29 replies to this topic

[Hippiedude]

I was browsing with firefox when the popup occured, but i'll install that too. About that IEspyad program. Do I just unzip that into any folder?

[LDTate]

I was browsing with firefox when the popup occured, but i'll install that too.

About that IEspyad program. Do I just unzip that into any folder?

http://www.bleepingc...showtutorial=53

[Hippiedude]

I still seem to be getting pop ups even after google toolbar.

[LDTate]

Post a new HJT log and I'll have a look.

[Hippiedude]

Logfile of HijackThis v1.99.1
Scan saved at 9:09:56 PM, on 12/29/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Documents and Settings\Administrator\My Documents\dominics stuff\anti spyware shiz\security suite\ewidoctrl.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Microsoft Money\System\urlmap.exe
C:\Documents and Settings\Administrator\My Documents\dominics stuff\RAR files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Documents and Settings\Administrator\My Documents\dominics stuff\RAR files\SpywareGuard\dlprotect.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - Startup: SpywareGuard.lnk = C:\Documents and Settings\Administrator\My Documents\dominics stuff\RAR files\SpywareGuard\sgmain.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - blank (file missing)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - blank (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: RaptisoftGameLoader - http://www.miniclip....tgameloader.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games....GamesPlugin.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1134183016874
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1134183003421
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsec...scan/axscan.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: ewido security suite control - ewido networks - C:\Documents and Settings\Administrator\My Documents\dominics stuff\anti spyware shiz\security suite\ewidoctrl.exe
O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: PictureTaker - LANovation - C:\WINDOWS\System32\PCTKRNT.SYS
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - C:\Program Files\Spyware Doctor\sdhelp.exe

[LDTate]

I don't see anything in your log.

Go here and run this scan. Let me know what it finds.
Microsoft - Malicious Software Removal Tool
http://www.microsoft...ve/default.mspx


Download this one and let me know if it finds anything.
RootkitRevealer
http://www.sysintern...itRevealer.html

When it's done, go to file->save
save the logfile to the desktop, and then past the contents here.

[Hippiedude]

The rootkit reveal log was too long to post...

[LDTate]

The rootkit reveal log was too long to post...

Just post the first page full.

[Hippiedude]

