Logfile of HijackThis v1.99.1
Scan saved at 8:28:31 PM, on 9/7/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe
C:\Program Files\Dell AIO Printer A940\dlbabmon.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_03\bin\jucheck.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HijackThis\HijackThis.exe
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn0\ycomp5_5_7_0.dll
O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: MSEvents Object - {827DC836-DD9F-4A68-A602-5812EB50A834} - C:\WINDOWS\Help\imgdb.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn0\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Dell AIO Printer A940] "C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe"
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
http://download.games.yahoo.com/games/popc…aploader_v6.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) -
http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O20 - Winlogon Notify: imgdb - C:\WINDOWS\Help\imgdb.dll
O20 - Winlogon Notify: keybas - C:\WINDOWS\java\trustlib\keybas.dll
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
Logfile of HijackThis v1.99.1
Scan saved at 5:30:11 PM, on 9/14/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe
C:\Program Files\Dell AIO Printer A940\dlbabmon.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Java\jre1.5.0_03\bin\jucheck.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HijackThis\HijackThis.exe
O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: MSEvents Object - {827DC836-DD9F-4A68-A602-5812EB50A834} - C:\WINDOWS\Help\imgdb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Dell AIO Printer A940] "C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe"
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
http://download.games.yahoo.com/games/popc…aploader_v6.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) -
http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O20 - Winlogon Notify: imgdb - C:\WINDOWS\Help\imgdb.dll
O20 - Winlogon Notify: keybas - C:\WINDOWS\java\trustlib\keybas.dll
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
Using the Dll's:
c:\windows\system32\winlogon.exe
c:\windows\explorer.exe
c:\program files\internet explorer\iexplorer.exe
Volume in drive C has no label.
Volume Serial Number is E4E7-A6BA
Directory of C:\WINDOWS\Help
08/25/2005 12:55 PM 178,370 bdgmi.bak1
09/15/2005 12:13 AM 514,873 bdgmi.bak2
08/29/2005 08:16 PM 183,026 bdgmi.ini
09/15/2005 12:57 AM 517,882 bdgmi.ini2
08/29/2005 08:16 PM 183,026 bdgmi.tmp
08/25/2005 12:55 PM 516,116 imgdb.dll
06/03/2005 06:27 PM 10,820 nocontnt.GID
7 File(s) 2,104,113 bytes
0 Dir(s) 18,287,484,928 bytes free
Volume in drive C has no label.
Volume Serial Number is E4E7-A6BA
Directory of C:\WINDOWS\Help
09/15/2005 12:57 AM .
09/15/2005 12:57 AM ..
08/18/2001 08:00 AM 35,919 access.chm
08/18/2001 08:00 AM 34,032 access.hlp
08/18/2001 08:00 AM 20,704 accessib.chm
08/18/2001 08:00 AM 20,284 acc_dis.chm
08/18/2001 08:00 AM 16,669 aclui.hlp
08/18/2001 08:00 AM 15,481 addremov.chm
08/18/2001 08:00 AM 27,532 ade.hlp
08/18/2001 08:00 AM 33,360 admtools.chm
08/18/2001 08:00 AM 105,608 adprop.hlp
08/18/2001 08:00 AM 8,669 agt0404.hlp
08/18/2001 08:00 AM 8,975 agt0405.hlp
08/18/2001 08:00 AM 8,783 agt0406.hlp
08/18/2001 08:00 AM 8,856 agt0407.hlp
08/18/2001 08:00 AM 9,001 agt0408.hlp
08/18/2001 08:00 AM 8,648 agt0409.hlp
08/18/2001 08:00 AM 8,662 agt040b.hlp
08/18/2001 08:00 AM 8,882 agt040c.hlp
08/18/2001 08:00 AM 8,987 agt040e.hlp
08/18/2001 08:00 AM 8,746 agt0410.hlp
08/18/2001 08:00 AM 8,524 agt0411.hlp
08/18/2001 08:00 AM 9,188 agt0412.hlp
08/18/2001 08:00 AM 9,309 agt0413.hlp
08/18/2001 08:00 AM 8,654 agt0414.hlp
08/18/2001 08:00 AM 8,917 agt0415.hlp
08/18/2001 08:00 AM 8,758 agt0416.hlp
08/18/2001 08:00 AM 8,799 agt0419.hlp
08/18/2001 08:00 AM 9,251 agt041d.hlp
08/18/2001 08:00 AM 9,041 agt041f.hlp
08/18/2001 08:00 AM 8,226 agt0804.hlp
08/18/2001 08:00 AM 8,799 agt0816.hlp
08/18/2001 08:00 AM 8,830 agt0c0a.hlp
08/18/2001 08:00 AM 81,960 apps.chm
08/18/2001 08:00 AM 2,698,341 article.chm
08/18/2001 08:00 AM 23,777 atm.chm
08/18/2001 08:00 AM 11,445 audiocdc.hlp
08/18/2001 08:00 AM 35,135 bckg.chm
