Quarantined troajn

got told by AVG that a trojan had been blocked, computer acting slow and IE keeps not responding. went into safe made and scanned and a lot of the files were locked and unable to scan so went back into normal mode and Anmti-malware found 2 trojans in my java so quartinted them and then rebooted, then found nothing, neither did my AVG but something still not right, computer is slow and something seems wrong with it, any help please

My name is SweetTech. I would be glad to take a look at your log and help you with solving any malware problems.

If you have already received help elsewhere please inform me so that this topic can be closed.

If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:

• Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post.
• Please make sure to carefully read any instruction that I give you.
  Reading too lightly will cause you to miss important steps, which could have destructive effects.
• If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
• These instructions have been specifically tailored to your computer and the issues you are experiencing with your computer. It's important to note that these instructions are not suitable for any other computer, even if the issues are fairly similar.
• Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that you should always do, is to make sure sure that your anti-virus definitions are up-to-date!
• If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.
• In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!
• Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
• I am going to stick with you until ALL malware is gone from your system. I would appreciate it if you would do the same. From this point, we're in this together
  Because of this, you must reply within three days failure to reply will result in the topic being closed!
• Please do not PM me directly for help. If you have any questions, post them in this topic. The only time you can and should PM me is when I have not been replying to you for several days (usually around 3 days) and you need an explanation. If that's the case, just send me a message to me on here.
• Lastly, I am no magician. I will try very hard to fix your issues, but no promises can be made. Also be aware that some infections are so severe that you might need to resort to reformatting and reinstalling your operating system.
  Don't worry, this only happens in severe cases, but it sadly does happen. Be prepared to back up your data. Have means of backing up your data available.

____________________________________________________

Please download MBRCheck.exe to your Desktop. Run the application.

If no infection is found, it will produce a report on the desktop. Post that report in your next reply.

If an infection is found, you will be presented with the following dialog:

Enter 'Y' and hit ENTER for more options, or 'N' to exit:

Type N and press Enter. A report will be produced on the desktop. Post that report in your next reply.



NEXT:



Rootkit UnHooker (RkU)
Please download Rootkit Unhooker … Save it to your Desktop.
Note: The log can be very long, you may need to post it separately.

• Double-click on RKUnhookerLE.exe to execute it.
  Vista - W7 users: Right click RKUnhookerLE.exe, choose "Run As Administrator" to execute it. If UAC prompts, please allow it.
• Click the Report tab, then click Scan.
• Check Drivers, Stealth Code, Files and Code Hooks. Uncheck the rest. then Click OK. (See image below…)
  🖼Click to load external image (Posted Image)
  The scanning will toggle through the checked items "tabs" … it will take a while, so please be patient.
• When the scanner is finished… click File, Save Report.
• Save the file "Report.txt" to your Desktop… Press Close… then press Yes
• Copy the entire contents of the Report.txt file in you're next reply.

Please Note:
You may get this warning, it is ok, just ignore it:
"Rootkit Unhooker has detected a parasite inside itself!
It is recommended to remove parasite, okay?"



NEXT:



OTL Custom Scan

Please download OTL to your Desktop, if you have not done so already.

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Click on Minimal Output at the top
• Download the following file scan.txt to your Desktop. Click here to download it. You may need to right click on it and select "Save"
• Double click inside the Custom Scan box at the bottom
• A window will appear saying "Click Ok to load a custom scan from a file or Cancel to cancel"
• Click the Ok button and navigate to the file scan.txt which we just saved to your desktop
• Select scan.txt and click Open. Writing will now appear under the Custom Scan box
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic

