11 replies to this topic

[WesleyG]

Starting yesterday afternoon, I have had some troubles with my computer. I was recommended to run the hijackthis program and post the log here for help. I certainly appreciate any help that can be offered.

The first few times I ran my computer yesterday afternoon, I got pop ups regarding a possible winfix download. I didn't download anything. I also got pop ups suggesting care against a possible blackworm infection. I didn't download anything regarding that either until hijackthis this morning.

The internet problems seem to have stopped this morning. But I still have two issues occuring. One, is that my trash bin is filling with what appears to be hundreds of the same file... Ddeeg in windows\system32. My second problem is that when I run my Norton scan, when it gets to a certain point, my computer shuts down. It has done this several times between yesterday and today, and had never done this before.

Here is my log. Again, I certainly appreciate any help that can be offered.

Logfile of HijackThis v1.99.1
Scan saved at 11:17:55 AM, on 3/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ACS.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Toshiba\Power Management\CeEPwrSvc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\EzButton\EzButton.EXE
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
c:\Toshiba\Ivp\Swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Toshiba\ConfigFree\CFSServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\AIM\aim.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\toshiba\ivp\ism\ivpsvmgr.exe
C:\DOCUME~1\Wesley\LOCALS~1\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.toshiba.com/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.geocities.com/osuturfguywes
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshibadirect.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://toshibadirect.com/
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: RawExecAction Object - {18898424-E3AB-4BA9-8E8D-5434B1CECA75} - C:\WINDOWS\system32\geedd.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\Common Files\aolshare\Coach\en_en\player\plugin\ToolBar.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [EzButton] C:\Program Files\EzButton\EzButton.EXE
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
O4 - HKLM\..\Run: [NDSTray.exe] C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [CFSServ.exe] C:\Program Files\Toshiba\ConfigFree\CFSServ.exe -NoClient
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O20 - Winlogon Notify: geedd - C:\WINDOWS\system32\geedd.dll
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\Toshiba\Power Management\CeEPwrSvc.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Swupdtmr - Unknown owner - c:\Toshiba\Ivp\Swupdate\swupdtmr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

[Siggyx]

Please download VundoFix.exe to your desktop.

• Double-click VundoFix.exe to run it.
• Click the Scan for Vundo button.
• Once it's done scanning, click the Remove Vundo button.
• You will receive a prompt asking if you want to remove the files, click YES
• Once you click yes, your desktop will go blank as it starts removing Vundo.
• When completed, it will prompt that it will shutdown your computer, click OK.
• Turn your computer back on.
• Please post the contents of C:\vundofix.txt.

NEXT

Please download the trial version of Ewido Security Suite here:

http://www.ewido.net/en/

Install it, and update the definitions to the newest files.

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

Then please run Ewido, and run a full scan. Save the logfile from the scan.

Restart your computer in normal mode and please post a new HijackThis log, as well as the log from the Ewido scan.

[WesleyG]

VundoFix V4.2.34 Checking Java version... Java version is 1.4.2.5 Scan started at 10:58:53 AM 3/18/2006 Listing files found while scanning.... C:\WINDOWS\system32\geedd.dll C:\WINDOWS\system32\ddeeg.ini C:\WINDOWS\system32\ddeeg.bak1 C:\WINDOWS\system32\ddeeg.bak2 C:\WINDOWS\lmxnu.bak1 C:\WINDOWS\lmxnu.bak2 C:\WINDOWS\system32\ddeeg.bak1 C:\WINDOWS\system32\ddeeg.bak2 C:\WINDOWS\system32\ddeeg.ini C:\WINDOWS\system32\geedd.dll Attempting to delete C:\WINDOWS\system32\geedd.dll C:\WINDOWS\system32\geedd.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ddeeg.ini C:\WINDOWS\system32\ddeeg.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\ddeeg.bak1 C:\WINDOWS\system32\ddeeg.bak1 Has been deleted! Attempting to delete C:\WINDOWS\system32\ddeeg.bak2 C:\WINDOWS\system32\ddeeg.bak2 Has been deleted! Attempting to delete C:\WINDOWS\lmxnu.bak1 C:\WINDOWS\lmxnu.bak1 Has been deleted! Attempting to delete C:\WINDOWS\lmxnu.bak2 C:\WINDOWS\lmxnu.bak2 Has been deleted! Performing Repairs to the registry. Done! I appreciate the help. I will post the other results shortly.

[WesleyG]

Logfile of HijackThis v1.99.1
Scan saved at 4:51:12 PM, on 3/18/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ACS.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\EzButton\EzButton.EXE
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Toshiba\ConfigFree\CFSServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\AIM\aim.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Toshiba\Power Management\CeEPwrSvc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
c:\Toshiba\Ivp\Swupdate\swupdtmr.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\DOCUME~1\Wesley\LOCALS~1\Temp\Temporary Directory 3 for hijackthis[1].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.toshiba.com/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.geocities.com/osuturfguywes
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshibadirect.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://toshibadirect.com/
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\Common Files\aolshare\Coach\en_en\player\plugin\ToolBar.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [EzButton] C:\Program Files\EzButton\EzButton.EXE
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
O4 - HKLM\..\Run: [NDSTray.exe] C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [CFSServ.exe] C:\Program Files\Toshiba\ConfigFree\CFSServ.exe -NoClient
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\Toshiba\Power Management\CeEPwrSvc.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Swupdtmr - Unknown owner - c:\Toshiba\Ivp\Swupdate\swupdtmr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

--------------------------

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 1:31:28 PM, 3/18/2006
+ Report-Checksum: 8A2065C

+ Scan result:

HKU\S-1-5-21-1508957406-2255476006-255745049-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{44240BB5-BD7D-4D49-A1AA-8AB0F3D3CB44} -> Trojan.Small.anm : Cleaned with backup
HKU\S-1-5-21-1508957406-2255476006-255745049-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E13DDE1-E013-47EC-9C4C-27C2F78BDD26} -> Trojan.Conhook.c : Cleaned with backup
C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-2bca8698-6b389622.class -> Downloader.OpenStream.y : Cleaned with backup


::Report End


Here are the other two reports, hopefully this helps. Thanks again.

