROTECT\00012509.SYS
c:\recycler\NPROTECT\00012510.BIN
c:\recycler\NPROTECT\00012511
c:\recycler\NPROTECT\00012512.EXP
c:\recycler\NPROTECT\00012513.SYS
c:\recycler\NPROTECT\00012514.VXD
c:\recycler\NPROTECT\00012515.DLL
c:\recycler\NPROTECT\00012516.EXP
c:\recycler\NPROTECT\00012517.SYS
c:\recycler\NPROTECT\00012518.VXD
c:\recycler\NPROTECT\00012519.DLL
c:\recycler\NPROTECT\00012520.TXT
c:\recycler\NPROTECT\00012521.DAT
c:\recycler\NPROTECT\00012522.CAT
c:\recycler\NPROTECT\00012523.INF
c:\recycler\NPROTECT\00012524.CAT
c:\recycler\NPROTECT\00012525.INF
c:\recycler\NPROTECT\00012526.DAT
c:\recycler\NPROTECT\00012527.DAT
c:\recycler\NPROTECT\00012528.DAT
c:\recycler\NPROTECT\00012529.DAT
c:\recycler\NPROTECT\00012530.TXT
c:\recycler\NPROTECT\00012531.DAT
c:\recycler\NPROTECT\00012532.DAT
c:\recycler\NPROTECT\00012533.DAT
c:\recycler\NPROTECT\00012534.DAT
c:\recycler\NPROTECT\00012535.DAT
c:\recycler\NPROTECT\00012536.GRD
c:\recycler\NPROTECT\00012537.SIG
c:\recycler\NPROTECT\00012538.INF
c:\recycler\NPROTECT\00012539.DAT
c:\recycler\NPROTECT\00012540.DAT
c:\recycler\NPROTECT\00012541.DAT
c:\recycler\NPROTECT\00012542.DAT
c:\recycler\NPROTECT\00012543.DAT
c:\recycler\NPROTECT\00012544.DAT
c:\recycler\NPROTECT\00012545.DAT
c:\recycler\NPROTECT\00012546.DAT
c:\recycler\NPROTECT\00012547.DAT
c:\recycler\NPROTECT\00012548.DAT
c:\recycler\NPROTECT\00012549.dat
c:\recycler\NPROTECT\00012550.TXT
c:\recycler\NPROTECT\00012551.DAT
c:\recycler\NPROTECT\00012552.DAT
c:\recycler\NPROTECT\00012553.DLL
c:\recycler\NPROTECT\00012554.VXD
c:\recycler\NPROTECT\00012555.DLL
c:\recycler\NPROTECT\00012556.SYS
c:\recycler\NPROTECT\00012557.GRD
c:\recycler\NPROTECT\00012558.SIG
c:\recycler\NPROTECT\00012559.SPM
c:\recycler\NPROTECT\00012560.SYS
c:\recycler\NPROTECT\00012561.BIN
c:\recycler\NPROTECT\00012562
c:\recycler\NPROTECT\00012563.EXP
c:\recycler\NPROTECT\00012564.SYS
c:\recycler\NPROTECT\00012565.VXD
c:\recycler\NPROTECT\00012566.DLL
c:\recycler\NPROTECT\00012567.EXP
c:\recycler\NPROTECT\00012568.SYS
c:\recycler\NPROTECT\00012569.VXD
c:\recycler\NPROTECT\00012570.DLL
c:\recycler\NPROTECT\00012571.TXT
c:\recycler\NPROTECT\00012572.DAT
c:\recycler\NPROTECT\00012573.CAT
c:\recycler\NPROTECT\00012574.INF
c:\recycler\NPROTECT\00012575.CAT
c:\recycler\NPROTECT\00012576.INF
c:\recycler\NPROTECT\00012577.DAT
c:\recycler\NPROTECT\00012578.DAT
c:\recycler\NPROTECT\00012579.DAT
c:\recycler\NPROTECT\00012580.DAT
c:\recycler\NPROTECT\00012581.TXT
c:\recycler\NPROTECT\00012582.DAT
c:\recycler\NPROTECT\00012583.DAT
c:\recycler\NPROTECT\00012584.DAT
c:\recycler\NPROTECT\00012585.DAT
c:\recycler\NPROTECT\00012586.DAT
c:\recycler\NPROTECT\00012587.GRD
c:\recycler\NPROTECT\00012588.SIG
c:\recycler\NPROTECT\00012589.INF
c:\recycler\NPROTECT\00012590.DAT
c:\recycler\NPROTECT\00012591.DAT
c:\recycler\NPROTECT\00012592.DAT
c:\recycler\NPROTECT\00012593.DAT
c:\recycler\NPROTECT\00012594.DAT
c:\recycler\NPROTECT\00012595.DAT
c:\recycler\NPROTECT\00012596.DAT
c:\recycler\NPROTECT\00012597.DAT
c:\recycler\NPROTECT\00012598.DAT
c:\recycler\NPROTECT\00012599.DAT
c:\recycler\NPROTECT\00012600.dat
c:\recycler\NPROTECT\00012601.TXT
c:\recycler\NPROTECT\00012602.DAT
c:\recycler\NPROTECT\00012603.DAT
c:\recycler\NPROTECT\00012604.DLL
c:\recycler\NPROTECT\00012605.VXD
c:\recycler\NPROTECT\00012606.DLL
c:\recycler\NPROTECT\00012607.SYS
c:\recycler\NPROTECT\00012608.GRD
c:\recycler\NPROTECT\00012609.SIG
c:\recycler\NPROTECT\00012610.SPM
c:\recycler\NPROTECT\00012611.SYS
c:\recycler\NPROTECT\00012612.BIN
c:\recycler\NPROTECT\00012613
c:\recycler\NPROTECT\00012614.EXP
c:\recycler\NPROTECT\00012615.SYS
c:\recycler\NPROTECT\00012616.VXD
c:\recycler\NPROTECT\00012617.DLL
c:\recycler\NPROTECT\00012618.EXP
c:\recycler\NPROTECT\00012619.SYS
c:\recycler\NPROTECT\00012620.VXD
c:\recycler\NPROTECT\00012621.DLL
c:\recycler\NPROTECT\00012622.TXT
c:\recycler\NPROTECT\00012623.DAT
c:\recycler\NPROTECT\00012624.CAT
c:\recycler\NPROTECT\00012625.INF
c:\recycler\NPROTECT\00012626.CAT
c:\recycler\NPROTECT\00012627.INF
c:\recycler\NPROTECT\00012628.DAT
c:\recycler\NPROTECT\00012629.DAT
c:\recycler\NPROTECT\00012630.DAT
c:\recycler\NPROTECT\00012631.DAT
c:\recycler\NPROTECT\00012632.TXT
c:\recycler\NPROTECT\00012633.DAT
c:\recycler\NPROTECT\00012634.DAT
c:\recycler\NPROTECT\00012635.DAT
c:\recycler\NPROTECT\00012636.DAT
c:\recycler\NPROTECT\00012637.DAT
c:\recycler\NPROTECT\00012638.GRD
c:\recycler\NPROTECT\00012639.SIG
c:\recycler\NPROTECT\00012640.INF
c:\recycler\NPROTECT\00012641.DAT
c:\recycler\NPROTECT\00012642.DAT
c:\recycler\NPROTECT\00012643.DAT
c:\recycler\NPROTECT\00012644.DAT
c:\recycler\NPROTECT\00012645.DAT
c:\recycler\NPROTECT\00012646.DAT
c:\recycler\NPROTECT\00012647.DAT
c:\recycler\NPROTECT\00012648.DAT
c:\recycler\NPROTECT\00012649.DAT
c:\recycler\NPROTECT\00012650.DAT
c:\recycler\NPROTECT\00012651.dat
c:\recycler\NPROTECT\00012652.TXT
c:\recycler\NPROTECT\00012653.DAT
c:\recycler\NPROTECT\00012654.DAT
c:\recycler\NPROTECT\00012655.DLL
c:\recycler\NPROTECT\00012656.VXD
c:\recycler\NPROTECT\00012657.DLL
c:\recycler\NPROTECT\00012658.SYS
c:\recycler\NPROTECT\00012659.GRD
c:\recycler\NPROTECT\00012660.SIG
c:\recycler\NPROTECT\00012661.SPM
c:\recycler\NPROTECT\00012662.SYS
c:\recycler\NPROTECT\00012663.BIN
c:\recycler\NPROTECT\00012664
c:\recycler\NPROTECT\00012665.EXP
c:\recycler\NPROTECT\00012666.SYS
c:\recycler\NPROTECT\00012667.VXD
c:\recycler\NPROTECT\00012668.DLL
c:\recycler\NPROTECT\00012669.EXP
c:\recycler\NPROTECT\00012670.SYS
c:\recycler\NPROTECT\00012671.VXD
c:\recycler\NPROTECT\00012672.DLL
c:\recycler\NPROTECT\00012673.TXT
c:\recycler\NPROTECT\00012674.DAT
c:\recycler\NPROTECT\00012675.CAT
c:\recycler\NPROTECT\00012676.INF
c:\recycler\NPROTECT\00012677.CAT
c:\recycler\NPROTECT\00012678.INF
c:\recycler\NPROTECT\00012679.DAT
c:\recycler\NPROTECT\00012680.DAT
c:\recycler\NPROTECT\00012681.DAT
c:\recycler\NPROTECT\00012682.DAT
c:\recycler\NPROTECT\00012683.TXT
c:\recycler\NPROTECT\00012684.DAT
c:\recycler\NPROTECT\00012685.DAT
c:\recycler\NPROTECT\00012686.DAT
c:\recycler\NPROTECT\00012687.DAT
c:\recycler\NPROTECT\00012688.DAT
c:\recycler\NPROTECT\00012689.GRD
c:\recycler\NPROTECT\00012690.SIG
c:\recycler\NPROTECT\00012691.INF
c:\recycler\NPROTECT\00012692.DAT
c:\recycler\NPROTECT\00012693.DAT
c:\recycler\NPROTECT\00012694.DAT
c:\recycler\NPROTECT\00012695.DAT
c:\recycler\NPROTECT\00012696.DAT
c:\recycler\NPROTECT\00012697.DAT
c:\recycler\NPROTECT\00012698.DAT
c:\recycler\NPROTECT\00012699.DAT
c:\recycler\NPROTECT\00012700.DAT
c:\recycler\NPROTECT\00012701.DAT
c:\recycler\NPROTECT\00012702.dat
c:\recycler\NPROTECT\00012703.TXT
c:\recycler\NPROTECT\00012704.DAT
c:\recycler\NPROTECT\00012705.dat
c:\recycler\NPROTECT\00012706.DLL
c:\recycler\NPROTECT\00012707.DLL
c:\recycler\NPROTECT\00012708.SYS
c:\recycler\NPROTECT\00012709.GRD
c:\recycler\NPROTECT\00012710.SIG
c:\recycler\NPROTECT\00012711.SPM
c:\recycler\NPROTECT\00012712.SYS
c:\recycler\NPROTECT\00012713.BIN
c:\recycler\NPROTECT\00012714
c:\recycler\NPROTECT\00012715.SYS
c:\recycler\NPROTECT\00012716.DLL
c:\recycler\NPROTECT\00012717.SYS
c:\recycler\NPROTECT\00012718.DLL
c:\recycler\NPROTECT\00012719.TXT
c:\recycler\NPROTECT\00012720.DAT
c:\recycler\NPROTECT\00012721.CAT