MBRCheck, version 1.2.3 © 2010, AD Command-line: Windows Version: Windows Vista Home Premium Edition Windows Information: Service Pack 2 (build 6002), 32-bit Logical Drives Mask: 0x0000000c Kernel Drivers (total 139): 0x81E36000 \SystemRoot\system32\ntkrnlpa.exe 0x81E03000 \SystemRoot\system32\hal.dll 0x80402000 \SystemRoot\system32\kdcom.dll 0x80409000 \SystemRoot\system32\mcupdate_GenuineIntel.dll 0x80479000 \SystemRoot\system32\PSHED.dll 0x8048A000 \SystemRoot\system32\BOOTVID.dll 0x80492000 \SystemRoot\system32\CLFS.SYS 0x804D3000 \SystemRoot\system32\CI.dll 0x80600000 \SystemRoot\system32\drivers\Wdf01000.sys 0x8067C000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x80689000 \SystemRoot\system32\drivers\acpi.sys 0x806CF000 \SystemRoot\system32\drivers\WMILIB.SYS 0x806D8000 \SystemRoot\system32\drivers\msisadrv.sys 0x806E0000 \SystemRoot\system32\drivers\pci.sys 0x80707000 \SystemRoot\System32\drivers\partmgr.sys 0x80716000 \SystemRoot\system32\drivers\volmgr.sys 0x80725000 \SystemRoot\System32\drivers\volmgrx.sys 0x8076F000 \SystemRoot\system32\drivers\pciide.sys 0x80776000 \SystemRoot\system32\drivers\PCIIDEX.SYS 0x80784000 \SystemRoot\System32\drivers\mountmgr.sys 0x80794000 \SystemRoot\system32\drivers\atapi.sys 0x8079C000 \SystemRoot\system32\drivers\ataport.SYS 0x807BA000 \SystemRoot\system32\drivers\fltmgr.sys 0x807EC000 \SystemRoot\system32\drivers\fileinfo.sys 0x89C07000 \SystemRoot\System32\Drivers\ksecdd.sys 0x89C78000 \SystemRoot\system32\drivers\ndis.sys 0x89D83000 \SystemRoot\system32\drivers\msrpc.sys 0x89DAE000 \SystemRoot\system32\drivers\NETIO.SYS 0x89E0B000 \SystemRoot\System32\drivers\tcpip.sys 0x89EF5000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x8A002000 \SystemRoot\System32\Drivers\Ntfs.sys 0x8A112000 \SystemRoot\system32\drivers\volsnap.sys 0x8A14B000 \SystemRoot\System32\Drivers\spldr.sys 0x8A153000 \SystemRoot\System32\Drivers\mup.sys 0x8A162000 \SystemRoot\System32\drivers\ecache.sys 0x8A189000 \SystemRoot\system32\drivers\disk.sys 0x8A19A000 \SystemRoot\system32\drivers\CLASSPNP.SYS 0x8A1BB000 \SystemRoot\system32\drivers\crcdisk.sys 0x8A1C4000 \SystemRoot\System32\Drivers\avgrkx86.sys 0x8A1D0000 \SystemRoot\System32\Drivers\AVGIDSvx.sys 0x89F10000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x89F1B000 \SystemRoot\system32\DRIVERS\tunmp.sys 0x89F24000 \SystemRoot\system32\DRIVERS\intelppm.sys 0x8E608000 \SystemRoot\system32\DRIVERS\igdkmd32.sys 0x8ECE5000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x8ED86000 \SystemRoot\System32\drivers\watchdog.sys 0x8ED92000 \SystemRoot\system32\DRIVERS\e1e6032.sys 0x8EDCC000 \SystemRoot\system32\DRIVERS\usbuhci.sys 0x89F33000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0x8EDD7000 \SystemRoot\system32\DRIVERS\usbehci.sys 0x89F71000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x8EDE6000 \SystemRoot\system32\DRIVERS\fdc.sys 0x805B3000 \SystemRoot\system32\DRIVERS\cdrom.sys 0x805CB000 \SystemRoot\system32\DRIVERS\msiscsi.sys 0x8F00A000 \SystemRoot\system32\DRIVERS\storport.sys 0x8F04B000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x8F056000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x8F06D000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x8F078000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x8F09B000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x8F0AA000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x8F0BE000 \SystemRoot\system32\DRIVERS\rassstp.sys 0x8F0D3000 \SystemRoot\system32\DRIVERS\tap0901.sys 0x8F0DA000 \SystemRoot\system32\DRIVERS\gttap1.sys 0x8F0DF000 \SystemRoot\system32\DRIVERS\termdd.sys 0x8F0EF000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x8F0FA000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x8F105000 \SystemRoot\system32\DRIVERS\seehcri.sys 0x8F10B000 \SystemRoot\system32\DRIVERS\swenum.sys 0x8F10D000 \SystemRoot\system32\DRIVERS\ks.sys 0x8F137000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x8F141000 \SystemRoot\system32\DRIVERS\umbus.sys 0x8F14E000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x8F183000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x8F200000 \SystemRoot\system32\drivers\RTKVHDA.sys 0x8F194000 \SystemRoot\system32\drivers\portcls.sys 0x8F1C1000 \SystemRoot\system32\drivers\drmk.sys 0x8F3F5000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0x8F1E6000 \SystemRoot\System32\Drivers\Null.SYS 0x8F1ED000 \SystemRoot\System32\Drivers\Beep.SYS 0x8F000000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x8F1F4000 \SystemRoot\System32\drivers\vga.sys 0x8F40A000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x8F42B000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x8F433000 \SystemRoot\system32\drivers\rdpencdd.sys 0x8F43B000 \SystemRoot\System32\Drivers\Msfs.SYS 0x8F446000 \SystemRoot\System32\Drivers\Npfs.SYS 0x8F454000 \SystemRoot\System32\DRIVERS\rasacd.sys 0x8F45D000 \SystemRoot\system32\DRIVERS\avgfwd6x.sys 0x8F467000 \SystemRoot\system32\DRIVERS\tdx.sys 0x8F47D000 \SystemRoot\system32\DRIVERS\smb.sys 0x8F491000 \SystemRoot\System32\Drivers\avgtdix.sys 0x8F4CB000 \SystemRoot\System32\DRIVERS\netbt.sys 0x8F4FD000 \SystemRoot\system32\drivers\afd.sys 0x8F545000 \SystemRoot\system32\DRIVERS\pacer.sys 0x8F55B000 \SystemRoot\system32\DRIVERS\netbios.sys 0x8F569000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x8F57C000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x8F5B8000 \SystemRoot\system32\drivers\nsiproxy.sys 0x8F5C2000 \SystemRoot\System32\Drivers\dfsc.sys 0x8F5D9000 \SystemRoot\System32\Drivers\avgmfx86.sys 0x8F80D000 \SystemRoot\System32\Drivers\avgldx86.sys 0x8F841000 \SystemRoot\system32\DRIVERS\hidusb.sys 0x8F84A000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0x8F85A000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x8F85C000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0x8F865000 \SystemRoot\system32\DRIVERS\mouhid.sys 0x8F86D000 \SystemRoot\system32\DRIVERS\cdfs.sys 0x8F883000 \SystemRoot\System32\Drivers\crashdmp.sys 0x8F890000 \SystemRoot\System32\Drivers\dump_dumpata.sys 0x8F89B000 \SystemRoot\System32\Drivers\dump_atapi.sys 0x95CC0000 \SystemRoot\System32\win32k.sys 0x8F8A3000 \SystemRoot\System32\drivers\Dxapi.sys 0x8F8AD000 \SystemRoot\system32\DRIVERS\monitor.sys 0x95EE0000 \SystemRoot\System32\TSDDD.dll 0x95F00000 \SystemRoot\System32\cdd.dll 0x8F8BC000 \SystemRoot\system32\drivers\luafv.sys 0x8F8D7000 \SystemRoot\system32\drivers\spsys.sys 0x8F987000 \SystemRoot\system32\DRIVERS\lltdio.sys 0x8F997000 \SystemRoot\system32\DRIVERS\rspndr.sys 0x8F9AA000 \??\C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSShim.sys 0x8F9B5000 \??\C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSFilter.sys 0x81204000 \SystemRoot\system32\drivers\HTTP.sys 0x81271000 \??\C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSDriver.sys 0x81299000 \SystemRoot\system32\DRIVERS\asyncmac.sys 0x812A2000 \SystemRoot\System32\DRIVERS\srvnet.sys 0x812BF000 \SystemRoot\system32\DRIVERS\bowser.sys 0x812D8000 \SystemRoot\System32\drivers\mpsdrv.sys 0x812ED000 \SystemRoot\system32\drivers\mrxdav.sys 0x8130E000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0x8132D000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0x81366000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0x8137E000 \SystemRoot\System32\DRIVERS\srv2.sys 0x813A5000 \SystemRoot\System32\DRIVERS\srv.sys 0xB000A000 \SystemRoot\system32\drivers\peauth.sys 0xB00E8000 \SystemRoot\System32\Drivers\secdrv.SYS 0xB00F2000 \SystemRoot\System32\drivers\tcpipreg.sys 0xB00FE000 \??\C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys 0x777C0000 \Windows\System32\ntdll.dll Processes (total 75): 0 System Idle Process 4 System 432 C:\Windows\System32\smss.exe 564 csrss.exe 608 C:\Windows\System32\wininit.exe 620 csrss.exe 628 C:\Program Files\AVG\AVG9\avgchsvx.exe 636 C:\Program Files\AVG\AVG9\avgrsx.exe 712 C:\Windows\System32\winlogon.exe 732 C:\Windows\System32\services.exe 764 C:\Windows\System32\lsass.exe 772 C:\Windows\System32\lsm.exe 816 C:\Program Files\AVG\AVG9\avgcsrvx.exe 1088 C:\Windows\System32\svchost.exe 1148 C:\Windows\System32\svchost.exe 1288 C:\Windows\System32\svchost.exe 1316 C:\Windows\System32\svchost.exe 1328 C:\Windows\System32\svchost.exe 1388 C:\Windows\System32\audiodg.exe 1408 C:\Windows\System32\svchost.exe 1428 C:\Windows\System32\SLsvc.exe 1460 C:\Windows\System32\svchost.exe 1580 C:\Windows\System32\svchost.exe 1776 C:\Windows\System32\spoolsv.exe 1800 C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe 540 C:\Windows\System32\dwm.exe 624 C:\Windows\explorer.exe 1000 C:\Windows\System32\taskeng.exe 424 C:\Program Files\AVG\AVG9\avgtray.exe 1636 C:\Windows\RtHDVCpl.exe 2056 C:\Windows\System32\igfxtray.exe 2072 C:\Windows\System32\hkcmd.exe 2088 C:\Windows\System32\igfxpers.exe 2164 C:\Windows\System32\igfxsrvc.exe 2208 C:\Program Files\Common Files\Java\Java Update\jusched.exe 2268 C:\Program Files\Common Files\Real\Update_OB\realsched.exe 2276 C:\Program Files\Windows Sidebar\sidebar.exe 2288 C:\Program Files\Windows Live\Messenger\msnmsgr.exe 2328 C:\Windows\ehome\ehtray.exe 2348 C:\Program Files\Windows Media Player\wmpnscfg.exe 2376 C:\Program Files\BBC iPlayer Desktop\BBC iPlayer Desktop.exe 2532 C:\Windows\ehome\ehmsas.exe 2768 C:\Windows\System32\svchost.exe 3396 C:\Program Files\Emsisoft Anti-Malware\a2service.exe 3436 C:\Windows\System32\AERTSrv.exe 3452 C:\Program Files\AVG\AVG9\avgwdsvc.exe 3512 C:\Program Files\AVG\AVG9\avgfws9.exe 3608 C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSMonitor.exe 3624 C:\Program Files\AVG\AVG9\avgam.exe 3644 C:\Program Files\AVG\AVG9\avgnsx.exe 3708 C:\PROGRA~1\McAfee\SITEAD~1\McSACore.exe 4004 C:\Windows\System32\svchost.exe 2132 C:\Windows\System32\rundll32.exe 2180 C:\Windows\System32\svchost.exe 1920 C:\Windows\System32\svchost.exe 2368 C:\Windows\System32\SearchIndexer.exe 2192 C:\Program Files\AVG\AVG9\avgemc.exe 3156 C:\Program Files\AVG\AVG9\avgcsrvx.exe 2308 C:\Program Files\AVG\AVG9\avgcsrvx.exe 3916 C:\Program Files\Windows Media Player\wmpnetwk.exe 4864 C:\Windows\System32\Macromed\Flash\FlashUtil10k_ActiveX.exe 6028 C:\Windows\System32\taskeng.exe 5464 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe 5904 C:\Program Files\Windows Live\Contacts\wlcomm.exe 2200 C:\Program Files\Glary Utilities\Integrator.exe 6560 C:\Program Files\Internet Explorer\iexplore.exe 6484 C:\Program Files\Internet Explorer\iexplore.exe 8032 C:\Windows\System32\calc.exe 4436 C:\Program Files\Internet Explorer\iexplore.exe 2484 C:\Program Files\Internet Explorer\iexplore.exe 3272 C:\Windows\System32\SearchProtocolHost.exe 1404 C:\Program Files\Internet Explorer\iexplore.exe 476 C:\Windows\System32\SearchProtocolHost.exe 7548 C:\Windows\System32\SearchFilterHost.exe 7396 C:\Users\Chris\Downloads\MBRCheck.exe \\.\C: –> \\.\PhysicalDrive0 at offset 0x00000000`00100000 (NTFS) PhysicalDrive0 Model Number: ST3320613AS, Rev: DE11 Size Device Name MBR Status ——————————————– 298 GB \\.\PhysicalDrive0 Windows 2008 MBR code detected SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979 Done!

