Can't boot in Safe Mode

corpserv

Welcome to Tom Coyote . Sorry about the delay in responding but we are as most times just overwhelmed with logs.


You have some nasty stuff on this log. Some of the video you have been downloading may be part of this problem. You may want to print this out as there is a lot to do.

• Go to Start> Run and type in services.msc then press Enter
• Scroll down to FireDaemon Service: dll32
• Double Click that service to open it.
• Click on Stop Service.
• Then change the Startup Type to Disabled.
• Scroll down to FireDaemon Service: events
• Double Click that service to open it.
• Click on Stop Service.
• Then change the Startup Type to Disabled.
• OK your way out of the program.

• Open HJT > Misc Tools > Delete an NT Service
• Type in dll32
• Then click on OK, it will ask you to reboot, do so.

Do this again for events

• Open HJT > Misc Tools > Delete an NT Service
• Type in events
• Then click on OK, it will ask you to reboot, do so.

Open HijackThis > Do a System Scan Only, close your browser and all open windows, the only program or window you should have open is HijackThis, check the following entries and click on Fix Checked.

These may be gone
023 - Service: FireDaemon Service: dll32 (dll32) - Unknown owner - C:\windows\system32\spool\printers\FireDaemon.exe (file missing)
O23 - Service: FireDaemon Service: events (events) - Unknown owner - C:\windows\system32\spool\printers\FireDaemon.exe (file missing)




Download Pocket Killbox to your desktop, unzip it to a folder that you can find

C:\windows\system32\crc.exe
C:\windows\system32\spool\printers\FireDaemon.exe

Highlight all the files with the complete path inside the quote and press Ctrl C on your keyboard.

• Open Pocket Killbox
• Go to File > Paste from clipboard
• Set it to Delete on Reboot
• Tick the box that says End Explorer shell while killing file
• If its not greyed out..Click the radio button that say Unregister .dll before deleting.
• Make sure ALL Files is selected
• Click on the Red circle with the white X
• It will ask you to confirm the deletion…Say yes
• It will ask you to reboot, say yes

If you get a message "pending operations has been stopped by external process!" then reboot the computer manually.



Please download ATF Cleaner by Atribune.

• This program is for XP and Windows 2000 only
• Double-click ATF-Cleaner.exe to run the program.
• Under Main choose: Select All
• Click the Empty Selected button.

Your system may start up slower after running ATF Cleaner, this is expected but will be back to normal after the first or second boot up



If you cannot boot to safemode, run AVG normally but have it set to Delete everything it finds

AVG Tutorial

• Once you have downloaded AVG Anti-Spyware 7.5, locate the icon on the desktop and double-click it to launch the set up program.
• Once the setup is complete you will need run AVG and update the definition files.
• On the main screen select the icon Update then select the Update now link.
• Next select the Start Update button, the update will start and a progress bar will show the updates being installed.
• Once the update has completed select the Scanner icon at the top of the screen, then select the Settings tab.
• Once in the Settings screen click on Recommended actions and then select Delete <– Dont forget this
• Under Reports
• Select Automatically generate report after every scan
• Un-Select Only if threats were found
• Close AVG Anti-Spyware 7.5 <– Do not run the scan yet.

Boot your computer into Safemode

• Go to Start> Shut Off your Computer> Restart
• As the computer starts to boot-up, Tap the F8 KEY somewhat rapidly.
• This will bring up a menu.
• Use the Up and Down Arrow Keys to scroll up to SAFEMODE
• Then press the Enter on your Keyboard

Tutorial if you need it How to boot into Safemode


IMPORTANT: Do not open any other windows or programs while ewido is scanning, it may interfere with the scanning process:

• Launch AVG Anti-Spyware 7.5 by double-clicking the icon on your desktop.
• Select the Scanner icon at the top and then the Scan tab then click on Complete System Scan.
• AVG will now begin the scanning process, be patient this may take a little time.
• Once the scan is complete do the following:
• If you have any infections you will prompted, then select Apply all actions
• Next select the Reports icon at the top.
• Select the Save report as button in the lower left hand of the screen and save it to a text file on your system
• make sure to remember where you saved that file, this is important
• Close AVG Anti-Spyware 7.5

Run this free online virus scanner from Panda, it may pick up some bad entires that are not showing up on your HJT log. It's important that I see the log so copy and paste it into your next reply.
Panda ActiveScan <—-Accept default settings



Let me see the Panda Report, the log from AVG and a New HJT log please

corpserv

Lets do a few things, all AVG found where cookies but you had it set for No Action Taken instead of Delete like I posted in the fix.

Go here and upload this file to be analyzed.
Jotti Upload

Use the scroll feature and look for C:\WINDOWS\System32\wupdnmgr.exe then click on Submit and post the log into your next reply.