HKLM\SOFTWARE\CzTXnAGngSF9 12/10/2005 9:22 AM 0 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_GPC 7/1/2005 7:25 AM 0 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_HELCDFS 12/5/2005 6:41 PM 0 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Services\hamachi 12/12/2005 5:09 PM 0 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Services\helCdfs 12/29/2005 9:04 PM 0 bytes Hidden from Windows API. C:\2K.T 8/23/2002 4:07 AM 1.39 KB Visible in Windows API, MFT, but not in directory index. C:\AUTOEXEC.BAT 7/1/2005 7:30 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\BDA.cab 7/9/2004 9:13 AM 686.60 KB Visible in Windows API, MFT, but not in directory index. C:\BDANT.cab 7/19/2004 10:58 PM 1.10 MB Visible in Windows API, MFT, but not in directory index. C:\BDAXP.cab 7/19/2004 10:53 PM 953.14 KB Visible in Windows API, MFT, but not in directory index. C:\boot.ini 12/12/2005 5:35 PM 211 bytes Visible in Windows API, MFT, but not in directory index. C:\bootlog.csv 12/9/2005 3:00 PM 12 bytes Visible in Windows API, MFT, but not in directory index. C:\BOOTSECT.DOS 7/1/2005 2:04 AM 512 bytes Visible in Windows API, MFT, but not in directory index. C:\BRCDFIND.EXE 10/13/1998 9:25 AM 5.13 KB Visible in Windows API, MFT, but not in directory index. C:\cabs 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps 7/1/2005 7:40 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\0x0409.ini 10/4/2001 11:49 AM 3.52 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\HelpSpot.msi 3/18/2002 3:56 PM 234.50 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\instmsia.exe 9/26/2001 4:56 PM 1.63 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\instmsiw.exe 8/27/2001 2:13 PM 1.74 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files 7/1/2005 7:40 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway 7/1/2005 7:40 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\1400.exe 3/14/2002 3:49 PM 606.44 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\200Dock.exe 2/28/2002 4:17 PM 788.21 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\ClrQualy.exe 1/3/2002 10:22 AM 1.73 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\ComBasic.exe 1/3/2002 1:47 PM 2.90 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\ComTblsg.exe 1/3/2002 1:54 PM 2.68 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\connect.htm 1/18/2002 1:34 PM 1.97 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\connectGTW.htm 1/15/2002 1:06 PM 860 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\ConnPeri.exe 1/3/2002 1:56 PM 941.68 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\CSCRIPT.EXE 1/8/2002 9:14 AM 84.05 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\CSCRIPT.LGC 1/8/2002 9:14 AM 6.17 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\CtryStor.exe 1/24/2002 9:23 AM 1.65 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\default.css 11/20/2001 11:27 AM 2.72 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\DeleteFolder.vbs 1/8/2002 9:14 AM 3.18 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\donescreen.jpg 1/8/2002 9:14 AM 44.12 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\E1800CC.exe 1/15/2002 8:03 AM 588.24 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\E1800DC.exe 1/14/2002 4:27 PM 560.70 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\E3600DC.exe 1/14/2002 4:28 PM 544.88 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\E3600MT.exe 1/15/2002 9:14 AM 561.37 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\E4650MT.exe 1/15/2002 9:14 AM 711.55 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\FindDocs.exe 1/3/2002 1:58 PM 1.95 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\gatewayregw.cab 1/8/2002 9:14 AM 6.62 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\GW200.exe 3/11/2002 3:28 PM 697.30 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\GW450.exe 3/14/2002 4:49 PM 716.39 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\GW600.exe 1/14/2002 4:48 PM 753.92 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\GWRemote.exe 1/9/2002 3:35 PM 1.70 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\hcu.vbs 1/8/2002 9:14 AM 191 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\HelpSpotVer.txt 3/18/2002 10:29 AM 27 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\HSInit.reg 1/8/2002 9:14 AM 308 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\HSSetup.HTM 1/8/2002 9:14 AM 1.73 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\InitBat.reg 1/8/2002 9:14 AM 142 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\IntEmail.exe 1/3/2002 2:45 PM 2.92 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\IntHSpot.exe 1/22/2002 2:52 PM 1.58 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\IntInet.exe 1/3/2002 2:46 PM 2.67 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\IntModm.exe 1/3/2002 3:51 PM 2.73 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\MakngCDs.exe 1/22/2002 2:30 PM 3.10 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\MicroTower.exe 1/8/2002 9:14 AM 619.00 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\MidTower.exe 1/8/2002 9:14 AM 1.16 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\mouse2.exe 1/3/2002 2:48 PM 765.31 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\MscMatch.exe 1/3/2002 2:48 PM 1.74 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\NewsHeadlines_1033_Personal.xml 1/8/2002 9:14 AM 4.88 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\NewsSet.xml 3/18/2002 1:18 PM 338 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\newsver.xml 1/8/2002 9:14 AM 1.10 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\PhotoCTR.exe 1/16/2002 8:31 AM 2.40 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\Pinta.exe 1/15/2002 8:26 AM 641.26 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\PortRep.exe 1/14/2002 4:52 PM 500.35 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\PreProbs.exe 1/3/2002 2:49 PM 2.68 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\Presntns.exe 1/3/2002 2:50 PM 2.22 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\Profile3.exe 1/8/2002 9:14 AM 633.51 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\PwrMgmt.exe 1/3/2002 2:51 PM 2.20 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\REGDEL.EXE 1/8/2002 9:14 AM 8.00 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\RunExeActiveX.CAB 1/8/2002 9:14 AM 1.23 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\RunExeActiveX.HTM 1/8/2002 9:14 AM 826 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\Shopping.exe 1/3/2002 2:51 PM 1.46 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\StartFirst.reg 1/8/2002 9:14 AM 182 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\StartFirstControl.CAB 1/8/2002 9:14 AM 1.17 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\StartFirstControl.ocx 1/8/2002 9:14 AM 38.16 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\sthelp.ico 1/8/2002 9:14 AM 29.22 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\SupSrces.exe 1/3/2002 2:52 PM 2.32 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\Travelng.exe 1/3/2002 2:53 PM 1.92 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\trustme.reg 1/8/2002 9:14 AM 19.60 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\UHSInit.reg 1/8/2002 9:14 AM 306 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\uninstall.bat 1/8/2002 9:14 AM 35 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\vssver.scc 