c:\recycler\NPROTECT\00012722.INF
c:\recycler\NPROTECT\00012723.CAT
c:\recycler\NPROTECT\00012724.INF
c:\recycler\NPROTECT\00012725.DAT
c:\recycler\NPROTECT\00012726.DAT
c:\recycler\NPROTECT\00012727.DAT
c:\recycler\NPROTECT\00012728.DAT
c:\recycler\NPROTECT\00012729.TXT
c:\recycler\NPROTECT\00012730.DAT
c:\recycler\NPROTECT\00012731.DAT
c:\recycler\NPROTECT\00012732.DAT
c:\recycler\NPROTECT\00012733.DAT
c:\recycler\NPROTECT\00012734.DAT
c:\recycler\NPROTECT\00012735.GRD
c:\recycler\NPROTECT\00012736.SIG
c:\recycler\NPROTECT\00012737.INF
c:\recycler\NPROTECT\00012738.DAT
c:\recycler\NPROTECT\00012739.DAT
c:\recycler\NPROTECT\00012740.DAT
c:\recycler\NPROTECT\00012741.DAT
c:\recycler\NPROTECT\00012742.DAT
c:\recycler\NPROTECT\00012743.DAT
c:\recycler\NPROTECT\00012744.DAT
c:\recycler\NPROTECT\00012745.DAT
c:\recycler\NPROTECT\00012746.DAT
c:\recycler\NPROTECT\00012747.DAT
c:\recycler\NPROTECT\00012748.TXT
c:\recycler\NPROTECT\00012749.DAT
c:\recycler\NPROTECT\00012750.dat
c:\recycler\NPROTECT\00012751.dat
c:\recycler\NPROTECT\00012752.dat
c:\recycler\NPROTECT\00012753.dll
c:\recycler\NPROTECT\00012754.dll
c:\recycler\NPROTECT\00012755.dll
c:\recycler\NPROTECT\00012756.exe
c:\recycler\NPROTECT\00012757.loc
c:\recycler\NPROTECT\00012758.dll
c:\recycler\NPROTECT\00012759.dll
c:\recycler\NPROTECT\00012760.EXE
c:\recycler\NPROTECT\00012761.LOC
c:\recycler\NPROTECT\00012762.EXE
c:\recycler\NPROTECT\00012763.LOC
c:\recycler\NPROTECT\00012764.EXE
c:\recycler\NPROTECT\00012765.LOC
c:\recycler\NPROTECT\00012766.dll
c:\recycler\NPROTECT\00012767.dll
c:\recycler\NPROTECT\00012768.dll
c:\recycler\NPROTECT\00012769.dll
c:\recycler\NPROTECT\00012770.exe
c:\recycler\NPROTECT\00012771.loc
c:\recycler\NPROTECT\00012772.dll
c:\recycler\NPROTECT\00012773.dll
c:\recycler\NPROTECT\00012774.EXE
c:\recycler\NPROTECT\00012775.LOC
c:\recycler\NPROTECT\00012776.dll
c:\recycler\NPROTECT\00012777.dll
c:\recycler\NPROTECT\00012778.DAT
c:\recycler\NPROTECT\00012779.dll
c:\recycler\NPROTECT\00012780.cat
c:\recycler\NPROTECT\00012781.inf
c:\recycler\NPROTECT\00012782.sys
c:\recycler\NPROTECT\00012783.cat
c:\recycler\NPROTECT\00012784.inf
c:\recycler\NPROTECT\00012785.sys
c:\recycler\NPROTECT\00012786.dll
c:\recycler\NPROTECT\00012787.dat
c:\recycler\NPROTECT\00012788.dat
c:\recycler\NPROTECT\00012789.sys
c:\recycler\NPROTECT\00012790.vxd
c:\recycler\NPROTECT\00012791.dll
c:\recycler\NPROTECT\00012792.grd
c:\recycler\NPROTECT\00012793.sig
c:\recycler\NPROTECT\00012794.DAT
c:\recycler\NPROTECT\00012795.dat
c:\recycler\NPROTECT\00012796.DAT
c:\recycler\NPROTECT\00012797.dll
c:\recycler\NPROTECT\00012798.cat
c:\recycler\NPROTECT\00012799.inf
c:\recycler\NPROTECT\00012800.sys
c:\recycler\NPROTECT\00012801.cat
c:\recycler\NPROTECT\00012802.inf
c:\recycler\NPROTECT\00012803.sys
c:\recycler\NPROTECT\00012804.dll
c:\recycler\NPROTECT\00012805.dat
c:\recycler\NPROTECT\00012806.dat
c:\recycler\NPROTECT\00012807.sys
c:\recycler\NPROTECT\00012808.vxd
c:\recycler\NPROTECT\00012809.dll
c:\recycler\NPROTECT\00012810.grd
c:\recycler\NPROTECT\00012811.sig
c:\recycler\NPROTECT\00012812.DAT
c:\recycler\NPROTECT\00012813.dat
c:\recycler\NPROTECT\00012814.dat
c:\recycler\NPROTECT\00012815.dll
c:\recycler\NPROTECT\00012816.cat
c:\recycler\NPROTECT\00012817.inf
c:\recycler\NPROTECT\00012818.sys
c:\recycler\NPROTECT\00012819.cat
c:\recycler\NPROTECT\00012820.inf
c:\recycler\NPROTECT\00012821.sys
c:\recycler\NPROTECT\00012822.dll
c:\recycler\NPROTECT\00012823.dat
c:\recycler\NPROTECT\00012824.dat
c:\recycler\NPROTECT\00012825.sys
c:\recycler\NPROTECT\00012826.vxd
c:\recycler\NPROTECT\00012827.dll
c:\recycler\NPROTECT\00012828.grd
c:\recycler\NPROTECT\00012829.sig
c:\recycler\NPROTECT\00012830.dat
c:\recycler\NPROTECT\00012831.dat
c:\recycler\NPROTECT\00012832.dat
c:\recycler\NPROTECT\00012833.dat
c:\recycler\NPROTECT\00012834.dll
c:\recycler\NPROTECT\00012835.dll
c:\recycler\NPROTECT\00012836.dll
c:\recycler\NPROTECT\00012837.grd
c:\recycler\NPROTECT\00012838.sig
c:\recycler\NPROTECT\00012839.spm
c:\recycler\NPROTECT\00012840.grd
c:\recycler\NPROTECT\00012841.sig
c:\recycler\NPROTECT\00012842.spm
c:\recycler\NPROTECT\00012843.grd
c:\recycler\NPROTECT\00012844.sig
c:\recycler\NPROTECT\00012845.spm
c:\recycler\NPROTECT\00012846.grd
c:\recycler\NPROTECT\00012847.sig
c:\recycler\NPROTECT\00012848.spm
c:\recycler\NPROTECT\00012849.grd
c:\recycler\NPROTECT\00012850.sig
c:\recycler\NPROTECT\00012851.spm
c:\recycler\NPROTECT\00012852.grd
c:\recycler\NPROTECT\00012853.sig
c:\recycler\NPROTECT\00012854.spm
c:\recycler\NPROTECT\00012855.grd
c:\recycler\NPROTECT\00012856.sig
c:\recycler\NPROTECT\00012857.spm
c:\recycler\NPROTECT\00012858.grd
c:\recycler\NPROTECT\00012859.sig
c:\recycler\NPROTECT\00012860.spm
c:\recycler\NPROTECT\00012861.grd
c:\recycler\NPROTECT\00012862.sig
c:\recycler\NPROTECT\00012863.spm
c:\recycler\NPROTECT\00012864.GRD
c:\recycler\NPROTECT\00012865.SIG
c:\recycler\NPROTECT\00012866.SPM
c:\recycler\NPROTECT\00012867.grd
c:\recycler\NPROTECT\00012868.sig
c:\recycler\NPROTECT\00012869.spm
c:\recycler\NPROTECT\00012870.grd
c:\recycler\NPROTECT\00012871.sig
c:\recycler\NPROTECT\00012872.spm
c:\recycler\NPROTECT\00012873.grd
c:\recycler\NPROTECT\00012874.sig
c:\recycler\NPROTECT\00012875.spm
c:\recycler\NPROTECT\00012876.grd
c:\recycler\NPROTECT\00012877.sig
c:\recycler\NPROTECT\00012878.spm
c:\recycler\NPROTECT\00012879.grd
c:\recycler\NPROTECT\00012880.sig
c:\recycler\NPROTECT\00012881.spm
c:\recycler\NPROTECT\00012882.grd
c:\recycler\NPROTECT\00012883.sig
c:\recycler\NPROTECT\00012884.spm
c:\recycler\NPROTECT\00012885.grd
c:\recycler\NPROTECT\00012886.sig
c:\recycler\NPROTECT\00012887.spm
c:\recycler\NPROTECT\00012888.GRD
c:\recycler\NPROTECT\00012889.SIG
c:\recycler\NPROTECT\00012890.SPM
c:\recycler\NPROTECT\00012891.grd
c:\recycler\NPROTECT\00012892.sig
c:\recycler\NPROTECT\00012893.spm
c:\recycler\NPROTECT\00012894.grd
c:\recycler\NPROTECT\00012895.sig
c:\recycler\NPROTECT\00012896.spm
c:\recycler\NPROTECT\00012897.grd
c:\recycler\NPROTECT\00012898.sig
c:\recycler\NPROTECT\00012899.spm
c:\recycler\NPROTECT\00012900.grd
c:\recycler\NPROTECT\00012901.sig
c:\recycler\NPROTECT\00012902.spm
c:\recycler\NPROTECT\00012903.grd
c:\recycler\NPROTECT\00012904.sig
c:\recycler\NPROTECT\00012905.spm
c:\recycler\NPROTECT\00012906.grd
c:\recycler\NPROTECT\00012907.sig
c:\recycler\NPROTECT\00012908.spm
c:\recycler\NPROTECT\00012909.grd
c:\recycler\NPROTECT\00012910.sig
c:\recycler\NPROTECT\00012911.spm
c:\recycler\NPROTECT\00012912.grd
c:\recycler\NPROTECT\00012913.sig
c:\recycler\NPROTECT\00012914.spm
c:\recycler\NPROTECT\00012915.grd
c:\recycler\NPROTECT\00012916.sig
c:\recycler\NPROTECT\00012917.spm
c:\recycler\NPROTECT\00012918.grd
c:\recycler\NPROTECT\00012919.sig
c:\recycler\NPROTECT\00012920.spm
c:\recycler\NPROTECT\00012921.GRD
c:\recycler\NPROTECT\00012922.SIG
c:\recycler\NPROTECT\00012923.SPM
c:\recycler\NPROTECT\00012924.grd
c:\recycler\NPROTECT\00012925.sig
c:\recycler\NPROTECT\00012926.spm
c:\recycler\NPROTECT\00012927.grd
c:\recycler\NPROTECT\00012928.sig
c:\recycler\NPROTECT\00012929.spm
c:\recycler\NPROTECT\00012930.grd
c:\recycler\NPROTECT\00012931.sig
c:\recycler\NPROTECT\00012932.spm
c:\recycler\NPROTECT\00012933.grd