There is some malware written to evade HJT so we are going to rename Hijackthis.exe ( looks like a stick of dynamite with a plunger ) Right click it and rename it to Scanner.exe and post a new log.


As far as not being able to use System Restore or boot to Safemode, I don't know if this is malware related or not, after we determine that your system is clean I can direct you to some windows support sites including our own at Tom Coyote that can help you.

Good Morning,


The file I was concerned about seems to be ok. The rest of your log looks good

• Your Java is out of date and leaving your system vulnerable.
• Go to your Add-Remove Programs in the Control Panel and uninstall any previous versions of Java (J2SE Runtime Environment)
• It should have an icon next to it:
  [external image: Posted Image]
  Select it and click Remove.
• Reboot your system.
• Then go to the Sun Java website and download and install the update.
• Java Runtime Environment (JRE) 5.0 Update 10 <–This is what you need to download and install.
• If you do an Online installation, it will install automatically.
• If you do an Offline installation, you will have to save the setup file to your hard disk and run it. Your call.
• Then after install you can verify your installation here Sun Java Verify

I like to do an Offline Installation and save the setup file in case I need it in the future





Run this quick scan that checks for Rootkits, post the report.

Rootkit Revealer
http://www.sysinternals.com/Utilities/RootkitRevealer.html


I have a fix for you for the System Restore, I will post it to you later on this evening as its on my home computer. Sometimes viruses and malware play havoc with your system settings, don't know if this is the case here or not.

System Restore Fix

Go here Kellys Corner and scroll down to #278 on the left.

• Right click on Restore/Enable System Restore and select Save Target As
• Save it to your desktop.
• Close all windows and running programs
• Right click on the file you just saved sysrestoreenable
• Click on Merge.

Reboot and see if that fixed your System Restore

Sorry for the delay in getting back to you, but the RootKit Revealer is crashing when I try to save the log (did it 3 times). When I look at the debugger for the crash, it indicates a problem with CKY.exe. The revealer generated a huge list (1,600 items if I recall correctly) which is broken down in two basic groups: 95% of the entries are from 10/2005 and appear to be porn related- I had a pop-up problem in the past that was cured and these must be remnants. The remaining part is from 11/27/2006 and what I saw led me to believe that this could be safemode problem (I can not do a shut-down either- it always just restarts). Is there any other way to try and get a log out of this? SHould I rename the program as I did with Hijack This? I will try to get the system resore working as per your most recent posting. Again, thanks for sticking with me.

Renaming Rootkit Revealer wont work Your HJT log looks fine but I have a feeling there is something going on we cant see.


Download and Save Blacklight to your desktop:

• Double-click blbeta.exe
• Then accept the agreement
• leave [X]scan through Windows Explorer checked.
• Click > scan then > next
• You'll see a list of all items found. There will also be a log on your desktop with the name fsbl.xxxxxxx.log (the xxxxxxx stand for numbers).
• Copy and paste this log in your next reply.
• Don't choose the rename option yet! I want to see the log first, because legitimate items can also be present there, such as "wbemtest.exe"