3/18/2002 1:19 PM 1.17 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\Wallpapr.exe 1/3/2002 2:54 PM 2.04 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\welcome.bmp 1/8/2002 9:14 AM 50.39 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\wscript.exe 1/8/2002 9:14 AM 92.25 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\XPLControl.CAB 12/21/2001 9:05 AM 1.40 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\program files\Gateway\Helpspot\XPLControl.HTM 12/21/2001 10:08 AM 1.16 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\scriptit.sct 7/1/2005 7:41 AM 343 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\setup.exe 11/19/2001 2:32 PM 180.00 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\Setup.INI 3/18/2002 3:55 PM 983 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\srcd.ini 2/7/2002 1:56 PM 252 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\System32 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\System32\Redist 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\System32\Redist\MS 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\System32\Redist\MS\System 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\System32\Redist\MS\System\asycfilt.dll 3/8/1999 12:50 PM 144.27 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\System32\Redist\MS\System\comcat.dll 12/9/1998 12:52 PM 21.77 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\System32\Redist\MS\System\msvbvm60.dll 11/8/2000 3:02 PM 1.32 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\System32\Redist\MS\System\msvcrt.dll 4/6/2000 3:10 PM 272.05 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\System32\Redist\MS\System\oleaut32.dll 4/12/2000 3:00 PM 584.27 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\System32\Redist\MS\System\olepro32.dll 3/8/1999 12:50 PM 160.27 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\System32\Redist\MS\System\stdole2.tlb 3/28/2000 4:58 PM 17.50 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\Windows 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\Windows\PCHEALTH 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\Windows\PCHEALTH\HELPCTR 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\Windows\PCHEALTH\HELPCTR\BATCH 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\Windows\PCHEALTH\HELPCTR\BATCH\gatewayregw.cab 11/20/2001 10:14 AM 6.62 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\Windows\PCHEALTH\HELPCTR\BATCH\hs62.cab 3/18/2002 3:53 PM 7.84 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\Windows\PCHEALTH\HELPCTR\Config 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Helpspt2\Windows\PCHEALTH\HELPCTR\Config\NewsSet.xml 3/18/2002 1:18 PM 338 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\CUI.ini 7/1/2005 8:06 AM 42 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\customconf 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\customconf\errorcodes.txt 4/23/2002 12:34 PM 3.56 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\data1.cab 5/3/2002 3:45 PM 837.45 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\data1.hdr 5/3/2002 3:45 PM 113.99 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\data2.cab 5/3/2002 3:45 PM 16.42 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\ikernel.ex_ 4/11/2001 11:29 PM 332.88 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\layout.bin 5/3/2002 3:45 PM 451 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\setup.bmp 11/28/2000 8:44 AM 76.05 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\Setup.exe 8/11/2000 5:17 AM 162.00 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\Setup.ini 5/3/2002 3:45 PM 225 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\Setup.inx 5/1/2002 1:53 PM 144.81 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\CUI\setup.iss 3/14/2002 11:28 PM 544 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\data1.cab 4/15/2002 2:44 PM 837.43 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\data1.hdr 4/15/2002 2:44 PM 32.56 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\data2.cab 4/15/2002 2:44 PM 512 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDr2D3DVideo.ini 5/1/2002 12:18 PM 461 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrAudio.ini 5/1/2002 11:38 AM 3.00 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrAvi.ini 4/10/2002 2:42 PM 237 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrCDDrive.ini 4/10/2002 2:42 PM 8.58 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PcDrCdRw.ini 4/10/2002 2:42 PM 469 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrCMOS.ini 4/10/2002 2:42 PM 347 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrCPU.ini 5/1/2002 11:34 AM 401 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PcDrDvdDrive.ini 4/10/2002 2:42 PM 7.66 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PcDrDvdRamDrive.ini 4/10/2002 2:42 PM 8.75 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PcDrDvdRw.ini 4/10/2002 2:42 PM 487 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrFloppy.ini 4/10/2002 2:42 PM 7.54 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrHardDrive.ini 4/10/2002 2:42 PM 8.23 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrJoystick.ini 4/10/2002 2:42 PM 630 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrKeyboard.ini 4/10/2002 2:42 PM 336 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrLSDrive.ini 4/10/2002 2:42 PM 7.55 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrMemory.ini 4/10/2002 2:42 PM 363 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrMicrophone.ini 4/10/2002 2:42 PM 589 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrModem.ini 4/10/2002 2:42 PM 10.88 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrMonitor.ini 4/10/2002 2:42 PM 348 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrMouse.ini 4/10/2002 2:42 PM 254 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrNetwork.ini 4/10/2002 2:42 PM 1.44 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrParallelPort.ini 4/10/2002 2:42 PM 206 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrPCCard.ini 4/10/2002 2:42 PM 189 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\pcdrpci.ini 4/10/2002 2:42 PM 98 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrPrinter.ini 4/10/2002 2:42 PM 338 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\pcdrscsi.ini 4/10/2002 2:42 PM 306 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrSerialPort.ini 4/10/2002 2:42 PM 1.01 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrSmart.ini 4/10/2002 2:42 PM 212 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PcdrSystemBoard.ini 4/10/2002 2:42 PM 253 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrTapeDrive.ini 4/10/2002 2:42 PM 315 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrUSB.ini 4/10/2002 2:42 PM 341 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrWav.ini 4/10/2002 2:42 PM 345 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Conf0001\PCDrZipDrive.ini 4/10/2002 2:42 PM 7.58 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDr2D3DVideo.ini 5/6/2002 11:45 AM 462 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrAudio.ini 5/1/2002 11:38 AM 3.00 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrAvi.ini 4/10/2002 2:42 PM 237 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrCDDrive.ini 5/3/2002 9:03 AM 8.58 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PcDrCdRw.ini 5/3/2002 9:03 AM 489 