WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. Join 93101 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Need help

Started by mra , Dec 17 2005 07:33 PM

This topic is locked

28 replies to this topic

#1 mra

New Member

Authentic Member
15 posts

Posted 17 December 2005 - 07:33 PM

I tried cleaning my system with EWIDO and Addaware but Im still getting popups and my systems is sluggish. Please help!
Thanks,
MRA
Logfile of HijackThis v1.99.1
Scan saved at 7:24:00 PM, on 12/17/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Nhksrv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\DELLMMKB.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Netropa\OSD.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Nikon\NkView5\NkvMon.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\Corel\Print Office 2000\CorelCENTRAL\Programs\alarm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [DellTouch] C:\WINDOWS\DELLMMKB.EXE
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Lexmark X6100 Series] "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [susp] C:\WINDOWS\susp.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\BellSouth\hcenter.exe" /starthidden /tgcmdwrapper
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: CorelCENTRAL Alarms.LNK = C:\Program Files\Corel\Print Office 2000\CorelCENTRAL\Programs\alarm.exe
O4 - Global Startup: Camio Viewer 2000.lnk = C:\Program Files\Sierra Imaging\Image Expert 2000\IXApplet.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView5\NkvMon.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O15 - Trusted Zone: http://linktrader.cyberspacehq.com
O16 - DPF: Yahoo! Blackjack - http://download.game...nts/y/jt0_x.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg...t/c381/chat.cab
O16 - DPF: Yahoo! Poker - http://download.game...nts/y/pt2_x.cab
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec....trl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec....trl/tgctlsr.cab
O16 - DPF: {0335A685-ED24-4F7B-A08E-3BD15D84E668} - http://dl.filekicker...IL/PhPSetup.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec....rl/LSSupCtl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://jcs.chat.dcn....v45/yacscom.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150...ip/RdxIE601.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (CwlscInstall Object) - https://scan.safety....lscbase2213.cab
O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} (CBSTIEPrint Class) - http://offers.e-cent...bin/actxcab.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec....rl/SymAData.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.m...ash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.app.../ITDetector.cab
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Advertisements

Register to Remove

#2 LDTate

Grand Poobah

Root Admin
57,211 posts

Posted 17 December 2005 - 09:04 PM

Hello mra, welcome to the TC.

I suggest you do this:

Download this file from the link to your desktop.
http://www.mvps.org/.../DelDomains.inf

Right-click on the deldomains.inf file and select 'Install'

Once it is finished your Zones should be reset.

Note, if you use SpywareBlaster and/or IE/Spyads, it will be necessary to re-install the protection both afford. For SpywareBlaster, run the program and re-protect all items. For IE/Spyads, run the batch file and reinstall the protection

Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)

O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [susp] C:\WINDOWS\susp.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O15 - Trusted Zone: http://linktrader.cyberspacehq.com

O16 - DPF: {0335A685-ED24-4F7B-A08E-3BD15D84E668} - http://dl.filekicker...IL/PhPSetup.cab

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150...ip/RdxIE601.cab

O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (CwlscInstall Object) - https://scan.safety....lscbase2213.cab

O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} (CBSTIEPrint Class) - http://offers.e-cent...bin/actxcab.cab

Close ALL windows and browsers except HijackThis and click "Fix checked"

Delete these Files if listed:
C:\WINDOWS\susp.exe

1. Open My Computer
2. Right click on your hard drive that you wish to clean (C drive, for example)
3. In the context menu that opens, select properties
4. Under the general tab you should select Disk Cleanup
5. Windows will scan your drive which will take a few seconds/minutes
6. A box will display the various files you can remove.
Check all boxes except compress old files (If listed)
7. Click OK and windows will comply.

Restart your computer.

Reboot and "copy/paste" a new log file into this thread.
Also please describe how your computer behaves at the moment.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

If you would like to for the help you received.

Proud graduate of TC/WTT Classroom

#3 mra

New Member

Authentic Member
15 posts

Posted 17 December 2005 - 09:57 PM

LDTate thanks for taking time to look at my log file.

When I shut my system down an error box popped up that said:

DDDJET32.exe-DLL Initialization failed

"The application failed to initialize because the window station is shutting down"

I rebooted agian and got the same error box but with this file:

shut2wire.exe

When I opened my browser it was still slow and the same pop ups started coming up again. I ran a new log file and posted it below.
Thanks,
MRA

Logfile of HijackThis v1.99.1
Scan saved at 10:47:57 PM, on 12/17/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\DELLMMKB.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\Nhksrv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Netropa\OSD.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Nikon\NkView5\NkvMon.exe
C:\Program Files\Corel\Print Office 2000\CorelCENTRAL\Programs\alarm.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [DellTouch] C:\WINDOWS\DELLMMKB.EXE
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Lexmark X6100 Series] "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\BellSouth\hcenter.exe" /starthidden /tgcmdwrapper
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - Startup: CorelCENTRAL Alarms.LNK = C:\Program Files\Corel\Print Office 2000\CorelCENTRAL\Programs\alarm.exe
O4 - Global Startup: Camio Viewer 2000.lnk = C:\Program Files\Sierra Imaging\Image Expert 2000\IXApplet.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView5\NkvMon.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O16 - DPF: Yahoo! Blackjack - http://download.game...nts/y/jt0_x.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg...t/c381/chat.cab
O16 - DPF: Yahoo! Poker - http://download.game...nts/y/pt2_x.cab
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec....trl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec....trl/tgctlsr.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec....rl/LSSupCtl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://jcs.chat.dcn....v45/yacscom.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec....rl/SymAData.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.m...ash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.app.../ITDetector.cab
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

#4 LDTate

Grand Poobah

Root Admin
57,211 posts

Posted 17 December 2005 - 10:01 PM

I see you already have Ewido Security Suite.
Open it, and update the definitions to the newest files. Do NOT run a scan yet.

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

Then please run Ewido, click on the Scanner run a full scan and let it clean everything it finds. Save the logfile from the scan.

Restart your computer in normal mode and please post a new HijackThis log, as well as the log from the Ewido scan.

Edited by LDTate, 17 December 2005 - 10:01 PM.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

If you would like to for the help you received.

Proud graduate of TC/WTT Classroom

#5 mra

New Member

Authentic Member
15 posts

Posted 17 December 2005 - 10:56 PM

Here you go.

---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 11:36:19 PM, 12/17/2005
+ Report-Checksum: A4BC145E

+ Scan result:

C:\Documents and Settings\mike\Cookies\mike@ad.yieldmanager[1].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@adopt.specificclick[2].txt -> Spyware.Cookie.Specificclick : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@ads.addynamix[2].txt -> Spyware.Cookie.Addynamix : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@ads.pointroll[2].txt -> Spyware.Cookie.Pointroll : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@advertising[1].txt -> Spyware.Cookie.Advertising : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@as-eu.falkag[2].txt -> Spyware.Cookie.Falkag : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@as-us.falkag[1].txt -> Spyware.Cookie.Falkag : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@as1.falkag[2].txt -> Spyware.Cookie.Falkag : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@atdmt[2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@bluestreak[2].txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@casalemedia[1].txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@data1.perf.overture[1].txt -> Spyware.Cookie.Overture : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@fastclick[1].txt -> Spyware.Cookie.Fastclick : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@media.fastclick[2].txt -> Spyware.Cookie.Fastclick : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@mediaplex[2].txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@msnportal.112.2o7[1].txt -> Spyware.Cookie.2o7 : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@perf.overture[1].txt -> Spyware.Cookie.Overture : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@questionmarket[1].txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@statse.webtrendslive[2].txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@targetnet[2].txt -> Spyware.Cookie.Targetnet : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@trafficmp[2].txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@tribalfusion[1].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@valueclick[2].txt -> Spyware.Cookie.Valueclick : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@yieldmanager[1].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\mike\Cookies\mike@z1.adserver[1].txt -> Spyware.Cookie.Adserver : Cleaned with backup

::Report End

Logfile of HijackThis v1.99.1
Scan saved at 11:48:44 PM, on 12/17/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\DELLMMKB.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\Nhksrv.exe
C:\Program Files\Netropa\OSD.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Nikon\NkView5\NkvMon.exe
C:\Program Files\Corel\Print Office 2000\CorelCENTRAL\Programs\alarm.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Symantec\LiveUpdate\AUpdate.exe
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\Program Files\HijackThis.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [DellTouch] C:\WINDOWS\DELLMMKB.EXE
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Lexmark X6100 Series] "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\BellSouth\hcenter.exe" /starthidden /tgcmdwrapper
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - Startup: CorelCENTRAL Alarms.LNK = C:\Program Files\Corel\Print Office 2000\CorelCENTRAL\Programs\alarm.exe
O4 - Global Startup: Camio Viewer 2000.lnk = C:\Program Files\Sierra Imaging\Image Expert 2000\IXApplet.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView5\NkvMon.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O16 - DPF: Yahoo! Blackjack - http://download.game...nts/y/jt0_x.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg...t/c381/chat.cab
O16 - DPF: Yahoo! Poker - http://download.game...nts/y/pt2_x.cab
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec....trl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec....trl/tgctlsr.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec....rl/LSSupCtl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://jcs.chat.dcn....v45/yacscom.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec....rl/SymAData.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.m...ash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.app.../ITDetector.cab
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

#6 LDTate

Grand Poobah

Root Admin
57,211 posts

Posted 18 December 2005 - 07:16 AM

Are you still getting those errors?

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

If you would like to for the help you received.

Proud graduate of TC/WTT Classroom

#7 mra

New Member

Authentic Member
15 posts

Posted 18 December 2005 - 10:07 AM

yes, im still getting the error at shut down and popups.

#8 LDTate

Grand Poobah

Root Admin
57,211 posts

Posted 18 December 2005 - 10:10 AM

Go here and run this scan. Let me know what it finds.
Microsoft - Malicious Software Removal Tool
http://www.microsoft...ve/default.mspx

Download this one and let me know if it finds anything.
RootkitRevealer
http://www.sysintern...itRevealer.html

When it's done, go to file->save
save the logfile to the desktop, and then past the contents here.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

If you would like to for the help you received.

Proud graduate of TC/WTT Classroom

#9 mra

New Member

Authentic Member
15 posts

Posted 18 December 2005 - 01:15 PM

A friend had mentoined turning off my System Restore before making any changes. Is this something I need to do?

#10 LDTate

Grand Poobah

Root Admin
57,211 posts

Posted 18 December 2005 - 01:17 PM

A friend had mentoined turning off my System Restore before making any changes. Is this something I need to do?

NO. It's better to have a bad restore point then not having any restore point.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

If you would like to for the help you received.