[Siggyx]

Lets do some cleaning.

Download ccleaner from the link below, save it to your desktop. Open ccleaner and click on run ccleaner at the bottom right.

http://www.majorgeek...wnload4191.html

Next download Regseeker from the link below. Save it to your destop. Open Regseeker and click on clean registry, next click ok. Once the scan is complete make sure the make backups is checked and then select all and delete it.

http://www.majorgeek...wnload2579.html

NEXT

Click here to run ActiveScan.

• Once you are on the Panda site click the Scan your PC button
• A new window will open...click the Check Now button
• Enter your Country
• Enter your State/Province
• Enter your e-mail address and click send
• Select either Home User or Company
• Click the big Scan Now button
• If it wants to install an ActiveX component allow it
• It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
• When download is complete, click on My Computer to start the scan
• When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.

Paste the contents of the Panda scan report along with a new HijackThis Log in your next reply.

[WesleyG]

Logfile of HijackThis v1.99.1
Scan saved at 1:04:35 PM, on 3/19/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ACS.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Toshiba\Power Management\CeEPwrSvc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
c:\Toshiba\Ivp\Swupdate\swupdtmr.exe
C:\Program Files\EzButton\EzButton.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Toshiba\ConfigFree\CFSServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\AIM\aim.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\Wesley\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.toshiba.com/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.geocities.com/osuturfguywes
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshibadirect.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://toshibadirect.com/
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\Common Files\aolshare\Coach\en_en\player\plugin\ToolBar.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [EzButton] C:\Program Files\EzButton\EzButton.EXE
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
O4 - HKLM\..\Run: [NDSTray.exe] C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [CFSServ.exe] C:\Program Files\Toshiba\ConfigFree\CFSServ.exe -NoClient
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\Toshiba\Power Management\CeEPwrSvc.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Swupdtmr - Unknown owner - c:\Toshiba\Ivp\Swupdate\swupdtmr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe


Incident Status Location

Adware:adware/cws Not disinfected C:\Documents and Settings\Wesley\Favorites\Health
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Wesley\Cookies\wesley@advertising[2].txt
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Wesley\Cookies\wesley@fastclick[2].txt
Spyware:Cookie/go Not disinfected C:\Documents and Settings\Wesley\Cookies\wesley@go[1].txt
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Wesley\Cookies\wesley@questionmarket[1].txt
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Wesley\Cookies\wesley@tribalfusion[1].txt
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Wesley\Cookies\wesley@advertising[2].txt
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Wesley\Cookies\wesley@fastclick[2].txt
Spyware:Cookie/go Not disinfected C:\Documents and Settings\Wesley\Cookies\wesley@go[1].txt
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Wesley\Cookies\wesley@questionmarket[1].txt
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Wesley\Cookies\wesley@tribalfusion[1].txt


Should I download the free trial Panda cleaning program?

[WesleyG]