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrCMOS.ini 4/10/2002 2:42 PM 347 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrCPU.ini 5/1/2002 11:34 AM 401 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PcDrDvdDrive.ini 5/3/2002 9:04 AM 7.66 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PcDrDvdRamDrive.ini 5/3/2002 9:04 AM 8.75 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PcDrDvdRw.ini 5/3/2002 9:04 AM 487 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrFloppy.ini 5/3/2002 9:05 AM 7.66 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrHardDrive.ini 4/10/2002 2:42 PM 8.23 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrJoystick.ini 4/10/2002 2:42 PM 630 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrKeyboard.ini 4/10/2002 2:42 PM 336 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrLSDrive.ini 5/3/2002 9:02 AM 7.67 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrMemory.ini 4/10/2002 2:42 PM 363 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrMicrophone.ini 4/10/2002 2:42 PM 589 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrModem.ini 5/3/2002 9:05 AM 10.94 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrMonitor.ini 4/10/2002 2:42 PM 348 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrMouse.ini 4/10/2002 2:42 PM 254 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrNetwork.ini 4/10/2002 2:42 PM 1.44 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrParallelPort.ini 4/10/2002 2:42 PM 206 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrPCCard.ini 4/10/2002 2:42 PM 189 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\pcdrpci.ini 4/10/2002 2:42 PM 98 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrPrinter.ini 4/10/2002 2:42 PM 338 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\pcdrscsi.ini 4/10/2002 2:42 PM 306 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrSerialPort.ini 4/10/2002 2:42 PM 1.01 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrSmart.ini 4/10/2002 2:42 PM 212 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PcdrSystemBoard.ini 4/10/2002 2:42 PM 253 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrTapeDrive.ini 4/10/2002 2:42 PM 315 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrUSB.ini 4/10/2002 2:42 PM 341 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrWav.ini 4/10/2002 2:42 PM 345 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\custom\PCDrZipDrive.ini 5/3/2002 9:08 AM 7.67 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\data1.cab 5/1/2002 11:25 AM 837.45 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\data1.hdr 5/1/2002 11:25 AM 43.48 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\data2.cab 5/1/2002 11:25 AM 8.56 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Diagnostics.ini 7/1/2005 8:05 AM 588 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\ikernel.ex_ 4/12/2001 12:29 AM 332.88 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\layout.bin 5/1/2002 11:25 AM 459 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\setup.bmp 11/28/2000 8:44 AM 76.05 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Setup.exe 8/11/2000 5:17 AM 162.00 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\Setup.ini 5/1/2002 11:25 AM 225 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\setup.inx 4/10/2002 10:36 AM 146.57 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Diagnostics\setup.iss 3/14/2002 6:19 PM 4.41 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\ikernel.ex_ 4/11/2001 11:29 PM 332.88 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\layout.bin 4/15/2002 2:44 PM 454 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Master.ini 7/1/2005 8:05 AM 64 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Scriptit.sct 7/1/2005 7:41 AM 364 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Services 7/1/2005 7:41 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Services\data1.cab 5/1/2002 11:58 AM 837.41 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Services\data1.hdr 5/1/2002 11:58 AM 33.90 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Services\data2.cab 5/1/2002 11:58 AM 1.55 MB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Services\ikernel.ex_ 4/12/2001 12:29 AM 332.88 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Services\layout.bin 5/1/2002 11:58 AM 456 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Services\Services.ini 7/1/2005 8:05 AM 94 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Services\setup.bmp 11/28/2000 8:44 AM 76.05 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Services\Setup.exe 8/11/2000 5:17 AM 162.00 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Services\Setup.ini 5/1/2002 11:58 AM 222 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Services\setup.inx 4/12/2002 9:47 AM 155.13 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Services\setup.iss 3/14/2002 8:18 PM 1.03 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\setup.bmp 11/28/2000 8:44 AM 76.05 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Setup.exe 8/11/2000 5:17 AM 162.00 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Setup.ini 4/15/2002 2:44 PM 225 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Setup.inx 4/12/2002 3:11 PM 153.02 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\Srcd.bat 7/9/2002 2:44 PM 228 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Apps\Pcdoc3\srcd.ini 6/28/2002 10:03 AM 197 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard 7/1/2005 7:38 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4 7/1/2005 7:38 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\8255INDI.DLL 12/4/2001 12:00 AM 5.80 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\8255XDEL.EXE 2/21/2002 5:34 AM 52.00 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\CBCOMBO.EXE 2/6/2001 4:30 AM 34.10 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\d100disk 3/9/2001 5:24 AM 1 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\d100dsk2 3/9/2001 5:24 AM 1 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DIAG100.EXE 3/5/2002 2:03 AM 88.29 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DIAG1000.EXE 4/3/2002 10:01 AM 111.54 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS 7/1/2005 7:38 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS\drivers.dos 5/3/1999 10:50 AM 59 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS\E1000 7/1/2005 7:38 AM 0 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS\E1000\e1000.dos 4/3/2002 6:11 AM 50.03 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS\E1000\e1000odi.com 4/3/2002 10:41 AM 34.84 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS\E1000\net.cfg 11/9/2000 9:15 AM 506 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS\E1000\protocol.ini 11/16/2001 7:04 AM 568 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS\E100B.DOS 2/14/2002 3:12 AM 32.13 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS\E100BEDS.NIF 4/16/1999 2:27 AM 2.01 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS\E100BODI.COM 3/4/2002 10:00 PM 60.91 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS\E100BODI.INS 5/3/1999 10:50 AM 532 bytes Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS\IPXODI.COM 5/3/1999 10:50 AM 38.82 KB Visible in Windows API, MFT, but not in directory index. C:\cabs\Netcard\Kinerth4\DOS\LSL.COM 5/3/1999 10:50 AM 17.93 KB Visible in Windows API, MFT, but not in directory index.