08/18/2001 08:00 AM 19,007 blurbs.chm
08/18/2001 08:00 AM 152,576 bnts.dll
08/18/2001 08:00 AM 39,622 bootcons.chm
08/18/2001 08:00 AM 18,991 brief.chm
08/18/2001 08:00 AM 24,551 calc.chm
08/18/2001 08:00 AM 32,195 calc.hlp
08/18/2001 08:00 AM 21,924 camera.chm
08/18/2001 08:00 AM 31,178 camera.hlp
08/18/2001 08:00 AM 20,544 cdmedia.chm
08/18/2001 08:00 AM 11,627 cdmedia.hlp
08/18/2001 08:00 AM 14,103 certmgr.chm
08/18/2001 08:00 AM 26,345 certmgr.hlp
08/18/2001 08:00 AM 21,704 charmap.chm
08/18/2001 08:00 AM 12,961 charmap.hlp
08/18/2001 08:00 AM 27,978 chkr.chm
08/18/2001 08:00 AM 11,797 chnscsvr.hlp
08/18/2001 08:00 AM 11,288 chooser.hlp
08/18/2001 08:00 AM 315 ciadmin.htm
08/18/2001 08:00 AM 21,352 ciquery.htm
08/18/2001 08:00 AM 25,129 clipbrd.chm
08/18/2001 08:00 AM 45,445 clipbrd.hlp
08/18/2001 08:00 AM 66,669 cmconcepts.chm
08/18/2001 08:00 AM 20,549 colormgt.chm
08/18/2001 08:00 AM 274,506 comexp.chm
08/18/2001 08:00 AM 47,768 comexp.hlp
08/18/2001 08:00 AM 17,081 common.chm
08/18/2001 08:00 AM 17,080 compfldr.chm
08/18/2001 08:00 AM 19,921 compmgmt.chm
08/18/2001 08:00 AM 18,134 compstui.hlp
08/18/2001 08:00 AM 91,007 conf.chm
08/18/2001 08:00 AM 106 conf.cnt
08/18/2001 08:00 AM 30,848 conf.hlp
08/18/2001 08:00 AM 129 connect.cnt
08/18/2001 08:00 AM 57,305 connect.hlp
08/18/2001 08:00 AM 19,691 cpanel.chm
08/18/2001 08:00 AM 231,410 cpanel.chq
08/18/2001 08:00 AM 14,504 cscui.hlp
08/18/2001 08:00 AM 10,483 cyycoins.chm
08/18/2001 08:00 AM 10,743 cyzcoins.chm
08/18/2001 08:00 AM 18,727 datetime.chm
08/18/2001 08:00 AM 18,629 ddeshare.chm
08/18/2001 08:00 AM 33,495 ddeshare.hlp
08/18/2001 08:00 AM 13,041 defrag.chm
08/18/2001 08:00 AM 12,550 defrag.hlp
08/18/2001 08:00 AM 53,709 devmgr.chm
08/18/2001 08:00 AM 63,440 devmgr.hlp
08/18/2001 08:00 AM 29,366 dfs.hlp
08/18/2001 08:00 AM 29,762 diagboot.chm
08/18/2001 08:00 AM 39,969 dialer.chm
08/18/2001 08:00 AM 30,693 dialer.hlp
08/18/2001 08:00 AM 73,882 digiras.chm
08/18/2001 08:00 AM 20,460 dijoy.hlp
08/18/2001 08:00 AM 66,896 diskmgmt.chm
08/18/2001 08:00 AM 30,063 diskmgmt.hlp
08/18/2001 08:00 AM 46,073 display.chm
08/18/2001 08:00 AM 51,408 display.hlp
08/18/2001 08:00 AM 34,296 dkconcepts.chm
08/18/2001 08:00 AM 12,817 drvvfp.chm
08/18/2001 08:00 AM 20,406 drwtsn32.chm
08/18/2001 08:00 AM 14,161 drwtsn32.hlp
08/18/2001 08:00 AM 20,220 dsclient.hlp
08/18/2001 08:00 AM 51,018 dskquoui.chm
08/18/2001 08:00 AM 17,396 dskquoui.hlp
08/18/2001 08:00 AM 19,069 dxdiag.chm
08/18/2001 08:00 AM 14,805 els.chm
08/18/2001 08:00 AM 37,251 els.hlp
08/18/2001 08:00 AM 23,754 eudcedit.chm
08/18/2001 08:00 AM 18,509 eudcedit.hlp
08/18/2001 08:00 AM 64,982 evconcepts.chm
08/18/2001 08:00 AM 22,988 evntwin.hlp
08/18/2001 08:00 AM 77,253 filefold.chm
08/18/2001 08:00 AM 24,479 filefold.hlp
08/18/2001 08:00 AM 32,107 filemgmt.hlp
08/18/2001 08:00 AM 45,936 file_srv.chm
08/18/2001 08:00 AM 29,132 find.chm
08/18/2001 08:00 AM 26,022 folderop.chm
08/18/2001 08:00 AM 17,250 fonts.chm
08/18/2001 08:00 AM 18,931 fonts.hlp
08/18/2001 08:00 AM 15,803 freecell.chm
08/18/2001 08:00 AM 12,457 freecell.hlp
08/18/2001 08:00 AM 139,118 fxsclnt.chm
08/18/2001 08:00 AM 27,091 fxsclnt.hlp
08/18/2001 08:00 AM 27,066 fxscover.chm
08/18/2001 08:00 AM 32,657 fxsshare.chm
08/18/2001 08:00 AM 136,501 Glossary.chm
08/18/2001 08:00 AM 25,153 halftone.hlp
08/18/2001 08:00 AM 32,139 hardware.chm
08/18/2001 08:00 AM 42,667 howto.chm
08/18/2001 08:00 AM 30,260 hrtz.chm
08/18/2001 08:00 AM 20,077 hs.chm
08/18/2001 08:00 AM 35,175 hschelp.chm
08/18/2001 08:00 AM 35,983 hypertrm.chm
08/18/2001 08:00 AM 25,153 hypertrm.hlp
08/18/2001 08:00 AM 29,876 icwdial.chm
08/18/2001 08:00 AM 12,701 ident.hlp
08/18/2001 08:00 AM 12,761 ieeula.chm
08/18/2001 08:00 AM 12,013 ieos.chm
08/18/2001 08:00 AM 35,774 ieshared.chm
08/18/2001 08:00 AM 21,919 iesupp.chm
08/18/2001 08:00 AM 21,551 iewebhlp.chm
08/18/2001 08:00 AM 167,956 iexplore.chm
08/18/2001 08:00 AM 180,335 iexplore.hlp
08/18/2001 08:00 AM 30,369 imgprev.chm
08/18/2001 08:00 AM 76,782 infrared.chm
08/18/2001 08:00 AM 13,943 infrared.hlp
08/18/2001 08:00 AM 32,371 input.chm
08/18/2001 08:00 AM 15,510 input.hlp
08/18/2001 08:00 AM 203,167 ipsecconcepts.chm