-------------------------------- CLEANING COMPLETE - (28.506 secs) ------------------------------------------------------------------------------------------ 50.7MB removed. ------------------------------------------------------------------------------------------ Details of files deleted ------------------------------------------------------------------------------------------ IE Temporary Internet Files (447 files) 4.65MB Cookie:wesley@yahoo.com/(&H100001) 158 bytes Cookie:wesley@geocities.com/(&H100001) 249 bytes Cookie:wesley@www.majorgeeks.com/(&H100001) 86 bytes Cookie:wesley@mediaplex.com/(&H100001) 79 bytes Cookie:wesley@pctools.com/(&H100001) 152 bytes Cookie:wesley@revsci.net/(&H100001) 253 bytes Cookie:wesley@ezboard.com/(&H100001) 261 bytes Cookie:wesley@tribalfusion.com/(&H100001) 388 bytes Cookie:wesley@www.myaffiliateprogram.com/(&H100001) 114 bytes C:\Documents and Settings\Wesley\Local Settings\History\History.IE5\desktop.ini 113 bytes C:\Documents and Settings\Wesley\Local Settings\History\History.IE5\MSHist012004090920040910\index.dat 32.00KB Marked for deletion: C:\Documents and Settings\Wesley\Local Settings\Temporary Internet Files\Content.IE5\index.dat Marked for deletion: C:\Documents and Settings\Wesley\Cookies\index.dat Marked for deletion: C:\Documents and Settings\Wesley\Local Settings\History\History.IE5\index.dat C:\WINDOWS\TEMP\T30DebugLogFile.txt 0 bytes C:\WINDOWS\TEMP\_ISTMP0.DIR\c2c74.DLL 0.12MB C:\WINDOWS\TEMP\_ISTMP0.DIR\CORECOMP.INI 26.33KB C:\WINDOWS\TEMP\_ISTMP0.DIR\Ctl3d32.dll 26.50KB C:\WINDOWS\TEMP\_ISTMP0.DIR\IsUninst.Exe 0.29MB C:\DOCUME~1\Wesley\LOCALS~1\Temp\_ISTMP1.DIR\_ISTMP0.DIR\8ddf5.DLL 0.12MB C:\DOCUME~1\Wesley\LOCALS~1\Temp\_ISTMP1.DIR\_ISTMP0.DIR\Corecomp.ini 27.63KB C:\DOCUME~1\Wesley\LOCALS~1\Temp\_ISTMP1.DIR\_ISTMP0.DIR\Ctl3d32.dll 26.50KB C:\DOCUME~1\Wesley\LOCALS~1\Temp\_ISTMP1.DIR\_ISTMP0.DIR\ISUninst.exe 0.29MB C:\DOCUME~1\Wesley\LOCALS~1\Temp\_ISTMP1.DIR\_ISTMP0.DIR\ph.txt 12 bytes C:\DOCUME~1\Wesley\LOCALS~1\Temp\_ISTMP3.DIR\_ISTMP0.DIR\b15e4.DLL 0.12MB C:\DOCUME~1\Wesley\LOCALS~1\Temp\_ISTMP3.DIR\_ISTMP0.DIR\Corecomp.ini 27.63KB C:\DOCUME~1\Wesley\LOCALS~1\Temp\_ISTMP3.DIR\_ISTMP0.DIR\Ctl3d32.dll 26.50KB C:\DOCUME~1\Wesley\LOCALS~1\Temp\_ISTMP3.DIR\_ISTMP0.DIR\ISUninst.exe 0.29MB C:\DOCUME~1\Wesley\LOCALS~1\Temp\_ISTMP3.DIR\_ISTMP0.DIR\ph.txt 12 bytes C:\DOCUME~1\Wesley\LOCALS~1\Temp\~DFA559.tmp 32.00KB C:\DOCUME~1\Wesley\LOCALS~1\Temp\~DFF3E.tmp 32.00KB C:\WINDOWS\MiniDump\Mini012105-01.dmp 88.00KB C:\WINDOWS\MiniDump\Mini030505-01.dmp 88.00KB C:\WINDOWS\MiniDump\Mini040805-01.dmp 88.00KB C:\WINDOWS\system32\wbem\Logs\FrameWork.log 260 bytes C:\WINDOWS\system32\wbem\Logs\mofcomp.log 10.40KB C:\WINDOWS\system32\wbem\Logs\replog.log 400 bytes C:\WINDOWS\system32\wbem\Logs\setup.log 4.54KB C:\WINDOWS\system32\wbem\Logs\wbemcore.log 235 bytes C:\WINDOWS\system32\wbem\Logs\wbemess.log 40.54KB C:\WINDOWS\system32\wbem\Logs\wbemprox.log 177 bytes C:\WINDOWS\system32\wbem\Logs\wmiadap.log 3.04KB C:\WINDOWS\system32\wbem\Logs\wmiprov.log 1005 bytes C:\WINDOWS\system32\wbem\Logs\wbemess.lo_ 64.04KB C:\WINDOWS\system32\wbem\Logs\wmiprov.lo_ 64.03KB C:\WINDOWS\0.log 0 bytes C:\WINDOWS\cmsetacl.log 200 bytes C:\WINDOWS\COM+.log 1.41KB C:\WINDOWS\comsetup.log 0.12MB C:\WINDOWS\DtcInstall.log 641 bytes C:\WINDOWS\FaxSetup.log 0.36MB C:\WINDOWS\GEARInstall.log 121 bytes C:\WINDOWS\iis6.log 55.21KB C:\WINDOWS\imsins.log 1.34KB C:\WINDOWS\JB3DRV.LOG 3.45KB C:\WINDOWS\KB834707.log 9.29KB C:\WINDOWS\KB867282.log 12.05KB C:\WINDOWS\KB873333.log 12.55KB C:\WINDOWS\KB873339.log 9.55KB C:\WINDOWS\KB883939.log 14.37KB C:\WINDOWS\KB885250.log 16.32KB C:\WINDOWS\KB885835.log 10.36KB C:\WINDOWS\KB885836.log 9.56KB C:\WINDOWS\KB885884.log 2.74KB C:\WINDOWS\KB886185.log 5.96KB C:\WINDOWS\KB887472.log 15.96KB C:\WINDOWS\KB887742.log 4.64KB C:\WINDOWS\KB888113.log 15.76KB C:\WINDOWS\KB888240.log 4.40KB C:\WINDOWS\KB888302.log 22.33KB C:\WINDOWS\KB890046.log 10.75KB C:\WINDOWS\KB890047.log 10.60KB C:\WINDOWS\KB890175.log 9.89KB C:\WINDOWS\KB890859.log 14.15KB C:\WINDOWS\KB890923.log 16.08KB C:\WINDOWS\KB891781.log 15.27KB C:\WINDOWS\KB893066.log 25.30KB C:\WINDOWS\KB893086.log 13.04KB C:\WINDOWS\KB893756.log 16.73KB C:\WINDOWS\KB893803.log 6.24KB C:\WINDOWS\KB893803v2.log 5.62KB C:\WINDOWS\KB894391.log 12.72KB C:\WINDOWS\KB896358.log 10.84KB C:\WINDOWS\KB896422.log 13.20KB C:\WINDOWS\KB896423.log 16.09KB C:\WINDOWS\KB896424.log 16.38KB C:\WINDOWS\KB896428.log 9.99KB C:\WINDOWS\KB896688.log 13.64KB C:\WINDOWS\KB896727.log 16.79KB C:\WINDOWS\KB898458.log 4.46KB C:\WINDOWS\KB898461.log 6.71KB C:\WINDOWS\KB899587.log 17.11KB C:\WINDOWS\KB899588.log 13.08KB C:\WINDOWS\KB899591.log 16.62KB C:\WINDOWS\KB900725.log 12.96KB C:\WINDOWS\KB901017.log 20.39KB C:\WINDOWS\KB901214.log 13.51KB C:\WINDOWS\KB902400.log 22.41KB C:\WINDOWS\KB903235.log 3.70KB C:\WINDOWS\KB904706.log 10.85KB C:\WINDOWS\KB905414.log 13.16KB C:\WINDOWS\KB905749.log 11.50KB C:\WINDOWS\KB905915.log 14.98KB C:\WINDOWS\KB908519.log 9.78KB C:\WINDOWS\KB910437.log 9.14KB C:\WINDOWS\KB911564.log 5.07KB C:\WINDOWS\KB911565.log 5.52KB C:\WINDOWS\KB911927.log 10.34KB C:\WINDOWS\KB912919.log 10.72KB C:\WINDOWS\KB913446.log 6.47KB C:\WINDOWS\msgsocm.log 17.45KB C:\WINDOWS\ntdtcsetup.log 74.56KB C:\WINDOWS\ocgen.log 0.17MB C:\WINDOWS\ocmsn.log 19.23KB C:\WINDOWS\regopt.log 3.29KB C:\WINDOWS\sessmgr.setup.log 3.26KB C:\WINDOWS\setupact.log 0.19MB C:\WINDOWS\setupapi.log 0.62MB C:\WINDOWS\setuperr.log 0 bytes C:\WINDOWS\spupdsvc.log 923 bytes C:\WINDOWS\Sti_Trace.log 0 bytes C:\WINDOWS\SYMEVENT.LOG 30.47KB C:\WINDOWS\tsoc.log 0.13MB C:\WINDOWS\updspapi.log 21.56KB C:\WINDOWS\wiadebug.log 10.01KB C:\WINDOWS\wiaservc.log 46 bytes C:\WINDOWS\wmsetup.log 45.70KB C:\WINDOWS\wmsetup10.log 459 bytes C:\WINDOWS\xpsp1hfm.log 328 bytes C:\WINDOWS\imsins.BAK 1.34KB C:\WINDOWS\ntbtlog.txt 0.36MB C:\WINDOWS\OEWABLog.txt 1.15KB C:\WINDOWS\setuplog.txt 0.77MB C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\drwtsn32.log 1.91MB C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp 52.30KB C:\WINDOWS\Debug\blastcln.log 286 bytes C:\WINDOWS\Debug\mrt.log 9.55KB C:\WINDOWS\Debug\NetSetup.LOG 4.20KB C:\WINDOWS\security\logs\backup.log 2.89KB C:\WINDOWS\security\logs\SceRoot.log 586 bytes C:\WINDOWS\security\logs\scesetup.log 0.12MB C:\WINDOWS\security\logs\scecomp.old 332 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\00\03\0358f516-ebda57b5-55991905-a5c5c6f5.qtch 766 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\01\15\1fc0fb8c-e7c639fb-0e98872e-5e7e0e7a.qtch 528 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\02\03\2346d0c9-89636e14-2a976e9e-2e20a401.qtch 20.2MB C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\02\08\2864527c-c487741b-f4a39789-9101ac58.qtch 3.33MB C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\04\11\4ba68f46-05e1d4fe-038af538-059b684c.qtch 410 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\05\55f02704-50f4dd71-f4eafbaa-9bd9939a.qtch 7.55MB C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\07\5712d32f-2175ba81-20f4ea46-2d2e70a2.qtch 766 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\15\5f9c3efd-96f84945-1aa206f1-584b58c7.qtch 2.33KB C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\08\07\870b3a01-7c3e0beb-8e84406f-d9c84aa2.qtch 766 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\08\07\8797f2f0-9c609f7a-c5aa2729-d9f9d207.qtch 766 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\08\08\88b6a00d-968b4278-a01e3332-f2bd4137.qtch 791 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\09\11\9bf026cb-f0a98401-248010cf-9af6577a.qtch 422 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\10\07\a700c2b9-6f8f6922-d2070d64-bef09df6.qtch 42.03KB C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\11\01\b1480339-8fc897c3-befb0bf6-6e06149c.qtch 845 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\11\02\b21ff134-699de208-ef024c63-d0edcc1e.qtch 766 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\11\12\bc302fd4-fd86f8e8-4a8ad520-e5b273d2.qtch 