Proud graduate of TC/WTT Classroom

Advertisements

Register to Remove

#11 mra

New Member

Authentic Member
15 posts

Posted 18 December 2005 - 02:56 PM

Malware found nothing infected. Also the virus was downloaded 12-05 at 7:30pm. Here is the rootkit log. HKLM\SOFTWARE\C6TQ3A0mhVm9 12/18/2005 12:53 AM 0 bytes Hidden from Windows API. HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed 12/18/2005 3:11 PM 80 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8CA7F906015C4D117A88000972BA5A0D\Usage\CreatorAPPs 12/18/2005 2:23 PM 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Support.com\Setup\ProviderList\BellSouth\monitoring\profiles\LastUpdated 12/18/2005 3:10 PM 50 bytes Data mismatch between Windows API and raw hive data. HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_EVECCGP 12/5/2005 7:30 PM 0 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Services\Eveccgp 12/18/2005 1:37 PM 0 bytes Hidden from Windows API. C:\Documents and Settings\mike\Local Settings\Temp\~DF551C.tmp 12/18/2005 3:12 PM 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\Program Files\Nikws nt 12/18/2005 12:00 AM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\ace.dll 12/5/2005 7:30 PM 568.00 KB Hidden from Windows API. C:\Program Files\Nikws nt\AI_12-12-2005.log 12/12/2005 5:00 PM 3 bytes Hidden from Windows API. C:\Program Files\Nikws nt\AI_13-12-2005.log 12/13/2005 12:01 AM 3 bytes Hidden from Windows API. C:\Program Files\Nikws nt\AI_14-12-2005.log 12/14/2005 6:48 PM 3 bytes Hidden from Windows API. C:\Program Files\Nikws nt\AI_15-12-2005.log 12/15/2005 4:26 PM 3 bytes Hidden from Windows API. C:\Program Files\Nikws nt\AI_16-12-2005.log 12/16/2005 12:00 AM 3 bytes Hidden from Windows API. C:\Program Files\Nikws nt\AI_17-12-2005.log 12/17/2005 11:35 AM 3 bytes Hidden from Windows API. C:\Program Files\Nikws nt\AI_18-12-2005.log 12/18/2005 12:00 AM 3 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache 12/18/2005 2:19 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_4394eba5_00098968 12/5/2005 7:38 PM 3.38 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_4394fd4d_000501bd 12/16/2005 8:13 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_4394fd66_00040d99 12/16/2005 7:36 PM 24.85 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_439a3c94_00098968 12/9/2005 8:25 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_439a3d44_00044aa2 12/9/2005 8:28 PM 36.19 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_439a43f7_000baeb9 12/9/2005 8:56 PM 13.13 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_439ac085_000c65d4 12/10/2005 5:48 AM 2.30 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_439ac6f9_0007270e 12/18/2005 1:34 PM 31.27 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_439b28a0_00016e36 12/10/2005 1:12 PM 12.94 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_439c9007_00003d09 12/11/2005 2:45 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_439ced32_00040d99 12/12/2005 9:17 PM 30.84 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_439e0f3f_000d9701 12/12/2005 6:14 PM 88.60 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_439f43c8_0007de29 12/13/2005 3:57 PM 3.07 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_439f8bc1_0007de29 12/13/2005 9:04 PM 338 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_43a375e8_0007a120 12/16/2005 8:20 PM 33.06 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_43a44e03_00016e36 12/17/2005 11:42 AM 48.66 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_43a4e903_00066ff3 12/17/2005 10:43 PM 77.53 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_43a4f6f4_000dd40a 12/17/2005 11:43 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_43a4f714_00098968 12/17/2005 11:43 PM 4.09 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000029_43a591df_00029f63 12/18/2005 10:44 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000035_439ce693_00089544 12/11/2005 8:55 PM 4.68 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000035_43a456b6_000ec82e 12/17/2005 12:19 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000035_43a5051b_0000f424 12/18/2005 12:43 AM 4.85 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000007b_43a4e49d_0009c671 12/17/2005 10:25 PM 202.24 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000008c_43a4dc2e_00090f56 12/17/2005 9:49 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000008e_43a4d3f6_000af79e 12/17/2005 9:13 PM 3.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_4394ecd6_0001e848 12/5/2005 7:43 PM 2.10 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_439c90e4_000af79e 12/13/2005 7:34 PM 352 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_439cee31_00094c5f 12/18/2005 1:35 PM 525 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_439e10e2_0007270e 12/12/2005 6:08 PM 88.63 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_439e3e05_00029f63 12/12/2005 9:20 PM 53.64 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_439f7797_000b34a7 12/13/2005 7:38 PM 162.37 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_43a0c222_000c9f5b 12/14/2005 7:08 PM 383 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_43a1f00b_0008583b 12/15/2005 4:36 PM 943 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_43a36ae8_00039387 12/16/2005 7:33 PM 41.10 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_43a37871_0001ab3f 12/16/2005 8:31 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_43a44ef2_0004c4b4 12/17/2005 11:46 AM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_43a4ea7c_00029f63 12/17/2005 10:50 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_43a596ec_000baeb9 12/18/2005 11:05 AM 7.28 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000099_43a5ba20_00022551 12/18/2005 1:36 PM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000000c1_43a4b838_00053ec6 12/17/2005 7:15 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000000eb_43a4dbd4_0008d24d 12/17/2005 9:47 PM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000120_439c9c85_000e1113 12/11/2005 3:39 PM 4.53 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000120_43a36f4d_000487ab 12/16/2005 7:52 PM 1.42 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000120_43a37aa3_00076417 12/16/2005 8:40 PM 7.87 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000120_43a450ec_000d1cef 12/17/2005 11:54 AM 1.05 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000120_43a4ed17_00031975 12/17/2005 11:01 PM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000120_43a4fd5c_000ec82e 12/18/2005 12:10 AM 7.33 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_4394ecf3_000cdfe6 12/5/2005 7:44 PM 5.75 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_439c90e4_000c28cb 12/17/2005 10:50 PM 275 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_439e10e4_000487ab 12/12/2005 6:08 PM 15.02 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_439e3e07_000a4083 12/12/2005 9:20 PM 53.50 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_439f77b9_000dd40a 12/13/2005 7:39 PM 136.60 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_43a0c223_000e87a3 12/14/2005 7:08 PM 13.79 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_43a1f00c_00057bcf 12/15/2005 4:37 PM 11.79 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_43a36aee_000487ab 12/16/2005 7:33 PM 35.56 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_43a37871_0006ea05 12/16/2005 8:31 PM 8.08 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_43a44f1c_000d59f8 12/17/2005 11:47 AM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_43a4ea7c_000e8b25 12/17/2005 10:50 PM 3.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_43a4fa04_000d59f8 12/17/2005 11:56 PM 7.66 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_43a596ec_000cdfe6 12/18/2005 11:05 AM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000124_43a5ba20_0002dc6c 12/18/2005 1:36 PM 4.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001d3_439ce6f0_0000f424 12/11/2005 9:39 PM 1.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001d3_43a456fd_000ec82e 12/17/2005 12:20 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001d3_43a505a0_000af79e 12/18/2005 12:45 AM 35.29 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001e1_43a4bb96_000a037a 12/17/2005 7:29 PM 7.18 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_4394ec48_000c28cb 12/5/2005 7:41 PM 367 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_4394fe83_000d59f8 12/5/2005 8:59 PM 26.25 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_439c90e2_000e1113 12/17/2005 10:55 PM 455 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_439cedd2_00007a12 12/11/2005 9:26 PM 335 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_439e1061_000c28cb 12/16/2005 7:33 PM 887 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_439e3deb_00076417 12/12/2005 9:20 PM 50.31 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_439f76ed_000e4e1c 12/13/2005 7:35 PM 4.35 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_43a0bf8a_000c9f5b 12/14/2005 6:57 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_43a1eff4_00098968 12/15/2005 4:36 PM 29.25 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_43a36ad1_000d9701 12/16/2005 7:33 PM 242 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_43a37762_000cdfe6 12/16/2005 8:26 PM 7.25 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_43a44e74_00089544 12/17/2005 11:44 AM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_43a4e9b5_0007de29 12/17/2005 10:46 PM 7.37 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_43a4f774_0007270e 12/17/2005 11:45 PM 3.93 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_43a591ef_0008d24d 12/18/2005 10:44 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_43a5966e_000632ea 12/18/2005 11:03 AM 202.54 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000001eb_43a5ba0a_00007a12 12/18/2005 1:35 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000030a_439c96a0_0005f5e1 12/11/2005 3:14 PM 5.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000030a_439e2968_0004c4b4 12/12/2005 7:52 PM 108.10 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000030a_43a36f1d_0006acfc 12/16/2005 7:51 PM 3.61 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000030a_43a37a82_000f0537 12/16/2005 8:40 PM 4.42 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000030a_43a450eb_000aba95 12/17/2005 11:54 AM 235 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000030a_43a4ecb5_000c28cb 12/17/2005 10:59 PM 9.61 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000030a_43a4fd4d_000e4e1c 12/18/2005 12:10 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000384_439ce234_0008d24d 12/11/2005 8:36 PM 53.30 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000384_43a4554b_000d9701 12/17/2005 12:13 PM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000384_43a5039d_000a7d8c 12/18/2005 12:37 AM 5.94 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000003fa_43a4dff7_000af79e 12/17/2005 10:05 PM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000047e_439cd5bf_00076417 12/11/2005 7:43 PM 436 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000047e_43a45432_000501bd 12/17/2005 12:08 PM 1.95 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000047e_43a502c4_000a4083 12/18/2005 12:33 AM 46.13 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000004f0_43a4e4ad_000e8b25 12/17/2005 10:25 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000588_43a45e1a_0007a120 12/17/2005 12:51 PM 4.67 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000607_43a4d380_000e1113 12/17/2005 9:12 PM 107.50 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000633_43a45951_0000f424 12/17/2005 12:30 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000677_439ce25f_0003d090 12/16/2005 7:34 PM 53.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000677_43a45553_00000000 12/17/2005 12:13 PM 6.41 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000006e3_43a4d26f_0008583b 12/17/2005 9:07 PM 592.40 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000728_43a4ba56_0005f5e1 12/17/2005 7:24 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000732_439c97ce_000a4083 12/11/2005 3:19 PM 5.70 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000732_439e29fa_0000f424 12/12/2005 7:55 PM 30.21 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000732_43a36f4c_000e4e1c 12/16/2005 7:52 PM 201.19 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000732_43a37a9b_0002dc6c 12/16/2005 8:44 PM 59.58 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000732_43a450ec_000c65d4 12/17/2005 11:54 AM 5.23 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000732_43a4ed16_000d59f8 12/17/2005 11:01 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000732_43a4fd5c_000bebc2 12/18/2005 12:10 AM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000074d_4394f944_000bebc2 12/5/2005 8:36 PM 3.41 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000074d_439c9109_000ca2dd 12/11/2005 7:36 PM 54.42 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000074d_439e16ab_00090f56 12/12/2005 6:32 PM 19.98 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000074d_439e3e27_00003d09 12/12/2005 9:21 PM 55.37 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000074d_43a36b37_00000000 12/16/2005 7:34 PM 5.10 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000074d_43a378f5_00044aa2 12/16/2005 8:33 PM 84 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000074d_43a44fb0_0004c4b4 12/17/2005 11:49 AM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000074d_43a4fc95_0001312d 12/18/2005 12:07 AM 7.64 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000074d_43a597a3_000baeb9 12/18/2005 11:08 AM 328.35 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000074d_43a5ba7f_000e1113 12/18/2005 1:37 PM 13.06 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000784_43a4d382_000ca2dd 12/17/2005 9:12 PM 647 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000786_43a4e018_0004c4b4 12/18/2005 10:44 AM 8.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000007cf_439ce695_00031975 12/11/2005 9:36 PM 81 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000007cf_43a456da_00022551 12/17/2005 12:20 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000007cf_43a5051b_0004c4b4 12/18/2005 12:43 AM 3.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000822_439cd47b_000dd40a 12/11/2005 7:38 PM 1.24 MB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000822_43a37c9a_0000f424 12/16/2005 8:48 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000822_43a45288_000bebc2 12/17/2005 12:01 PM 2.11 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000822_43a50155_00000000 12/18/2005 12:27 AM 4.65 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000086a_43a46957_00040d99 12/17/2005 1:39 PM 243 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000871_43a4bb9c_000bebc2 12/17/2005 7:30 PM 3.