08/18/2001 08:00 AM 18,806 ipsecsnp.chm
08/18/2001 08:00 AM 84,292 ipsecsnp.hlp
08/18/2001 08:00 AM 154,147 Ipv6.chm
08/18/2001 08:00 AM 15,432 is.chm
08/18/2001 08:00 AM 109,258 isconcepts.chm
08/18/2001 08:00 AM 16,062 ixhelp.hlp
08/18/2001 08:00 AM 2,323 ixqlang.htm
05/23/2005 02:03 AM 11,403 javaperm.hlp
05/23/2005 02:03 AM 21,444 javasec.hlp
08/18/2001 08:00 AM 18,949 joy.chm
08/18/2001 08:00 AM 16,494 keyb.chm
08/18/2001 08:00 AM 17,762 keyshort.chm
08/18/2001 08:00 AM 20,585 lang.chm
08/18/2001 08:00 AM 69,623 langbar.chm
08/18/2001 08:00 AM 43,230 license.chm
08/18/2001 08:00 AM 19,677 magnify.chm
08/18/2001 08:00 AM 12,115 magnify.hlp
08/18/2001 08:00 AM 121,327 mail.chm
09/08/2005 08:37 PM 187 mcrh.tmp
08/18/2001 08:00 AM 23,439 mfcuix.hlp
08/18/2001 08:00 AM 2,575 migwiz.htm
08/18/2001 08:00 AM 1,644 migwiz2.htm
08/18/2001 08:00 AM 67,022 misc.chm
08/18/2001 08:00 AM 17,135 mls_trb.chm
08/18/2001 08:00 AM 151,662 mmc.chm
08/18/2001 08:00 AM 37,298 mmc_dlg.hlp
08/18/2001 08:00 AM 18,920 mobsync.chm
08/18/2001 08:00 AM 16,149 mobsync.hlp
08/18/2001 08:00 AM 56,862 mode.chm
08/18/2001 08:00 AM 20,366 modem.hlp
08/18/2001 08:00 AM 20,877 mouse.chm
08/18/2001 08:00 AM 15,998 mouse.hlp
08/18/2001 08:00 AM 161,429 mpconcepts.chm
08/18/2001 08:00 AM 1,885 mplayer2.cnt
08/18/2001 08:00 AM 97,117 mplayer2.hlp
08/18/2001 08:00 AM 11,187 mpnetwrk.hlp
08/18/2001 08:00 AM 17,240 msconfig.chm
08/18/2001 08:00 AM 15,723 msdasc.chm
08/18/2001 08:00 AM 15,051 mshearts.chm
08/18/2001 08:00 AM 227 mshearts.cnt
08/18/2001 08:00 AM 11,211 mshearts.hlp
08/18/2001 08:00 AM 44,287 msinfo32.chm
08/18/2001 08:00 AM 173 msnauth.cnt
08/18/2001 08:00 AM 10,556 msnauth.hlp
08/18/2001 08:00 AM 247,693 msoe.chm
08/18/2001 08:00 AM 117,006 msoe.hlp
08/18/2001 08:00 AM 35,240 msoeacct.hlp
08/18/2001 08:00 AM 15,245 msorcl32.chm
08/18/2001 08:00 AM 45,590 mspaint.chm
08/18/2001 08:00 AM 19,181 mspaint.hlp
08/18/2001 08:00 AM 36,640 mstask.chm
08/18/2001 08:00 AM 28,371 mstask.hlp
08/18/2001 08:00 AM 67,351 mstsc.chm
08/18/2001 08:00 AM 296,938 netcfg.chm
08/18/2001 08:00 AM 281,595 netcfg.hlp
08/18/2001 08:00 AM 68,267 network.chm
08/18/2001 08:00 AM 25,517 newfeat1.chm
08/18/2001 08:00 AM 16,162 newfeat1.hlp
08/18/2001 08:00 AM 11,047 newfeat2.chm
08/18/2001 08:00 AM 4,536 newfeat2.hlp
08/18/2001 08:00 AM 11,047 newfeat3.chm
08/18/2001 08:00 AM 4,536 newfeat3.hlp
08/18/2001 08:00 AM 11,047 newfeat4.chm
08/18/2001 08:00 AM 4,536 newfeat4.hlp
08/18/2001 08:00 AM 11,047 newfeat5.chm
08/18/2001 08:00 AM 4,536 newfeat5.hlp
08/18/2001 08:00 AM 11,563 nmchat.chm
08/18/2001 08:00 AM 22,553 nmwhiteb.chm
08/18/2001 08:00 AM 84 nocontnt.cnt
08/18/2001 08:00 AM 11,562 nofts.chm
08/18/2001 08:00 AM 25,236 notepad.chm
08/18/2001 08:00 AM 12,521 notepad.hlp
08/18/2001 08:00 AM 1,215,489 ntart.chm
08/18/2001 08:00 AM 20,035 ntchowto.chm
08/18/2001 08:00 AM 430,941 ntcmds.chm
08/18/2001 08:00 AM 80,188 ntdef.chm
08/18/2001 08:00 AM 20,427 nthelp.chm
08/18/2001 08:00 AM 306,870 ntshared.chm
08/18/2001 08:00 AM 12,760 ntshrui.hlp
08/18/2001 08:00 AM 271,133 nusrmgr.chm
08/18/2001 08:00 AM 15,256 nwdoc.chm
08/18/2001 08:00 AM 26,845 objsel.hlp
08/18/2001 08:00 AM 16,119 odbcinst.chm
08/18/2001 08:00 AM 34,381 odbcjet.chm
08/18/2001 08:00 AM 28,305 oe_msgr.chm
08/18/2001 08:00 AM 28,344 omc.chm
08/18/2001 08:00 AM 19,605 osk.chm
08/18/2001 08:00 AM 12,387 osk.hlp
08/18/2001 08:00 AM 20,067 packager.chm
08/18/2001 08:00 AM 19,921 password.chm
08/18/2001 08:00 AM 17,269 phowto.chm
08/18/2001 08:00 AM 39,590 pinball.chm
08/18/2001 08:00 AM 22,398 pinball.hlp
08/18/2001 08:00 AM 73,572 PINTLPAD.CHM
08/18/2001 08:00 AM 56,563 PINTLPAE.CHM
08/18/2001 08:00 AM 81,137 plyr_err.chm
08/18/2001 08:00 AM 97,163 printing.chm
08/18/2001 08:00 AM 695 progman.cnt
08/18/2001 08:00 AM 25,771 progman.hlp
08/18/2001 08:00 AM 31,663 pwrmn.chm
08/18/2001 08:00 AM 44,213 pwrmn.hlp
08/18/2001 08:00 AM 12,752 qosconcepts.chm
08/18/2001 08:00 AM 19,598 ratings.chm
08/18/2001 08:00 AM 294 ratings.cnt
08/18/2001 08:00 AM 27,225 ratings.hlp
08/18/2001 08:00 AM 22,853 reader.chm
08/18/2001 08:00 AM 11,953 reader.hlp
08/18/2001 08:00 AM 19,107 recycle.chm
08/18/2001 08:00 AM 46,684 regedit.chm