697 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13\08\d83bc92c-4a81b8be-1f2f8515-6a4837ba.qtch 71.62KB C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13\09\d9fcfdb6-7f822fd5-876142fd-7b39b8c4.qtch 766 bytes C:\Documents and Settings\Wesley\Local Settings\Application Data\Apple Computer\QuickTime\downloads\14\11\eb96e85f-327f16f0-72a0ffd4-f49984da.qtch 518 bytes C:\Documents and Settings\Wesley\Application Data\Apple Computer\QuickTime\QTPlayerSession.xml 1.66KB C:\Documents and Settings\Wesley\Application Data\Microsoft\Office\Recent\index.dat 124 bytes C:\Documents and Settings\Wesley\Application Data\Microsoft\Office\Recent\Introduction Letter.LNK 904 bytes C:\Documents and Settings\Wesley\Application Data\Microsoft\Office\Recent\MBTA - Blue Line Airport Stop.LNK 833 bytes C:\Documents and Settings\Wesley\Application Data\Microsoft\Office\Recent\My Documents.LNK 613 bytes C:\Documents and Settings\Wesley\Application Data\Microsoft\Office\Recent\Word Documents.LNK 734 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\70.85.70.32\cp_website_media\flash\cp_banner\cp_banner.swf\CPsave.sol 169 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\arizona.diamondbacks.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\atdmt.com\bandwidth.sol 48 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\atlanta.braves.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 128 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\att-motion.espn.go.com\motion\echo\echoContainer170.swf\ECHO.sol 51 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\baltimore.orioles.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\boston.redsox.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 128 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\chicago.cubs.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 128 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\chicago.whitesox.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 105 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\cincinnati.reds.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\cleveland.indians.mlb.com\flash\team_video\team_video_v1.swf\mlbAdController.sol 86 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\cleveland.indians.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 128 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\coldplay.com\container.swf\coldplayUser.sol 64 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\colorado.rockies.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\disney.go.com\WDWAudioTag.sol 48 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\doubleclick.net\runforyourflight.sol 59 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\dvlabs.com\klipmart\campaigns\amc001\f\amc001f_expand.swf\TestMovie_Config_Info.sol 341 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\dvlabs.com\klipmart\campaigns\dis016\f_Fullscreen\dis016f_main.swf\TestMovie_Config_Info.sol 341 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\espn.go.com\motion\fsp\FSPRoot\espnmotion_cv.swf\fspSettings.sol 55 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\florida.marlins.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 105 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\foofighters.com\header.swf\foo_nav.sol 49 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\indians.mlb.com\flash\team_video\team_video_v1.swf\mlbAdController.sol 63 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\kansascity.royals.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 128 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\localhost\core.sol 53 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\losangeles.angels.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\losangeles.dodgers.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\mlb.com\flash\gameday\y2005\gd2005.swf\gdAdController.sol 59 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\mlb.com\flash\video\homepage_video_v4.swf\mlbAdController.sol 63 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\mlb.com\flash\video\homepage_video_v5.swf\mlbAdController.sol 63 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\mlb.com\flash\video\y2005\mlb_video.swf\mlbAdController.sol 63 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\mlb.mlb.com\flash\gameday\y2005\miniSB_gameday.swf\gd_minisb.sol 69 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\mlb.mlb.com\flash\gameday\y2006\miniSB_gameday.swf\gd_minisb.sol 47 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\mlb.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 105 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\mlb.mlb.com\flash\video\y2005\mlb_video.swf\mlbAdController.sol 125 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\newyork.mets.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\newyork.yankees.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\nissanusa.com\ms\flash\nav_loader_350Z_landing.swf\skipIntroSO.sol 47 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\oakland.athletics.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\pcguild.com\SO.sol 99 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\philadelphia.phillies.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\pittsburgh.pirates.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 105 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\sandiego.padres.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 128 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\sanfrancisco.giants.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 105 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\seattle.mariners.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\static.espn.go.com\motion\fsp\FSPRoot\espnmotion_cv.swf\fspSettings.sol 55 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\stlouis.cardinals.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\thephantomoftheopera.com\soundPref.sol 43 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\tvguide.com\include\template\left\closeup2004b.swf\redcarpet2004.sol 682 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\tvguide.com\include\template\left\closeup2004b.swf\TestMovie_Config_Info.sol 341 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\washington.nationals.mlb.com\flash\team_video\team_video_v2.swf\mlb_homepage_video.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\www.comcast.com\images\flash\ComcastDigitalVoiceOffer.swf\welcome.sol 45 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\www.promowestlive.com\site\html\E.swf\moviea.sol 880 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\www.promowestlive.com\site\html\E.swf\movieb.sol 305 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\www.promowestlive.com\site\html\E.swf\moviec.sol 3.26KB C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\#SharedObjects\EN75R5RD\www.worldbaseballclassic.com\2006\flash\team_video_v2.swf\mlb_homepage_video.sol 128 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#70.85.70.32\settings.sol 81 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#arizona.diamondbacks.mlb.com\settings.sol 98 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#atdmt.com\settings.sol 79 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#atlanta.braves.mlb.com\settings.sol 92 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#att-motion.espn.go.com\settings.sol 92 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#baltimore.orioles.mlb.com\settings.sol 95 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#boston.redsox.mlb.com\settings.sol 91 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#chicago.cubs.mlb.com\settings.sol 90 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#chicago.whitesox.mlb.com\settings.sol 94 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cincinnati.reds.mlb.com\settings.sol 93 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cleveland.indians.mlb.com\settings.sol 