Here is the text of the BackLight log- I have taken no action yet… It looks to be mostly good files. 12/13/06 19:02:30 [Info]: BlackLight Engine 1.0.47 initialized 12/13/06 19:02:30 [Info]: OS: 5.1 build 2600 (Service Pack 2) 12/13/06 19:02:30 [Note]: 7019 4 12/13/06 19:02:30 [Note]: 7005 0 12/13/06 19:03:49 [Note]: 7006 0 12/13/06 19:03:49 [Note]: 7011 192 12/13/06 19:03:49 [Note]: 7026 0 12/13/06 19:03:49 [Note]: 7026 0 12/13/06 19:03:49 [Note]: 7024 3 12/13/06 19:03:49 [Info]: Hidden process: C:\WINDOWS\System32\scvhost.exe 12/13/06 19:03:49 [Note]: 7024 3 12/13/06 19:03:49 [Info]: Hidden process: C:\WINDOWS\System32\servicesrv.exe 12/13/06 19:03:49 [Note]: 7024 3 12/13/06 19:03:49 [Info]: Hidden process: C:\WINDOWS\System32\clipsvr.exe 12/13/06 19:03:49 [Note]: 7024 3 12/13/06 19:03:49 [Info]: Hidden process: C:\WINDOWS\system32\drivers\etc\Fonts.{BD84B380-8CA2-1069-AB1D-08000948F534}\com1\a 12/13/06 19:03:49 [Note]: 7024 3 12/13/06 19:03:49 [Info]: Hidden process: C:\WINDOWS\system32\dmsystem.exe 12/13/06 19:03:49 [Note]: 7024 3 12/13/06 19:03:49 [Info]: Hidden process: C:\WINDOWS\System32\netsdde.exe 12/13/06 19:03:49 [Note]: 7024 3 12/13/06 19:03:49 [Info]: Hidden process: C:\WINDOWS\system32\spoolvs.exe 12/13/06 19:03:49 [Note]: 7024 3 12/13/06 19:03:49 [Info]: Hidden process: C:\WINDOWS\system32\ciscv.exe 12/13/06 19:03:49 [Note]: 7024 3 12/13/06 19:03:49 [Info]: Hidden process: C:\WINDOWS\System32\unps.exe 12/13/06 19:03:49 [Note]: FSRAW library version 1.7.1020 12/13/06 19:03:53 [Info]: Hidden file: c:\Documents and Settings\All Users\Application Data\Adobe\Photoshop Elements\How-Tos\ 12/13/06 19:03:53 [Note]: 10002 1 12/13/06 19:04:30 [Info]: Hidden file: c:\Documents and Settings\VCR\Application Data\Macromedia\Dreamweaver MX\Configuration 12/13/06 19:04:30 [Note]: 10002 1 12/13/06 19:04:33 [Info]: Hidden file: c:\Documents and Settings\VCR\Application Data\MailWasherPro\filters.txt 12/13/06 19:04:33 [Note]: 10002 1 12/13/06 19:04:33 [Info]: Hidden file: c:\Documents and Settings\VCR\Application Data\MailWasherPro\filters.txt.backup 12/13/06 19:04:33 [Note]: 10002 1 12/13/06 19:04:38 [Info]: Hidden file: c:\Documents and Settings\VCR\Application Data\Smart Panel\pmApp\filter.ini 12/13/06 19:04:38 [Note]: 10002 1 12/13/06 19:04:39 [Info]: Hidden file: c:\Documents and Settings\VCR\Application Data\Smart Panel\pmApp\filter_app.ini 12/13/06 19:04:39 [Note]: 10002 1 12/13/06 19:04:39 [Info]: Hidden file: c:\Documents and Settings\VCR\Application Data\Smart Panel\pmApp\filter_email.ini 12/13/06 19:04:39 [Note]: 10002 1 12/13/06 19:04:39 [Info]: Hidden file: c:\Documents and Settings\VCR\Application Data\Smart Panel\pmApp\filter_ocr.ini 12/13/06 19:04:39 [Note]: 10002 1 12/13/06 19:05:05 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temp\AAWTMP\C80804468\18EEAA\sun\tools\ja 12/13/06 19:05:05 [Note]: 10002 1 12/13/06 19:05:06 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temp\AAWTMP\C80804468\32FEE5\sun\tools\ja 12/13/06 19:05:06 [Note]: 10002 1 12/13/06 19:05:07 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temp\WER42f8.dir00\crc.exe.hdmp 12/13/06 19:05:07 [Note]: 10002 1 12/13/06 19:05:07 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temp\WER42f8.dir00\crc.exe.mdmp 12/13/06 19:05:07 [Note]: 10002 1 12/13/06 19:05:08 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temp\WER9a80.dir00\crc.exe.hdmp 12/13/06 19:05:08 [Note]: 10002 1 12/13/06 19:05:08 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temp\WER9a80.dir00\crc.exe.mdmp 12/13/06 19:05:08 [Note]: 10002 1 12/13/06 19:05:08 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temp\WERba8d.dir00\crc.exe.hdmp 12/13/06 19:05:08 [Note]: 10002 1 12/13/06 19:05:09 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temp\WERba8d.dir00\crc.exe.mdmp 12/13/06 19:05:09 [Note]: 10002 1 12/13/06 19:05:20 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temporary Internet Files\Content.IE5\0JCB 12/13/06 19:05:20 [Note]: 10002 1 12/13/06 19:05:30 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temporary Internet Files\Content.IE5\3R5L 12/13/06 19:05:30 [Note]: 10002 1 12/13/06 19:05:35 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temporary Internet Files\Content.IE5\8XQN 12/13/06 19:05:35 [Note]: 10002 1 12/13/06 19:05:35 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temporary Internet Files\Content.IE5\8XQN 12/13/06 19:05:35 [Note]: 10002 1 12/13/06 19:05:47 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temporary Internet Files\Content.IE5\EVS3 12/13/06 19:05:47 [Note]: 10002 1 12/13/06 19:05:51 [Info]: Hidden file: c:\Documents and Settings\VCR\Local Settings\Temporary Internet Files\Content.IE5\G5IJ 12/13/06 19:05:51 [Note]: 10002 1 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\COMMON\MSSHARE 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\COMMON\MSSHARE 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\COMMON\MSSHARE 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\COMMON\MSSHARE 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\MSOFFICE\OFFIC 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\MSOFFICE\OFFIC 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\MSOFFICE\OFFIC 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\MSOFFICE\OFFIC 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\MSOFFICE\OFFIC 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\MSOFFICE\OFFIC 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\MSOFFICE\OFFIC 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\MSOFFICE\OFFIC 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\SETUP\OSE.EXE 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\WINDOWS\INF\AER_1033. 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90AE0409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\MSOFFICE\OFFIC 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:20 [Info]: Hidden file: c:\MSOCache\All Users\90AE0409-6000-11D3-8CFE-0150048383C9\FILES\SETUP\OSE.EXE 12/13/06 19:07:20 [Note]: 10002 3 12/13/06 19:07:26 [Info]: Hidden file: c:\Program Files\Adobe\Adobe Lightroom\ssleay32.dll 12/13/06 19:07:26 [Note]: 10002 1 12/13/06 19:07:28 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Adobe ImageReady Only\Filters\GaussianBl 12/13/06 19:07:28 [Note]: 10002 3 12/13/06 19:07:28 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Adobe ImageReady Only\Filters\Levels.8bf 12/13/06 19:07:28 [Note]: 10002 3 12/13/06 19:07:28 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Adobe ImageReady Only\Filters\Offset.8bf 12/13/06 19:07:28 [Note]: 10002 3 12/13/06 19:07:28 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Adobe ImageReady Only\Filters\TileMaker. 12/13/06 19:07:28 [Note]: 10002 3 12/13/06 19:07:28 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Adobe ImageReady Only\Filters\UnsharpMas 12/13/06 19:07:28 [Note]: 10002 3 12/13/06 19:07:29 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Adobe Photoshop Only\Filters\ChannelPort 12/13/06 19:07:29 [Note]: 10002 3 12/13/06 19:07:29 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Adobe Photoshop Only\Filters\Extract.8BF 12/13/06 19:07:29 [Note]: 10002 3 12/13/06 19:07:29 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Adobe Photoshop Only\Filters\PatternMake 12/13/06 19:07:29 [Note]: 10002 3 12/13/06 19:07:29 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Mezzotint.8BF 12/13/06 19:07:29 [Note]: 10002 3 12/13/06 19:07:29 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\3D Transform.8BF 12/13/06 19:07:29 [Note]: 10002 3 12/13/06 19:07:29 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Clouds.8BF 12/13/06 19:07:29 [Note]: 10002 3 12/13/06 19:07:29 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Color Halftone.8BF 12/13/06 19:07:29 [Note]: 10002 3 12/13/06 19:07:29 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Crystallize.8BF 12/13/06 19:07:29 [Note]: 10002 3 12/13/06 19:07:29 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\De-Interlace.8BF 12/13/06 19:07:29 [Note]: 10002 3 12/13/06 19:07:29 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Displace.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Extrude.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lens Flare.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\2 O'clock Spotli 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Blue Omni 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Circle of Light 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Crossing 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Crossing Down 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Default 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Five Lights Down 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Five Lights Up 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Flashlight 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Flood Light 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Parallel Directi 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\RGB Lights 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Soft Direct Ligh 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Soft Omni 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Soft Spotlight 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Three Down 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Lighting Styles\Triple Spotlight 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\LightingEffects.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Liquify.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\NTSC Colors.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Pinch.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Pointillize.