c:\recycler\NPROTECT\00012934.sig
c:\recycler\NPROTECT\00012935.spm
c:\recycler\NPROTECT\00012936.grd
c:\recycler\NPROTECT\00012937.sig
c:\recycler\NPROTECT\00012938.spm
c:\recycler\NPROTECT\00012939.grd
c:\recycler\NPROTECT\00012940.sig
c:\recycler\NPROTECT\00012941.spm
c:\recycler\NPROTECT\00012942.grd
c:\recycler\NPROTECT\00012943.sig
c:\recycler\NPROTECT\00012944.spm
c:\recycler\NPROTECT\00012945.grd
c:\recycler\NPROTECT\00012946.sig
c:\recycler\NPROTECT\00012947.spm
c:\recycler\NPROTECT\00012948.grd
c:\recycler\NPROTECT\00012949.sig
c:\recycler\NPROTECT\00012950.spm
c:\recycler\NPROTECT\00012951.grd
c:\recycler\NPROTECT\00012952.sig
c:\recycler\NPROTECT\00012953.spm
c:\recycler\NPROTECT\00012954.grd
c:\recycler\NPROTECT\00012955.sig
c:\recycler\NPROTECT\00012956.spm
c:\recycler\NPROTECT\00012957.grd
c:\recycler\NPROTECT\00012958.sig
c:\recycler\NPROTECT\00012959.spm
c:\recycler\NPROTECT\00012960.GRD
c:\recycler\NPROTECT\00012961.SIG
c:\recycler\NPROTECT\00012962.SPM
c:\recycler\NPROTECT\00012963.grd
c:\recycler\NPROTECT\00012964.sig
c:\recycler\NPROTECT\00012965.spm
c:\recycler\NPROTECT\00012966.grd
c:\recycler\NPROTECT\00012967.sig
c:\recycler\NPROTECT\00012968.spm
c:\recycler\NPROTECT\00012969.grd
c:\recycler\NPROTECT\00012970.sig
c:\recycler\NPROTECT\00012971.spm
c:\recycler\NPROTECT\00012972.grd
c:\recycler\NPROTECT\00012973.sig
c:\recycler\NPROTECT\00012974.spm
c:\recycler\NPROTECT\00012975.grd
c:\recycler\NPROTECT\00012976.sig
c:\recycler\NPROTECT\00012977.spm
c:\recycler\NPROTECT\00012978.grd
c:\recycler\NPROTECT\00012979.sig
c:\recycler\NPROTECT\00012980.spm
c:\recycler\NPROTECT\00012981.grd
c:\recycler\NPROTECT\00012982.sig
c:\recycler\NPROTECT\00012983.spm
c:\recycler\NPROTECT\00012984.grd
c:\recycler\NPROTECT\00012985.sig
c:\recycler\NPROTECT\00012986.spm
c:\recycler\NPROTECT\00012987.grd
c:\recycler\NPROTECT\00012988.sig
c:\recycler\NPROTECT\00012989.spm
c:\recycler\NPROTECT\00012990.grd
c:\recycler\NPROTECT\00012991.sig
c:\recycler\NPROTECT\00012992.spm
c:\recycler\NPROTECT\00012993.grd
c:\recycler\NPROTECT\00012994.sig
c:\recycler\NPROTECT\00012995.spm
c:\recycler\NPROTECT\00012996.grd
c:\recycler\NPROTECT\00012997.sig
c:\recycler\NPROTECT\00012998.spm
c:\recycler\NPROTECT\00012999.grd
c:\recycler\NPROTECT\00013000.sig
c:\recycler\NPROTECT\00013001.spm
c:\recycler\NPROTECT\00013002.grd
c:\recycler\NPROTECT\00013003.sig
c:\recycler\NPROTECT\00013004.spm
c:\recycler\NPROTECT\00013005.grd
c:\recycler\NPROTECT\00013006.sig
c:\recycler\NPROTECT\00013007.spm
c:\recycler\NPROTECT\00013008.grd
c:\recycler\NPROTECT\00013009.sig
c:\recycler\NPROTECT\00013010.spm
c:\recycler\NPROTECT\00013011.grd
c:\recycler\NPROTECT\00013012.sig
c:\recycler\NPROTECT\00013013.spm
c:\recycler\NPROTECT\00013014.GRD
c:\recycler\NPROTECT\00013015.SIG
c:\recycler\NPROTECT\00013016.SPM
c:\recycler\NPROTECT\00013017.grd
c:\recycler\NPROTECT\00013018.sig
c:\recycler\NPROTECT\00013019.spm
c:\recycler\NPROTECT\00013020.grd
c:\recycler\NPROTECT\00013021.sig
c:\recycler\NPROTECT\00013022.spm
c:\recycler\NPROTECT\00013023.grd
c:\recycler\NPROTECT\00013024.sig
c:\recycler\NPROTECT\00013025.spm
c:\recycler\NPROTECT\00013026.grd
c:\recycler\NPROTECT\00013027.sig
c:\recycler\NPROTECT\00013028.spm
c:\recycler\NPROTECT\00013029.grd
c:\recycler\NPROTECT\00013030.sig
c:\recycler\NPROTECT\00013031.spm
c:\recycler\NPROTECT\00013032.grd
c:\recycler\NPROTECT\00013033.sig
c:\recycler\NPROTECT\00013034.spm
c:\recycler\NPROTECT\00013035.dll
c:\recycler\NPROTECT\00013036.dll
c:\recycler\NPROTECT\00013037.kc
c:\recycler\NPROTECT\00013038.CAT
c:\recycler\NPROTECT\00013039.inf
c:\recycler\NPROTECT\00013040.sys
c:\recycler\NPROTECT\00013041.dll
c:\recycler\NPROTECT\00013042.dll
c:\recycler\NPROTECT\00013043.dll
c:\recycler\NPROTECT\00013044.dat
c:\recycler\NPROTECT\00013045.dll
c:\recycler\NPROTECT\00013046.exe
c:\recycler\NPROTECT\00013047.exe
c:\recycler\NPROTECT\00013048.dll
c:\recycler\NPROTECT\00013049.dll
c:\recycler\NPROTECT\00013050.dll
c:\recycler\NPROTECT\00013051.dll
c:\recycler\NPROTECT\00013052.dll
c:\recycler\NPROTECT\00013053.dll
c:\recycler\NPROTECT\00013054.loc
c:\recycler\NPROTECT\00013055.dat
c:\recycler\NPROTECT\00013056.ico
c:\recycler\NPROTECT\00013057.dll
c:\recycler\NPROTECT\00013058.dll
c:\recycler\NPROTECT\00013059.dll
c:\recycler\NPROTECT\00013060.exe
c:\recycler\NPROTECT\00013061.dll
c:\recycler\NPROTECT\00013062.dll
c:\recycler\NPROTECT\00013063.dll
c:\recycler\NPROTECT\00013064.exe
c:\recycler\NPROTECT\00013065.dll
c:\recycler\NPROTECT\00013066.txt
c:\recycler\NPROTECT\00013067.dll
c:\recycler\NPROTECT\00013068.dll
c:\recycler\NPROTECT\00013069.exe
c:\recycler\NPROTECT\00013070.tlb
c:\recycler\NPROTECT\00013071.dll
c:\recycler\NPROTECT\00013072.dll
c:\recycler\NPROTECT\00013073.dll
c:\recycler\NPROTECT\00013074.dll
c:\recycler\NPROTECT\00013075.dll
c:\recycler\NPROTECT\00013076.dll
c:\recycler\NPROTECT\00013077.exe
c:\recycler\NPROTECT\00013078.Loc
c:\recycler\NPROTECT\00013079.dll
c:\recycler\NPROTECT\00013080.dll
c:\recycler\NPROTECT\00013081.dll
c:\recycler\NPROTECT\00013082.loc
c:\recycler\NPROTECT\00013083.dll
c:\recycler\NPROTECT\00013084.loc
c:\recycler\NPROTECT\00013085.exe
c:\recycler\NPROTECT\00013086.dll
c:\recycler\NPROTECT\00013087.dll
c:\recycler\NPROTECT\00013088.loc
c:\recycler\NPROTECT\00013089.dll
c:\recycler\NPROTECT\00013090.loc
c:\recycler\NPROTECT\00013091.exe
c:\recycler\NPROTECT\00013092.loc
c:\recycler\NPROTECT\00013093.dll
c:\recycler\NPROTECT\00013094.loc
c:\recycler\NPROTECT\00013095.dll
c:\recycler\NPROTECT\00013096.dll
c:\recycler\NPROTECT\00013097.dll
c:\recycler\NPROTECT\00013098.ocx
c:\recycler\NPROTECT\00013099.dll
c:\recycler\NPROTECT\00013100.dll
c:\recycler\NPROTECT\00013101.dll
c:\recycler\NPROTECT\00013102.exe
c:\recycler\NPROTECT\00013103.dat
c:\recycler\NPROTECT\00013104.dll
c:\recycler\NPROTECT\00013105.dll
c:\recycler\NPROTECT\00013106.chm
c:\recycler\NPROTECT\00013107.chm
c:\recycler\NPROTECT\00013108.CHM
c:\recycler\NPROTECT\00013109.chm
c:\recycler\NPROTECT\00013110.dll
c:\recycler\NPROTECT\00013111.chm
c:\recycler\NPROTECT\00013112.dll
c:\recycler\NPROTECT\00013113.chm
c:\recycler\NPROTECT\00013114.dll
c:\recycler\NPROTECT\00013115.chm
c:\recycler\NPROTECT\00013116.chm
c:\recycler\NPROTECT\00013117.chm
c:\recycler\NPROTECT\00013118.chm
c:\recycler\NPROTECT\00013119.chm
c:\recycler\NPROTECT\00013120.chm
c:\recycler\NPROTECT\00013121.chm
c:\recycler\NPROTECT\00013122.dll
c:\recycler\NPROTECT\00013123.chm
c:\recycler\NPROTECT\00013124.chm
c:\recycler\NPROTECT\00013125.CHM
c:\recycler\NPROTECT\00013126.chm
c:\recycler\NPROTECT\00013127.dll
c:\recycler\NPROTECT\00013128.chm
c:\recycler\NPROTECT\00013129.dll
c:\recycler\NPROTECT\00013130.chm
c:\recycler\NPROTECT\00013131.dll
c:\recycler\NPROTECT\00013132.chm
c:\recycler\NPROTECT\00013133.dll
c:\recycler\NPROTECT\00013134.chm
c:\recycler\NPROTECT\00013135.dll
c:\recycler\NPROTECT\00013136.chm
c:\recycler\NPROTECT\00013137.chw
c:\recycler\NPROTECT\00013138.chm
c:\recycler\NPROTECT\00013139.dll
c:\recycler\NPROTECT\00013140.chm
c:\recycler\NPROTECT\00013141.chm
c:\recycler\NPROTECT\00013142.chm
c:\recycler\NPROTECT\00013143.chm
c:\recycler\NPROTECT\00013144.chm
c:\recycler\NPROTECT\00013145.chm