95 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#coldplay.com\settings.sol 82 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#colorado.rockies.mlb.com\settings.sol 94 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#disney.go.com\settings.sol 83 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#doubleclick.net\settings.sol 85 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#dvlabs.com\settings.sol 80 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#espn.go.com\settings.sol 81 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#florida.marlins.mlb.com\settings.sol 93 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#foofighters.com\settings.sol 85 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#indians.mlb.com\settings.sol 85 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#kansascity.royals.mlb.com\settings.sol 95 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local\settings.sol 75 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#losangeles.angels.mlb.com\settings.sol 95 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#losangeles.dodgers.mlb.com\settings.sol 96 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mlb.com\settings.sol 77 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mlb.mlb.com\settings.sol 81 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#newyork.mets.mlb.com\settings.sol 90 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#newyork.yankees.mlb.com\settings.sol 93 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#nissanusa.com\settings.sol 83 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#oakland.athletics.mlb.com\settings.sol 95 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pcguild.com\settings.sol 81 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#philadelphia.phillies.mlb.com\settings.sol 99 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pittsburgh.pirates.mlb.com\settings.sol 96 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#redwantingblue.com\settings.sol 88 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#sandiego.padres.mlb.com\settings.sol 93 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#sanfrancisco.giants.mlb.com\settings.sol 97 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#seattle.mariners.mlb.com\settings.sol 94 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.espn.go.com\settings.sol 88 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#stlouis.cardinals.mlb.com\settings.sol 95 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#thephantomoftheopera.com\settings.sol 94 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tvguide.com\settings.sol 81 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#washington.nationals.mlb.com\settings.sol 98 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.comcast.com\settings.sol 85 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.promowestlive.com\settings.sol 91 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.thealgonquin.net\settings.sol 90 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.worldbaseballclassic.com\settings.sol 98 bytes C:\Documents and Settings\Wesley\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol 1.38KB C:\Documents and Settings\Wesley\Local Settings\Application Data\Microsoft\Terminal Server Client\Cache\bcache22.bmc 2.60MB C:\Program Files\Lavasoft\Ad-Aware SE Personal\defs.ref.old 0.45MB C:\Documents and Settings\Wesley\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-17 15-17-51.txt 32.04KB C:\Documents and Settings\Wesley\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-17 15-20-50.txt 38.99KB C:\Documents and Settings\Wesley\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-17 15-32-38.txt 38.95KB C:\Documents and Settings\Wesley\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-17 16-48-04.txt 39.52KB C:\Documents and Settings\Wesley\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-17 18-23-22.txt 39.57KB C:\Documents and Settings\Wesley\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-17 21-23-49.txt 39.29KB C:\Documents and Settings\Wesley\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-17 21-30-28.txt 10.43KB C:\Documents and Settings\Wesley\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-17 21-33-48.txt 32.55KB C:\Documents and Settings\Wesley\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-18 09-24-49.txt 31.86KB C:\Documents and Settings\Wesley\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-18 10-07-11.txt 10.76KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\01-black.gif-1c684042-27111495.gif 102 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\01-black.gif-1c684042-27111495.idx 233 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\02-red.gif-6e9d4d15-44916482.gif 102 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\02-red.gif-6e9d4d15-44916482.idx 231 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\03-green.gif-71fbc2c8-21cf1651.gif 102 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\03-green.gif-71fbc2c8-21cf1651.idx 233 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\04-olive.gif-29d95c61-3006a965.gif 102 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\04-olive.gif-29d95c61-3006a965.idx 233 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\05-blue.gif-67418567-789a2fdd.gif 102 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\05-blue.gif-67418567-789a2fdd.idx 232 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\06-purple.gif-54fb9868-10776378.gif 102 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\06-purple.gif-54fb9868-10776378.idx 234 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\07-teal.gif-99fa8a7-3dbc29f2.gif 102 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\07-teal.gif-99fa8a7-3dbc29f2.idx 232 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\08-orange.gif-5aff7898-41e8cab7.gif 102 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\08-orange.gif-5aff7898-41e8cab7.idx 234 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\09-pink.gif-3c67acff-74870037.gif 102 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\09-pink.gif-3c67acff-74870037.idx 232 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\10-gray.gif-5a7b3016-56dcae79.gif 102 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\10-gray.gif-5a7b3016-56dcae79.idx 232 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\add.gif-3f989ce6-395d8bcb.gif 796 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\add.gif-3f989ce6-395d8bcb.idx 228 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\advnewsscroll.class-e8007c-7deaf320.class 16.73KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\advnewsscroll.class-e8007c-7deaf320.idx 283 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ai.gif-6035769b-614f5771.gif 1.10KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ai.gif-6035769b-614f5771.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ai.gif-7893a03c-62a3eba8.gif 1.10KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ai.gif-7893a03c-62a3eba8.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Amanda-lake.jpg-413ff89e-5ee85415.idx 403 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Amanda-lake.jpg-413ff89e-5ee85415.jpg 19.07KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\anfy.class-64904099-613e5bde.class 746 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\anfy.class-64904099-613e5bde.idx 410 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\AnLake.class-20da415-515f530c.class 16.07KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\AnLake.class-20da415-515f530c.idx 414 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-28bdf304-259688ae.gif 85 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-28bdf304-259688ae.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-290a4fa6-584904aa.gif 75 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-290a4fa6-584904aa.