08/18/2001 08:00 AM 12,886 regedit.hlp
08/18/2001 08:00 AM 28,053 regopt.chm
08/18/2001 08:00 AM 20,136 remasst.chm
08/18/2001 08:00 AM 14,678 rsm.chm
08/18/2001 08:00 AM 35,699 rsm.hlp
08/18/2001 08:00 AM 56,352 rsmconcepts.chm
08/18/2001 08:00 AM 25,815 rvse.chm
08/18/2001 08:00 AM 10,111 sapicpl.hlp
08/18/2001 08:00 AM 13,955 scarddlg.hlp
08/18/2001 08:00 AM 38,163 secauth.hlp
08/18/2001 08:00 AM 18,291 sendcmsg.chm
08/18/2001 08:00 AM 11,941 sendcmsg.hlp
08/18/2001 08:00 AM 15,957 sfmmgr.hlp
08/18/2001 08:00 AM 21,787 shell.hlp
08/18/2001 08:00 AM 32,162 shvl.chm
08/18/2001 08:00 AM 8,953 signin.hlp
08/18/2001 08:00 AM 12,249 sigverif.hlp
08/18/2001 08:00 AM 18,988 smlogcfg.chm
08/18/2001 08:00 AM 16,645 sndvol32.chm
08/18/2001 08:00 AM 11,290 sndvol32.hlp
08/18/2001 08:00 AM 32,256 sniffpol.dll
08/18/2001 08:00 AM 42,000 snmpconcepts.chm
08/18/2001 08:00 AM 16,043 snmpsnap.hlp
08/18/2001 08:00 AM 16,962 sol.chm
08/18/2001 08:00 AM 13,517 sol.hlp
08/18/2001 08:00 AM 34,041 soundrec.chm
08/18/2001 08:00 AM 20,246 soundrec.hlp
08/18/2001 08:00 AM 20,163 sounds.chm
08/18/2001 08:00 AM 42,687 speech.chm
08/18/2001 08:00 AM 15,961 spider.chm
08/18/2001 08:00 AM 11,594 spider.hlp
08/18/2001 08:00 AM 12,492 splash.chm
08/18/2001 08:00 AM 17,374 sr_ui.chm
08/18/2001 08:00 AM 30,720 sstub.dll
08/18/2001 08:00 AM 17,336 supp_ed.chm
08/18/2001 08:00 AM 41,881 sysdm.chm
08/18/2001 08:00 AM 75,448 sysdm.hlp
08/18/2001 08:00 AM 17,784 sysmon.chm
08/18/2001 08:00 AM 62,118 sysmon.hlp
08/18/2001 08:00 AM 33,152 sysprop.chm
08/18/2001 08:00 AM 31,263 sysrestore.chm
08/18/2001 08:00 AM 11,603 sysrestore.hlp
08/18/2001 08:00 AM 32,508 sys_srv.chm
08/18/2001 08:00 AM 35,334 tapi.chm
08/18/2001 08:00 AM 20,688 tapi.hlp
08/18/2001 08:00 AM 33,991 taskbar.chm
08/18/2001 08:00 AM 37,803 taskmgr.chm
08/18/2001 08:00 AM 13,228 taskmgr.hlp
08/18/2001 08:00 AM 38,234 tcpip.chm
08/18/2001 08:00 AM 12,693 tcpmon.hlp
08/18/2001 08:00 AM 30,107 telnet.chm
08/18/2001 08:00 AM 14,698 telnet.hlp
08/18/2001 08:00 AM 19,459 timesrv.chm
05/22/2005 09:37 PM Tours
08/18/2001 08:00 AM 335,114 tshoot.chm
08/18/2001 08:00 AM 262,656 tshoot.dll
08/18/2001 08:00 AM 193 update.cnt
08/18/2001 08:00 AM 27,545 useract.chm
08/18/2001 08:00 AM 16,660 utilmgr.chm
08/18/2001 08:00 AM 12,244 utilmgr.hlp
08/18/2001 08:00 AM 14,384 verifier.hlp
08/18/2001 08:00 AM 74,905 wab.chm
08/18/2001 08:00 AM 59,142 wab.hlp
08/18/2001 08:00 AM 44,441 wbemtest.chm
08/18/2001 08:00 AM 16,731 webpub.chm
08/18/2001 08:00 AM 33,544 whatsnew.chm
08/18/2001 08:00 AM 17,782 winchat.chm
08/18/2001 08:00 AM 12,377 winchat.hlp
08/18/2001 08:00 AM 690,641 windows.chm
08/18/2001 08:00 AM 382,946 windows.chq
08/18/2001 08:00 AM 64 windows.cnt
08/18/2001 08:00 AM 300,163 windows.hlp
08/18/2001 08:00 AM 51,767 wingb.chm
08/18/2001 08:00 AM 69 winhlp32.cnt
08/18/2001 08:00 AM 21,111 winhlp32.hlp
08/18/2001 08:00 AM 171,874 winime.chm
08/18/2001 08:00 AM 56,661 wininstl.chm
08/18/2001 08:00 AM 15,071 winmine.chm
08/18/2001 08:00 AM 11,476 winmine.hlp
08/18/2001 08:00 AM 39,829 winpy.chm
08/18/2001 08:00 AM 45,113 winsp.chm
08/18/2001 08:00 AM 158,219 winzm.chm
08/18/2001 08:00 AM 21,286 win_dos.chm
01/28/2005 01:44 PM 611,873 wmp10.chm
01/28/2005 01:44 PM 89,413 wmperr10.chm
08/18/2001 08:00 AM 415,082 wmplayer.chm
08/18/2001 08:00 AM 32,887 wordpad.chm
08/18/2001 08:00 AM 19,706 wordpad.hlp
08/18/2001 08:00 AM 25,089 wpa.chm
08/18/2001 08:00 AM 25,712 wscript.chm
08/18/2001 08:00 AM 12,377 wscript.hlp
08/18/2001 08:00 AM 13,307 wshconcepts.chm
05/09/2002 11:01 PM 29,168 wuauhelp.chm
345 File(s) 19,456,077 bytes
Volume in drive C has no label.
Volume Serial Number is E4E7-A6BA
Directory of C:\WINDOWS\Help
08/25/2005 12:55 PM 178,370 bdgmi.bak1
09/15/2005 09:21 AM 515,058 bdgmi.bak2
08/29/2005 08:16 PM 183,026 bdgmi.ini
09/15/2005 09:40 AM 517,005 bdgmi.ini2
08/29/2005 08:16 PM 183,026 bdgmi.tmp
08/25/2005 12:55 PM 516,116 imgdb.dll
06/03/2005 06:27 PM 10,820 nocontnt.GID
7 File(s) 2,103,421 bytes
0 Dir(s) 18,457,051,136 bytes free
Volume in drive C has no label.
Volume Serial Number is E4E7-A6BA
Directory of C:\WINDOWS\Help
09/15/2005 09:40 AM .
09/15/2005 09:40 AM ..