RkU Version: 3.8.388.590, Type LE (SR2) ============================================== OS Name: Windows Vista Version 6.0.6002 (Service Pack 2) Number of processors #2 ============================================== >Drivers ============================================== 0x8E608000 C:\Windows\system32\DRIVERS\igdkmd32.sys 7196672 bytes (Intel Corporation, Intel Graphics Kernel Mode Driver) 0x81E36000 C:\Windows\system32\ntkrnlpa.exe 3903488 bytes (Microsoft Corporation, NT Kernel & System) 0x81E36000 PnpManager 3903488 bytes 0x81E36000 RAW 3903488 bytes 0x81E36000 WMIxWDM 3903488 bytes 0x95CC0000 Win32k 2109440 bytes 0x95CC0000 C:\Windows\System32\win32k.sys 2109440 bytes (Microsoft Corporation, Multi-User Win32 Driver) 0x8F200000 C:\Windows\system32\drivers\RTKVHDA.sys 2052096 bytes (Realtek Semiconductor Corp., Realtek® High Definition Audio Function Driver) 0x8A002000 C:\Windows\System32\Drivers\Ntfs.sys 1114112 bytes (Microsoft Corporation, NT File System Driver) 0x89C78000 C:\Windows\system32\drivers\ndis.sys 1093632 bytes (Microsoft Corporation, NDIS 6.0 wrapper driver) 0x89E0B000 C:\Windows\System32\drivers\tcpip.sys 958464 bytes (Microsoft Corporation, TCP/IP Driver) 0x804D3000 C:\Windows\system32\CI.dll 917504 bytes (Microsoft Corporation, Code Integrity Module) 0xB000A000 C:\Windows\system32\drivers\peauth.sys 909312 bytes (Microsoft Corporation, Protected Environment Authentication and Authorization Export Driver) 0x8F8D7000 C:\Windows\system32\drivers\spsys.sys 720896 bytes (Microsoft Corporation, security processor) 0x8ECE5000 C:\Windows\System32\drivers\dxgkrnl.sys 659456 bytes (Microsoft Corporation, DirectX Graphics Kernel) 0x89F71000 C:\Windows\system32\DRIVERS\HDAudBus.sys 577536 bytes (Microsoft Corporation, High Definition Audio Bus Driver) 0x80600000 C:\Windows\system32\drivers\Wdf01000.sys 507904 bytes (Microsoft Corporation, WDF Dynamic) 0x89C07000 C:\Windows\System32\Drivers\ksecdd.sys 462848 bytes (Microsoft Corporation, Kernel Security Support Provider Interface) 0x80409000 C:\Windows\system32\mcupdate_GenuineIntel.dll 458752 bytes (Microsoft Corporation, Intel Microcode Update Library) 0x81204000 C:\Windows\system32\drivers\HTTP.sys 446464 bytes (Microsoft Corporation, HTTP Protocol Stack) 0x813A5000 C:\Windows\System32\DRIVERS\srv.sys 319488 bytes (Microsoft Corporation, Server driver) 0x80725000 C:\Windows\System32\drivers\volmgrx.sys 303104 bytes (Microsoft Corporation, Volume Manager Extension Driver) 0x8F4FD000 C:\Windows\system32\drivers\afd.sys 294912 bytes (Microsoft Corporation, Ancillary Function Driver for WinSock) 0x80689000 C:\Windows\system32\drivers\acpi.sys 286720 bytes (Microsoft Corporation, ACPI Driver for NT) 0x80492000 C:\Windows\system32\CLFS.SYS 266240 bytes (Microsoft Corporation, Common Log File System Driver) 0x8F00A000 C:\Windows\system32\DRIVERS\storport.sys 266240 bytes (Microsoft Corporation, Microsoft Storage Port Driver) 0x89F33000 C:\Windows\system32\DRIVERS\USBPORT.SYS 253952 bytes (Microsoft Corporation, USB 1.1 & 2.0 Port Driver) 0x8F57C000 C:\Windows\system32\DRIVERS\rdbss.sys 245760 bytes (Microsoft Corporation, Redirected Drive Buffering SubSystem Driver) 0x89DAE000 C:\Windows\system32\drivers\NETIO.SYS 241664 bytes (Microsoft Corporation, Network I/O Subsystem) 0x8F491000 C:\Windows\System32\Drivers\avgtdix.sys 237568 bytes (AVG Technologies CZ, s.r.o., AVG Network connection watcher) 0x8ED92000 C:\Windows\system32\DRIVERS\e1e6032.sys 237568 bytes (Intel Corporation, Intel® PRO/1000 Adapter NDIS 6 deserialized driver) 0x8132D000 C:\Windows\system32\DRIVERS\mrxsmb10.sys 233472 bytes (Microsoft Corporation, Longhorn SMB Downlevel SubRdr) 0x8A112000 C:\Windows\system32\drivers\volsnap.sys 233472 bytes (Microsoft Corporation, Volume Shadow Copy Driver) 0x8F14E000 C:\Windows\system32\DRIVERS\usbhub.sys 217088 bytes (Microsoft Corporation, Default Hub Driver for USB) 0x8F80D000 C:\Windows\System32\Drivers\avgldx86.sys 212992 bytes (AVG Technologies CZ, s.r.o., AVG AVI Loader Driver) 0x81E03000 ACPI_HAL 208896 bytes 0x81E03000 C:\Windows\system32\hal.dll 208896 bytes (Microsoft Corporation, Hardware Abstraction Layer DLL) 0x807BA000 C:\Windows\system32\drivers\fltmgr.sys 204800 bytes (Microsoft Corporation, Microsoft Filesystem Filter Manager) 0x8F4CB000 C:\Windows\System32\DRIVERS\netbt.sys 204800 bytes (Microsoft Corporation, MBT Transport driver) 0x805CB000 C:\Windows\system32\DRIVERS\msiscsi.sys 192512 bytes (Microsoft Corporation, Microsoft iSCSI Initiator Driver) 0x8F194000 C:\Windows\system32\drivers\portcls.sys 184320 bytes (Microsoft Corporation, Port Class (Class Driver for Port/Miniport Devices)) 0x89D83000 C:\Windows\system32\drivers\msrpc.sys 176128 bytes (Microsoft Corporation, Kernel Remote Procedure Call Provider) 0x8F10D000 C:\Windows\system32\DRIVERS\ks.sys 172032 bytes (Microsoft Corporation, Kernel CSA Library) 0x81271000 C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSDriver.sys 163840 bytes (AVG Technologies CZ, s.r.o. , IDS Application Activity Monitor Driver.) 0x8A162000 C:\Windows\System32\drivers\ecache.sys 159744 bytes (Microsoft Corporation, Special Memory Device Cache) 0x806E0000 C:\Windows\system32\drivers\pci.sys 159744 bytes (Microsoft Corporation, NT Plug and Play PCI Enumerator) 0x8137E000 C:\Windows\System32\DRIVERS\srv2.sys 159744 bytes (Microsoft Corporation, Smb 2.0 Server driver) 0x8F1C1000 C:\Windows\system32\drivers\drmk.sys 151552 bytes (Microsoft Corporation, Microsoft Kernel DRM Descrambler Filter) 0x8F078000 C:\Windows\system32\DRIVERS\ndiswan.sys 143360 bytes (Microsoft Corporation, MS PPP Framing Driver (Strong Encryption)) 0x8A19A000 C:\Windows\system32\drivers\CLASSPNP.SYS 135168 bytes (Microsoft Corporation, SCSI Class System Dll) 0x812ED000 C:\Windows\system32\drivers\mrxdav.sys 135168 bytes (Microsoft Corporation, Windows NT WebDav Minirdr) 0x8F40A000 C:\Windows\System32\drivers\VIDEOPRT.SYS 135168 bytes (Microsoft Corporation, Video Port Driver) 0x8130E000 C:\Windows\system32\DRIVERS\mrxsmb.sys 126976 bytes (Microsoft Corporation, Windows NT SMB Minirdr) 0x8079C000 C:\Windows\system32\drivers\ataport.SYS 122880 bytes (Microsoft Corporation, ATAPI Driver Extension) 0x812A2000 C:\Windows\System32\DRIVERS\srvnet.sys 118784 bytes (Microsoft Corporation, Server Network driver) 0x89EF5000 C:\Windows\System32\drivers\fwpkclnt.sys 110592 bytes (Microsoft Corporation, FWP/IPsec Kernel-Mode API) 0x8F8BC000 C:\Windows\system32\drivers\luafv.sys 110592 bytes (Microsoft Corporation, LUA File Virtualization Filter Driver) 0x812BF000 C:\Windows\system32\DRIVERS\bowser.sys 102400 bytes (Microsoft Corporation, NT Lan Manager Datagram Receiver Driver) 0x805B3000 C:\Windows\system32\DRIVERS\cdrom.sys 98304 bytes (Microsoft Corporation, SCSI CD-ROM Driver) 0x81366000 C:\Windows\system32\DRIVERS\mrxsmb20.sys 98304 bytes (Microsoft Corporation, Longhorn SMB 2.0 Redirector) 0x8F5C2000 C:\Windows\System32\Drivers\dfsc.sys 94208 bytes (Microsoft Corporation, DFS Namespace Client Driver) 0x8F056000 C:\Windows\system32\DRIVERS\rasl2tp.sys 94208 bytes (Microsoft Corporation, RAS L2TP mini-port/call-manager driver) 0x8F86D000 C:\Windows\system32\DRIVERS\cdfs.sys 90112 bytes (Microsoft Corporation, CD-ROM File System Driver) 0x8F545000 C:\Windows\system32\DRIVERS\pacer.sys 90112 bytes (Microsoft Corporation, QoS Packet Scheduler) 0x8F467000 C:\Windows\system32\DRIVERS\tdx.sys 90112 bytes (Microsoft Corporation, TDI Translation Driver) 0x812D8000 C:\Windows\System32\drivers\mpsdrv.sys 86016 bytes (Microsoft Corporation, Microsoft Protection Service Driver) 0x8F0BE000 C:\Windows\system32\DRIVERS\rassstp.sys 86016 bytes (Microsoft Corporation, RAS SSTP Miniport Call Manager) 0x8F0AA000 C:\Windows\system32\DRIVERS\raspptp.sys 81920 bytes (Microsoft Corporation, Peer-to-Peer Tunneling Protocol) 0x8F47D000 C:\Windows\system32\DRIVERS\smb.sys 81920 bytes (Microsoft Corporation, SMB Transport driver) 0x8F997000 C:\Windows\system32\DRIVERS\rspndr.sys 77824 bytes (Microsoft Corporation, Link-Layer Topology Responder Driver for NDIS 6) 0x8F569000 C:\Windows\system32\DRIVERS\wanarp.sys 77824 bytes (Microsoft Corporation, MS Remote Access and Routing ARP Driver) 0x8A189000 C:\Windows\system32\drivers\disk.sys 69632 bytes (Microsoft Corporation, PnP Disk Driver) 0x8F183000 C:\Windows\System32\Drivers\NDProxy.SYS 69632 bytes (Microsoft Corporation, NDIS Proxy) 0x80479000 C:\Windows\system32\PSHED.dll 69632 bytes (Microsoft Corporation, Platform Specific Hardware Error Driver) 0xB00FE000 C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys 65536 bytes (Emsi Software GmbH, Emsisoft Anti-Malware File Guard) 0x807EC000 C:\Windows\system32\drivers\fileinfo.sys 65536 bytes (Microsoft Corporation, FileInfo Filter Driver) 0x8F84A000 C:\Windows\system32\DRIVERS\HIDCLASS.SYS 65536 bytes (Microsoft Corporation, Hid Class Library) 0x8F987000 C:\Windows\system32\DRIVERS\lltdio.sys 65536 bytes (Microsoft Corporation, Link-Layer Topology Mapper I/O Driver) 0x80784000 C:\Windows\System32\drivers\mountmgr.sys 65536 bytes (Microsoft Corporation, Mount Point Manager) 0x8F0DF000 C:\Windows\system32\DRIVERS\termdd.sys 65536 bytes (Microsoft Corporation, Terminal Server Driver) 0x89F24000 C:\Windows\system32\DRIVERS\intelppm.sys 61440 bytes (Microsoft Corporation, Processor Device Driver) 0x8F8AD000 C:\Windows\system32\DRIVERS\monitor.sys 61440 bytes (Microsoft Corporation, Monitor Driver) 0x8A153000 C:\Windows\System32\Drivers\mup.sys 61440 bytes (Microsoft Corporation, Multiple UNC Provider driver) 0x80707000 C:\Windows\System32\drivers\partmgr.sys 61440 bytes (Microsoft Corporation, Partition Management Driver) 0x8F09B000 C:\Windows\system32\DRIVERS\raspppoe.sys 61440 bytes (Microsoft Corporation, RAS PPPoE mini-port/call-manager driver) 0x8EDD7000 C:\Windows\system32\DRIVERS\usbehci.sys 61440 bytes (Microsoft Corporation, EHCI eUSB Miniport Driver) 0x80716000 C:\Windows\system32\drivers\volmgr.sys 61440 bytes (Microsoft Corporation, Volume Manager Driver) 0x95F00000 C:\Windows\System32\cdd.dll 57344 bytes (Microsoft Corporation, Canonical Display Driver) 0x8F55B000 C:\Windows\system32\DRIVERS\netbios.sys 57344 bytes (Microsoft Corporation, NetBIOS interface driver) 0x8F446000 C:\Windows\System32\Drivers\Npfs.SYS 57344 bytes (Microsoft Corporation, NPFS Driver) 0x80776000 C:\Windows\system32\drivers\PCIIDEX.SYS 57344 bytes (Microsoft Corporation, PCI IDE Bus Driver Extension) 0x8F883000 C:\Windows\System32\Drivers\crashdmp.sys 53248 bytes (Microsoft Corporation, Crash Dump Driver) 0x8F141000 C:\Windows\system32\DRIVERS\umbus.sys 53248 bytes (Microsoft Corporation, User-Mode Bus Enumerator) 0x8067C000 C:\Windows\system32\drivers\WDFLDR.SYS 53248 bytes (Microsoft Corporation, WDFLDR) 0x8A1C4000 C:\Windows\System32\Drivers\avgrkx86.sys 49152 bytes (AVG Technologies CZ, s.r.o., AVG Anti-Rootkit Driver) 0xB00F2000 C:\Windows\System32\drivers\tcpipreg.sys 49152 bytes (Microsoft Corporation, TCP/IP Registry Compatibility Driver) 0x8F1F4000 C:\Windows\System32\drivers\vga.sys 49152 bytes (Microsoft Corporation, VGA/Super VGA Video Driver) 0x8ED86000 C:\Windows\System32\drivers\watchdog.sys 49152 bytes (Microsoft Corporation, Watchdog Driver) 0x8F9AA000 C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSShim.sys 45056 bytes (AVG Technologies CZ, s.r.o. , IDS Application Activity Monitor Loader Driver.) 0x8F890000 C:\Windows\System32\Drivers\dump_dumpata.sys 45056 bytes 0x8EDE6000 C:\Windows\system32\DRIVERS\fdc.sys 45056 bytes (Microsoft Corporation, Floppy Disk Controller Driver) 0x8F0EF000 C:\Windows\system32\DRIVERS\kbdclass.sys 45056 bytes (Microsoft Corporation, Keyboard Class Driver) 0x8F0FA000 C:\Windows\system32\DRIVERS\mouclass.sys 45056 bytes (Microsoft Corporation, Mouse Class Driver) 0x8F43B000 C:\Windows\System32\Drivers\Msfs.SYS 45056 bytes (Microsoft Corporation, Mailslot driver) 0x8F06D000 C:\Windows\system32\DRIVERS\ndistapi.sys 45056 bytes (Microsoft Corporation, NDIS 3.0 connection wrapper driver) 0x8F04B000 C:\Windows\system32\DRIVERS\TDI.SYS 45056 bytes (Microsoft Corporation, TDI Wrapper) 0x89F10000 C:\Windows\system32\DRIVERS\tunnel.sys 45056 bytes (Microsoft Corporation, Microsoft Tunnel Interface Driver) 0x8EDCC000 C:\Windows\system32\DRIVERS\usbuhci.sys 45056 bytes (Microsoft Corporation, UHCI USB Miniport Driver) 0x8F45D000 C:\Windows\system32\DRIVERS\avgfwd6x.sys 40960 bytes (AVG Technologies CZ, s.r.o., AVG Filter Driver) 0x8F9B5000 C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSFilter.sys 40960 bytes (AVG Technologies CZ, s.r.o. , IDS Application Activity Monitor Filter Driver.) 0x8F8A3000 C:\Windows\System32\drivers\Dxapi.sys 40960 bytes (Microsoft Corporation, DirectX API Driver) 0x8F137000 C:\Windows\system32\DRIVERS\mssmbios.sys 40960 bytes (Microsoft Corporation, System Management BIOS Driver) 0x8F5B8000 C:\Windows\system32\drivers\nsiproxy.sys 40960 bytes (Microsoft Corporation, NSI Proxy) 0xB00E8000 C:\Windows\System32\Drivers\secdrv.SYS 40960 bytes (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., Macrovision SECURITY Driver) 0x81299000 C:\Windows\system32\DRIVERS\asyncmac.sys 36864 bytes (Microsoft Corporation, MS Remote Access serial network driver) 0x8A1D0000 C:\Windows\System32\Drivers\AVGIDSvx.sys 36864 bytes (AVG Technologies CZ, s.r.o. , IDS Application Activity Monitor Helper Driver.) 0x8A1BB000 C:\Windows\system32\drivers\crcdisk.sys 36864 bytes (Microsoft Corporation, Disk Block Verification Filter Driver) 0x8F3F5000 C:\Windows\System32\Drivers\Fs_Rec.SYS 36864 bytes (Microsoft Corporation, File System Recognizer Driver) 0x8F841000 C:\Windows\system32\DRIVERS\hidusb.sys 36864 bytes (Microsoft Corporation, USB Miniport Driver for Input Devices) 0x8F85C000 C:\Windows\system32\DRIVERS\kbdhid.sys 36864 bytes (Microsoft Corporation, HID Keyboard Filter Driver) 0xB0132000 C:\Windows\System32\Drivers\Normandy.SYS 36864 bytes (RKU Driver) 0x8F454000 C:\Windows\System32\DRIVERS\rasacd.sys 36864 bytes (Microsoft Corporation, RAS Automatic Connection Driver) 0x95EE0000 C:\Windows\System32\TSDDD.dll 36864 bytes (Microsoft Corporation, Framebuffer Display Driver) 0x89F1B000 C:\Windows\system32\DRIVERS\tunmp.sys 36864 bytes (Microsoft Corporation, Microsoft Tunnel Interface Driver) 0x806CF000 C:\Windows\system32\drivers\WMILIB.SYS 36864 bytes (Microsoft Corporation, WMILIB WMI support library Dll) 0x80794000 C:\Windows\system32\drivers\atapi.sys 32768 bytes (Microsoft Corporation, ATAPI IDE Miniport Driver) 0x8048A000 C:\Windows\system32\BOOTVID.dll 32768 bytes (Microsoft Corporation, VGA Boot Driver) 0x8F89B000 C:\Windows\System32\Drivers\dump_atapi.sys 32768 bytes 0x8F865000 C:\Windows\system32\DRIVERS\mouhid.sys 32768 bytes (Microsoft Corporation, HID Mouse Filter Driver) 0x806D8000 C:\Windows\system32\drivers\msisadrv.sys 32768 bytes (Microsoft Corporation, ISA Driver) 0x8F42B000 C:\Windows\System32\DRIVERS\RDPCDD.sys 32768 bytes (Microsoft Corporation, RDP Miniport) 0x8F433000 C:\Windows\system32\drivers\rdpencdd.sys 32768 bytes (Microsoft Corporation, RDP Miniport) 0x8A14B000 C:\Windows\System32\Drivers\spldr.sys 32768 bytes (Microsoft Corporation, loader for security processor) 0x8F1ED000 C:\Windows\System32\Drivers\Beep.SYS 28672 bytes (Microsoft Corporation, BEEP Driver) 0x8F000000 C:\Windows\system32\DRIVERS\HIDPARSE.SYS 28672 bytes (Microsoft Corporation, Hid Parsing Library) 0x80402000 C:\Windows\system32\kdcom.dll 28672 bytes (Microsoft Corporation, Kernel Debugger HW Extension DLL) 0x8F1E6000 C:\Windows\System32\Drivers\Null.SYS 28672 bytes (Microsoft Corporation, NULL Driver) 0x8076F000 C:\Windows\system32\drivers\pciide.sys 28672 bytes (Microsoft Corporation, Generic PCI IDE Bus Driver) 0x8F0D3000 C:\Windows\system32\DRIVERS\tap0901.sys 28672 bytes (The OpenVPN Project, TAP-Win32 Virtual Network Driver) 0x8F5D9000 C:\Windows\System32\Drivers\avgmfx86.sys 24576 bytes (AVG Technologies CZ, s.r.o., AVG Resident Shield Minifilter Driver) 0x8F105000 C:\Windows\system32\DRIVERS\seehcri.sys 24576 bytes (Sony Ericsson Mobile Communications, seehcri Driver) 0x8F0DA000 C:\Windows\system32\DRIVERS\gttap1.sys 20480 bytes (GoTrusted, TAP Virtual Ethernet Driver) 0x8F10B000 C:\Windows\system32\DRIVERS\swenum.sys 8192 bytes (Microsoft Corporation, Plug and Play Software Device Enumerator) 0x8F85A000 C:\Windows\system32\DRIVERS\USBD.SYS 8192 bytes (Microsoft Corporation, Universal Serial Bus Driver) ============================================== >Stealth ============================================== ============================================== >Files ============================================== !–>[Hidden] C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS05CB9.log !–>[Hidden] C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010016.ci !–>[Hidden] C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010016.dir !–>[Hidden] C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010016.wid !–>[Hidden] C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001B.ci !–>[Hidden] C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001B.dir !–>[Hidden] C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001B.wid !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Credentials\00241911252B88E5A0D0487993B8F6F8 !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Credentials\3B686003A4184370FB44E8A2C99AABCA !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Credentials\61CD2F2F138C9EF8E0E9DB1211CE778E !