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-307bec1d-39dd60fb.gif 434 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-307bec1d-39dd60fb.idx 306 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-3d79de6d-41ca9e98.gif 86 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-3d79de6d-41ca9e98.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-476c9873-70f5d5b9.gif 434 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-476c9873-70f5d5b9.idx 306 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-48a2283c-3cd0eec2.gif 66 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-48a2283c-3cd0eec2.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-4b76bf88-3fd7ac56.gif 122 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-4b76bf88-3fd7ac56.idx 306 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-4ec85540-72887ddf.gif 99 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-4ec85540-72887ddf.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-66b75ded-1b57ec24.gif 396 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-66b75ded-1b57ec24.idx 306 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-767e480c-5ccc23ed.gif 82 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-767e480c-5ccc23ed.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-7baa4223-4034b00e.gif 145 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOff.gif-7baa4223-4034b00e.idx 306 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOffOver.gif-31b90f00-45964f27.gif 69 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOffOver.gif-31b90f00-45964f27.idx 309 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOffOver.gif-6d9c2597-27ea8570.gif 152 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOffOver.gif-6d9c2597-27ea8570.idx 310 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-21c04d46-1e2f140c.gif 106 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-21c04d46-1e2f140c.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-25526a79-4e916835.gif 77 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-25526a79-4e916835.idx 304 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-26a6faf9-1b3a58e7.gif 407 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-26a6faf9-1b3a58e7.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-64bb803-6cadc9e0.gif 149 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-64bb803-6cadc9e0.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-6bf779fe-70c98272.gif 82 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-6bf779fe-70c98272.idx 304 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-6d5ad0fa-2d6e40fb.gif 59 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-6d5ad0fa-2d6e40fb.idx 304 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-74222aca-56fde46a.gif 80 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-74222aca-56fde46a.idx 304 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-7c26e20-794db438.gif 67 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-7c26e20-794db438.idx 304 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-7f7de702-2dc5382f.gif 77 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-7f7de702-2dc5382f.idx 304 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-7ffe6c9-5aa6e409.gif 350 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-7ffe6c9-5aa6e409.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-8bd57b3-3a729cdb.gif 350 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOn.gif-8bd57b3-3a729cdb.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOnOver.gif-3ccfab77-21ddd075.gif 156 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOnOver.gif-3ccfab77-21ddd075.idx 309 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOnOver.gif-642b70ee-68990db4.gif 59 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audioOnOver.gif-642b70ee-68990db4.idx 308 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audio_off.gif-50e52291-1ab3f2f3.gif 310 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audio_off.gif-50e52291-1ab3f2f3.idx 307 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audio_on.gif-4b1c11d5-4260a385.gif 241 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audio_on.gif-4b1c11d5-4260a385.idx 306 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audOff.gif-666c97cb-433f32e2.gif 91 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audOff.gif-666c97cb-433f32e2.idx 303 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audOn.gif-64940d5b-4979822d.gif 100 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audOn.gif-64940d5b-4979822d.idx 303 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Banner3.class-1785ed8c-6f9ab6b1.class 5.34KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Banner3.class-1785ed8c-6f9ab6b1.idx 266 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bas.gif-7d83831e-15d563a0.gif 2.49KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bas.gif-7d83831e-15d563a0.idx 306 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bas.gif-a1c789f-63c37a32.gif 2.49KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bas.gif-a1c789f-63c37a32.idx 306 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Beyond.class-7857cbbb-4f82dd09.class 947 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Beyond.class-7857cbbb-4f82dd09.idx 271 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bottom.gif-46904365-7fb1f55b.gif 2.02KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bottom.gif-46904365-7fb1f55b.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bottom.gif-6fd4798f-4698d870.gif 2.02KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bottom.gif-6fd4798f-4698d870.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bottom.gif-88c9915-71279d9b.gif 63 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bottom.gif-88c9915-71279d9b.idx 303 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\CaptureClient.class-1db90962-514f8503.class 10.06KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\CaptureClient.class-1db90962-514f8503.idx 259 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\chat.gif-66a8c667-46ff80d4.gif 1.19KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\chat.gif-66a8c667-46ff80d4.idx 230 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\child_body.jpg-1a688f36-561eb00f.idx 269 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\child_body.jpg-1a688f36-561eb00f.jpg 4.27KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\color.gif-17c96be8-42bf22f6.gif 245 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\color.gif-17c96be8-42bf22f6.idx 230 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\di.gif-65540078-3fb20ccf.gif 3.26KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\di.gif-65540078-3fb20ccf.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\di.gif-7db22a19-1eb139f5.gif 3.26KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\di.gif-7db22a19-1eb139f5.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Expand.gif-39b6aaa1-472c4c75.gif 124 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Expand.gif-39b6aaa1-472c4c75.idx 304 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facade.gif-209664e-5d05b15b.gif 2.57KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facade.gif-209664e-5d05b15b.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facade.gif-2a105525-48679ede.gif 5.51KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facade.gif-2a105525-48679ede.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facade.gif-377446c7-7025cc8c.gif 1.86KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facade.gif-377446c7-7025cc8c.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Facade.gif-4687ca1-1909521c.gif 5.75KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Facade.gif-4687ca1-1909521c.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facade.gif-507206ce-22d4ea00.gif 3.63KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facade.gif-507206ce-22d4ea00.idx 305 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facade.gif-56da72a9-3a95e45b.gif 3.36KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\De