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Polar Coordinates.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Radial Blur.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Ripple.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Shear.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Smart Blur.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Solarize.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Spherize.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Tiles.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Twirl.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Variations.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Wave.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\Wind.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:30 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop 7.0\Plug-Ins\Filters\ZigZag.8BF 12/13/06 19:07:30 [Note]: 10002 3 12/13/06 19:07:33 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Effects\Filter Gallery.8bf 12/13/06 19:07:33 [Note]: 10002 1 12/13/06 19:07:33 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\NTSC Colors.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\3D TransformEL.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Average.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\ChannelPort.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Clouds.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Color Halftone.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\CropPhotos.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Crystallize.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\De-Interlace.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Displace.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Extrude.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Fibers.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lens Flare.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Blue Om 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Circle 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Crossin 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Crossin 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Default 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Five Li 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Five Li 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Flashli 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Flood L 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Paralle 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\RGB Lig 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Soft Di 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Soft Om 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Soft Sp 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Three D 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Lighting Styles\Triple 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\LightingEffects.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\LiquifyEL.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\MagicExtract.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Mezzotint.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\OnEdge.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\PhotomergeCylmap.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\PhotomergeRender.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\PhotomergeUI.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Pinch.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Pointillize.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Polar Coordinates.8BF 12/13/06 19:07:34 [Note]: 10002 3 12/13/06 19:07:34 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Radial Blur.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:35 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Ripple.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:35 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Shear.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:35 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Smart Blur.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:35 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Solarize.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:35 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Spherize.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:35 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Texture Fill.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:35 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Tiles.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:35 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Twirl.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:35 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\VariationsEL.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:35 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Wave.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:35 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\Wind.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:35 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Plug-Ins\Filters\ZigZag.8BF 12/13/06 19:07:35 [Note]: 10002 3 12/13/06 19:07:36 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\cache\filters cache\CatagoryCac 12/13/06 19:07:36 [Note]: 10002 3 12/13/06 19:07:36 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\cache\filters cache\ListCache.c 12/13/06 19:07:36 [Note]: 10002 3 12/13/06 19:07:36 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\cache\filters cache\ThumbNailCa 12/13/06 19:07:36 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Artistic.psd 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Colored Pencil 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Cutout.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Dry Brush.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Film Grain.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Fresco.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Neon Glow.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Paint Daubs.at 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Palette Knife. 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Plastic Wrap.a 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Poster Edges.a 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Rough Pastels. 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Smudge Stick.a 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Sponge.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Underpainting. 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\artistic\Watercolor.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\blur\Average.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\blur\Blur Filters.psd 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\blur\Blur More.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\blur\Blur.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\blur\Gaussian Blur.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\blur\Motion Blur.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\blur\Radial Blur.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\blur\Smart Blur.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\brush strokes\Accented 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\brush strokes\Angled St 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\brush strokes\Brush Str 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\brush strokes\Crosshatc 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\brush strokes\Dark Stro 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\brush strokes\Ink Outli 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\brush strokes\Spatter.a 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\brush strokes\Sprayed S 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\brush strokes\Sumi-e.at 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Diffuse Glow.at 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Distort.psd 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Gauss Blur.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Glass.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Liquify.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Ocean Ripple.at 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Pinch.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Polar Coordinat 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Ripple.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Shear.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Spherize.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Twirl.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\Wave.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\distort\ZigZag.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\noise\Add Noise.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\noise\Despeckle.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\noise\Dust & Scratches. 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\noise\Median.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\noise\Noise.psd 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\noise\Reduce Noise.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\Original.psd 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\other\Custom.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\other\High Pass.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\other\Maximum.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\other\minimum.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\other\Offset.