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000878_43a4be96_00094c5f 12/17/2005 7:42 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000902_439e34cd_000f0537 12/12/2005 8:41 PM 252.94 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000902_43a452f0_0003567e 12/17/2005 12:03 PM 345 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000902_43a501a5_0006acfc 12/18/2005 12:28 AM 97.84 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000940_43a46cad_000ca2dd 12/17/2005 1:53 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000975_43a4578b_0005f5e1 12/17/2005 12:23 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000975_43a506ee_000487ab 12/18/2005 12:51 AM 4.66 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000009ce_43a45f53_0001ab3f 12/17/2005 12:56 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000a28_43a45f42_000f0537 12/17/2005 12:56 PM 1 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000a41_43a4e48d_00031975 12/17/2005 10:24 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000a4a_43a45c8a_0000f424 12/17/2005 12:50 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000a6c_43a4d275_000487ab 12/17/2005 9:07 PM 1.47 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000a87_43a4dc2f_00053ec6 12/17/2005 9:49 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000af0_43a4e002_00057bcf 12/17/2005 10:05 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_4394ec49_0000f424 12/5/2005 7:41 PM 1.12 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_439c90e2_000f0537 12/12/2005 6:05 PM 331 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_439cedd2_0003d090 12/11/2005 9:26 PM 177 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_439e1063_000632ea 12/16/2005 7:33 PM 25.54 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_439e3dec_00007a12 12/12/2005 9:20 PM 81 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_439f771a_0006ea05 12/13/2005 7:36 PM 166 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_43a0bf8d_00012dab 12/14/2005 6:57 PM 5.06 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_43a1eff7_000baeb9 12/15/2005 4:36 PM 29.06 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_43a36ad2_00003d09 12/17/2005 10:50 PM 339 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_43a37763_0000b71b 12/16/2005 8:26 PM 7.44 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_43a44e80_00057bcf 12/17/2005 11:44 AM 594 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_43a4e9b5_000bebc2 12/17/2005 10:46 PM 3.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_43a4f774_000a7d8c 12/17/2005 11:45 PM 7.48 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_43a591ef_000d9701 12/18/2005 10:44 AM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_43a59672_0001e848 12/18/2005 11:03 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bb3_43a5ba0a_00094c5f 12/18/2005 1:35 PM 7.36 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bdb_439c96a6_0002dc6c 12/11/2005 3:14 PM 84 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bdb_439e299d_000c65d4 12/12/2005 7:53 PM 83.88 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bdb_43a36f1f_0005f5e1 12/16/2005 7:51 PM 378 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bdb_43a37a84_0000f424 12/16/2005 8:40 PM 4.47 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bdb_43a450ec_0007270e 12/17/2005 11:54 AM 1.05 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000bdb_43a4ecb8_000a7d8c 12/17/2005 10:59 PM 280 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000c15_43a45926_00016e36 12/17/2005 12:29 PM 4.04 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000c1e_43a4d277_000e4e1c 12/17/2005 9:07 PM 75 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000c7b_43a458cf_0006ea05 12/17/2005 12:28 PM 4.63 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000ce1_43a4b83c_000501bd 12/17/2005 7:15 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000d66_439cd5d1_000632ea 12/11/2005 7:43 PM 271 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000d66_43a45448_000d59f8 12/17/2005 12:09 PM 3.25 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000d66_43a502d4_0005f5e1 12/18/2005 12:33 AM 27.07 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000d9f_43a4e486_000d59f8 12/17/2005 10:24 PM 4.09 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000ddc_439cd3cc_00089544 12/11/2005 7:35 PM 11.82 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000ddc_439e2b9d_000a037a 12/12/2005 8:02 PM 16.23 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000ddc_43a37bfa_0001ab3f 12/16/2005 8:46 PM 4.61 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000ddc_43a451ea_000c28cb 12/17/2005 11:59 AM 235 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000ddc_43a50091_0005b8d8 12/18/2005 12:24 AM 5.88 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000de5_43a45edf_00039387 12/17/2005 12:54 PM 252 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000e12_439ce2f8_000dd40a 12/11/2005 8:39 PM 8.11 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000e12_43a455ba_00094c5f 12/17/2005 12:15 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000e12_43a50431_00076417 12/18/2005 12:39 AM 57.53 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000e29_43a4bedb_000dd40a 12/17/2005 7:43 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000e90_439ce6ff_0006acfc 12/11/2005 9:00 PM 31.13 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000e90_43a45720_0007270e 12/17/2005 12:21 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000e90_43a505df_000aba95 12/18/2005 12:46 AM 54.39 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000e99_43a4e49e_000bebc2 12/17/2005 10:25 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000ea9_43a4b814_0009c671 12/17/2005 7:15 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000ecc_439ce6df_000aba95 12/11/2005 8:56 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000ecc_43a456f1_000af79e 12/17/2005 12:20 PM 4.57 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000ecc_43a50545_000487ab 12/18/2005 12:44 AM 12.96 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_4394ecc6_0001312d 12/5/2005 7:43 PM 35.70 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_439c90e4_0009c671 12/11/2005 2:49 PM 237 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_439cedf5_000501bd 12/11/2005 9:26 PM 3.29 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_439e10e1_00003d09 12/12/2005 6:08 PM 104.43 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_439e3e00_0008d24d 12/12/2005 9:20 PM 53.39 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_439f777b_000487ab 12/13/2005 7:38 PM 136.66 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_43a0c21d_000e0d91 12/14/2005 7:08 PM 52.13 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_43a1f00a_0003567e 12/15/2005 4:36 PM 462 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_43a36ae2_0006ea05 12/16/2005 7:41 PM 364 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_43a3786d_000a4083 12/18/2005 1:35 PM 155.05 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_43a44ece_000b34a7 12/17/2005 11:45 AM 652 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_43a4ea7b_000a7d8c 12/17/2005 10:50 PM 201.11 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_43a4fa03_000baeb9 12/17/2005 11:56 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_43a59202_000e8b25 12/18/2005 10:44 AM 7.48 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_43a596ec_0006ea05 12/18/2005 11:05 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000f3e_43a5ba1f_000cdfe6 12/18/2005 1:35 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000fbf_439cd5b6_000632ea 12/11/2005 7:43 PM 433 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000fbf_43a4542a_00029f63 12/17/2005 12:08 PM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000fc9_439ce2e5_000b71b0 12/11/2005 8:39 PM 129.66 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000fc9_43a455ba_0004c4b4 12/17/2005 12:15 PM 4.40 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00000fc9_43a5042e_000a037a 12/18/2005 12:39 AM 21.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001030_43a4bb97_00003d09 12/17/2005 7:29 PM 3.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001049_43a468c5_000d1cef 12/17/2005 1:36 PM 205 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000010d9_43a4b961_000b71b0 12/17/2005 7:20 PM 3.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000010d9_43a4ba57_0004c4b4 12/17/2005 7:24 PM 3.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000113e_43a4bedc_00044aa2 12/17/2005 7:43 PM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000117a_43a4be7c_0003567e 12/17/2005 7:42 PM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000011f4_439ce33e_000d1cef 12/11/2005 8:41 PM 5.00 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000011f4_43a455df_00022551 12/17/2005 12:15 PM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000011f4_43a50472_000ec82e 12/18/2005 12:41 AM 9.64 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000121f_439cd496_000c65d4 12/11/2005 7:38 PM 36.04 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000121f_439e348c_00089544 12/12/2005 8:40 PM 3.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000121f_43a37da3_000d1cef 12/16/2005 8:53 PM 56.12 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000121f_43a45295_000ca2dd 12/17/2005 12:03 PM 5.06 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000121f_43a50174_00089544 12/18/2005 12:28 AM 191.41 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001238_439c9128_000632ea 12/11/2005 2:50 PM 78 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001238_439e26ba_0000f424 12/12/2005 7:41 PM 27.00 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001238_43a36c7e_00044aa2 12/16/2005 7:40 PM 5.10 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001238_43a37957_0006acfc 12/16/2005 8:35 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001238_43a44ffa_000a7d8c 12/17/2005 11:50 AM 1.36 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001238_43a4ec0b_0005f5e1 12/17/2005 10:56 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001238_43a59bdf_00094c5f 12/18/2005 11:26 AM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001238_43a5c345_000af79e 12/18/2005 2:15 PM 6.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000123b_43a4dc05_000dd40a 12/17/2005 9:48 PM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001246_43a4dff2_00089544 12/17/2005 10:05 PM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000127e_439ce692_0007de29 12/11/2005 9:36 PM 185.25 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000127e_43a456b6_00031975 12/17/2005 12:19 PM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000127e_43a5051a_000a037a 12/18/2005 12:43 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001289_43a4be56_000f0537 12/17/2005 7:41 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001295_43a4e01e_000bebc2 12/17/2005 10:05 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_4394ec49_000632ea 12/5/2005 7:41 PM 384 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_439c90e3_0004c4b4 12/11/2005 2:49 PM 237 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_439cedd3_0000b71b 12/11/2005 9:26 PM 15.45 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_439e1067_00081b32 12/12/2005 6:05 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_439e3df5_00007a12 12/12/2005 9:20 PM 50.46 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_439f771b_000cdfe6 12/13/2005 7:36 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_43a0c016_0007daa7 12/14/2005 7:00 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_43a1effc_000f0537 12/15/2005 4:36 PM 30.20 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_43a36ad2_00039387 12/16/2005 7:33 PM 238 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_43a37791_0007de29 12/16/2005 8:27 PM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_43a44ea7_00090f56 12/17/2005 11:45 AM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_43a4ea75_0007270e 12/17/2005 10:49 PM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_43a4f945_000ec82e 12/17/2005 11:53 PM 3.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_43a591f0_00022551 12/18/2005 10:44 AM 7.53 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_43a59673_0005f5e1 12/18/2005 11:03 AM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012db_43a5ba10_00003d09 12/18/2005 1:35 PM 205.12 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012e1_439cd484_00040d99 12/11/2005 7:38 PM 82.95 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012e1_43a37d1c_000632ea 12/16/2005 8:51 PM 3.41 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012e1_43a45295_00000000 12/17/2005 12:09 PM 455 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000012e1_43a5016a_000487ab 12/18/2005 12:27 AM 192.04 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001316_43a45d5d_000aba95 12/17/2005 12:47 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001366_439cd3f4_000632ea 12/11/2005 7:35 PM 54.11 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001366_439e33c0_00003d09 12/12/2005 8:36 PM 3.42 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001366_43a37007_0002625a 12/16/2005 7:55 PM 7.43 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001366_43a45222_00076417 12/17/2005 12:00 PM 231 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001366_43a500b1_000bebc2 12/18/2005 12:24 AM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000138a_43a46186_000e8b25 12/17/2005 1:05 PM 458 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000139d_439e34d2_0003d090 12/12/2005 8:41 PM 270 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000139d_43a4530e_00066ff3 12/17/2005 12:03 PM 1.56 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000139d_43a501ec_000a037a 12/18/2005 12:30 AM 117.52 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000013d3_43a45f41_0009c671 12/17/2005 12:56 PM 1.61 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000013e9_439cd566_000d9701 12/11/2005 7:41 PM 434 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000013e9_43a45376_000e8b25 12/17/2005 12:05 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000013e9_43a50230_00094c5f 12/18/2005 12:31 AM 7.35 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001481_43a45821_000e8b25 12/17/2005 12:25 PM 4.53 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_4394ec4c_00053ec6 12/5/2005 7:41 PM 18.75 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_439c90e4_0001ab3f 12/17/2005 10:50 PM 708 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_439cede9_00094c5f 12/11/2005 9:26 PM 210.07 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_439e3df8_00003d09 12/12/2005 9:20 PM 50.19 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_439f771c_0007a120 12/13/2005 7:36 PM 4.35 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_43a1efff_0006ea05 12/15/2005 4:36 PM 29.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_43a36ad2_000a4083 12/16/2005 7:33 PM 1.12 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_43a37792_00022551 12/16/2005 8:27 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_43a44eae_000e1113 12/17/2005 12:23 PM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_43a4ea76_0006acfc 12/17/2005 10:49 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_43a4f946_00044aa2 12/17/2005 11:53 PM 3.04 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_43a59202_00081b32 12/18/2005 10:44 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_43a596d1_00094c5f 12/18/2005 11:05 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000153c_43a5ba11_000f0537 12/18/2005 1:35 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001547_439c90eb_0001e848 12/11/2005 2:49 PM 1 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001547_439e3e1c_00040d99 12/12/2005 9:21 PM 55.66 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001547_43a1f014_00031975 12/15/2005 4:37 PM 7.23 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001547_43a36b10_00003d09 12/16/2005 7:34 PM 29.30 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001547_43a3789f_00094c5f 12/16/2005 8:31 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001547_43a44f67_000c65d4 12/17/2005 11:48 AM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001547_43a4ea81_00040d99 12/17/2005 10:50 PM 174.