[WesleyG]

C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\winicon.gif-1dd52860-61341744.idx 308 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\wink.gif-9d35b3c-2ba14c75.gif 138 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\wink.gif-9d35b3c-2ba14c75.idx 251 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\yahooligans.gif-5e9f1366-39e82d25.gif 6.93KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\yahooligans.gif-5e9f1366-39e82d25.idx 314 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\yahooligans.gif-7eef7e7-532cacbb.gif 6.93KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\yahooligans.gif-7eef7e7-532cacbb.idx 314 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\adcontroller.jar-1d98b267-6f2505b6.idx 173 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\adcontroller.jar-1d98b267-6f2505b6.zip 0.18MB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\adcontroller2.jar-54bd5c01-2d725d08.idx 174 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\adcontroller2.jar-54bd5c01-2d725d08.zip 0.18MB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\chat.zip-27e5d088-5507e2bf.idx 85 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\chat.zip-27e5d088-5507e2bf.zip 57.29KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\chat.zip-6fa84b10-4a2705f7.idx 85 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\chat.zip-6fa84b10-4a2705f7.zip 57.29KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\client.jar-25390b43-65922397.idx 132 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\client.jar-25390b43-65922397.zip 0.66MB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\client.jar-75e2e944-3bea340b.idx 132 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\client.jar-75e2e944-3bea340b.zip 0.66MB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\com.dc3.applet.LEDSign.zip-5f2b905d-540d25a6.idx 95 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\com.dc3.applet.LEDSign.zip-5f2b905d-540d25a6.zip 34.87KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\com.objectplanet.NewsTicker.jar-65f767aa-5e178bd7.idx 448 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\com.objectplanet.NewsTicker.jar-65f767aa-5e178bd7.zip 27.19KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\DuriusBump.jar-327126fa-1cca366e.idx 153 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\DuriusBump.jar-327126fa-1cca366e.zip 14.41KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ewtrk.jar-2ac47c5f-1a68e2b5.idx 126 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ewtrk.jar-2ac47c5f-1a68e2b5.zip 1.23KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ewtrk.jar-3d7c6323-4896ec8f.idx 126 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ewtrk.jar-3d7c6323-4896ec8f.zip 1.23KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ewtrk.jar-6160d2e5-556f7bb9.idx 126 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ewtrk.jar-6160d2e5-556f7bb9.zip 1.23KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\FcPred.jar-10f0c63b-7954830d.idx 84 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\FcPred.jar-10f0c63b-7954830d.zip 13.99KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\IpixViewer.jar-41a18ec-2f37e424.idx 81 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\IpixViewer.jar-41a18ec-2f37e424.zip 40.08KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\IpixViewer.jar-54bc1c88-6f865b74.idx 101 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\IpixViewer.jar-54bc1c88-6f865b74.zip 66.98KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\msgr.jar-3c1619ab-2e3777a2.idx 86 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\msgr.jar-3c1619ab-2e3777a2.zip 98.93KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-1584cabb-50b4efae.idx 204 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-1584cabb-50b4efae.zip 76.68KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-233021f5-51d8de6e.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-233021f5-51d8de6e.zip 76.59KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-2890421b-754b1f54.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-2890421b-754b1f54.zip 76.59KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-2c64f67c-66402ae8.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-2c64f67c-66402ae8.zip 76.68KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-2ccce3c5-6c2099db.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-2ccce3c5-6c2099db.zip 76.68KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-32b7f57e-53b3478d.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-32b7f57e-53b3478d.zip 76.68KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-3ccced2e-34b75e97.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-3ccced2e-34b75e97.zip 76.59KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-4c204e21-2e7bca22.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-4c204e21-2e7bca22.zip 72.22KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-501f7bfd-77da53c2.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-501f7bfd-77da53c2.zip 76.68KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-5bb652f4-7ca12b1e.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-5bb652f4-7ca12b1e.zip 76.68KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-66f7a441-15997b53.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-66f7a441-15997b53.zip 76.68KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-7aae7744-2246b1b3.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-7aae7744-2246b1b3.zip 76.59KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-7ae72374-4ee13100.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-7ae72374-4ee13100.zip 76.68KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-7d71ecf9-119343cf.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-7d71ecf9-119343cf.zip 76.68KB C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-a8fbd9b-344568e3.idx 172 bytes C:\Documents and Settings\Wesley\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-a8fbd9b-344568e3.zip 76.68KB C:\Program Files\Microsoft AntiSpyware\errors.log 30.32KB C:\Program Files\Microsoft AntiSpyware\cleaner.log 4.68KB ------------------------------------------------------------------------------------------