c:\recycler\NPROTECT\00013146.chm
c:\recycler\NPROTECT\00013147.chm
c:\recycler\NPROTECT\00013148.chm
c:\recycler\NPROTECT\00013149.chm
c:\recycler\NPROTECT\00013150.chm
c:\recycler\NPROTECT\00013151.chm
c:\recycler\NPROTECT\00013152.dll
c:\recycler\NPROTECT\00013153.chm
c:\recycler\NPROTECT\00013154.chm
c:\recycler\NPROTECT\00013155.chm
c:\recycler\NPROTECT\00013156.chm
c:\recycler\NPROTECT\00013157.chm
c:\recycler\NPROTECT\00013158.chm
c:\recycler\NPROTECT\00013159.chm
c:\recycler\NPROTECT\00013160.chm
c:\recycler\NPROTECT\00013161.chm
c:\recycler\NPROTECT\00013162.chm
c:\recycler\NPROTECT\00013163.chm
c:\recycler\NPROTECT\00013164.dll
c:\recycler\NPROTECT\00013165.chm
c:\recycler\NPROTECT\00013166.chm
c:\recycler\NPROTECT\00013167.dll
c:\recycler\NPROTECT\00013168.chm
c:\recycler\NPROTECT\00013169.chm
c:\recycler\NPROTECT\00013170.chw
c:\recycler\NPROTECT\00013171.dll
c:\recycler\NPROTECT\00013172.chm
c:\recycler\NPROTECT\00013173.dll
c:\recycler\NPROTECT\00013174.chm
c:\recycler\NPROTECT\00013175.dll
c:\recycler\NPROTECT\00013176.chm
c:\recycler\NPROTECT\00013177.dll
c:\recycler\NPROTECT\00013178.chm
c:\recycler\NPROTECT\00013179.dll
c:\recycler\NPROTECT\00013180.chm
c:\recycler\NPROTECT\00013181.dll
c:\recycler\NPROTECT\00013182.chm
c:\recycler\NPROTECT\00013183.dll
c:\recycler\NPROTECT\00013184.chm
c:\recycler\NPROTECT\00013185.chm
c:\recycler\NPROTECT\00013186.chm
c:\recycler\NPROTECT\00013187.dll
c:\recycler\NPROTECT\00013188.chm
c:\recycler\NPROTECT\00013189.chm
c:\recycler\NPROTECT\00013190.chm
c:\recycler\NPROTECT\00013191.chm
c:\recycler\NPROTECT\00013192.chm
c:\recycler\NPROTECT\00013193.DLL
c:\recycler\NPROTECT\00013194.DLL
c:\recycler\NPROTECT\00013195.EXE
c:\recycler\NPROTECT\00013196.DLL
c:\recycler\NPROTECT\00013197.DLL
c:\recycler\NPROTECT\00013198.DLL
c:\recycler\NPROTECT\00013199.DLL
c:\recycler\NPROTECT\00013200.DLL
c:\recycler\NPROTECT\00013201.DLL
c:\recycler\NPROTECT\00013202.sys
c:\recycler\NPROTECT\00013203.DAT
c:\recycler\NPROTECT\00013204
c:\recycler\NPROTECT\00013205.dll
c:\recycler\NPROTECT\00013206.CAC
c:\recycler\NPROTECT\00013207.exe
c:\recycler\NPROTECT\00013208.exe
c:\recycler\NPROTECT\00013209.dll
c:\recycler\NPROTECT\00013210.dll
c:\recycler\NPROTECT\00013211.dll
c:\recycler\NPROTECT\00013212.dll
c:\recycler\NPROTECT\00013213.dll
c:\recycler\NPROTECT\00013214.dll
c:\recycler\NPROTECT\00013215.dll
c:\recycler\NPROTECT\00013216.dll
c:\recycler\NPROTECT\00013217.dll
c:\recycler\NPROTECT\00013218.dll
c:\recycler\NPROTECT\00013219.DLL
c:\recycler\NPROTECT\00013220.dll
c:\recycler\NPROTECT\00013221.dll
c:\recycler\NPROTECT\00013222.dll
c:\recycler\NPROTECT\00013223.dll
c:\recycler\NPROTECT\00013224.DLL
c:\recycler\NPROTECT\00013225.dll
c:\recycler\NPROTECT\00013226.dll
c:\recycler\NPROTECT\00013227.dll
c:\recycler\NPROTECT\00013228.dll
c:\recycler\NPROTECT\00013229.DLL
c:\recycler\NPROTECT\00013230.DLL
c:\recycler\NPROTECT\00013231.sys
c:\recycler\NPROTECT\00013232.sys
c:\recycler\NPROTECT\00013233.inf
c:\recycler\NPROTECT\00013234.cat
c:\recycler\NPROTECT\00013235.sys
c:\recycler\NPROTECT\00013236.sys
c:\recycler\NPROTECT\00013237.sys
c:\recycler\NPROTECT\00013238.sys
c:\recycler\NPROTECT\00013239.SYS
c:\recycler\NPROTECT\00013240.INF
c:\recycler\NPROTECT\00013241.CAT
c:\recycler\NPROTECT\00013242.sys
c:\recycler\NPROTECT\00013243.sys
c:\recycler\NPROTECT\00013244.inf
c:\recycler\NPROTECT\00013245.cat
c:\recycler\NPROTECT\00013246.sys
c:\recycler\NPROTECT\00013247.inf
c:\recycler\NPROTECT\00013248.cat
c:\recycler\NPROTECT\00013249.sys
c:\recycler\NPROTECT\00013250.inf
c:\recycler\NPROTECT\00013251.cat
c:\recycler\NPROTECT\00013252.SYS
c:\recycler\NPROTECT\00013253.SYS
c:\recycler\NPROTECT\00013254.sys
c:\recycler\NPROTECT\00013255.inf
c:\recycler\NPROTECT\00013256.cat
c:\recycler\NPROTECT\00013257.LNK
c:\recycler\NPROTECT\00013258.htm
c:\recycler\NPROTECT\00013259.HTM
c:\recycler\NPROTECT\00013260.dll
c:\recycler\NPROTECT\00013261.exe
c:\recycler\NPROTECT\00013262.dll
c:\recycler\NPROTECT\00013263.dll
c:\recycler\NPROTECT\00013264.dll
c:\recycler\NPROTECT\00013265.DLL
c:\recycler\NPROTECT\00013266.EXE
c:\recycler\NPROTECT\00013267.dll
c:\recycler\NPROTECT\00013268.dll
c:\recycler\NPROTECT\00013269.dll
c:\recycler\NPROTECT\00013270.DLL
c:\recycler\NPROTECT\00013271.DLL
c:\recycler\NPROTECT\00013272.dll
c:\recycler\NPROTECT\00013273.exe
c:\recycler\NPROTECT\00013274.loc
c:\recycler\NPROTECT\00013275.dll
c:\recycler\NPROTECT\00013276.dll
c:\recycler\NPROTECT\00013277.dll
c:\recycler\NPROTECT\00013278.log
c:\recycler\NPROTECT\00013279.dll
c:\recycler\NPROTECT\00013280.exe
c:\recycler\NPROTECT\00013281.log
c:\recycler\NPROTECT\00013282.log
c:\recycler\NPROTECT\00013283.log
c:\recycler\NPROTECT\00013284.log
c:\recycler\NPROTECT\00013285.log
c:\recycler\NPROTECT\00013286.exe
c:\recycler\NPROTECT\00013287.loc
c:\recycler\NPROTECT\00013288.exe
c:\recycler\NPROTECT\00013289.exe
c:\recycler\NPROTECT\00013290.loc
c:\recycler\NPROTECT\00013291.dll
c:\recycler\NPROTECT\00013292.DLL
c:\recycler\NPROTECT\00013293.DLL
c:\recycler\NPROTECT\00013294.DLL
c:\recycler\NPROTECT\00013295.dll
c:\recycler\NPROTECT\00013296.dll
c:\recycler\NPROTECT\00013297.dll
c:\recycler\NPROTECT\00013298.dll
c:\recycler\NPROTECT\00013299.dll
c:\recycler\NPROTECT\00013300.dll
c:\recycler\NPROTECT\00013301.dll
c:\recycler\NPROTECT\00013302.dat
c:\recycler\NPROTECT\00013303.dll
c:\recycler\NPROTECT\00013304.dll
c:\recycler\NPROTECT\00013305.DLL
c:\recycler\NPROTECT\00013306.tpl
c:\recycler\NPROTECT\00013307.log
c:\recycler\NPROTECT\00013308.DLL
c:\recycler\NPROTECT\00013309.DLL
c:\recycler\NPROTECT\00013310.dll
c:\recycler\NPROTECT\00013311.dll
c:\recycler\NPROTECT\00013312.DLL
c:\recycler\NPROTECT\00013313.EXE
c:\recycler\NPROTECT\00013314.HLP
c:\recycler\NPROTECT\00013315.exe
c:\recycler\NPROTECT\00013316.DAT
c:\recycler\NPROTECT\00013317.DLL
c:\recycler\NPROTECT\00013318.dll
c:\recycler\NPROTECT\00013319.dll
c:\recycler\NPROTECT\00013320.rul
c:\recycler\NPROTECT\00013321.DLL
c:\recycler\NPROTECT\00013322.dll
c:\recycler\NPROTECT\00013323.rul
c:\recycler\NPROTECT\00013324.dll
c:\recycler\NPROTECT\00013325.dll
c:\recycler\NPROTECT\00013326.exe
c:\recycler\NPROTECT\00013327.dll
c:\recycler\NPROTECT\00013328.dll
c:\recycler\NPROTECT\00013329.exe
c:\recycler\NPROTECT\00013330.dll
c:\recycler\NPROTECT\00013331.dll
c:\recycler\NPROTECT\00013332.dll
c:\recycler\NPROTECT\00013333.dll
c:\recycler\NPROTECT\00013334.dll
c:\recycler\NPROTECT\00013335.exe
c:\recycler\NPROTECT\00013336.dll
c:\recycler\NPROTECT\00013337.dll
c:\recycler\NPROTECT\00013338.dll
c:\recycler\NPROTECT\00013339.exe
c:\recycler\NPROTECT\00013340.dll
c:\recycler\NPROTECT\00013341.dll
c:\recycler\NPROTECT\00013342.dll
c:\recycler\NPROTECT\00013343.exe
c:\recycler\NPROTECT\00013344.dll
c:\recycler\NPROTECT\00013345.dll
c:\recycler\NPROTECT\00013346.LNK
c:\recycler\NPROTECT\00013347.LNK
c:\recycler\NPROTECT\00013348.DLL
c:\recycler\NPROTECT\00013349.CAT
c:\recycler\NPROTECT\00013350.INF
c:\recycler\NPROTECT\00013351.SYS
c:\recycler\NPROTECT\NPROTECT.LOG
c:\winnt\IE4 Error Log.txt
c:\winnt\patch.exe
c:\winnt\system32\nfr.assembly
c:\winnt\system32\nfr.gpref
c:\winnt\system32\WgaLogon.dll
C:\xcrashdump.dat