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Credentials\8C90FF0F18AED4D46A335C196B7D8A8C !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Credentials\C77E4B4E77142CF574F06E68E8D92E19 !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{265B4598-CCE8-11DF-80CB-001EC982BAAF}.dat !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{265B4599-CCE8-11DF-80CB-001EC982BAAF}.dat !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{5166DD38-CCE8-11DF-80CB-001EC982BAAF}.dat !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{67998AD8-CCE8-11DF-80CB-001EC982BAAF}.dat !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{8B129DE8-CCE7-11DF-80CB-001EC982BAAF}.dat !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{8B129DEA-CCE7-11DF-80CB-001EC982BAAF}.dat !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{C6E085D8-CCE7-11DF-80CB-001EC982BAAF}.dat !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{E1489FC8-CCE7-11DF-80CB-001EC982BAAF}.dat !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows Live Contacts\{00d064ec-06f4-467e-8ce5-b3bc622a0a9c}\DBStore\contacts.edb::$DATA !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows Live Contacts\{00d064ec-06f4-467e-8ce5-b3bc622a0a9c}\DBStore\LogFiles\edb.log::$DATA !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows Live Contacts\{5fa31256-d141-4edb-b9d1-cf51041a113e}\DBStore\tempedb.edb !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows Live Contacts\{93f37edf-22c3-4dc0-ad8f-494fee1528e1}\DBStore\contacts.edb::$DATA !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows Live Contacts\{93f37edf-22c3-4dc0-ad8f-494fee1528e1}\DBStore\LogFiles\edb.log::$DATA !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows Live Contacts\{f91d3d83-aa42-42dc-bf96-a5948b7f2aa8}\DBStore\LogFiles\edb0001F.log !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows Live Contacts\{f91d3d83-aa42-42dc-bf96-a5948b7f2aa8}\DBStore\LogFiles\edbtmp.log !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows Live Contacts\{f91d3d83-aa42-42dc-bf96-a5948b7f2aa8}\DBStore\tempedb.edb !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\00KBPMVG\3643865_3fb1c53e-1975-4db3-80a5-ec06367da661[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\00KBPMVG\btn_print_off[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\00KBPMVG\footer_bg[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\00KBPMVG\headline[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\00KBPMVG\swfobject_modified[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\00KBPMVG\whatsnewservice[1].asmx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MVJX6QSI\55490248-A69E-4709-9138-113CA8D634C1[1].swf !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MVJX6QSI\btn_share_on[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MVJX6QSI\common[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MVJX6QSI\content_bg[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MVJX6QSI\show7[1].asp !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MVJX6QSI\sperarator[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q8U2L431\3FavoritesUU[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q8U2L431\btn_print_on[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q8U2L431\btn_share_off[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q8U2L431\fe61f362-270a-4edb-a319-3f6dd4e7c6f2[2].swf !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q8U2L431\H3a_GetOrganized[1].swf !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RDEDI06Q\1d8c1b38-0f36-4f2c-99f7-5e5be0910b10[1].swf !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RDEDI06Q\3FavoritesUU[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RDEDI06Q\ADSAdClient31[1].txt !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RDEDI06Q\adServer[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RDEDI06Q\btn_CTA_off[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RDEDI06Q\btn_CTA_on[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RDEDI06Q\header[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RDEDI06Q\steps[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\106866_1282998163_28028[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\120x600_7[1].swf !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\133715_1285772004_35566[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\134181_1285857754_16439[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\1xupmlftxv_104948959[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\2ehthqe4e5_73711921[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\35182_1273179992_90445[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\35182_1280565384_54104[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\3p30q545w4_104942050-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\40coreypavinsmile[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\5bpfwbf20i_104940558-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\adcount_2[1].0%7C999%7C2019379%7C0%7C168%7CAdId=5019559;BnId=8;ct=852971331;st=799;adcid=1;itime=888290712;reqtype=5 !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\adcount_2[1].0%7C999%7C2019386%7C0%7C1%7CAdId=5585420;BnId=4;ct=851208008;st=548;adcid=1;itime=888289473;reqtype=5 !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\addyn_3.0_979_2600035_0_2892_ADTECH;loc=300;key=datingdirect.co[1].uk;cooki e=info;misc=54246 !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\ad_Premiership_matches[1].xml !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\aqgtu4iohn_104942392-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\arrowGrey[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\bookPoints[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\bronze_small[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\bullet-point[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\BZ_InfoBtn[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\controller[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\coventry_singles_88213914[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\dojo[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\dyduhfmqoi_103423892-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\dzzdtn45tn_102230719-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\exchanges[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\forumDisplayTopRatedSportBooks[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\fX51Wl1WU3VQXVxdYAEDXwdKR0Q-[1] !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\fXd0XlVZWXxQX1RYZwELVARGR0Q-[1] !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\fzsopl45o1_104938628-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\ga[1].aspx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\ga[2].aspx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\ga[3].aspx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\ga[4].aspx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\h1txpyao10_104942466-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\h1txpyao10_104942466-2[2].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\igjuudaehf_102781323-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\ijuwki45ai_72668676[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\image_tracker[10].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\image_tracker[7].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\image_tracker[8].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\image_tracker[9].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\l4loaz45fm_104205954-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\lastsignup[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\lastsignup[2].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\leicester_personals_51282986[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\Liverpool_singles_92402072-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\Mansfield_dating_92268714-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\marry[1].png !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\member22714399[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\mm01fw45bs_102373019-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\Nokia_GSB_DA_160x600jpeg[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\nottingham_dating_89125408-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\Nottingham_personals_76171004-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\Nottingham_singles_89445280[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\oc_functions[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\oo11sy55o2_57218803[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\oxford_personals_87448414-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\p02a0a55hz_97668309[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\PID_1415941_inpage_parent[1].swf !