[Siggyx]

Sun Java has updated to remove 5 known critical issue.

It is important to remove older versions as these are the ones with the holes in them. You will be surprised when you go to add/remove to see all of the versions sitting there.

Remove all of the old ones.

Download Newest >>>> http://www.java.com/...nload/index.jsp

Once installed you can test to see that it is in fact installed >>>>

Sun Java Test

Then a new hijackthis log please. How is it running?

[WesleyG]

Logfile of HijackThis v1.99.1
Scan saved at 2:03:11 PM, on 3/19/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ACS.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Toshiba\Power Management\CeEPwrSvc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
c:\Toshiba\Ivp\Swupdate\swupdtmr.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\EzButton\EzButton.EXE
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Toshiba\ConfigFree\CFSServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\AIM\aim.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\Wesley\LOCALS~1\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.geocities.com/osuturfguywes
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshibadirect.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://toshibadirect.com/
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\Common Files\aolshare\Coach\en_en\player\plugin\ToolBar.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [EzButton] C:\Program Files\EzButton\EzButton.EXE
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
O4 - HKLM\..\Run: [NDSTray.exe] C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [CFSServ.exe] C:\Program Files\Toshiba\ConfigFree\CFSServ.exe -NoClient
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\Toshiba\Power Management\CeEPwrSvc.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Swupdtmr - Unknown owner - c:\Toshiba\Ivp\Swupdate\swupdtmr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

--------------------------------------------

The system does seem to be running better. I'm no longer experiencing the blackworm virus pop ups or the winfix pop ups. The one program you suggested appears to have found and deleted three viruses. I do seem to keep finding those same few instances of adware or spyware, but besides that, I am quite happy with how this all has turned out thus far.

I also deleted the old version of Java and downloaded the new one, as you suggested. I ran the test and it said all is good to go.

I must once again express how grateful I am for you time and help. It is amazing to me how many problems can arise, as well as how many different programs are out there to fix and or remove those problems.

I notice in your profile that is says you are in Cambridge. I just moved to Boston about two weeks ago. If you're interested, I'd be more than happy to buy you a beer sometime in appreciation for your help. Or do you like the Red Sox?

Hopefully this has pretty much taken care of the problems. I'm quite computer illiterate, so your help has been wonderful. I will continue following your suggestions if you feel more work needs to be done.

Should I download that free trial Panda cleaning program and run it, or is that not necessary right now?

[Siggyx]

Log looks good

Would be rather a long drive for a beer as I live in Cambridge Ontario but thanks for the offer Go Blue Jays

If you dont have these three programs I would recommend that you get them. Spywareblaster, Spywareguard and IESPY AD. They will add 1000's of sites to your resticted zone and block some hijacks from happening. In my signature below is also a tutorial on how to harden IE, a good read and very helpful to stop these things in the future. I also have a FREE FIREWALL and FREE ANTI VIRUS if you need one.

It is critical to have both a firewall and anti virus to protect your system.

Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on.

Safe Surfing.

Edited by Siggyx, 19 March 2006 - 01:36 PM.

[Siggyx]

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoy...showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php