.
((((((((((((((((((((((((( Files Created from 2009-05-19 to 2009-06-19 )))))))))))))))))))))))))))))))
.

2009-06-19 20:12 . 2009-06-19 20:12 3584 —-a-r- c:\documents and settings\terry\Application Data\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe
2009-06-19 20:12 . 2009-06-19 20:12 ——– d—–w- c:\program files\Windows Installer Clean Up
2009-06-19 19:08 . 2009-06-19 19:08 ——– d—–w- c:\winnt\system32\XPSViewer
2009-06-19 19:08 . 2009-06-19 19:08 ——– d—–w- c:\program files\MSBuild
2009-06-19 19:08 . 2009-06-19 19:08 ——– d—–w- c:\program files\Reference Assemblies
2009-06-19 19:07 . 2008-07-06 12:06 89088 -c—-w- c:\winnt\system32\dllcache\filterpipelineprintproc.dll
2009-06-19 19:07 . 2008-07-06 12:06 575488 -c—-w- c:\winnt\system32\dllcache\xpsshhdr.dll
2009-06-19 19:07 . 2008-07-06 12:06 575488 ——w- c:\winnt\system32\xpsshhdr.dll
2009-06-19 19:07 . 2008-07-06 12:06 117760 ——w- c:\winnt\system32\prntvpt.dll
2009-06-19 19:07 . 2008-07-06 10:50 597504 -c—-w- c:\winnt\system32\dllcache\printfilterpipelinesvc.exe
2009-06-19 19:07 . 2008-07-06 12:06 1676288 -c—-w- c:\winnt\system32\dllcache\xpssvcs.dll
2009-06-19 19:07 . 2008-07-06 12:06 1676288 ——w- c:\winnt\system32\xpssvcs.dll
2009-06-19 19:07 . 2009-06-19 19:30 ——– d—–w- c:\winnt\SxsCaPendDel
2009-06-18 21:57 . 2009-06-18 21:57 ——– d-sh–w- c:\documents and settings\terry\PrivacIE
2009-06-18 21:56 . 2009-06-18 21:56 ——– d-sh–w- c:\documents and settings\terry\IETldCache
2009-06-18 21:49 . 2009-04-30 21:22 12800 -c—-w- c:\winnt\system32\dllcache\xpshims.dll
2009-06-18 21:48 . 2009-04-30 21:22 1985024 -c—-w- c:\winnt\system32\dllcache\iertutil.dll
2009-06-18 21:48 . 2009-04-30 21:22 246272 -c—-w- c:\winnt\system32\dllcache\ieproxy.dll
2009-06-18 21:48 . 2009-04-30 21:22 11064832 -c—-w- c:\winnt\system32\dllcache\ieframe.dll
2009-06-18 21:48 . 2009-06-18 21:48 ——– d—–w- c:\winnt\ie8updates
2009-06-18 21:48 . 2009-05-12 05:11 102912 -c—-w- c:\winnt\system32\dllcache\iecompat.dll
2009-06-18 21:46 . 2009-06-18 21:48 ——– dc-h–w- c:\winnt\ie8
2009-06-18 20:43 . 2009-05-21 18:46 268288 -c—-w- c:\winnt\system32\dllcache\httpext.dll
2009-06-18 20:38 . 2009-03-06 14:22 284160 -c—-w- c:\winnt\system32\dllcache\pdh.dll
2009-06-18 20:38 . 2009-02-09 12:10 401408 -c—-w- c:\winnt\system32\dllcache\rpcss.dll
2009-06-18 20:38 . 2009-02-09 12:10 473600 -c—-w- c:\winnt\system32\dllcache\fastprox.dll
2009-06-18 20:38 . 2009-02-06 11:11 110592 -c—-w- c:\winnt\system32\dllcache\services.exe
2009-06-18 20:38 . 2009-02-09 12:10 453120 -c—-w- c:\winnt\system32\dllcache\wmiprvsd.dll
2009-06-18 20:38 . 2009-02-06 10:10 227840 -c—-w- c:\winnt\system32\dllcache\wmiprvse.exe
2009-06-18 20:38 . 2009-02-09 12:10 729088 -c—-w- c:\winnt\system32\dllcache\lsasrv.dll
2009-06-18 20:38 . 2009-02-09 12:10 714752 -c—-w- c:\winnt\system32\dllcache\ntdll.dll
2009-06-18 20:38 . 2009-02-09 12:10 617472 -c—-w- c:\winnt\system32\dllcache\advapi32.dll
2009-06-18 20:37 . 2008-05-03 11:55 2560 ——w- c:\winnt\system32\xpsp4res.dll
2009-06-18 20:37 . 2008-04-21 12:08 215552 -c—-w- c:\winnt\system32\dllcache\wordpad.exe
2009-06-18 19:32 . 2009-06-18 19:32 ——– d—–w- c:\documents and settings\LocalService\Application Data\ESET
2009-06-18 19:02 . 2009-06-18 19:02 ——– d—–w- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-06-17 05:11 . 2009-06-17 05:11 ——– d—–w- c:\program files\iPod
2009-06-17 05:11 . 2009-06-17 05:12 ——– d—–w- c:\program files\iTunes
2009-06-17 04:58 . 2009-06-17 04:58 75048 —-a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.2.0.23\SetupAdmin.exe
2009-06-12 05:00 . 2009-06-12 05:00 3371383 —-a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2009-06-11 16:54 . 2009-06-11 16:54 152576 —-a-w- c:\documents and settings\terry\Application Data\Sun\Java\jre1.6.0_14\lzma.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-19 20:11 . 2008-01-18 16:30 ——– d—–w- c:\program files\MSECache
2009-06-19 15:53 . 2005-02-21 01:09 1080 —-a-w- c:\winnt\AUTOLNCH.REG
2009-06-19 15:24 . 2006-04-17 15:26 3766 –sha-w- c:\winnt\system32\KGyGaAvL.sys
2009-06-18 19:03 . 2008-06-05 14:45 ——– d—–w- c:\documents and settings\All Users\Application Data\Symantec
2009-06-18 18:50 . 2009-03-04 16:05 ——– d—–w- c:\documents and settings\All Users\Application Data\Lavasoft
2009-06-18 18:50 . 2004-08-26 22:12 ——– d—–w- c:\program files\Lavasoft
2009-06-18 18:49 . 2009-03-11 02:10 ——– d—–w- c:\program files\Spybot - Search & Destroy
2009-06-18 18:49 . 2004-06-04 03:06 ——– d—–w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-06-18 18:11 . 2008-06-05 19:43 ——– d—–w- c:\program files\Common Files\Symantec Shared
2009-06-17 16:46 . 2007-12-11 17:14 1878984 -c–a-w- c:\documents and settings\terry\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\fpupdatepl.exe
2009-06-17 05:11 . 2007-12-26 15:47 ——– d—–w- c:\program files\Common Files\Apple
2009-06-17 05:06 . 2005-04-14 16:16 ——– d—–w- c:\program files\QuickTime
2009-06-11 16:55 . 2004-08-03 20:10 ——– d—–w- c:\program files\Java
2009-05-26 20:20 . 2009-04-10 18:36 40160 —-a-w- c:\winnt\system32\drivers\mbamswissarmy.sys
2009-05-26 20:19 . 2009-04-10 18:37 19096 —-a-w- c:\winnt\system32\drivers\mbam.sys
2009-05-21 18:33 . 2009-04-09 19:07 410984 —-a-w- c:\winnt\system32\deploytk.dll
2009-05-13 05:15 . 2004-12-08 00:37 915456 —-a-w- c:\winnt\system32\wininet.dll
2009-05-07 15:32 . 2002-08-28 19:41 345600 —-a-w- c:\winnt\system32\localspl.dll
2009-04-28 00:31 . 2009-04-28 00:30 ——– d—–w- c:\documents and settings\All Users\Application Data\Maxtor
2009-04-28 00:31 . 2004-06-03 22:47 ——– d–h–w- c:\program files\InstallShield Installation Information
2009-04-28 00:30 . 2009-04-28 00:30 ——– d—–w- c:\documents and settings\terry\Application Data\Maxtor Quick Start
2009-04-23 02:24 . 2004-08-19 16:56 10240 —-a-w- c:\winnt\system32\drivers\STLD.SYS
2009-04-22 19:24 . 2004-08-19 18:04 17312 —-a-r- c:\winnt\system32\drivers\n5usbprn.sys
2009-04-22 14:05 . 2009-04-22 14:04 ——– d—–w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-04-17 13:47 . 2005-02-21 00:27 78008 —-a-w- c:\documents and settings\terry\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-04-17 12:26 . 2002-08-28 18:14 1847168 —-a-w- c:\winnt\system32\win32k.sys
2009-04-15 14:51 . 2004-06-03 23:07 585216 —-a-w- c:\winnt\system32\rpcrt4.dll
2009-04-09 19:04 . 2009-04-09 19:04 152576 —-a-w- c:\documents and settings\terry\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
2006-08-09 17:42 . 2007-03-11 02:57 3198976 -c–a-w- c:\program files\ViewSonicregistration.exe
2006-04-17 15:37 . 2006-04-17 15:26 56 –sh–r- c:\winnt\system32\7465AA47C7.sys
2007-03-15 00:00 . 2007-03-10 20:24 88 –sh–r- c:\winnt\system32\C747AA6574.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MSSOverlay]
@="{b75ab0c8-03d5-4592-9821-a48d54d66b14}"
[HKEY_CLASSES_ROOT\CLSID\{b75ab0c8-03d5-4592-9821-a48d54d66b14}]
2008-08-05 14:54 91488 -c–a-w- e:\program files\Maxtor\ManagerApp\MssShellExt.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-14 68856]
"Copernic Desktop Search - Home"="c:\program files\Copernic Desktop Search - Home\DesktopSearchService.exe" [2008-12-11 1588224]
"ctfmon.exe"="c:\winnt\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\winnt\system32\NvCpl.dll" [2003-10-06 5058560]
"mssSort"="e:\program files\Maxtor\ManagerApp\msssort.exe" [2008-08-05 1647960]
"mxomssmenu"="e:\program files\Maxtor\OneTouch Status\maxmenumgr.exe" [2008-08-05 169312]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-21 148888]
"SoundMan"="SOUNDMAN.EXE" - c:\winnt\SOUNDMAN.EXE [2004-02-26 65024]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-23 39264]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Acrobat Speed Launcher.lnk - c:\winnt\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe [2007-3-10 25214]
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2004-6-3 110592]
HP OfficeJet Series 700 Startup.lnk - c:\program files\Hewlett-Packard\HP OfficeJet Series 700\Bin\HPOstr05.exe [2005-2-24 1175552]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoViewOnDrive"= 0 (0x0)