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\plymouth_singles_87712662-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\qkht5555fc_68217144[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\register_helper[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\rqhzpsnbax_98835174-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\sb_accumulator_287x150_bl2[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\Scunthorpe_dating_88870032-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\spacer[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\uk_personals_58420385[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\UN[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\uwh24besoa_101955249-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\viewprofile[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\vx0yix2wnc_104232997-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\whoami[2].php !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\workforcepsom40[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\Worksop_matchmaking_95757382[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\x2m2h5vlcq_97715232-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\xfm3pn45lm_54674903[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\xtififvq05_102101607-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E1WHGSL9\zdsyc3e4j5_104013833-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\10371_1264528954_53795[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\134226_1285862197_61615[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\141x47_RacingTips_off[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\150LevaKirakosyanPA[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\35182_1280565108_99249[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\42x1ow55vq_104946037-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\89856e6d4e4c4da4b826fcf948c0c627[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\abandon[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\adcount_2[1].0%7C999%7C2019386%7C0%7C1%7CAdId=5585414;BnId=6;ct=874967134;st=452;adcid=1;itime=888312218;reqtype=5 !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\addyn_3.0_979_2600035_0_2892_ADTECH;loc=300;key=datingdirect.co[1].uk;cooki e=info;misc=4291 !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\ad_back[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\afr[6].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\afr[7].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\ajs[1].php !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\bdmpbi45wq_104297347-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\beemxmyisx_99711039-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\blobs_ws_cobranded_728x90_7-curryspcworld_wk22_kaperskyis_728x90_currysleft-114368-2[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\bz_TopNav_btn_betNow[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\cHBMarketTabsSel-right[1].png !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\cheshire_singles_25443943-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\cz1s2yydie_101538110[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\d22b0f34a7a64ee3856640c5b092be3b[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\derby_dating_31897353[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\Derby_dating_79753675[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\Derby_dating_97220653[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\dmacr045de_101511610[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\dotz1[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\e4lx1sq5jf_104944357-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\fm1nimmeo0_104212836-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\fnRwWFxWVnhQX1RYZAUBXgNLR0I-[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\fXR2XlJYUHRQX1ReaAgAVQxLR0Q-[1] !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\gabtvyi0zb_64810429[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\ga[1].aspx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\ga[2].aspx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\ga[3].aspx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\ga[4].aspx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\icxes5555k_103260143-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\image_trackerCA64BLIQ.gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\image_trackerCA6NLZCD.gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\image_tracker[10].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\image_tracker[11].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\image_tracker[7].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\image_tracker[8].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\image_tracker[9].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\ivgtj145m4_97811953[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\j4iu0zuqwb_104949218-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\js[5].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\kent_dating_35985673[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\kidderminster_dating_86810404-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\l42vo545lg_100563128-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\Leicester_dating_95754498[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\leicester_personals_28415442[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\leicester_personals_83649363-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\Logo_25wht[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\matches_odds[1].css !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\minitable[1].css !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\mn30jtvwi0_71339912[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\n0rxdlrfyo_77783064[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\Nottingham_singles_94378455-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\oc-horse-racing-287x250[1].swf !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\oc[1].css !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\oc_menu[1].css !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\oxx0ix55i1_98860050-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\play-panel-bz-v2[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\poqdih454r_101016041-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\PP[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\PP[2].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\screenres[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\scroll_image[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\sdjtf055jo_102238859-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\Staffordshire_matchmaking_90334880-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\TextAds[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\tjdkwy45bz_102720579-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\viewprofile[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\viewprofile[2].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\wckt3i55q4_102104727-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\winner[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\worcestershire_singles_88299060-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\xkyeomjbnj_104201130[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\xpdmghjior_98151815-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\zbn2wk45ck_99382342-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\znyltu5512_104103770[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KSE6PZQ6\zqnz21zq2d_104347651[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\1225fpja4c_99322986-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\1285251152925_eu[1].flv !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\1285251152925_us[1].flv !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\131136_1285334233_77146[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\1lvsv3fj45_104946082-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\1nqfet55nb_101927980[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\28,ad08=31,ad08=33;kvad09=1;kvad10=;kvad11=-1;kvad12=4;kvad13=4;kvad14=6;kvpub=;kvhib=-1;kvhios=9;kvhires=-1;kvhif=10;kvbnex=999;;grp=702906223;misc=702906223[1] !