08/18/2001 08:00 AM 35,919 access.chm
08/18/2001 08:00 AM 34,032 access.hlp
08/18/2001 08:00 AM 20,704 accessib.chm
08/18/2001 08:00 AM 20,284 acc_dis.chm
08/18/2001 08:00 AM 16,669 aclui.hlp
08/18/2001 08:00 AM 15,481 addremov.chm
08/18/2001 08:00 AM 27,532 ade.hlp
08/18/2001 08:00 AM 33,360 admtools.chm
08/18/2001 08:00 AM 105,608 adprop.hlp
08/18/2001 08:00 AM 8,669 agt0404.hlp
08/18/2001 08:00 AM 8,975 agt0405.hlp
08/18/2001 08:00 AM 8,783 agt0406.hlp
08/18/2001 08:00 AM 8,856 agt0407.hlp
08/18/2001 08:00 AM 9,001 agt0408.hlp
08/18/2001 08:00 AM 8,648 agt0409.hlp
08/18/2001 08:00 AM 8,662 agt040b.hlp
08/18/2001 08:00 AM 8,882 agt040c.hlp
08/18/2001 08:00 AM 8,987 agt040e.hlp
08/18/2001 08:00 AM 8,746 agt0410.hlp
08/18/2001 08:00 AM 8,524 agt0411.hlp
08/18/2001 08:00 AM 9,188 agt0412.hlp
08/18/2001 08:00 AM 9,309 agt0413.hlp
08/18/2001 08:00 AM 8,654 agt0414.hlp
08/18/2001 08:00 AM 8,917 agt0415.hlp
08/18/2001 08:00 AM 8,758 agt0416.hlp
08/18/2001 08:00 AM 8,799 agt0419.hlp
08/18/2001 08:00 AM 9,251 agt041d.hlp
08/18/2001 08:00 AM 9,041 agt041f.hlp
08/18/2001 08:00 AM 8,226 agt0804.hlp
08/18/2001 08:00 AM 8,799 agt0816.hlp
08/18/2001 08:00 AM 8,830 agt0c0a.hlp
08/18/2001 08:00 AM 81,960 apps.chm
08/18/2001 08:00 AM 2,698,341 article.chm
08/18/2001 08:00 AM 23,777 atm.chm
08/18/2001 08:00 AM 11,445 audiocdc.hlp
08/18/2001 08:00 AM 35,135 bckg.chm
08/18/2001 08:00 AM 19,007 blurbs.chm
08/18/2001 08:00 AM 152,576 bnts.dll
08/18/2001 08:00 AM 39,622 bootcons.chm
08/18/2001 08:00 AM 18,991 brief.chm
08/18/2001 08:00 AM 24,551 calc.chm
08/18/2001 08:00 AM 32,195 calc.hlp
08/18/2001 08:00 AM 21,924 camera.chm
08/18/2001 08:00 AM 31,178 camera.hlp
08/18/2001 08:00 AM 20,544 cdmedia.chm
08/18/2001 08:00 AM 11,627 cdmedia.hlp
08/18/2001 08:00 AM 14,103 certmgr.chm
08/18/2001 08:00 AM 26,345 certmgr.hlp
08/18/2001 08:00 AM 21,704 charmap.chm
08/18/2001 08:00 AM 12,961 charmap.hlp
08/18/2001 08:00 AM 27,978 chkr.chm
08/18/2001 08:00 AM 11,797 chnscsvr.hlp
08/18/2001 08:00 AM 11,288 chooser.hlp
08/18/2001 08:00 AM 315 ciadmin.htm
08/18/2001 08:00 AM 21,352 ciquery.htm
08/18/2001 08:00 AM 25,129 clipbrd.chm
08/18/2001 08:00 AM 45,445 clipbrd.hlp
08/18/2001 08:00 AM 66,669 cmconcepts.chm
08/18/2001 08:00 AM 20,549 colormgt.chm
08/18/2001 08:00 AM 274,506 comexp.chm
08/18/2001 08:00 AM 47,768 comexp.hlp
08/18/2001 08:00 AM 17,081 common.chm
08/18/2001 08:00 AM 17,080 compfldr.chm
08/18/2001 08:00 AM 19,921 compmgmt.chm
08/18/2001 08:00 AM 18,134 compstui.hlp
08/18/2001 08:00 AM 91,007 conf.chm
08/18/2001 08:00 AM 106 conf.cnt
08/18/2001 08:00 AM 30,848 conf.hlp
08/18/2001 08:00 AM 129 connect.cnt
08/18/2001 08:00 AM 57,305 connect.hlp
08/18/2001 08:00 AM 19,691 cpanel.chm
08/18/2001 08:00 AM 231,410 cpanel.chq
08/18/2001 08:00 AM 14,504 cscui.hlp
08/18/2001 08:00 AM 10,483 cyycoins.chm
08/18/2001 08:00 AM 10,743 cyzcoins.chm
08/18/2001 08:00 AM 18,727 datetime.chm
08/18/2001 08:00 AM 18,629 ddeshare.chm
08/18/2001 08:00 AM 33,495 ddeshare.hlp
08/18/2001 08:00 AM 13,041 defrag.chm
08/18/2001 08:00 AM 12,550 defrag.hlp
08/18/2001 08:00 AM 53,709 devmgr.chm
08/18/2001 08:00 AM 63,440 devmgr.hlp
08/18/2001 08:00 AM 29,366 dfs.hlp
08/18/2001 08:00 AM 29,762 diagboot.chm
08/18/2001 08:00 AM 39,969 dialer.chm
08/18/2001 08:00 AM 30,693 dialer.hlp
08/18/2001 08:00 AM 73,882 digiras.chm
08/18/2001 08:00 AM 20,460 dijoy.hlp
08/18/2001 08:00 AM 66,896 diskmgmt.chm
08/18/2001 08:00 AM 30,063 diskmgmt.hlp
08/18/2001 08:00 AM 46,073 display.chm
08/18/2001 08:00 AM 51,408 display.hlp
08/18/2001 08:00 AM 34,296 dkconcepts.chm
08/18/2001 08:00 AM 12,817 drvvfp.chm
08/18/2001 08:00 AM 20,406 drwtsn32.chm
08/18/2001 08:00 AM 14,161 drwtsn32.hlp
08/18/2001 08:00 AM 20,220 dsclient.hlp
08/18/2001 08:00 AM 51,018 dskquoui.chm
08/18/2001 08:00 AM 17,396 dskquoui.hlp
08/18/2001 08:00 AM 19,069 dxdiag.chm
08/18/2001 08:00 AM 14,805 els.chm
08/18/2001 08:00 AM 37,251 els.hlp
08/18/2001 08:00 AM 23,754 eudcedit.chm
08/18/2001 08:00 AM 18,509 eudcedit.hlp
08/18/2001 08:00 AM 64,982 evconcepts.chm
08/18/2001 08:00 AM 22,988 evntwin.hlp
08/18/2001 08:00 AM 77,253 filefold.chm
08/18/2001 08:00 AM 24,479 filefold.hlp
08/18/2001 08:00 AM 32,107 filemgmt.hlp
08/18/2001 08:00 AM 45,936 file_srv.chm