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks 2002 Delivery Agent.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\QuickBooks 2002 Delivery Agent.lnk
backup=c:\winnt\pss\QuickBooks 2002 Delivery Agent.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"LiveUpdate"=3 (0x3)
"MDM"=2 (0x2)
"iPod Service"=3 (0x3)
"IDriverT"=3 (0x3)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINNT\\system32\\fxsclnt.exe"=
"c:\\Program Files\\ACT\\ACT for Windows\\Act8.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009

R1 Start1Driver;Start1Driver;c:\winnt\system32\drivers\Start1Driver.SYS [4/9/2009 9:31 AM 5120]
R2 IntuitUpdateService;Intuit Update Service;c:\program files\Common Files\Intuit\Update Service\IntuitUpdateService.exe [10/10/2008 5:45 AM 13088]
R2 Maxtor Sync Services;Maxtor Service;e:\program files\Maxtor\Sync\SyncServices.exe [8/5/2008 7:54 AM 181600]
R2 MSSQL$ACT7;SQL Server (ACT7);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [11/24/2008 10:31 PM 29263712]
R2 n5lpt.sys;N5 Print Device;c:\winnt\system32\drivers\n5lpt.sys [8/19/2004 9:56 AM 21132]
R2 nvTUNEP;nVidia WDM TVTuner;c:\winnt\system32\drivers\NVTUNEP.SYS [6/3/2004 3:47 PM 15968]
R2 nvtvSND;nVidia WDM TVAudio Crossbar;c:\winnt\system32\drivers\NVTVSND.SYS [6/3/2004 3:47 PM 13776]
R2 Stld;Stld;c:\winnt\system32\drivers\STLD.SYS [8/19/2004 9:56 AM 10240]
S2 key5usb;KeyFive USB Reader;c:\winnt\system32\drivers\key5usb.sys [10/26/2004 10:16 AM 17332]
S2 Start2Driver;Start2Driver; [x]
S3 scsiprnt;Microsoft SCSI/1394 Generic Printer Class;c:\winnt\system32\drivers\scsiprnt.sys [8/12/2004 10:17 AM 11648]
S3 TWKPNP;CHIPDRIVE Plug and Play driver;c:\winnt\system32\DRIVERS\TWKPNP.SYS –> c:\winnt\system32\DRIVERS\TWKPNP.SYS [?]
S4 Procovc;Procovc; [x]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\winnt\system32\rundll32.exe" "c:\winnt\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder