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\other\Other.psd 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\pixelate\Color Halftone 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\pixelate\Crystallize.at 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\pixelate\Facet.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\pixelate\Fragment.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\pixelate\Mezzotint.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\pixelate\Mosaic.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\pixelate\Pixelate.psd 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\pixelate\Pointillize.at 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\render\3D Transform.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\render\Clouds.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\render\Difference Cloud 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\render\Fibers.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\render\Lens Flare.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\render\Lighting Effects 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\render\Render.psd 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\render\TextureFill.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sharpen\Sharpen Edges.a 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sharpen\Sharpen More.at 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sharpen\Sharpen.atn 12/13/06 19:07:37 [Note]: 10002 3 12/13/06 19:07:37 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sharpen\Sharpen.psd 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sharpen\Unsharp Mask.at 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Bas Relief.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Chalk & Charcoal 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Charcoal.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Chrome.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Conte Crayon.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Graphic Pen.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Halftone Pattern 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Note Paper.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Photocopy.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Plaster.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Reticulation.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Sketch.psd 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Stamp.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Torn Edges.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\sketch\Water Paper.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\stylize\Diffuse.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\stylize\Emboss.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\stylize\Extrude.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\stylize\Find Edges.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\stylize\Glowing Edges.a 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\stylize\Solarize.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\stylize\Stylize.psd 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\stylize\Tiles.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\stylize\Trace Contour.a 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\stylize\Wind.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\texture\Craquelure.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\texture\Grain.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\texture\Mosaic Tiles.at 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\texture\Patchwork.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\texture\Stained Glass.a 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\texture\Texture.psd 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\texture\Texturizer.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\video\De-Interlace.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\video\NTSC Colors.atn 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:38 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\Previews\filters\video\Video.psd 12/13/06 19:07:38 [Note]: 10002 3 12/13/06 19:07:45 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\filters\AudioDepthConverter.ax 12/13/06 19:07:45 [Note]: 10002 3 12/13/06 19:07:45 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\filters\DirectShowTap.ax 12/13/06 19:07:45 [Note]: 10002 3 12/13/06 19:07:45 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\filters\DVDLPCMConverter.ax 12/13/06 19:07:45 [Note]: 10002 3 12/13/06 19:07:45 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\filters\RTStreamSink.ax 12/13/06 19:07:45 [Note]: 10002 3 12/13/06 19:07:45 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\filters\RTStreamSource.ax 12/13/06 19:07:45 [Note]: 10002 3 12/13/06 19:07:45 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\filters\SonicMPEGAudio.dll 12/13/06 19:07:45 [Note]: 10002 3 12/13/06 19:07:45 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\filters\SonicMPEGSplitter.dll 12/13/06 19:07:45 [Note]: 10002 3 12/13/06 19:07:45 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\filters\SonicMPEGVideo.dll 12/13/06 19:07:45 [Note]: 10002 3 12/13/06 19:07:45 [Info]: Hidden file: c:\Program Files\Adobe\Photoshop Elements 4.0\filters\SonicSPTransform.ax 12/13/06 19:07:45 [Note]: 10002 3 12/13/06 19:07:57 [Info]: Hidden file: c:\Program Files\Pinnacle\Hollywood FX for Studio\5.5\Plugins\Filters\Blur.flt 12/13/06 19:07:57 [Note]: 10002 3 12/13/06 19:07:57 [Info]: Hidden file: c:\Program Files\Pinnacle\Hollywood FX for Studio\5.5\Plugins\Filters\DirWipe.flt 12/13/06 19:07:57 [Note]: 10002 3 12/13/06 19:07:57 [Info]: Hidden file: c:\Program Files\Pinnacle\Hollywood FX for Studio\5.5\Plugins\Filters\EdgeWipe.flt 12/13/06 19:07:57 [Note]: 10002 3 12/13/06 19:07:57 [Info]: Hidden file: c:\Program Files\Pinnacle\Hollywood FX for Studio\5.5\Plugins\Filters\Gradient.flt 12/13/06 19:07:57 [Note]: 10002 3 12/13/06 19:07:57 [Info]: Hidden file: c:\Program Files\Pinnacle\Hollywood FX for Studio\5.5\Plugins\Filters\Keyers.flt 12/13/06 19:07:57 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\4code.dll 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\4codeDecoder.dll 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\ACnvrtX.dll 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\ASA_DLL.dll 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\ATLLightPlugIn.dll 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\ATLPlugin.dll 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\AudioCodec.dll 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\AudioGrab.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\AudioRenderer.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\AudioResampler.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\AVI_PASS.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\AVSynChronizer.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\axmpeg_av.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\axwavrender.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\BSDVdec.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\ColorConvert.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\CSCSaFX.dll 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\CutlistSourcePixie.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\dllzAAC.dll 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DVC150\player.qthex 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DVC150\recorder.qthex 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DVC150\usb2fw.hex 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DVC150\usbdvr2snk.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DVC150\usbdvr2splt.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DVC150\usbdvr2src.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DVC150Muxer.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DVC150XFormDeadCafe.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DVDSampleSink.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWAlphaTransform.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWAudioNoiseReduction.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWAudioSceneAnalyzer.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWAudioVariSpeed.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWColorSpaceConverter.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWFieldReverser.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:58 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWQualityControl.ax 12/13/06 19:07:58 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWSceneDetect2.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWSink2.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWSlicer.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWSource4.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWVariSpeed.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWVideoResampler.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWWaveCapture.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\DWWaveTransform.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\ESink.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\ESinkAudio.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\Float2PCM.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\FrameGrab.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\FrameNotify.ax 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\helper.dll 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\iammixer2.dll 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared Files\Filter\lame_enc.dll 12/13/06 19:07:59 [Note]: 10002 3 12/13/06 19:07:59 [Info]: Hidden file: c:\Program Files\Pinnacle\Shared F