08/18/2001 08:00 AM 29,132 find.chm
08/18/2001 08:00 AM 26,022 folderop.chm
08/18/2001 08:00 AM 17,250 fonts.chm
08/18/2001 08:00 AM 18,931 fonts.hlp
08/18/2001 08:00 AM 15,803 freecell.chm
08/18/2001 08:00 AM 12,457 freecell.hlp
08/18/2001 08:00 AM 139,118 fxsclnt.chm
08/18/2001 08:00 AM 27,091 fxsclnt.hlp
08/18/2001 08:00 AM 27,066 fxscover.chm
08/18/2001 08:00 AM 32,657 fxsshare.chm
08/18/2001 08:00 AM 136,501 Glossary.chm
08/18/2001 08:00 AM 25,153 halftone.hlp
08/18/2001 08:00 AM 32,139 hardware.chm
08/18/2001 08:00 AM 42,667 howto.chm
08/18/2001 08:00 AM 30,260 hrtz.chm
08/18/2001 08:00 AM 20,077 hs.chm
08/18/2001 08:00 AM 35,175 hschelp.chm
08/18/2001 08:00 AM 35,983 hypertrm.chm
08/18/2001 08:00 AM 25,153 hypertrm.hlp
08/18/2001 08:00 AM 29,876 icwdial.chm
08/18/2001 08:00 AM 12,701 ident.hlp
08/18/2001 08:00 AM 12,761 ieeula.chm
08/18/2001 08:00 AM 12,013 ieos.chm
08/18/2001 08:00 AM 35,774 ieshared.chm
08/18/2001 08:00 AM 21,919 iesupp.chm
08/18/2001 08:00 AM 21,551 iewebhlp.chm
08/18/2001 08:00 AM 167,956 iexplore.chm
08/18/2001 08:00 AM 180,335 iexplore.hlp
08/18/2001 08:00 AM 30,369 imgprev.chm
08/18/2001 08:00 AM 76,782 infrared.chm
08/18/2001 08:00 AM 13,943 infrared.hlp
08/18/2001 08:00 AM 32,371 input.chm
08/18/2001 08:00 AM 15,510 input.hlp
08/18/2001 08:00 AM 203,167 ipsecconcepts.chm
08/18/2001 08:00 AM 18,806 ipsecsnp.chm
08/18/2001 08:00 AM 84,292 ipsecsnp.hlp
08/18/2001 08:00 AM 154,147 Ipv6.chm
08/18/2001 08:00 AM 15,432 is.chm
08/18/2001 08:00 AM 109,258 isconcepts.chm
08/18/2001 08:00 AM 16,062 ixhelp.hlp
08/18/2001 08:00 AM 2,323 ixqlang.htm
05/23/2005 02:03 AM 11,403 javaperm.hlp
05/23/2005 02:03 AM 21,444 javasec.hlp
08/18/2001 08:00 AM 18,949 joy.chm
08/18/2001 08:00 AM 16,494 keyb.chm
08/18/2001 08:00 AM 17,762 keyshort.chm
08/18/2001 08:00 AM 20,585 lang.chm
08/18/2001 08:00 AM 69,623 langbar.chm
08/18/2001 08:00 AM 43,230 license.chm
08/18/2001 08:00 AM 19,677 magnify.chm
08/18/2001 08:00 AM 12,115 magnify.hlp
08/18/2001 08:00 AM 121,327 mail.chm
09/08/2005 08:37 PM 187 mcrh.tmp
08/18/2001 08:00 AM 23,439 mfcuix.hlp
08/18/2001 08:00 AM 2,575 migwiz.htm
08/18/2001 08:00 AM 1,644 migwiz2.htm
08/18/2001 08:00 AM 67,022 misc.chm
08/18/2001 08:00 AM 17,135 mls_trb.chm
08/18/2001 08:00 AM 151,662 mmc.chm
08/18/2001 08:00 AM 37,298 mmc_dlg.hlp
08/18/2001 08:00 AM 18,920 mobsync.chm
08/18/2001 08:00 AM 16,149 mobsync.hlp
08/18/2001 08:00 AM 56,862 mode.chm
08/18/2001 08:00 AM 20,366 modem.hlp
08/18/2001 08:00 AM 20,877 mouse.chm
08/18/2001 08:00 AM 15,998 mouse.hlp
08/18/2001 08:00 AM 161,429 mpconcepts.chm
08/18/2001 08:00 AM 1,885 mplayer2.cnt
08/18/2001 08:00 AM 97,117 mplayer2.hlp
08/18/2001 08:00 AM 11,187 mpnetwrk.hlp
08/18/2001 08:00 AM 17,240 msconfig.chm
08/18/2001 08:00 AM 15,723 msdasc.chm
08/18/2001 08:00 AM 15,051 mshearts.chm
08/18/2001 08:00 AM 227 mshearts.cnt
08/18/2001 08:00 AM 11,211 mshearts.hlp
08/18/2001 08:00 AM 44,287 msinfo32.chm
08/18/2001 08:00 AM 173 msnauth.cnt
08/18/2001 08:00 AM 10,556 msnauth.hlp
08/18/2001 08:00 AM 247,693 msoe.chm
08/18/2001 08:00 AM 117,006 msoe.hlp
08/18/2001 08:00 AM 35,240 msoeacct.hlp
08/18/2001 08:00 AM 15,245 msorcl32.chm
08/18/2001 08:00 AM 45,590 mspaint.chm
08/18/2001 08:00 AM 19,181 mspaint.hlp
08/18/2001 08:00 AM 36,640 mstask.chm
08/18/2001 08:00 AM 28,371 mstask.hlp
08/18/2001 08:00 AM 67,351 mstsc.chm
08/18/2001 08:00 AM 296,938 netcfg.chm
08/18/2001 08:00 AM 281,595 netcfg.hlp
08/18/2001 08:00 AM 68,267 network.chm
08/18/2001 08:00 AM 25,517 newfeat1.chm
08/18/2001 08:00 AM 16,162 newfeat1.hlp
08/18/2001 08:00 AM 11,047 newfeat2.chm
08/18/2001 08:00 AM 4,536 newfeat2.hlp
08/18/2001 08:00 AM 11,047 newfeat3.chm
08/18/2001 08:00 AM 4,536 newfeat3.hlp
08/18/2001 08:00 AM 11,047 newfeat4.chm
08/18/2001 08:00 AM 4,536 newfeat4.hlp
08/18/2001 08:00 AM 11,047 newfeat5.chm
08/18/2001 08:00 AM 4,536 newfeat5.hlp
08/18/2001 08:00 AM 11,563 nmchat.chm
08/18/2001 08:00 AM 22,553 nmwhiteb.chm
08/18/2001 08:00 AM 84 nocontnt.cnt
08/18/2001 08:00 AM 11,562 nofts.chm
08/18/2001 08:00 AM 25,236 notepad.chm
08/18/2001 08:00 AM 12,521 notepad.hlp
08/18/2001 08:00 AM 1,215,489 ntart.chm
08/18/2001 08:00 AM 20,035 ntchowto.chm
08/18/2001 08:00 AM 430,941 ntcmds.chm
08/18/2001 08:00 AM 80,188 ntdef.chm