2009-06-17 c:\winnt\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 19:34]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.com/
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Convert link target to Adobe PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - e:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: E&xport; to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Spoke Company Search - c:\program files\Spoke Client\3.0.1588.729\SpokeToolBand.dll/searchcompany.htm
IE: Spoke Person Search - c:\program files\Spoke Client\3.0.1588.729\SpokeToolBand.dll/searchperson.htm
IE: Spoke Title Search - c:\program files\Spoke Client\3.0.1588.729\SpokeToolBand.dll/searchtitle.htm
Trusted Zone: overture.com\secure
Trusted Zone: turbotax.com
Trusted Zone: yahoo.com\marketingsolutions
DPF: DirectAnimation Java Classes - file://c:\winnt\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\winnt\Java\classes\xmldso.cab
FF - ProfilePath -
.
.
——- File Associations ——-
.
inifile=%SystemRoot%\System32\NOTEPAD.EXE %1"
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-19 14:02
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_USERS\S-1-5-21-1645522239-1972579041-1801674531-1010\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\WPAEvents]
@Denied: (Full) (LocalSystem)
"OOBETimer"=hex:ff,d5,71,d6,8b,6a,8d,6f,d5,33,93,fd
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'explorer.exe'(2592)
c:\winnt\system32\WININET.dll
e:\program files\Maxtor\ManagerApp\MssShellExt.dll
c:\winnt\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll
c:\winnt\system32\webcheck.dll
c:\winnt\system32\IEFRAME.dll
.
———————— Other Running Processes ————————
.
c:\winnt\system32\scardsvr.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\winnt\system32\inetsrv\inetinfo.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\winnt\system32\nvsvc32.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\winnt\system32\wscntfy.exe
e:\program files\Adobe\Acrobat 7.0\Acrobat\acrobat_sl.exe
c:\program files\Hewlett-Packard\HP OfficeJet Series 700\Bin\hpovdx05.exe
c:\winnt\system32\hpoipm07.exe
.
**************************************************************************
.
Completion time: 2009-06-19 14:08 - machine was rebooted
ComboFix-quarantined-files.txt 2009-06-19 21:08