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\35182_1280565355_52615[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\3701f6e5b7d24d48ad9c609df84830d0[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\4gcl2l55a4_99398593[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\888312218;key=key=key1+key2+key3+key4+rsi=10396+rsi=10306+rsi=10271+rsi=102 02+rsi=10196+rsi=10220+rsi=10243+rsi=10246+rsi=10257+rsi=10269+;link=;ord=8883122 18[1] !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\908a650fd77f4a639ad5076ee0d6acb1[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\addyn_3.0_979_2600035_0_2892_ADTECH;loc=300;key=datingdirect.co[1].uk;cooki e=info;misc=53301 !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\Admeta[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\ajs[2].php !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\AV0119_160x600[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\bet30get30_120x120_bluealt[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\BF[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\body_layout[1].css !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\burnley_personals_70313790[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\bz_TopNav_btn_betLive[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\bz_TopNav_btn_bingo[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\bz_TopNav_btn_cas[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\c2ywul55m2_104945634-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\Chorley_dating_96539025-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\cn4elpffu1_103688767-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\controller[1].swf !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\crossdomain[3].xml !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\derby_dating_82691822[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\derby_matchmaking_56984480[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\Derby_matchmaking_66874639-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\DocumentDotWrite[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\ff5603da67fa480f832485ed40a2448b[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\fnBzXFZbV3xQX1ReZAIAVQdLR0Q-[1] !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\fnv22v3neg_99687631-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\FR[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\fw5kx4qkkz_103290210-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\ga[1].aspx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\ga[2].aspx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\ga[3].aspx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\google_co_uk[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\Goole_singles_62119344[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\hbx[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\helperb[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\history[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\hsgjlr45qy_80194601[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\image_tracker[10].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\image_tracker[7].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\image_tracker[8].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\image_tracker[9].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\imp[2] !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\ipm3cr551r_104943326[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\kaperskyis_728x90[1].swf !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\kcjr2e3m1i_99840617-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\Leicester_personals_95765420[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\LeighonSea_matchmaking_65790075[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\Logo[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\LoopingScroller[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\Loughborough_singles_92998873-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\m5jtwg55e1_76821433[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\mtiuad553t_104838489-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\nottingham_dating_84713319-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\o2j3mb45ip_100393948-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\on-page-help_edit_en[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\r5opdnj5bb_103813075[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\samsung32tv_728x90[1].swf !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\Shrewsbury_singles_74686963[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\spacer[2].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\Staffordshire_dating_79670357[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\status_image[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\Suffolk_personals_43092986[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\swfobject[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\VC[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\viewmessage[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\Walsall_matchmaking_97076943-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\xbzkpxfe5p_102858260[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\xim4kob1mt_104942765-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\york_personals_70603754-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\zlmbj23f1l_101299755-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\zxml.src[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LQOL4FI7\zyfc0n453q_97989268-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\10zxdm45nn_104141925-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\134181_1285857701_96626[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\141x47_SportsTips_off[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\150admajohnsongoaljuventus[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\150ColinMontgomerieAugust2010[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\150GerardHoullierPresser[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\152kja55sr_102695030-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\1568397654@50[1] !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\16141_1281702980_77511[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\3tckzb55zv_98268293-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\4sztqcjyry_100264031-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\5siht3yqjt_102217916[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\888289473;key=key=key1+key2+key3+key4+rsi=10396+rsi=10306+rsi=10202+rsi=101 96+rsi=10220+rsi=10243+rsi=10246+rsi=10269+rsi=10309+rsi=10375+;link=;ord=8882894 73[1] !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\adcount_2[1].0%7C979%7C2290262%7C0%7C225%7CAdId=5480848;BnId=5;ct=622801620;st=570;adcid=1;itime=888060564;reqtype=5 !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\adx[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\B3[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\bettingzone_co_uk[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\bronze[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\b[2].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\c2ywul55m2_104945634-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\cheshire_singles_57673833-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\chester_matchmaking_70322161-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\chester_personals_84223659[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\clk[1].htm !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\Coventry_personals_90318889-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\doncaster_dating_96134311[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\dvtnjs2ov3_87135510-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\e52f22r2es_103225363-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\fjadcirkaf_102982004-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\football[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\fqyao13tnl_103294324[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\FR[1].gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\fXN3UlVbUXVQX1paaQEAVQJLR0Q-[1] !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\ga[1].aspx !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\get[1] !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\golf[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\h5icjczjo4_104839504-2[1].jpg !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\helperb[1].js !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\image_trackerCA57JBHK.gif !–>[Hidden] C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OQIYZZSY\image_trackerCAMHCXFH.gif