[LDTate]

You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download AproposFix from here:
http://swandog46.gee.../aproposfix.exe

Save it to your desktop but do NOT run it yet.

Then please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.


Once in Safe Mode, please double-click aproposfix.exe and unzip it to the desktop. Open the aproposfix folder on your desktop and run RunThis.bat. Follow the prompts.

When the tool is finished, please reboot back into normal mode, and post a new HijackThis log, along with the entire contents of the log.txt file in the aproposfix folder.

[Hippiedude]

Log of AproposFix v1 ************ Running from directory: C:\Documents and Settings\Administrator\My Documents\dominics stuff\aproposfix ************ Registry entries found: [HKEY_LOCAL_MACHINE\Software\CzTXnAGngSF9] @="HELqDFSabbabbcbABP2s\\2abbaqdb6w\\r.62b2YSTEMhgbDRIVERSbVCHVGAcSYS" "Device"="\\\\.\\abpSENS" "DriverPath"="C:\\WINDOWS\\System32\\drivers\\vchvga.sys" "DriverName"="helCdfs" "HideUninstallerName"="C:\\Program Files\\Movtions\\cioevmgr.exe" "HDll"="C:\\WINDOWS\\System32\\udhkctrs.dll" "ServerAddress"="adchannel.contextplus.net" "LegalNote"="http://adchannel.con...onbranded.html" "PartnerId"="CP.GH2" "InstallationId"="{X7d63407-1d70-27f4-d33e-769f56921336}" "PageFiltering"=dword:00000001 "CrMnTmt"=dword:0036ee80 "ClientName"="C:\\Program Files\\Movtions\\cnvnel32.exe" "AutoUpdater"="C:\\WINDOWS\\System32\\iepquoui.exe" "Version"="2.0.131" ************ Removing hidden service: Service helCdfs removed. Removing hidden folder:

[LDTate]

Let me know if that helped. Looks like it removed a few bad guys.

[Hippiedude]

My computer seems to be running a lot faster now. And no pops up what-so-ever. Thanks a lot man.

[LDTate]

Great job You're more then welcome. Glad we were able to help Peace be with you I'll leave this open until tomorrow just in case

[LDTate]

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoy...showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php