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001547_43a4fc8a_0008583b 12/18/2005 12:07 AM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001547_43a59749_0003d090 12/18/2005 11:07 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001547_43a5ba69_0006ea05 12/18/2005 1:37 PM 26.75 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000015a1_439cd467_00090f56 12/12/2005 8:39 PM 480.95 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000015a1_439e3410_0001312d 12/12/2005 8:38 PM 199.10 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000015a1_43a37c97_0001312d 12/16/2005 8:48 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000015a1_43a4527a_00022551 12/17/2005 12:01 PM 301 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000015a1_43a50131_00089544 12/18/2005 12:26 AM 3.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000015fd_43a4e48d_000cdfe6 12/17/2005 10:24 PM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001643_43a45ede_000bebc2 12/17/2005 12:54 PM 455 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_4394ec48_00016e36 12/5/2005 7:41 PM 243 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_4394fe03_0007270e 12/5/2005 8:57 PM 13.68 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_439a3d83_000a4083 12/9/2005 8:29 PM 4.94 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_439c90dc_000d9701 12/11/2005 2:49 PM 55.25 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_439cedc7_000e1113 12/16/2005 8:51 PM 162.34 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_439e105e_00053ec6 12/12/2005 6:05 PM 301 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_439e3dce_0005b8d8 12/12/2005 9:19 PM 55.75 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_439f7691_0008d24d 12/13/2005 7:34 PM 33.77 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_43a0bf75_0004fe3b 12/14/2005 6:57 PM 8.07 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_43a1efe6_00066ff3 12/15/2005 4:36 PM 238 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_43a36acc_000a7d8c 12/16/2005 7:35 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_43a44e68_0008d24d 12/17/2005 11:44 AM 455 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_43a4e9a9_00029f63 12/17/2005 10:46 PM 8.13 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_43a4f74e_000632ea 12/17/2005 11:44 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_43a591ea_00066ff3 12/18/2005 10:44 AM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_43a595cb_0006acfc 12/18/2005 11:00 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001649_43a5ba04_00094c5f 12/18/2005 1:35 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000169a_43a4b95f_0009c671 12/17/2005 7:41 PM 138.28 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000016c5_43a45354_0001312d 12/17/2005 12:05 PM 243 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000016c5_43a5021d_00031975 12/18/2005 12:30 AM 352 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000016d4_43a45878_000b34a7 12/17/2005 12:27 PM 4.68 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001796_43a45b28_000d59f8 12/17/2005 12:38 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000182f_43a45bb7_00000000 12/17/2005 12:40 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001850_43a45860_000501bd 12/17/2005 12:26 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000187e_43a45352_0006acfc 12/17/2005 12:05 PM 617 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000187e_43a5021c_00053ec6 12/18/2005 12:30 AM 252 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_4394ebba_00094c5f 12/5/2005 7:39 PM 63.47 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_4394fd70_000cdfe6 12/5/2005 8:54 PM 53.29 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_439a3d0e_0001e848 12/11/2005 2:46 PM 12.65 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_439a4408_000487ab 12/16/2005 7:54 PM 13.79 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_439ac08a_000aba95 12/10/2005 5:48 AM 2.34 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_439c903d_0008d24d 12/11/2005 2:46 PM 3.79 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_439ced5b_00039387 12/18/2005 1:34 PM 3.30 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_439e0fbc_00066ff3 12/12/2005 6:03 PM 23.51 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_439e3d9c_00081b32 12/12/2005 9:18 PM 3.42 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_439f43f1_000c65d4 12/13/2005 3:58 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_439f768e_000a037a 12/13/2005 7:34 PM 186 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_43a0beac_000352fc 12/14/2005 6:54 PM 149.43 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_43a36a5c_0007270e 12/16/2005 7:31 PM 4.85 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_43a375ee_000cdfe6 12/16/2005 8:20 PM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_43a44e2c_000af79e 12/18/2005 11:00 AM 563 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_43a4e92d_000af79e 12/17/2005 10:44 PM 4.66 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_43a4f72e_00090f56 12/17/2005 11:44 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_43a591df_00089544 12/18/2005 10:44 AM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_43a595b7_0009c671 12/18/2005 11:00 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018be_43a5b9f3_000e8b25 12/18/2005 1:35 PM 2.52 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018d7_439ce29c_0000f424 12/11/2005 8:47 PM 6.36 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018d7_43a45589_000cdfe6 12/17/2005 12:14 PM 330 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000018d7_43a503cf_000a7d8c 12/18/2005 12:38 AM 51.06 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001916_439ce21d_000cdfe6 12/11/2005 8:36 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001916_43a454df_000d59f8 12/17/2005 12:11 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001916_43a5033c_0002dc6c 12/18/2005 12:35 AM 64 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001953_439ce2c8_000f0537 12/11/2005 8:39 PM 9.82 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001953_43a455b9_00090f56 12/17/2005 12:15 PM 1013 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001953_43a5040d_000ca2dd 12/18/2005 12:39 AM 59.68 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000019d9_439ce834_0004c4b4 12/11/2005 9:02 PM 21.83 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000019d9_43a457d0_000d59f8 12/17/2005 12:24 PM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000019d9_43a506f6_0000f424 12/18/2005 12:51 AM 3.40 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000019da_43a459af_0001312d 12/17/2005 12:32 PM 337 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001a49_439cd3b8_000e4e1c 12/11/2005 7:34 PM 54.05 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001a49_439e2b57_0008d24d 12/12/2005 8:00 PM 174.38 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001a49_43a36fdb_0005f5e1 12/16/2005 7:54 PM 1.40 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001a49_43a37ada_0006acfc 12/16/2005 8:41 PM 4.57 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001a49_43a4516c_0001e848 12/17/2005 2:05 PM 1.03 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001a49_43a4fd99_000a7d8c 12/18/2005 12:11 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001ad4_439c931b_0005f5e1 12/11/2005 2:59 PM 472 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001ad4_439e274c_00029f63 12/12/2005 7:43 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001ad4_43a4500b_000dd40a 12/17/2005 11:54 AM 1.61 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001ad4_43a4ec5d_00057bcf 12/17/2005 10:58 PM 18.75 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001ad4_43a4fd3f_0009c671 12/18/2005 12:10 AM 7.90 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001ad4_43a59bfc_0007de29 12/18/2005 11:27 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001ad4_43a5c46a_0008d24d 12/18/2005 2:19 PM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001af4_439ce6be_0004c4b4 12/11/2005 8:55 PM 154.98 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001af4_43a456f1_00066ff3 12/17/2005 12:35 PM 1.21 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001af4_43a5053f_00022551 12/18/2005 12:44 AM 78.61 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001af6_43a4e493_0002625a 12/17/2005 10:24 PM 7.23 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001bd9_43a4bb9b_000d1cef 12/17/2005 7:30 PM 4.63 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001bfc_43a4e031_00040d99 12/17/2005 10:06 PM 7.48 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001c75_43a4dc06_00000000 12/17/2005 9:48 PM 6.02 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001cd0_439cd3f9_00022551 12/11/2005 7:35 PM 54.30 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001cd0_439e33c0_0009c671 12/12/2005 9:18 PM 81 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001cd0_43a3700b_0003567e 12/17/2005 11:45 PM 592 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001cd0_43a37c5a_000b71b0 12/16/2005 8:47 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001cd0_43a45222_000c28cb 12/17/2005 12:00 PM 958 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001cd0_43a500b2_000487ab 12/18/2005 12:24 AM 8.31 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001cdf_43a4bea3_0007270e 12/17/2005 7:42 PM 8.79 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001d11_43a4b809_000e4e1c 12/17/2005 7:14 PM 3.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001d18_43a45953_00089544 12/17/2005 12:30 PM 4.46 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001d3f_43a4d1f4_000487ab 12/17/2005 9:05 PM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001d5e_43a4d1f5_0002625a 12/17/2005 9:05 PM 8.23 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001dc0_43a45819_00029f63 12/17/2005 12:25 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001dc0_43a50752_0003567e 12/18/2005 12:53 AM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001dcb_43a4d2e0_0005f5e1 12/17/2005 9:09 PM 5.07 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001e1f_439c9314_000ca2dd 12/11/2005 2:59 PM 5.19 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001e1f_439e270e_00098968 12/18/2005 1:37 PM 13.79 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001e1f_43a36c82_000ec82e 12/16/2005 7:40 PM 28.95 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001e1f_43a37960_000a4083 12/16/2005 8:35 PM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001e1f_43a45003_0009c671 12/17/2005 11:50 AM 2.13 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001e1f_43a4ec0c_00039387 12/17/2005 10:56 PM 5.88 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001e1f_43a4fd3f_0004c4b4 12/18/2005 12:10 AM 4.09 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001e1f_43a59bf1_000ec82e 12/18/2005 11:27 AM 8.96 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001e1f_43a5c468_0006acfc 12/18/2005 2:19 PM 378.22 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00001f16_43a45bb6_0001e848 12/17/2005 12:40 PM 5.61 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002059_439ce66a_0001312d 12/18/2005 12:06 AM 3.51 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002059_43a4566e_0003d090 12/17/2005 12:18 PM 8.13 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002059_43a50506_00044aa2 12/18/2005 12:43 AM 5.90 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002079_43a4be7c_0002625a 12/17/2005 7:42 PM 4.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000020a8_43a4dba3_000aba95 12/17/2005 9:46 PM 3.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002120_43a4d2dd_00053ec6 12/17/2005 9:09 PM 109.18 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000212c_43a4d3f5_000ec82e 12/17/2005 9:13 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002213_439c9575_000b34a7 12/12/2005 6:15 PM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002213_439e28f2_0007270e 12/12/2005 7:50 PM 50.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002213_43a36f1b_00016e36 12/16/2005 7:54 PM 147.31 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002213_43a37a4b_000b71b0 12/16/2005 8:39 PM 2.01 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002213_43a450b9_00057bcf 12/17/2005 11:54 AM 411 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002213_43a4ecb4_000d9701 12/17/2005 10:59 PM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002213_43a4fd48_000c65d4 12/18/2005 12:10 AM 7.96 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000022cd_439ce1d1_0004c4b4 12/11/2005 8:34 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000022cd_43a45499_0002625a 12/17/2005 12:10 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000022ee_439c9ee5_0002dc6c 12/11/2005 3:49 PM 4.53 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000022ee_439e2b1b_000e1113 12/12/2005 7:59 PM 6.74 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000022ee_43a36f4e_0004c4b4 12/16/2005 7:52 PM 4.42 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000022ee_43a37ac1_00003d09 12/16/2005 8:41 PM 8.48 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000022ee_43a4512f_0008d24d 12/17/2005 11:55 AM 564 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000022ee_43a4ed1c_000ca2dd 12/17/2005 11:01 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000022ee_43a4fd6f_000af79e 12/18/2005 12:10 AM 59.04 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002332_43a4e01c_000d1cef 12/17/2005 10:05 PM 65.32 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002350_439c9c8a_000b34a7 12/11/2005 3:39 PM 47 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002350_439e2b1b_000d1cef 12/12/2005 7:59 PM 26.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002350_43a36f4e_0001312d 12/16/2005 7:52 PM 6.15 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002350_43a37aa4_000a4083 12/16/2005 8:40 PM 5.03 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002350_43a45118_0007a120 12/17/2005 11:55 AM 4.20 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002350_43a4ed17_000487ab 12/17/2005 11:01 PM 7.37 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000023c9_439e3566_00066ff3 12/12/2005 8:43 PM 3.83 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000023c9_43a453bf_000aba95 12/17/2005 12:06 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000023c9_43a5025b_00029f63 12/18/2005 12:31 AM 361 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002462_43a4bee0_000bebc2 12/17/2005 7:44 PM 8.79 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000249e_439ce316_000bebc2 12/11/2005 8:40 PM 71.29 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000249e_43a455c0_00039387 12/17/2005 12:35 PM 360 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000249e_43a50464_0003567e 12/18/2005 12:40 AM 9.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000251f_43a45953_0000b71b 12/17/2005 12:30 PM 4.43 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002528_43a4b80a_0002625a 12/17/2005 7:14 PM 4.09 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000252a_43a457f4_000b71b0 12/17/2005 12:24 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000252a_43a50751_0007270e 12/18/2005 12:53 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002568_43a4e02f_000e1113 12/18/2005 1:36 PM 347.10 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000260d_439c9576_00044aa2 12/12/2005 6:15 PM 2.01 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000260d_439e2902_00016e36 12/12/2005 7:50 PM 28.80 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000260d_43a36f1b_000ec82e 12/16/2005 7:51 PM 1.41 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000260d_43a450d2_00003d09 12/17/2005 11:54 AM 245 bytes Hidden from Windows API. C:\Program Files\Nikws