Hello,

OTL Fix

We need to run an OTL Fix

• Please reopen [external image: Posted Image] on your desktop.
• Copy and Paste the following code into the [external image: Posted Image] textbox. Do not include the word "Code"
  
  

  :Services
  :OTL
  FF - prefs.js..network.proxy.type: 0
  FF - user.js..network.proxy.socks_port: 0
  FF - user.js..network.proxy.type: 0
  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
  [2010/09/30 14:44:23 | 000,004,310 | —- | M] () – C:\Users\Chris\30dcb2a1-2bf5257e.dat
  @Alternate Data Stream - 64 bytes -> C:\Users\Chris\Documents\MOV00350.MP4:TOC.WMV
  @Alternate Data Stream - 64 bytes -> C:\Users\Chris\Documents\MOV00304.MP4:TOC.WMV
  @Alternate Data Stream - 64 bytes -> C:\Users\Chris\Documents\MOV00303.MP4:TOC.WMV
  @Alternate Data Stream - 64 bytes -> C:\Users\Chris\Documents\MOV00302.MP4:TOC.WMV
  @Alternate Data Stream - 64 bytes -> C:\Users\Chris\Documents\MOV00247.MP4:TOC.WMV
  @Alternate Data Stream - 64 bytes -> C:\Users\Chris\Documents\MOV00149.MP4:TOC.WMV
  @Alternate Data Stream - 64 bytes -> C:\Users\Chris\Documents\MOV00144.MP4:TOC.WMV
  
  :Reg
  
  :Files
  ipconfig /flushdns /c
  :Commands
  [purity]
  [resethosts]
  [CreateRestorePoint]
  [emptytemp]
  [EMPTYFLASH]

• Push [external image: Posted Image]
• OTL may ask to reboot the machine. Please do so if asked.
• Click [external image: Posted Image].
• A report will open. Copy and Paste that report in your next reply.
• If the machine reboots, the log will be located at C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log, where mmddyyyy_hhmmss is the date of the tool run.

NEXT:



Malwarebytes' Anti-Malware

I see that you have Malwarebytes' Anti-Malware installed on your computer could you please do a scan using these settings:

• Open Malwarebytes' Anti-Malware
  
• Select the Update tab
  
• Click Check for Updates
  
• After the update have been completed, Select the Scanner tab.
  
• Select Perform quick scan, then click on Scan
  
• Leave the default options as it is and click on Start Scan
  
• When done, you will be prompted. Click OK, then click on Show Results
  
• Checked (ticked) all items and click on Remove Selected
  
• After it has removed the items, Notepad will open. Please post this log in your next reply. You can also find the log in the Logs tab. The bottom most log is the latest

Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

okay will do that just my anti-malware Emisoft found the trojan again C:\Users\Chris\30dcb2a1-2bf5257e.dat/JavaUpdateManager.class detected: Exploit.Java.CVE-2009!IK

Ran the OTL 3 times and each time just like my IE it stop responding all my icons disappeared, when I rebooted it told me Malware anit-butye had been blocked as a start up

Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4722 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18943 01/10/2010 09:29:08 mbam-log-2010-10-01 (09-29-08).txt Scan type: Full scan (C:\|) Objects scanned: 219873 Time elapsed: 51 minute(s), 38 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

comp still really slow and taking ages to load up

Hello,

Running ComboFix
Download Combofix from either of the links below, and save it to your desktop.

Link 1
Link 2

**Note: It is important that it is saved directly to your desktop**

——————————————————————–
IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
——————————————————————–

Double click on ComboFix.exe & follow the prompts.

• When finished, it will produce a report for you.
• Please post the C:\ComboFix.txt for further review.

Hello,

Lets see what these scans show below:

Kaspersky Online Scanner
Using Internet Explorer or Firefox, visit Kaspersky Online Scanner

1. Click Accept, when prompted to download and install the program files and database of malware definitions.

2. To optimize scanning time and produce a more sensible report for review:

• Close any open programs
• Turn off the real time scanner of any existing antivirus program while performing the online scan. Click HERE to see how to disable the most common antivirus programs.

3. Click Run at the Security prompt.

The program will then begin downloading and installing and will also update the database.
Please be patient as this can take quite a long time to download.

• Once the update is complete, click on Settings.
• Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  • Spyware, adware, dialers, and other riskware
  • Archives
  • E-mail databases
• Click on My Computer under the green Scan bar to the left to start the scan.
• Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
• Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
• Click View report… at the bottom.
• Click the Save report… button.
  
  [external image: Posted Image]
  
  
• Change the Files of type dropdown box to Text file (.txt) and name the file KasReport.txt to save the file to your desktop so that you may post it in your next reply

NEXT:



Security Check
Download Security Check by screen317 from here or here.

• Save it to your Desktop.
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.