Pre-Run: 3,442,647,040 bytes free
Post-Run: 3,175,776,256 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINNT
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINNT="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

1750 — E O F — 2009-06-18 23:52

So I had to try and use Gmer because the one just recommended would just crash the computer. it did so 4 times by just clicking on the file - immediate black screen and restart. Here's the gmer log. I have used the Trend Micro remover tool but norton I believe still has files on here even with their removal tool. Any idea how to get these working properly, I feel that the registry will have to be edited because the computer also hasn't been reformatted in years and is significantly slower.

No files were open and no programs were used during the scan. I am having issues seeing the options towards the bottom right of the screen because scan, copy and save are over them. Resizing my desktop doesn't help either.

Gmer
GMER 1.0.14.14536 - http://www.gmer.net
Rootkit scan 2009-06-23 15:11:26
Windows 5.1.2600 Service Pack 3


—- System - GMER 1.0.14 —-

SSDT 89FC5630 ZwAssignProcessToJobObject
SSDT 89FC4A60 ZwOpenProcess
SSDT 89FC4E80 ZwOpenThread
SSDT 89FC5460 ZwSuspendProcess
SSDT 89FC5280 ZwSuspendThread
SSDT 89FC4C90 ZwTerminateProcess
SSDT 89FC50B0 ZwTerminateThread

—- User code sections - GMER 1.0.14 —-

.text C:\Program Files\ESET\ESET Smart Security\ekrn.exe[1752] kernel32.dll!SetUnhandledExceptionFilter 7C84495D 4 Bytes [ C2, 04, 00, 00 ]

—- User IAT/EAT - GMER 1.0.14 —-

IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\Explorer.EXE [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\ole32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\WS2HELP.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

—- Devices - GMER 1.0.14 —-

AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET)
AttachedDevice \Driver\Tcpip \Device\Ip epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\Tcpip \Device\Tcp epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\Tcpip \Device\Udp epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\Tcpip \Device\RawIp epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)

—- Threads - GMER 1.0.14 —-

Thread 4:336 89FC3790

—- Registry - GMER 1.0.14 —-

Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\AuxUserType@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\AuxUserType\2
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\AuxUserType\2@ Worksheet
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\AuxUserType\3
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\AuxUserType\3@ Microsoft Office Excel 2003
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readable
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readable@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readable\Main
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readable\Main@ Biff8,ExcelWorksheet
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readwritable
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readwritable@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readwritable\Main
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readwritable\Main@ Biff8
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\DefaultFile
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\DefaultFile@ Biff8
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\0
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\0@ 3,1,32,1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\1@ 2,1,16,1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\2
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\2@ 1,1,1,1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\3
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\3@ NotesDocInfo,1,1,1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\4
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\4@ NoteshNote,-1,1,1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DefaultExtension@ .xls, Excel Workbook (*.xls)
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DefaultIcon@ C:\WINNT\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe,1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DocObject@ 16
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Implemented Categories@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Implemented Categories\{000C0118-0000-0000-C000-000000000046}
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Implemented Categories\{000C0118-0000-0000-C000-000000000046}@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocHandler32@ ole32.dll
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32@Class Microsoft.Office.Interop.Excel.WorksheetClass
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32@RuntimeVersion v1.1.4322
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32@Assembly Microsoft.Office.Interop.Excel, Version=11.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32\11.0.0.0
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32\11.0.0.0@RuntimeVersion v1.1.4322
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32\11.0.0.0@Class Microsoft.Office.Interop.Excel.WorksheetClass
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32\11.0.0.0@Assembly Microsoft.Office.Interop.Excel, Version=11.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Insertable@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\LocalServer@ C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\LocalServer@LocalServer ']gAVn-}f(ZXfeAR6.jiEXCELFiles>!De@]Vz(r=f`1lfq`?R&?
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\LocalServer32@ C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\LocalServer32@LocalServer32 ']gAVn-}f(ZXfeAR6.jiEXCELFiles>!De@]Vz(r=f`1lfq`?R&?
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\MiscStatus@ 0
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\OfficeCompliant@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\PersistentHandler@ {98de59a0-d175-11cd-a7bd-00006b827d94}
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Printable@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\ProgID@ Excel.Sheet.8
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Typelib@ {00020813-0000-0000-C000-000000000046}
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Verb@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Verb\0
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Verb\0@ &Edit,0,2
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Verb\1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Verb\1@ &Open,0,2
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Version@ 1.2
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\VersionIndependentProgID@ Excel.Sheet

—- EOF - GMER 1.0.14 —-

So I had to try and use Gmer because the one just recommended would just crash the computer. it did so 4 times by just clicking on the file - immediate black screen and restart. Here's the gmer log. I have used the Trend Micro remover tool but norton I believe still has files on here even with their removal tool. Any idea how to get these working properly, I feel that the registry will have to be edited because the computer also hasn't been reformatted in years and is significantly slower.

No files were open and no programs were used during the scan. I am having issues seeing the options towards the bottom right of the screen because scan, copy and save are over them. Resizing my desktop doesn't help either.

Gmer
GMER 1.0.14.14536 - http://www.gmer.net
Rootkit scan 2009-06-23 15:11:26
Windows 5.1.2600 Service Pack 3


—- System - GMER 1.0.14 —-

SSDT 89FC5630 ZwAssignProcessToJobObject
SSDT 89FC4A60 ZwOpenProcess
SSDT 89FC4E80 ZwOpenThread
SSDT 89FC5460 ZwSuspendProcess
SSDT 89FC5280 ZwSuspendThread
SSDT 89FC4C90 ZwTerminateProcess
SSDT 89FC50B0 ZwTerminateThread

—- User code sections - GMER 1.0.14 —-

.text C:\Program Files\ESET\ESET Smart Security\ekrn.exe[1752] kernel32.dll!SetUnhandledExceptionFilter 7C84495D 4 Bytes [ C2, 04, 00, 00 ]

—- User IAT/EAT - GMER 1.0.14 —-

IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\Explorer.EXE [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\ole32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT C:\WINNT\Explorer.EXE[1560] @ C:\WINNT\system32\WS2HELP.dll [KERNEL32.dll!GetProcAddress] [5CB77774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

—- Devices - GMER 1.0.14 —-

AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET)
AttachedDevice \Driver\Tcpip \Device\Ip epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\Tcpip \Device\Tcp epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\Tcpip \Device\Udp epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\Tcpip \Device\RawIp epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)

—- Threads - GMER 1.0.14 —-

Thread 4:336 89FC3790

—- Registry - GMER 1.0.14 —-

Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\AuxUserType@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\AuxUserType\2
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\AuxUserType\2@ Worksheet
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\AuxUserType\3
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\AuxUserType\3@ Microsoft Office Excel 2003
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readable
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readable@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readable\Main
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readable\Main@ Biff8,ExcelWorksheet
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readwritable
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readwritable@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readwritable\Main
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Conversion\Readwritable\Main@ Biff8
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\DefaultFile
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\DefaultFile@ Biff8
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\0
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\0@ 3,1,32,1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\1@ 2,1,16,1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\2
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\2@ 1,1,1,1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\3
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\3@ NotesDocInfo,1,1,1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\4
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DataFormats\GetSet\4@ NoteshNote,-1,1,1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DefaultExtension@ .xls, Excel Workbook (*.xls)
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DefaultIcon@ C:\WINNT\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe,1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\DocObject@ 16
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Implemented Categories@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Implemented Categories\{000C0118-0000-0000-C000-000000000046}
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Implemented Categories\{000C0118-0000-0000-C000-000000000046}@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocHandler32@ ole32.dll
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32@Class Microsoft.Office.Interop.Excel.WorksheetClass
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32@RuntimeVersion v1.1.4322
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32@Assembly Microsoft.Office.Interop.Excel, Version=11.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32\11.0.0.0
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32\11.0.0.0@RuntimeVersion v1.1.4322
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32\11.0.0.0@Class Microsoft.Office.Interop.Excel.WorksheetClass
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\InprocServer32\11.0.0.0@Assembly Microsoft.Office.Interop.Excel, Version=11.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Insertable@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\LocalServer@ C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\LocalServer@LocalServer ']gAVn-}f(ZXfeAR6.jiEXCELFiles>!De@]Vz(r=f`1lfq`?R&?
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\LocalServer32@ C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\LocalServer32@LocalServer32 ']gAVn-}f(ZXfeAR6.jiEXCELFiles>!De@]Vz(r=f`1lfq`?R&?
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\MiscStatus@ 0
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\OfficeCompliant@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\PersistentHandler@ {98de59a0-d175-11cd-a7bd-00006b827d94}
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Printable@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\ProgID@ Excel.Sheet.8
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Typelib@ {00020813-0000-0000-C000-000000000046}
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Verb@
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Verb\0
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Verb\0@ &Edit,0,2
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Verb\1
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Verb\1@ &Open,0,2
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\Version@ 1.2
Reg HKLM\SOFTWARE\Classes\CLSID\{248FCFB3-5914-AF2C-CCBA-9BB5E3C749D5}\VersionIndependentProgID@ Excel.Sheet

—- EOF - GMER 1.0.14 —-