#12 mra

New Member

Authentic Member
15 posts

Posted 18 December 2005 - 02:59 PM

this is the second half of the rootkit log. C:\Program Files\Nikws nt\Cache\00002ea6_43a37790_000e8b25 12/17/2005 10:59 PM 70.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002ea6_43a44e82_0007de29 12/17/2005 11:44 AM 489 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002ea6_43a4ea73_00076417 12/17/2005 10:49 PM 197.00 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002ea6_43a4f945_0000f424 12/17/2005 11:53 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002ea6_43a591f0_00003d09 12/18/2005 10:44 AM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002ea6_43a59672_000f0537 12/18/2005 11:03 AM 6.11 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002ea6_43a5ba0a_000cdfe6 12/18/2005 1:35 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002f0b_43a4e030_0007de29 12/17/2005 10:06 PM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002f0c_43a4bc63_00090f56 12/17/2005 7:33 PM 5.97 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002f14_439cd5be_000e1113 12/11/2005 7:43 PM 45.52 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002f14_43a4542b_000501bd 12/17/2005 12:08 PM 695 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002f14_43a502ba_0005f5e1 12/18/2005 12:33 AM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002fe7_43a4b960_000f0537 12/17/2005 7:20 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002fff_439cd5ea_0002625a 12/11/2005 7:44 PM 7.50 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002fff_43a45488_0001e848 12/17/2005 12:10 PM 2.27 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00002fff_43a50308_0007a120 12/18/2005 12:34 AM 56.67 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003004_43a45ae1_0002dc6c 12/17/2005 12:37 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000301c_439c96a5_00066ff3 12/17/2005 10:46 PM 5.38 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000301c_439e296a_0003567e 12/12/2005 7:53 PM 12.01 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000301c_43a36f1f_00000000 12/16/2005 7:51 PM 1.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000301c_43a37a83_00057bcf 12/16/2005 8:40 PM 4.43 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000301c_43a450ec_00066ff3 12/17/2005 11:54 AM 455 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000301c_43a4ecb8_0003567e 12/17/2005 10:59 PM 45.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000301c_43a4fd4e_0003567e 12/18/2005 12:10 AM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000305e_4394ecf8_00066ff3 12/5/2005 7:44 PM 1.17 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000305e_439c90e4_000dd40a 12/11/2005 2:49 PM 1 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000305e_439e1197_00066ff3 12/12/2005 6:11 PM 27.98 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000305e_439e3e0a_000d59f8 12/12/2005 9:20 PM 55.20 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000305e_439f77e5_000c28cb 12/13/2005 7:39 PM 48.62 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000305e_43a0c224_00039005 12/14/2005 7:08 PM 298 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000305e_43a1f00f_00076417 12/15/2005 4:37 PM 35.57 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000305e_43a36af8_0005b8d8 12/16/2005 7:35 PM 2.00 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000305e_43a44f1e_00031975 12/17/2005 11:47 AM 4.03 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000305e_43a4ea7d_00044aa2 12/17/2005 10:50 PM 7.53 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000305e_43a4fc65_000baeb9 12/18/2005 12:06 AM 300.06 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000305e_43a5ba20_00040d99 12/18/2005 1:36 PM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003087_43a4b815_00044aa2 12/17/2005 7:15 PM 280 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000030f1_43a4b81a_0002dc6c 12/17/2005 7:15 PM 3.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003106_43a4dc26_00003d09 12/17/2005 9:48 PM 8.34 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000314f_439cd3e2_00066ff3 12/11/2005 7:35 PM 81 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000314f_43a37006_0003d090 12/16/2005 7:55 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000314f_43a37c43_0007270e 12/16/2005 8:47 PM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000314f_43a4521f_0003d090 12/17/2005 12:03 PM 1.59 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000314f_43a5009f_000b34a7 12/18/2005 12:24 AM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000323b_439c944a_00057bcf 12/11/2005 3:04 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000323b_439e28dc_0008583b 12/12/2005 7:50 PM 51.29 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000323b_43a36d0f_00040d99 12/18/2005 12:07 AM 2.65 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000323b_43a37a4b_00066ff3 12/16/2005 8:40 PM 121.58 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000323b_43a450b9_00022551 12/17/2005 11:54 AM 548 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000323b_43a4eca5_000dd40a 12/17/2005 10:59 PM 166 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000323b_43a4fd48_00076417 12/18/2005 12:10 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003295_43a4b834_000c65d4 12/17/2005 7:15 PM 7.57 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000032e6_439ce224_000d59f8 12/11/2005 8:36 PM 12.46 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000032e6_43a45509_000dd40a 12/17/2005 12:12 PM 207 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000032e6_43a50385_000e8b25 12/18/2005 12:36 AM 10.19 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000032e7_43a4d3f4_000e4e1c 12/17/2005 9:13 PM 60.03 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003382_43a4be7b_000bebc2 12/17/2005 7:42 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000033cd_43a4e49f_0004c4b4 12/17/2005 10:25 PM 7.53 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000033ea_439e3561_00089544 12/12/2005 8:43 PM 4.04 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000033ea_43a4539b_0004c4b4 12/17/2005 12:06 PM 617 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000033ea_43a50257_0001ab3f 12/18/2005 12:31 AM 3.51 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003459_43a460b5_00029f63 12/17/2005 1:02 PM 243 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003492_43a459a8_000632ea 12/17/2005 12:35 PM 1.62 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000357e_43a4dc2f_0000f424 12/17/2005 9:49 PM 5.96 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000366b_439cd3fb_0007270e 12/11/2005 7:35 PM 53.66 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000366b_439e33c7_0005f5e1 12/12/2005 9:19 PM 158.69 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000366b_43a45223_0001e848 12/17/2005 12:00 PM 4.24 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000366b_43a500b2_000632ea 12/18/2005 12:24 AM 3.94 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000368e_439cd5d0_000f0537 12/11/2005 7:43 PM 44.82 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000368e_43a45448_00076417 12/17/2005 12:09 PM 256 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003699_43a452d5_00098968 12/17/2005 12:03 PM 1.37 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003699_43a50198_00022551 12/18/2005 12:28 AM 192.60 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000036a1_43a4d276_000d9701 12/17/2005 9:07 PM 5.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000036c2_43a4be96_000e1113 12/17/2005 7:42 PM 8.68 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000037be_43a4dbd4_00016e36 12/17/2005 9:47 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000037e5_43a45817_000d59f8 12/17/2005 12:25 PM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000037e5_43a50752_0000b71b 12/18/2005 12:53 AM 4.65 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000037e6_439ce829_000dd40a 12/11/2005 9:02 PM 31.25 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000037e6_43a457ad_000ca2dd 12/17/2005 12:23 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000037e6_43a506f1_00053ec6 12/18/2005 12:51 AM 11.86 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003807_43a45935_000a037a 12/17/2005 12:30 PM 301 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000388a_43a4e489_000ec82e 12/17/2005 10:24 PM 7.49 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_4394ecc1_00029f63 12/5/2005 7:43 PM 4.88 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_439c90e4_00040d99 12/13/2005 7:34 PM 1.07 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_439cedf5_00022551 12/11/2005 9:26 PM 31.84 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_439e10d9_000c65d4 12/12/2005 6:07 PM 23.58 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_439e3dfe_000b71b0 12/12/2005 9:20 PM 53.59 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_439f775b_0007270e 12/16/2005 8:51 PM 204 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_43a0c216_0001a7bd 12/14/2005 7:08 PM 32.41 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_43a1f004_000f0537 12/15/2005 4:36 PM 1.18 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_43a36ad8_000501bd 12/16/2005 7:33 PM 5.20 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_43a37792_0006acfc 12/16/2005 8:27 PM 9.65 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_43a44ecc_000ec82e 12/17/2005 11:45 AM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_43a4ea7a_000d1cef 12/17/2005 10:50 PM 240 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_43a4f954_00053ec6 12/17/2005 11:53 PM 952 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_43a59202_000d9701 12/18/2005 10:44 AM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_43a596d2_00040d99 12/18/2005 11:05 AM 3.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000390c_43a5ba12_000a037a 12/18/2005 1:35 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003960_43a4606e_0009c671 12/17/2005 1:01 PM 242 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039b3_4394f92c_00066ff3 12/5/2005 8:36 PM 2.70 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039b3_439c90f5_000aba95 12/11/2005 2:49 PM 4.64 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039b3_439cf0b0_0001e848 12/11/2005 9:38 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039b3_439e1656_0000f424 12/12/2005 6:31 PM 19.31 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039b3_439e3e21_00039387 12/12/2005 9:21 PM 55.22 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039b3_43a36b20_00098968 12/16/2005 7:35 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039b3_43a378ef_00016e36 12/16/2005 8:33 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039b3_43a44f6a_0000f424 12/17/2005 11:48 AM 560 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039b3_43a4ea84_0002dc6c 12/17/2005 10:50 PM 7.34 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039b3_43a4fc8d_0007a120 12/18/2005 12:07 AM 7.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039b3_43a5974a_00016e36 12/18/2005 11:07 AM 7.53 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039b3_43a5ba70_00000000 12/18/2005 1:37 PM 298 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000039ce_43a45a0d_000c65d4 12/17/2005 12:33 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a2d_439ce75a_000baeb9 12/11/2005 9:00 PM 29.77 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a2d_43a45743_00081b32 12/17/2005 12:21 PM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a2d_43a50604_000b71b0 12/18/2005 12:47 AM 39.87 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a61_439cd61e_000d59f8 12/11/2005 7:45 PM 11.44 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a61_43a4548a_000b34a7 12/17/2005 12:10 PM 4.39 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a61_43a5031b_000501bd 12/18/2005 12:35 AM 50.84 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a72_43a4e493_00039387 12/17/2005 10:24 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a8d_43a458a7_00057bcf 12/17/2005 12:27 PM 205 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a9e_439cd3c6_000d9701 12/11/2005 7:35 PM 54.15 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a9e_439e2b69_0007a120 12/12/2005 8:01 PM 147 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a9e_43a36fe0_0009c671 12/16/2005 7:54 PM 298 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a9e_43a37bf9_00066ff3 12/16/2005 8:46 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a9e_43a451b5_000a037a 12/17/2005 11:58 AM 4.24 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003a9e_43a4fda1_0006acfc 12/18/2005 12:11 AM 5.88 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003b25_439c912c_00040d99 12/11/2005 2:50 PM 55.50 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003b25_43a36c7f_000a7d8c 12/16/2005 7:40 PM 29.59 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003b25_43a3795f_000d1cef 12/16/2005 8:35 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003b25_43a44ffa_000d1cef 12/17/2005 12:03 PM 208 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003b25_43a4fd3e_000ca2dd 12/18/2005 12:10 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003b25_43a59bf1_00090f56 12/18/2005 11:27 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003b25_43a5c354_000e4e1c 12/18/2005 2:15 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003b97_43a460c6_0006acfc 12/17/2005 1:02 PM 3.98 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003bb1_43a45a55_0006acfc 12/17/2005 12:35 PM 619 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003bf6_439cd3bc_000d9701 12/11/2005 7:34 PM 54.70 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003bf6_439e2b68_000baeb9 12/12/2005 8:01 PM 166.75 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003bf6_43a36fdc_00044aa2 12/16/2005 7:54 PM 6.17 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003bf6_43a37bf7_000a037a 12/16/2005 8:46 PM 261.21 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003bf6_43a451a7_000d59f8 12/17/2005 11:57 AM 235 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003bf6_43a4fda1_0000f424 12/18/2005 12:11 AM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003c61_439cd5e9_000af79e 12/11/2005 7:44 PM 174.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003c61_43a45486_0003567e 12/17/2005 12:10 PM 4.21 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003cd5_439cd566_00031975 12/11/2005 7:41 PM 45.39 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003cd5_439e354c_00031975 12/12/2005 8:43 PM 540 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003cd5_43a45355_000a4083 12/17/2005 12:05 PM 5.17 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003cd5_43a50230_0007a120 12/18/2005 12:31 AM 3.82 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003cd6_439cd5b4_000e4e1c 12/11/2005 7:43 PM 8.83 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003cd6_439e3c21_0000b71b 12/12/2005 9:12 PM 20.45 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003cd6_43a45406_0007a120 12/17/2005 12:08 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003cd6_43a5026b_0007de29 12/18/2005 12:32 AM 139.23 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_4394fd7a_000e1113 12/5/2005 8:54 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_439a3d55_00094c5f 12/9/2005 8:28 PM 366 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_439c9089_00098968 12/11/2005 2:48 PM 5.36 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_439ced9a_000c28cb 12/17/2005 7:18 PM 22.80 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_439e1054_000d1cef 12/12/2005 6:05 PM 30.59 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_439e3db8_000e8b25 12/12/2005 9:19 PM 54.39 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_439f442d_0001312d 12/13/2005 3:59 PM 4.35 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_439f768f_0004c4b4 12/13/2005 7:34 PM 240 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_43a0becd_000352fc 12/14/2005 6:54 PM 5.19 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_43a1efe2_000cdfe6 12/15/2005 4:36 PM 348 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_43a36a93_0007de29 12/16/2005 7:32 PM 72.72 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_43a375f0_0006acfc 12/16/2005 8:20 PM 7.32 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_43a44e44_000baeb9 12/17/2005 11:43 AM 4.18 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_43a4e98d_00039387 12/17/2005 10:46 PM 3.37 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_43a4f734_00098968 12/17/2005 11:44 PM 9.