You have some nasty files at the beginning of Blacklight, they appear to be related to the SDBOT worm, there is a tool for it but it needs to run in Safemode. Ya know, all this file sharing and downloading movies or songs had gotten you into trouble big time.


Download Pocket Killbox to your desktop, unzip it to a folder that you can find

C:\WINDOWS\system32\ciscv.exe
C:\WINDOWS\System32\netsdde.exe
C:\WINDOWS\System32\scvhost.exe

Highlight all the files with the complete path inside the quote and press Ctrl C on your keyboard.

• Open Pocket Killbox
• Go to File > Paste from clipboard
• Set it to Delete on Reboot
• Tick the box that says End Explorer shell while killing file
• If its not greyed out..Click the radio button that say Unregister .dll before deleting.
• Make sure ALL Files is selected
• Click on the Red circle with the white X
• It will ask you to confirm the deletion…Say yes
• It will ask you to reboot, say yes

If you get a message "pending operations has been stopped by external process!" then reboot the computer manually.


Lets try running the tool, give Safemode another try, if still no luck, try starting your computer this way.

Go to Start> Run and type in msconfig on the General Tab, select Diagnostic Startup, click on Apply…Ok and see if that works, if not, follow the instructions for this tool and if the only option is to run it in normal mode ( I have not done this before ) lets see what it does. Post the log from the tool please.


Download SDFix and save it to your desktop.

Please then reboot your computer in Safe Mode by doing the following :

• Restart your computer
• After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
• Instead of Windows loading as normal, a menu with options should appear;
• Select the first option, to run Windows in Safe Mode, then press "Enter".
• Choose your usual account.