08/18/2001 08:00 AM 20,427 nthelp.chm
08/18/2001 08:00 AM 306,870 ntshared.chm
08/18/2001 08:00 AM 12,760 ntshrui.hlp
08/18/2001 08:00 AM 271,133 nusrmgr.chm
08/18/2001 08:00 AM 15,256 nwdoc.chm
08/18/2001 08:00 AM 26,845 objsel.hlp
08/18/2001 08:00 AM 16,119 odbcinst.chm
08/18/2001 08:00 AM 34,381 odbcjet.chm
08/18/2001 08:00 AM 28,305 oe_msgr.chm
08/18/2001 08:00 AM 28,344 omc.chm
08/18/2001 08:00 AM 19,605 osk.chm
08/18/2001 08:00 AM 12,387 osk.hlp
08/18/2001 08:00 AM 20,067 packager.chm
08/18/2001 08:00 AM 19,921 password.chm
08/18/2001 08:00 AM 17,269 phowto.chm
08/18/2001 08:00 AM 39,590 pinball.chm
08/18/2001 08:00 AM 22,398 pinball.hlp
08/18/2001 08:00 AM 73,572 PINTLPAD.CHM
08/18/2001 08:00 AM 56,563 PINTLPAE.CHM
08/18/2001 08:00 AM 81,137 plyr_err.chm
08/18/2001 08:00 AM 97,163 printing.chm
08/18/2001 08:00 AM 695 progman.cnt
08/18/2001 08:00 AM 25,771 progman.hlp
08/18/2001 08:00 AM 31,663 pwrmn.chm
08/18/2001 08:00 AM 44,213 pwrmn.hlp
08/18/2001 08:00 AM 12,752 qosconcepts.chm
08/18/2001 08:00 AM 19,598 ratings.chm
08/18/2001 08:00 AM 294 ratings.cnt
08/18/2001 08:00 AM 27,225 ratings.hlp
08/18/2001 08:00 AM 22,853 reader.chm
08/18/2001 08:00 AM 11,953 reader.hlp
08/18/2001 08:00 AM 19,107 recycle.chm
08/18/2001 08:00 AM 46,684 regedit.chm
08/18/2001 08:00 AM 12,886 regedit.hlp
08/18/2001 08:00 AM 28,053 regopt.chm
08/18/2001 08:00 AM 20,136 remasst.chm
08/18/2001 08:00 AM 14,678 rsm.chm
08/18/2001 08:00 AM 35,699 rsm.hlp
08/18/2001 08:00 AM 56,352 rsmconcepts.chm
08/18/2001 08:00 AM 25,815 rvse.chm
08/18/2001 08:00 AM 10,111 sapicpl.hlp
08/18/2001 08:00 AM 13,955 scarddlg.hlp
08/18/2001 08:00 AM 38,163 secauth.hlp
08/18/2001 08:00 AM 18,291 sendcmsg.chm
08/18/2001 08:00 AM 11,941 sendcmsg.hlp
08/18/2001 08:00 AM 15,957 sfmmgr.hlp
08/18/2001 08:00 AM 21,787 shell.hlp
08/18/2001 08:00 AM 32,162 shvl.chm
08/18/2001 08:00 AM 8,953 signin.hlp
08/18/2001 08:00 AM 12,249 sigverif.hlp
08/18/2001 08:00 AM 18,988 smlogcfg.chm
08/18/2001 08:00 AM 16,645 sndvol32.chm
08/18/2001 08:00 AM 11,290 sndvol32.hlp
08/18/2001 08:00 AM 32,256 sniffpol.dll
08/18/2001 08:00 AM 42,000 snmpconcepts.chm
08/18/2001 08:00 AM 16,043 snmpsnap.hlp
08/18/2001 08:00 AM 16,962 sol.chm
08/18/2001 08:00 AM 13,517 sol.hlp
08/18/2001 08:00 AM 34,041 soundrec.chm
08/18/2001 08:00 AM 20,246 soundrec.hlp
08/18/2001 08:00 AM 20,163 sounds.chm
08/18/2001 08:00 AM 42,687 speech.chm
08/18/2001 08:00 AM 15,961 spider.chm
08/18/2001 08:00 AM 11,594 spider.hlp
08/18/2001 08:00 AM 12,492 splash.chm
08/18/2001 08:00 AM 17,374 sr_ui.chm
08/18/2001 08:00 AM 30,720 sstub.dll
08/18/2001 08:00 AM 17,336 supp_ed.chm
08/18/2001 08:00 AM 41,881 sysdm.chm
08/18/2001 08:00 AM 75,448 sysdm.hlp
08/18/2001 08:00 AM 17,784 sysmon.chm
08/18/2001 08:00 AM 62,118 sysmon.hlp
08/18/2001 08:00 AM 33,152 sysprop.chm
08/18/2001 08:00 AM 31,263 sysrestore.chm
08/18/2001 08:00 AM 11,603 sysrestore.hlp
08/18/2001 08:00 AM 32,508 sys_srv.chm
08/18/2001 08:00 AM 35,334 tapi.chm
08/18/2001 08:00 AM 20,688 tapi.hlp
08/18/2001 08:00 AM 33,991 taskbar.chm
08/18/2001 08:00 AM 37,803 taskmgr.chm
08/18/2001 08:00 AM 13,228 taskmgr.hlp
08/18/2001 08:00 AM 38,234 tcpip.chm
08/18/2001 08:00 AM 12,693 tcpmon.hlp
08/18/2001 08:00 AM 30,107 telnet.chm
08/18/2001 08:00 AM 14,698 telnet.hlp
08/18/2001 08:00 AM 19,459 timesrv.chm
05/22/2005 09:37 PM Tours
08/18/2001 08:00 AM 335,114 tshoot.chm
08/18/2001 08:00 AM 262,656 tshoot.dll
08/18/2001 08:00 AM 193 update.cnt
08/18/2001 08:00 AM 27,545 useract.chm
08/18/2001 08:00 AM 16,660 utilmgr.chm
08/18/2001 08:00 AM 12,244 utilmgr.hlp
08/18/2001 08:00 AM 14,384 verifier.hlp
08/18/2001 08:00 AM 74,905 wab.chm
08/18/2001 08:00 AM 59,142 wab.hlp
08/18/2001 08:00 AM 44,441 wbemtest.chm
08/18/2001 08:00 AM 16,731 webpub.chm
08/18/2001 08:00 AM 33,544 whatsnew.chm
08/18/2001 08:00 AM 17,782 winchat.chm
08/18/2001 08:00 AM 12,377 winchat.hlp
08/18/2001 08:00 AM 690,641 windows.chm
08/18/2001 08:00 AM 382,946 windows.chq
08/18/2001 08:00 AM 64 windows.cnt
08/18/2001 08:00 AM 300,163 windows.hlp
08/18/2001 08:00 AM 51,767 wingb.chm
08/18/2001 08:00 AM 69 winhlp32.cnt
08/18/2001 08:00 AM 21,111 winhlp32.hlp
08/18/2001 08:00 AM 171,874 winime.chm
08/18/2001 08:00 AM 56,661 wininstl.chm