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_43a591e1_0007de29 12/18/2005 10:44 AM 7.49 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_43a595b9_00066ff3 12/18/2005 11:00 AM 7.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003d6c_43a5b9f5_000ca2dd 12/18/2005 1:35 PM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003e12_439cd3b5_000dd40a 12/11/2005 7:37 PM 54.37 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003e12_439e2b32_000e4e1c 12/12/2005 8:00 PM 147 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003e12_43a37ad9_00040d99 12/16/2005 8:41 PM 1.41 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003e12_43a4516b_0009c671 12/17/2005 11:56 AM 235 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003e12_43a4ed2d_000a4083 12/17/2005 11:01 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003e12_43a4fd8f_00094c5f 12/18/2005 12:11 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003ee9_43a4b8b9_00066ff3 12/17/2005 7:17 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003ef6_43a37c98_0003d090 12/16/2005 8:48 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003ef6_43a4527e_00039387 12/17/2005 12:06 PM 4.00 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003f0b_43a4b815_00039387 12/17/2005 7:15 PM 3.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003f4a_43a45c7b_000d59f8 12/17/2005 12:44 PM 1.47 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00003f97_43a4b816_0001ab3f 12/17/2005 7:15 PM 9.77 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000401d_439ce225_0000f424 12/11/2005 8:36 PM 298 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000401d_43a4550b_0001e848 12/17/2005 12:12 PM 4.95 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000401d_43a50386_0002dc6c 12/18/2005 12:36 AM 10.31 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004027_43a46126_000a037a 12/17/2005 1:04 PM 458 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004080_439cd56b_000dd40a 12/13/2005 7:40 PM 6.00 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004080_43a45396_000dd40a 12/17/2005 12:06 PM 617 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004080_43a50256_0007270e 12/18/2005 12:31 AM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004087_43a45822_00007a12 12/17/2005 12:25 PM 4.36 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000409d_439cd483_00090f56 12/11/2005 7:38 PM 298 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000409d_439e3467_0007de29 12/12/2005 8:39 PM 14.41 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000409d_43a37d17_000a4083 12/16/2005 8:51 PM 1 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000409d_43a45289_000487ab 12/17/2005 12:01 PM 4.21 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000409d_43a5015f_00031975 12/18/2005 12:27 AM 192.36 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000040a5_43a4b809_0003567e 12/17/2005 7:14 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000412f_43a4b81a_00022551 12/17/2005 7:15 PM 8.13 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_4394ec48_00057bcf 12/16/2005 7:33 PM 455 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_4394fe58_00098968 12/14/2005 7:08 PM 52.12 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_439c90df_000a4083 12/11/2005 2:49 PM 1 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_439cedd1_00066ff3 12/11/2005 9:26 PM 7.64 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_439e105f_0002625a 12/16/2005 7:33 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_439e3de5_000d9701 12/12/2005 9:20 PM 55.01 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_439f76da_0002dc6c 12/13/2005 7:35 PM 28.41 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_43a0bf82_00048429 12/14/2005 6:57 PM 6.04 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_43a1efe8_000487ab 12/17/2005 10:55 PM 340 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_43a36ad1_0002dc6c 12/16/2005 7:33 PM 242 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_43a37762_00089544 12/16/2005 8:26 PM 4.07 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_43a44e72_000501bd 12/17/2005 11:54 AM 358 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_43a4e9b1_0006ea05 12/17/2005 10:46 PM 84 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_43a4f74f_000d59f8 12/17/2005 11:44 PM 6.11 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_43a591ea_000e1113 12/18/2005 10:44 AM 760 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_43a595d0_000baeb9 12/18/2005 11:01 AM 715 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000041bb_43a5ba05_00016e36 12/18/2005 1:35 PM 280 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000422d_439cd5c7_000cdfe6 12/11/2005 7:43 PM 45.46 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000422d_43a45433_00016e36 12/17/2005 12:08 PM 3.50 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004230_439cd412_0009c671 12/11/2005 7:36 PM 54.72 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004230_43a45223_0007a120 12/17/2005 12:00 PM 232 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004230_43a50128_000af79e 12/18/2005 12:26 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000428b_439c9116_000baeb9 12/11/2005 7:36 PM 54.13 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000428b_439cf16e_000d1cef 12/11/2005 9:41 PM 22.36 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000428b_439e264a_0006acfc 12/12/2005 9:17 PM 1.79 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000428b_43a36b71_000e1113 12/16/2005 7:35 PM 13.68 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000428b_43a37902_0005f5e1 12/16/2005 8:33 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000428b_43a44fb5_000a4083 12/17/2005 11:49 AM 599 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000428b_43a4ea9a_00016e36 12/17/2005 10:50 PM 7.61 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000428b_43a59bbf_00039387 12/18/2005 11:26 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000428b_43a5c2fe_00016e36 12/18/2005 2:13 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000042be_43a4e485_0006acfc 12/17/2005 10:24 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004325_43a46b01_0000f424 12/17/2005 1:46 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004328_43a4d275_000c28cb 12/17/2005 9:07 PM 196.02 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004346_43a4d3f7_000aba95 12/17/2005 9:13 PM 8.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004365_43a4be44_00098968 12/17/2005 7:41 PM 7.98 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000043db_43a4dfed_000ca2dd 12/17/2005 10:05 PM 7.51 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004402_439ce270_000b71b0 12/11/2005 8:37 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004402_43a45571_000f0537 12/17/2005 12:14 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004402_43a503c8_00094c5f 12/18/2005 12:38 AM 53.23 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_4394f0fa_00000000 12/5/2005 8:01 PM 196 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_439c90e5_00094c5f 12/11/2005 2:49 PM 1.12 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_439cf044_0005f5e1 12/11/2005 9:36 PM 74.39 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_439e119f_000e4e1c 12/12/2005 6:11 PM 84 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_439e3e0d_0001312d 12/12/2005 9:20 PM 55.53 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_439f77fd_000bebc2 12/13/2005 7:40 PM 23.56 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_43a0c224_000ec4ac 12/14/2005 7:08 PM 83.15 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_43a1f011_0006acfc 12/15/2005 4:37 PM 1.82 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_43a36af8_0009c671 12/16/2005 7:33 PM 2.85 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_43a37896_0007270e 12/16/2005 8:31 PM 181.88 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_43a44f1f_000501bd 12/17/2005 11:47 AM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_43a4ea7d_00076417 12/17/2005 10:50 PM 243 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_43a4fc6a_000d59f8 12/18/2005 12:06 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_43a5970e_000a4083 12/18/2005 11:06 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000440d_43a5ba27_0004c4b4 12/18/2005 1:36 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000441d_43a4b833_000c65d4 12/17/2005 7:15 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000442b_43a45820_0000b71b 12/17/2005 12:28 PM 1.61 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004509_439c9127_000ca2dd 12/11/2005 2:50 PM 55.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004509_439e269f_0001e848 12/12/2005 7:40 PM 30.85 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004509_43a36c38_0007de29 12/16/2005 7:39 PM 5.08 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004509_43a37956_000d59f8 12/16/2005 8:35 PM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004509_43a44ff8_000a7d8c 12/17/2005 11:50 AM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004509_43a4ebac_00031975 12/17/2005 10:55 PM 239 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004509_43a59bdf_0005b8d8 12/18/2005 11:26 AM 4.85 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004509_43a5c345_00057bcf 12/18/2005 2:15 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000456d_43a4d249_0003567e 12/17/2005 9:06 PM 592.44 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000458f_43a4578a_0004c4b4 12/17/2005 12:23 PM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000458f_43a506e3_000bebc2 12/18/2005 12:51 AM 8.02 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000045c5_43a46027_0006ea05 12/17/2005 12:59 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004626_43a4bea3_00016e36 12/17/2005 7:42 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004657_439cd5df_000cdfe6 12/11/2005 7:43 PM 5.67 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004657_43a45476_0006acfc 12/17/2005 12:09 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004657_43a502ec_000a037a 12/18/2005 12:34 AM 3.81 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000468c_43a4b80a_00081b32 12/17/2005 7:14 PM 7.50 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000046a7_43a4e002_000dd40a 12/17/2005 10:05 PM 7.60 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000046c2_43a4b949_000a4083 12/17/2005 7:20 PM 4.01 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000046cf_439ce6ef_00029f63 12/11/2005 9:39 PM 19.74 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000046cf_43a456fd_0002625a 12/17/2005 12:20 PM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000046cf_43a50555_00007a12 12/18/2005 12:44 AM 52.86 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000470e_43a45b6f_000dd40a 12/17/2005 12:39 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_4394ebac_00040d99 12/17/2005 10:45 PM 896 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_4394fd4f_0002625a 12/5/2005 8:54 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_4394fd66_00094c5f 12/5/2005 8:54 PM 393 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_439a3d0a_000501bd 12/11/2005 2:46 PM 75.07 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_439a3d45_000baeb9 12/9/2005 8:28 PM 4.72 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_439a4406_00044aa2 12/18/2005 1:37 PM 383 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_439ac088_000b34a7 12/10/2005 5:48 AM 1.32 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_439ac6f9_000baeb9 12/10/2005 6:15 AM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_439b28a9_0000b71b 12/17/2005 11:45 PM 15.32 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_439c903c_0004c4b4 12/11/2005 2:46 PM 38.48 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_439e0fb3_0005b8d8 12/12/2005 6:02 PM 58.31 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_439f43ca_000c65d4 12/13/2005 3:57 PM 4.35 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_439f8bc1_000cdfe6 12/13/2005 9:04 PM 4.85 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_43a0be7f_000dd088 12/14/2005 6:53 PM 3.40 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_43a1efae_0003567e 12/15/2005 4:35 PM 84 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_43a375ee_0005f5e1 12/16/2005 8:20 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_43a44e28_000bebc2 12/18/2005 11:00 AM 1.23 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_43a4f6f6_00066ff3 12/17/2005 11:43 PM 3.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_43a4f717_000c28cb 12/17/2005 11:43 PM 8.04 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004823_43a591df_0007270e 12/18/2005 10:44 AM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000486a_43a45a9a_000baeb9 12/17/2005 12:36 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000489c_439ce1fd_000f0537 12/11/2005 9:02 PM 35.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000489c_43a454d2_00016e36 12/17/2005 12:11 PM 4.42 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000489c_43a5033c_0002625a 12/18/2005 12:35 AM 10.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000048cc_439cd577_0008d24d 12/11/2005 7:42 PM 1 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000048cc_439e356d_00081b32 12/12/2005 8:43 PM 25.93 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000048cc_43a453c1_000e1113 12/17/2005 12:06 PM 1.37 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000048cc_43a5025b_000501bd 12/18/2005 12:31 AM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000048db_43a45e7e_000632ea 12/17/2005 12:52 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_4394f0fb_00081b32 12/5/2005 8:01 PM 38.30 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_439c90e6_0001312d 12/11/2005 2:49 PM 3.10 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_439cf047_000ca2dd 12/11/2005 9:36 PM 4.69 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_439e3e11_00029f63 12/12/2005 9:20 PM 51.02 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_439f7838_000a4083 12/13/2005 7:41 PM 22.33 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_43a0c29f_000a7a0a 12/14/2005 7:10 PM 53.38 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_43a1f012_000e1113 12/15/2005 4:37 PM 376 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_43a36afe_00000000 12/16/2005 7:35 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_43a37898_0007de29 12/16/2005 8:31 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_43a44f39_0003d090 12/18/2005 11:00 AM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_43a4ea7e_00098968 12/17/2005 10:50 PM 1.12 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_43a4fc6b_000a037a 12/18/2005 12:06 AM 7.62 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_43a5970e_000d9701 12/18/2005 11:06 AM 7.55 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000491c_43a5ba27_00089544 12/18/2005 1:36 PM 7.55 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004944_439cd3ec_00007a12 12/11/2005 7:35 PM 54.