• In Safe Mode, right click the SDFix.zip folder and choose Extract All,
• Open the extracted folder and double click RunThis.bat to start the script.
• Type Y to begin the script.
• It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot.
• Press any Key and it will restart the PC.
• Your system will take longer that normal to restart as the fixtool will be running and removing files.
• When the desktop loads the Fixtool will complete the removal and display Finished, then press any key to end the script and load your desktop icons.
• Finally open the SDFix folder on your desktop and copy and paste the contents of the results file Report.txt back onto the forum with a new HijackThis log

Enlighten me on a few things.
1. Have you always not been able to boot to safemode or has this just started ?
2. What about System Restore ?
3. What about not having admin privileges ?

I am trying to determine if the above is related to the infections you have or if its a windows issue.




If you cant run SDFix, try running Spysweeper. Please understand that not being able to boot to safemode is kind of tying my hands and I am trying different tools to see what will work to clean you up.

Download Spysweeper 5.2 Free Trial

• Scroll to the bottom of the page and be sure to download and install the Free 5.2 Trial and not the free online scan.
• Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it.
• If you receive alerts from your firewall, allow all activities for Spy Sweeper
• You will be prompted to check for updated definitions, please do so.
• Click on Options > Sweep Options and check Sweep all Folders on Selected drives.
• Check Local Disc C.
• Under What to Sweep, check every box.
• Click on Sweep and allow it to fully scan your system.
• When the sweep has finished, click Remove. Click Select All and then Next
• From 'Results', select the Session Log tab.
• Click Save to File and save the log somewhere convenient.
• Exit Spy Sweeper.

Restart your computer, and then please copy and paste the SpySweeper log into this thread.