08/18/2001 08:00 AM 15,071 winmine.chm
08/18/2001 08:00 AM 11,476 winmine.hlp
08/18/2001 08:00 AM 39,829 winpy.chm
08/18/2001 08:00 AM 45,113 winsp.chm
08/18/2001 08:00 AM 158,219 winzm.chm
08/18/2001 08:00 AM 21,286 win_dos.chm
01/28/2005 01:44 PM 611,873 wmp10.chm
01/28/2005 01:44 PM 89,413 wmperr10.chm
08/18/2001 08:00 AM 415,082 wmplayer.chm
08/18/2001 08:00 AM 32,887 wordpad.chm
08/18/2001 08:00 AM 19,706 wordpad.hlp
08/18/2001 08:00 AM 25,089 wpa.chm
08/18/2001 08:00 AM 25,712 wscript.chm
08/18/2001 08:00 AM 12,377 wscript.hlp
08/18/2001 08:00 AM 13,307 wshconcepts.chm
05/09/2002 11:01 PM 29,168 wuauhelp.chm
345 File(s) 19,456,077 bytes
3 Dir(s) 18,457,018,368 bytes free
Volume in drive C has no label.
Volume Serial Number is E4E7-A6BA
Directory of C:\WINDOWS\java\trustlib
09/01/2005 02:17 PM 516,116 keybas.dll
09/01/2005 02:17 PM 303 sabyek.ini
2 File(s) 516,419 bytes
0 Dir(s) 18,457,030,656 bytes free
Volume in drive C has no label.
Volume Serial Number is E4E7-A6BA
Directory of C:\WINDOWS\java\trustlib
09/01/2005 02:17 PM .
09/01/2005 02:17 PM ..
0 File(s) 0 bytes
2 Dir(s) 18,457,030,656 bytes free
Step 1:
Please download Process Explorer by Systernals from:
Process Explorer
Also download/unzip KillBox by Option^Explicit from:
Killbox.zip
Step 2:
Download this file and save it to your desktop:
FixVundo Registry File
Copy/paste the text in the Quote box below into Notepad, and save it on the desktop as "
killme.txt "
C:\WINDOWS\Help\imgdb.dll
C:\WINDOWS\Help\bdgmi.bak1
C:\WINDOWS\Help\bdgmi.bak2
C:\WINDOWS\Help\bdgmi.ini
C:\WINDOWS\Help\bdgmi.ini2
C:\WINDOWS\Help\bdgmi.tmp
C:\WINDOWS\java\trustlib\keybas.dll
C:\WINDOWS\java\trustlib\sabyek.inil
Step 3:
Print out the following instructions as you will not have Internet Access for the rest of this fix.
Reboot in
"safe" mode .
The rest of this fix must be done in safe mode.
Unzip Process Explorer and double click on
procexp.exe
In the top section of the Process Exlporer screen double-click on
winlogon.exe to bring up the winlogon.exe properties screen. Click on the
Threads tab at the top.
Once you see this screen click on each instance of
C:\WINDOWS\Help\imgdb.dll once and then click the kill button.
After you have killed all of the
C:\WINDOWS\Help\imgdb.dll under winlogon click
OK .
If you see any of the files listed below, kill them as well.
Files to look for:
————————–
C:\WINDOWS\Help\bdgmi.bak1
C:\WINDOWS\Help\bdgmi.bak2
C:\WINDOWS\Help\bdgmi.ini
C:\WINDOWS\Help\bdgmi.ini2
C:\WINDOWS\Help\bdgmi.tmp
C:\WINDOWS\java\trustlib\keybas.dll
C:\WINDOWS\java\trustlib\sabyek.ini
BE SURE TO KILL THESE FILES ONLY!!!
Not all of them may be present. That is OK.
Next double-click on
explorer.exe , select the
Threads tab, and again click once on each instance of
C:\WINDOWS\Help\imgdb.dll then click the kill button.
If you see any of the files listed below kill them as well.
Files to look for:
————————–
C:\WINDOWS\Help\bdgmi.bak1
C:\WINDOWS\Help\bdgmi.bak2
C:\WINDOWS\Help\bdgmi.ini
C:\WINDOWS\Help\bdgmi.ini2
C:\WINDOWS\Help\bdgmi.tmp
C:\WINDOWS\java\trustlib\keybas.dll
C:\WINDOWS\java\trustlib\sabyek.ini
BE SURE TO KILL THESE FILES ONLY!!!
Not all of them may be present. That is OK.
Once you have done that click
OK again.
Next run Hijack This! and place a check beside each of the following.
O2 - BHO: MSEvents Object - {827DC836-DD9F-4A68-A602-5812EB50A834} - C:\WINDOWS\Help\imgdb.dll
O20 - Winlogon Notify: imgdb - C:\WINDOWS\Help\imgdb.dll
O20 - Winlogon Notify: keybas - C:\WINDOWS\java\trustlib\keybas.dll
Now click
Fix checked and close HijackThis.
Now double-click on the
vundo.reg file that you saved on your desktop earlier and allow it to merge with the registry.
Step 4:
On the desktop, open the "
killme.txt " file with Notepad.
Then copy the all file names in the "
killme.txt " to the clipboard by highlighting them and pressing
C (hold the
key down, then press
C ):
Close "
killme.txt ".
Double click on
Killbox.exe and then check the
Delete on reboot button.
In Killbox, click
File (in the upper left of Killbox), and choose "
Paste from Clipboard ".
Click the
red dot with the white X in it, in the upper right of Killbox, then click "
Yes ", and "
Yes " again.
After the reboot, "copy/paste" a new Hijack This! log file
into this thread .