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004944_439e33b0_0006acfc 12/12/2005 8:36 PM 5.96 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004944_43a37006_000ca2dd 12/16/2005 7:55 PM 8.02 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004944_43a45222_00003d09 12/17/2005 12:00 PM 5.15 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000494a_439ce255_000af79e 12/11/2005 8:37 PM 29.74 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000494a_43a45552_0001ab3f 12/17/2005 12:13 PM 2.11 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004963_43a4be97_00044aa2 12/17/2005 7:42 PM 3.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000049bb_43a45d78_0004c4b4 12/17/2005 12:48 PM 156 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000049d0_43a4dc05_000baeb9 12/17/2005 9:48 PM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000049f7_43a4581f_000ca2dd 12/17/2005 12:25 PM 328 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004a80_439e3504_000aba95 12/12/2005 8:42 PM 112.47 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004a80_43a4532f_0000f424 12/17/2005 12:04 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004a80_43a50217_00029f63 12/18/2005 12:30 AM 193.17 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ad4_43a45c1a_000f0537 12/17/2005 12:42 PM 1.22 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_4394ebd2_000dd40a 12/5/2005 7:39 PM 109.06 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_4394fd79_0006acfc 12/5/2005 8:54 PM 28.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_439a3d54_0009c671 12/9/2005 8:28 PM 122.24 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_439a4409_000ec82e 12/9/2005 8:57 PM 82.95 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_439c9088_00022551 12/18/2005 12:27 AM 221.22 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_439e101f_000c65d4 12/12/2005 7:57 PM 18.60 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_439e3daf_000c65d4 12/12/2005 9:19 PM 5.03 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_439f4429_000a4083 12/13/2005 3:59 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_439f768f_00003d09 12/17/2005 11:54 AM 455 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_43a0becc_0005784d 12/14/2005 6:54 PM 159.35 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_43a1efe1_000d1cef 12/15/2005 4:36 PM 890 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_43a36a8e_00007a12 12/16/2005 7:31 PM 28.94 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_43a375ef_000e8b25 12/16/2005 8:20 PM 2.98 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_43a44e33_0002625a 12/18/2005 11:00 AM 146.99 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_43a4e986_000d59f8 12/17/2005 10:45 PM 1 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_43a591e0_0000f424 12/18/2005 10:44 AM 8.11 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_43a595b8_00090f56 12/18/2005 11:00 AM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ae1_43a5b9f5_000487ab 12/18/2005 1:35 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004af3_43a4dba2_000d59f8 12/17/2005 9:46 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004b40_439c9ee6_000d1cef 12/11/2005 3:49 PM 47 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004b40_439e2b1c_00098968 12/12/2005 7:59 PM 14.38 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004b40_43a36f54_00039387 12/17/2005 11:56 PM 3.25 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004b40_43a37ac1_0004c4b4 12/16/2005 8:41 PM 5.18 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004b40_43a45131_00016e36 12/17/2005 11:56 AM 937 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004b40_43a4ed1d_0000b71b 12/17/2005 11:01 PM 7.45 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004b40_43a4fd70_0000b71b 12/18/2005 12:10 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004c66_43a4bb8c_00031975 12/17/2005 7:29 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004c85_43a45a82_000d59f8 12/17/2005 12:35 PM 346 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004cad_439cd3e1_00081b32 12/11/2005 7:35 PM 54.33 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004cad_439e3392_0009c671 12/17/2005 7:18 PM 1.39 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004cad_43a37005_000dd40a 12/18/2005 1:35 PM 33.06 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004cad_43a451ee_000501bd 12/17/2005 11:59 AM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004cad_43a50091_0009c671 12/18/2005 12:24 AM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004cd4_439ce667_00003d09 12/11/2005 8:54 PM 7.73 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004cd4_43a45649_0000f424 12/17/2005 12:17 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004cd4_43a50505_000d9701 12/18/2005 12:43 AM 656 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004cff_43a4dbfb_0001e848 12/17/2005 9:48 PM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_4394f8d6_000baeb9 12/5/2005 8:35 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_439c90e9_0006ea05 12/11/2005 7:36 PM 54.50 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_439cf050_0001312d 12/11/2005 9:36 PM 5.35 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_439e12fd_000f0537 12/12/2005 6:17 PM 29.06 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_439e3e14_00007a12 12/12/2005 9:20 PM 56.52 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_439f787b_00000000 12/13/2005 7:42 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_43a0c34c_000e0d91 12/14/2005 7:13 PM 53.40 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_43a1f013_00066ff3 12/15/2005 4:37 PM 188 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_43a36b04_00000000 12/16/2005 7:33 PM 5.10 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_43a37898_000dd40a 12/16/2005 8:31 PM 6.10 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_43a44f3a_0002625a 12/17/2005 11:47 AM 735 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_43a4ea7e_000e8b25 12/17/2005 10:50 PM 24.00 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_43a5970f_000501bd 12/18/2005 11:06 AM 3.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d06_43a5ba27_00098968 12/18/2005 1:36 PM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d54_43a459c5_0003d090 12/17/2005 1:20 PM 37.03 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d67_43a45bb7_000dd40a 12/17/2005 12:40 PM 4.67 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004d9a_43a4b834_00076417 12/17/2005 7:15 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004db7_4394f8d7_000baeb9 12/11/2005 8:56 PM 100.18 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004db7_439c90ea_00022551 12/11/2005 2:49 PM 4.74 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004db7_439e1306_0001e848 12/12/2005 6:17 PM 472 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004db7_439e3e15_00007a12 12/12/2005 9:20 PM 78 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004db7_43a1f013_000bebc2 12/15/2005 4:37 PM 4.67 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004db7_43a36b0b_0003567e 12/16/2005 7:34 PM 7 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004db7_43a37899_00029f63 12/16/2005 8:31 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004db7_43a44f43_0002625a 12/17/2005 11:47 AM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004db7_43a4ea7f_0005b8d8 12/17/2005 10:50 PM 239 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004db7_43a4fc8a_00040d99 12/18/2005 12:07 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004db7_43a59748_000ec82e 12/18/2005 11:07 AM 328.35 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004db7_43a5ba27_000baeb9 12/18/2005 1:36 PM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004dc8_4394fa7e_000a4083 12/5/2005 8:42 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004dc8_439c910c_000aba95 12/11/2005 7:36 PM 53.75 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004dc8_439cf114_000d9701 12/11/2005 9:42 PM 30.54 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004dc8_439e170d_000487ab 12/12/2005 6:34 PM 20.39 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004dc8_439e3e2a_000dd40a 12/12/2005 9:21 PM 54.69 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004dc8_43a1f070_000dd40a 12/15/2005 4:38 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004dc8_43a36b4e_00040d99 12/16/2005 7:35 PM 2.85 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004dc8_43a378f5_0009c671 12/17/2005 10:46 PM 606 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004dc8_43a44fb2_0004c4b4 12/17/2005 11:49 AM 4.41 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004dc8_43a4fc96_0003d090 12/18/2005 12:07 AM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004dc8_43a597a5_000501bd 12/18/2005 11:08 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004dc8_43a5baa8_000b34a7 12/18/2005 1:38 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004df2_439cd3e9_0008d24d 12/11/2005 7:35 PM 54.40 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004df2_439e339b_000487ab 12/12/2005 8:36 PM 619 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004df2_43a37006_000a037a 12/16/2005 7:55 PM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004df2_43a37c4c_00016e36 12/16/2005 8:47 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004df2_43a45221_000c65d4 12/17/2005 12:00 PM 186 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004df2_43a500a0_0001ab3f 12/18/2005 12:24 AM 5.88 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004e08_43a46b48_000e1113 12/17/2005 1:47 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004e38_43a4be44_000f0537 12/17/2005 7:41 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004e45_439c944a_00044aa2 12/11/2005 3:04 PM 0 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004e45_439e2835_0007270e 12/12/2005 7:47 PM 50.70 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004e45_43a36d09_000d9701 12/16/2005 7:42 PM 5.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004e45_43a37a44_0001312d 12/16/2005 8:40 PM 61.23 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004e45_43a4508b_0005f5e1 12/17/2005 11:53 AM 4.40 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004e45_43a4fd44_000b71b0 12/18/2005 12:10 AM 9.68 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004e55_43a4b96e_00031975 12/17/2005 7:20 PM 7.37 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004e57_43a45cdd_0000b71b 12/17/2005 12:45 PM 1.47 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004eae_43a45da4_0006ea05 12/17/2005 12:49 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ebf_43a4c3a9_00022551 12/17/2005 8:04 PM 3.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004efe_43a4bb9b_000a037a 12/17/2005 7:30 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004f5b_43a4e026_00040d99 12/17/2005 10:05 PM 6.02 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004f68_43a45ce7_00003d09 12/17/2005 12:45 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004fc0_43a4b83c_000f0537 12/17/2005 7:15 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004fe2_43a4bc62_000c28cb 12/17/2005 7:33 PM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00004ff8_43a45a86_000bebc2 12/17/2005 12:35 PM 4.61 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00005005_43a458ef_0006ea05 12/17/2005 12:29 PM 243 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00005039_439ce2a9_0007de29 12/11/2005 8:40 PM 18.13 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00005039_43a45597_00029f63 12/17/2005 12:14 PM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00005039_43a503f2_000d1cef 12/18/2005 12:38 AM 24.61 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00005064_43a459af_0006acfc 12/17/2005 12:32 PM 4.81 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00005078_43a45820_0005f5e1 12/17/2005 12:25 PM 4.58 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000050a9_43a4be7b_0006ea05 12/18/2005 1:35 PM 202.93 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000050bf_43a4b94e_000e8b25 12/17/2005 7:20 PM 3.94 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000513e_43a45a83_0004c4b4 12/17/2005 12:35 PM 519 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000051d1_43a4ba57_0002625a 12/17/2005 7:24 PM 8.29 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000520b_43a45f9a_0001e848 12/17/2005 12:57 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000527f_43a4dff8_00090f56 12/17/2005 10:05 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000053b1_43a46e9e_0002dc6c 12/17/2005 2:01 PM 243 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00005422_439e3432_000d59f8 12/12/2005 8:38 PM 64.77 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00005422_43a4527d_000ca2dd 12/17/2005 12:01 PM 1.37 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000542c_439ce2af_0008583b 12/11/2005 8:39 PM 31.35 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000542c_43a45598_0001312d 12/17/2005 12:14 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000542c_43a503f9_0008583b 12/18/2005 12:38 AM 71.87 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00005478_43a4de4b_0006acfc 12/18/2005 1:34 PM 329 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054be_43a4dfea_000b34a7 12/17/2005 10:04 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054d6_43a4b814_0006ea05 12/18/2005 1:35 PM 70.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054dc_439cd5c8_0006acfc 12/11/2005 7:43 PM 436 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054dc_43a45447_000cdfe6 12/17/2005 12:09 PM 208 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054dc_43a502cf_00031975 12/18/2005 12:33 AM 46.11 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054de_4394f92c_0002625a 12/5/2005 8:36 PM 722 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054de_439c90f5_00031975 12/11/2005 7:36 PM 54.27 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054de_439e164a_0004c4b4 12/12/2005 6:32 PM 17.18 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054de_439e3e1e_000cdfe6 12/12/2005 9:21 PM 54.28 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054de_43a36b19_0004c4b4 12/16/2005 7:34 PM 27.79 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054de_43a44f68_000d59f8 12/17/2005 12:01 PM 833 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054de_43a4ea83_000f0537 12/17/2005 10:50 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054de_43a4fc8a_0009c671 12/18/2005 12:07 AM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054de_43a59749_000e1113 12/18/2005 11:07 AM 3.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000054de_43a5ba6b_000a037a 12/18/2005 1:37 PM 299 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00005579_43a45e37_00066ff3 12/17/2005 12:51 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000056ae_439c96a6_000a037a 12/15/2005 4:35 PM 606 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000056ae_43a36f23_0002625a 12/16/2005 7:51 PM 35.54 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000056ae_43a37a8d_000e8b25 12/16/2005 8:40 PM 361 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000056ae_43a450ec_000a7d8c 12/17/2005 11:54 AM 232 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000056ae_43a4ecb9_00007a12 12/17/2005 10:59 PM 9.77 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000056ae_43a4fd4e_000b71b0 12/18/2005 12:10 AM 6.10 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00005753_439cd58e_00057bcf 12/11/2005 8:35 PM 29.38 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000575