I am one step behind you, but I finally was able to get a partial save on the RootkitReveal log. As an FYI- I don't download video nor share files. All of my video content is created on the machine itself via a tuner card which I then transcode for watching on my video iPod. I am thinking the nasties came when I was looking for software to keep my system clock sync'd (the clock went bizerk and replacing the mobo batery did not help) and I downloaded a tool that did not appear to do anything then I downloaded another (Dimension4) which worked perfectly. I think it was that first download that hosed me. Anyway, here is the partial for the RootkitReveal log: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\008i.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\008k.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\00hq.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\010402.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1-domains-registrations.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\100sexlinks.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\139mm.com\www\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\17-plus.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\171203.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1gb.ru\people\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1sexparty.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1stpagehere.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\2020search.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\20x2p.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\24teen.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\2ndpower.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\36site.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\3721.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\39-93.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\4corn.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\4klm.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\75tz.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\777search.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\777top.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\7search.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\8ad.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\aaasexypics.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\aavc.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\aboutclicker.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\abrp.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\accessthefuture.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ace-webmaster.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\acemedic.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\acjp.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\actionbreastcancer.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\activexupdate.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ad25.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ad45.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ad77.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ad86.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adamsupportgroup.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adasearch.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adipics.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adspics.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adult-engine-search.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adult-erotic-guide.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adult-friends-finder.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adult-host.org\sexycat\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adult-personal.us\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adultgambling.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adulthyperlinks.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adultsgames.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adulttds.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\africaspromise.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\agava.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\agava.ru\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\agentstudio.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\aifind.info\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\akril.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\alcatel.ws\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\alfa-search.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\all-inet.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\allabtcars.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\allabtjeeps.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\allcybersearch.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\allcybersearch.com\www\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\allforadult.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\allhyperlinks.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\allinternetbusiness.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\almarvideos.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\amandamountains.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\amateurliveshow.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\american-teens.net\hot-cartoon-sex.anime\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\amigeek.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\amisbusiness.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\analmovi.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\anarchylolita.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\anarchyporn.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\anin.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\annaromeo.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\antrocity.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\anything4health.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\approvedlinks.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\apsua.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\archiviosex.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\aregay.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\arheo.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\arizonaweb.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\armitageinn.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\art-func.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\art-xxx.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\artachnid.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\asiankingkong.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ass-gals.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\athenrye.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\autoescrowpay.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\avian-ads.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\awmcash.biz\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\awmdabest.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ayakawamura.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ayumitaniguchi.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\babenet.com\r\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\babeweb.de\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bannedhost.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\barbudafarms.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\barnandfence.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\batsearch.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\baygraphicsllc.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bb-search.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bbbsearch.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bdsmlibrary.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bedhome.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bediadance.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\begin2search.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bellabasketsfl.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bernaolatwin.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\best-counter.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\best-hardpics.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\best-winning-casino.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bestcrawler.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bestfor.ru\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bestporngate.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bestweblinks.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bestxporno.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bitchesonline.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blackjack-free.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blazefind.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blondetgp.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blue-elefant.com\www\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bodaciousbabette.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bonzi.com\www\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\boobdoll.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\boobsandtits.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\boobsclub.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\boredlife.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bowlofogumbo.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bradcoem.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\brandiyoung.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\brookeburn.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\browserwise.com\www\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bucps.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buldog-stats.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\burgerkingbigscreen.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buscards.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\bustyrussell.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buttejazz.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buyselldomain.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buz.ru\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\by.ru\superwp\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\calcioturris.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cameup.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\camup.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\canberracricketcoaching.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\candycantaloupes.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cantfind.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\carsands.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\carsrentals.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cashsearch.biz\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cashsurfers.com\www\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\casino-gambling-1.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\casino-gambling-2.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\casino-onlines.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\casino2win.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\casinomidas.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\casinonline.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\castingsamateur.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\catallogue.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\caxa.ru\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cclebali.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ceewawires.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\centralmedia.ws\ads\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\centralmedia.ws\c\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\certumgroup.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\chelancatering.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\childrenvilla.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\chips-4-free.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\chrisswasey.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\chriswallace.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ckick4thumbs.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cl55.biz\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clackamasliteraryreview.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clearsearch.cc\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clearsearch.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\click-now.net\ufindall\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clickaire.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clickyestoenter.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cliks.org\xads\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clrsch.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cmtapestry.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cnetadd.com\www\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\com.ru\you-search\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\commonname.com\www\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cool-homepage.co\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cool-homepage.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cool-search.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cool-web-search.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cool-xxx.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cool.ne.jp\urawa\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\coolfetishsite.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\coolfreehost.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\coolfreepage.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\coolfreepages.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\coolmoneysearch.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\coolpornsearch.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\coolsearcher.info\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\coolwebsearch.\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\coolwebsearch.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\coolwebsearsh.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\coolwwwsearch.\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\coolwwwsearch.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\copmtraine.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\couldnotfind.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\count-all.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\count.cc\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\creamedcutties.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\creditsearchonline.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\crestring.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\crooder.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\curvedspaces.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cvsymphony.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cyberrape.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cydom.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\da.ru\catsss\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\da.ru\revolto3\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\daily-gals.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dailyteenspic.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dancingbabycd.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\datanotary.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\datareco.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dating-search.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\davemarshall.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\db105.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dcfitusa.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\defaultsearch.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\desarrollocreativo.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\develip.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dewis.us\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dialer2004.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dialerclub.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dietpills4free.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dietpussy.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\digistreamsa.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\digital-pornography.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\digitalfan.com\www\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dionforvalleycouncil.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\doctorwaldron.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\doggyaction.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\domain-your-registration.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\domains-for-you-online.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\domains2003.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\domkrat.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dp-host.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\drocherway.com\fregat\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\drug-sources-exposed.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\drvvv.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dulcineasystems.net\careers\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dumpserv.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\duolaimi.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dutch-sex.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dvdbank.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\e-localad.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\e-plus.cc\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\e-websitesolutions.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\eager-sex.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\eases.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\easy-search.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\easyantispy.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\easycategories.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\easysearchingtips.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebav.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebaw.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebch.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebdv.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebdw.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebgo.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebjp.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebkb.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebkn.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebky.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\eblv.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebmu.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ebvr.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ecmh.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ecmp.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ecosrioplatenses.org\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ecpm.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ecstasyporn.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ecwz.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ecyb.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\edhq.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\edty.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\eduy.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\eeev.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\eikokoike.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\emch.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\enjoywebsurf.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\epornsex.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ergosites.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\euuu.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\evidence-detector.biz\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\evilspidercomics.com\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ewebsearch.net\* 10/18/2005 7:48 PM 4 bytes Hidden from Windows API. HKU\.DEFAULT\Software\Microsof

corpserv I wasn't clear on what you did with videos, sounds like your doing ok with them. Most free tools are fine but some are bad, you never know. The entries in RK Revealer are legit, those are sites that are in your Internet Explorer Restricted Zone, most likely put there by IE-SPYAD. So lets see what SDFix and Spysweeper come up with.

corpserv

Lets do a couple of things.

Download: DelDomains and save it to the desktop.

• Close all open windows and your browser
• Right Click DelDomains.inf and select > Install
• Reboot your computer

You can download this utility for booting into Safemode. BootSafe

Screenshot



If you get into Safemode or even if you don't , also run AVG Anti Spyware again, this time make sure you set it for Delete or Quarantine.

I am still running one step behind you, and I am having trouble getting the machine restarted. I am actually working from my Linux box now (it took me a while to remember my login and password- I don't use this much). When attempting the diagnostic startup, I got an access error indicating that I needed an admin account to do this. There is also a button for going to system restore which returned "turned off by group policy". In response to some questions you had asked: the safe mode boot problem is recent as is the non-access to system restore and not having admin privileges. I run VNC server on the machine and log in from work regularly to check email and to do the video encoding, and recently that stopped working too. Despite the admin acocunt message while trying the diagnostic startup, it went into that mode, restarting several times, but I could not find anyplace where a log might be saved or displayed. I will look into the safe mode booting software and get back to you. Thanks-