#13 mra

New Member

Authentic Member
15 posts

Posted 18 December 2005 - 03:01 PM

This is the last part. C:\Program Files\Nikws nt\Cache\00007389_43a4e489_00031975 12/17/2005 10:24 PM 8.03 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000073d9_43a45bb5_0007de29 12/17/2005 12:40 PM 245 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000073da_439e34a6_000d59f8 12/12/2005 8:40 PM 253.49 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000073da_43a37da4_0007a120 12/16/2005 8:53 PM 3.13 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000073da_43a45297_0005b8d8 12/17/2005 12:01 PM 1 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000073da_43a5017d_0004c4b4 12/18/2005 12:28 AM 189.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000074ad_43a45d7a_000632ea 12/17/2005 12:48 PM 728 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000759a_439c9c8a_000a4083 12/11/2005 3:39 PM 47 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000759a_43a36f4d_00081b32 12/16/2005 7:52 PM 3.72 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000759a_43a37aa4_00076417 12/16/2005 8:40 PM 4.08 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000759a_43a450ed_0005b8d8 12/17/2005 11:54 AM 5.23 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000759a_43a4ed17_00039387 12/17/2005 11:01 PM 752 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000759a_43a4fd5d_000632ea 12/18/2005 12:10 AM 3.94 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000075c1_43a4b80a_00044aa2 12/17/2005 7:14 PM 7.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000075ef_439cd5df_0004c4b4 12/11/2005 7:43 PM 185.36 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000075ef_43a45475_00007a12 12/17/2005 12:09 PM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000075ef_43a502eb_0007a120 12/18/2005 12:34 AM 13.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007613_43a4e030_00031975 12/17/2005 10:06 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000765f_43a4583b_000cdfe6 12/17/2005 12:26 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000767d_439c9124_00040d99 12/11/2005 7:37 PM 53.86 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000767d_439e3e55_00098968 12/12/2005 9:21 PM 82.95 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000767d_43a36bef_000aba95 12/16/2005 7:37 PM 5.07 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000767d_43a37955_0008583b 12/17/2005 7:15 PM 41.36 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000767d_43a44fd5_0008583b 12/17/2005 11:50 AM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000767d_43a4ead5_000aba95 12/17/2005 10:51 PM 3.92 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000767d_43a4fcc4_0001ab3f 12/18/2005 12:08 AM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000767d_43a59bde_000d59f8 12/18/2005 11:26 AM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000767d_43a5c344_000487ab 12/18/2005 2:15 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000773b_43a45936_00022551 12/17/2005 12:30 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007871_43a4dbd4_000d9701 12/17/2005 9:47 PM 6.09 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007874_439ce30e_00031975 12/11/2005 8:40 PM 51.51 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007874_43a455bf_00081b32 12/17/2005 12:19 PM 562 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007874_43a50455_00029f63 12/18/2005 12:40 AM 37.74 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000078d4_43a46838_0009c671 12/17/2005 1:34 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000078fe_43a4dbd3_00066ff3 12/17/2005 9:47 PM 147.96 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007954_43a4e003_0001ab3f 12/17/2005 10:05 PM 3.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000797d_439cd3c9_0005b8d8 12/11/2005 7:35 PM 54.42 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000797d_439e2b9c_00000000 12/12/2005 8:02 PM 103.72 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000797d_43a36fe1_00053ec6 12/16/2005 7:54 PM 83.31 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000797d_43a37bf9_000bebc2 12/16/2005 8:46 PM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000797d_43a451cd_00057bcf 12/17/2005 11:58 AM 289 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000797d_43a4fda1_000c65d4 12/18/2005 12:11 AM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007983_439cd5d1_000a7d8c 12/11/2005 7:43 PM 433 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007983_43a4544f_00003d09 12/17/2005 12:09 PM 2.71 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000798b_439cd48d_0001e848 12/11/2005 7:38 PM 44.89 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000798b_43a45295_0008583b 12/17/2005 12:01 PM 947 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\0000798b_43a50171_00066ff3 12/18/2005 12:28 AM 16.44 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\000079d1_43a4b96d_000d9701 12/17/2005 7:20 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a36_43a4d40d_0007270e 12/17/2005 9:14 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a54_43a4b94e_0001ab3f 12/17/2005 7:20 PM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a5a_439c9121_00089544 12/11/2005 7:37 PM 53.98 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a5a_439cf1ee_000ec82e 12/11/2005 9:43 PM 29.73 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a5a_439e2698_000632ea 12/12/2005 7:40 PM 17.88 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a5a_439e3e55_00031975 12/12/2005 9:21 PM 298 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a5a_43a36bab_00044aa2 12/16/2005 7:36 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a5a_43a37952_00066ff3 12/16/2005 8:34 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a5a_43a44fbc_0008d24d 12/17/2005 11:49 AM 411 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a5a_43a4ead5_000501bd 12/17/2005 10:51 PM 7.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a5a_43a4fcc3_000ca2dd 12/18/2005 12:08 AM 7.33 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a5a_43a59bcb_000aba95 12/18/2005 11:26 AM 2.16 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a5a_43a5c343_00044aa2 12/18/2005 2:14 PM 359.02 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007a61_43a46c67_0001ab3f 12/17/2005 1:52 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007ac2_43a4668f_0001e848 12/17/2005 1:27 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007b44_43a45822_0005b8d8 12/17/2005 12:33 PM 2.11 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007bb9_439e34d0_00098968 12/12/2005 8:41 PM 4.46 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007bb9_43a452f0_0008583b 12/17/2005 12:03 PM 5.15 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007bb9_43a501b1_000e4e1c 12/18/2005 12:29 AM 182.75 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007cb8_43a4e48e_0001e848 12/17/2005 10:24 PM 280 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007cfe_43a45e7b_0002625a 12/17/2005 12:52 PM 1.05 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007daa_43a4e01f_00076417 12/17/2005 10:05 PM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007dd1_43a454bc_00076417 12/17/2005 12:11 PM 3.78 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007dd1_43a5032e_0008d24d 12/18/2005 12:35 AM 28.47 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e0e_43a4d24d_0003d090 12/17/2005 9:06 PM 249.31 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_4394ec4d_00053ec6 12/5/2005 7:41 PM 4.55 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_439c90e4_0002dc6c 12/11/2005 2:49 PM 4.74 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_439cedea_00066ff3 12/11/2005 9:26 PM 5.96 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_439e1078_00040d99 12/12/2005 7:57 PM 18.58 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_439e3df8_00076417 12/12/2005 9:20 PM 78 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_439f775b_0001ab3f 12/13/2005 7:37 PM 28.86 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_43a0c180_0001a7bd 12/14/2005 7:10 PM 53.40 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_43a1f003_0002dc6c 12/15/2005 4:36 PM 44.01 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_43a36ad2_000dd40a 12/16/2005 7:38 PM 238 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_43a37792_0003d090 12/16/2005 8:27 PM 280 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_43a44eb0_0001ab3f 12/17/2005 11:45 AM 4.38 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_43a4f954_0002625a 12/17/2005 11:53 PM 166 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_43a59202_000c65d4 12/18/2005 10:44 AM 648 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_43a596d1_000ec82e 12/18/2005 11:05 AM 4.79 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007e87_43a5ba12_0007de29 12/18/2005 1:35 PM 7.60 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007eb7_439cd413_000b71b0 12/11/2005 7:36 PM 78 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007eb7_43a37c8d_000af79e 12/16/2005 8:48 PM 2.14 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007eb7_43a45236_00000000 12/17/2005 12:35 PM 242 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007f0d_43a4e4ad_0007a120 12/17/2005 10:25 PM 7.27 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007f4f_439ce23e_000af79e 12/11/2005 8:36 PM 1.26 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007f4f_43a4554d_0001e848 12/17/2005 12:13 PM 244 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007f4f_43a5039e_00003d09 12/18/2005 12:37 AM 3.91 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007f61_43a4587e_00053ec6 12/17/2005 12:35 PM 2.11 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007f96_439c9448_00081b32 12/17/2005 10:59 PM 937 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007f96_43a36cfc_00029f63 12/16/2005 7:42 PM 61.28 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007f96_43a379b7_000a4083 12/16/2005 8:36 PM 5.93 KB Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007f96_43a45043_000c65d4 12/17/2005 11:52 AM 505 bytes Hidden from Windows API. C:\Program Files\Nikws nt\Cache\00007f96_43a4eca1_000632ea 12/17/2005 10:59 PM 2.14 KB

#14 LDTate

Grand Poobah

Root Admin
57,211 posts

Posted 18 December 2005 - 03:09 PM

You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download AproposFix from here:
http://swandog46.gee.../aproposfix.exe

Save it to your desktop but do NOT run it yet.

Then please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

Once in Safe Mode, please double-click aproposfix.exe and unzip it to the desktop. Open the aproposfix folder on your desktop and run RunThis.bat. Follow the prompts.

When the tool is finished, please reboot back into normal mode, and post a new HijackThis log, along with the entire contents of the log.txt file in the aproposfix folder.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

If you would like to for the help you received.

Proud graduate of TC/WTT Classroom

#15 mra

New Member

Authentic Member
15 posts

Posted 18 December 2005 - 03:45 PM

Log of AproposFix v1

************

Running from directory:
C:\Documents and Settings\mike\Desktop\aproposfix

************

Registry entries found:

[HKEY_LOCAL_MACHINE\Software\C6TQ3A0mhVm9]
@="XAxvvz4FGGFGGHGp1wCWToFGGFVIGpbgWhplGlD78x1MLGw6\\Ax67G633y\\47H7D7"
"Device"="\\\\.\\WmdxDAV"
"DriverPath"="C:\\WINDOWS\\System32\\drivers\\roofips.sys"
"DriverName"="Eveccgp"
"HideUninstallerName"="C:\\Program Files\\Nikws nt\\qas23msp.exe"
"UninstallerPath"="C:\\WINDOWS\\System32\\hotpdmgr.exe"
"UninstallerRegKey"="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F1AD05F5-50E4-49C7-9135-90BE183E8021}"
"UninstallerParams"="/CTUN"
"HDll"="C:\\WINDOWS\\System32\\hlpatsrv.dll"
"ServerAddress"="adchannel.contextplus.net"
"LegalNote"="http://adchannel.con...onbranded.html"
"PartnerId"="CP.IST2"
"InstallationId"="{X12f3a6f-bfee-051b-5e0a-38413832ad00}"
"PageFiltering"=dword:00000001
"CrMnTmt"=dword:0036ee80

************

Removing hidden service:
Service Eveccgp removed.

Removing hidden folder:

Deleting files:

Deletion of file C:\WINDOWS\System32\drivers\roofips.sys succeeded!
Deletion of file C:\WINDOWS\System32\ddejet32.exe succeeded!
Deletion of file C:\WINDOWS\System32\hlpatsrv.dll succeeded!
Deletion of file C:\WINDOWS\System32\hotpdmgr.exe succeeded!

Backing up files:
Done!

Removing registry entries:

REGEDIT4

[-HKEY_CURRENT_USER\Software\C6TQ3A0mhVm9]
[-HKEY_LOCAL_MACHINE\Software\C6TQ3A0mhVm9]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F1AD05F5-50E4-49C7-9135-90BE183E8021}]

Done!

Finished!

Logfile of HijackThis v1.99.1
Scan saved at 4:43:44 PM, on 12/18/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Nhksrv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\DELLMMKB.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Netropa\OSD.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Nikon\NkView5\NkvMon.exe
C:\Program Files\Corel\Print Office 2000\CorelCENTRAL\Programs\alarm.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [DellTouch] C:\WINDOWS\DELLMMKB.EXE
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Lexmark X6100 Series] "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\BellSouth\hcenter.exe" /starthidden /tgcmdwrapper
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - Startup: CorelCENTRAL Alarms.LNK = C:\Program Files\Corel\Print Office 2000\CorelCENTRAL\Programs\alarm.exe
O4 - Global Startup: Camio Viewer 2000.lnk = C:\Program Files\Sierra Imaging\Image Expert 2000\IXApplet.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView5\NkvMon.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O16 - DPF: Yahoo! Blackjack - http://download.game...nts/y/jt0_x.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg...t/c381/chat.cab
O16 - DPF: Yahoo! Poker - http://download.game...nts/y/pt2_x.cab
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec....trl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec....trl/tgctlsr.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec....rl/LSSupCtl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://jcs.chat.dcn....v45/yacscom.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec....rl/SymAData.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.m...ash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.app.../ITDetector.cab
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: OTNPITVIEH - Sysinternals - www.sysinternals.com - C:\DOCUME~1\mike\LOCALS~1\Temp\OTNPITVIEH.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: UZHIKZAAJ - Sysinternals - www.sysinternals.com - C:\DOCUME~1\mike\LOCALS~1\Temp\UZHIKZAAJ.exe

Body Background

skin color theme