This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] German spam bot.

274 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

C:\Program Files\Ipwindows\set9B7.tmp - Deleted C:\Program Files\Ipwindows\set9B8.tmp - Deleted C:\Program Files\Ipwindows\set9B9.tmp - Deleted C:\Program Files\Ipwindows\set9BA.tmp - Deleted C:\Program Files\Ipwindows\set9BB.tmp - Deleted C:\Program Files\Ipwindows\set9BC.tmp - Deleted C:\Program Files\Ipwindows\set9BD.tmp - Deleted C:\Program Files\Ipwindows\set9BE.tmp - Deleted C:\Program Files\Ipwindows\set9BF.tmp - Deleted C:\Program Files\Ipwindows\set9C.tmp - Deleted C:\Program Files\Ipwindows\set9C0.tmp - Deleted C:\Program Files\Ipwindows\set9C1.tmp - Deleted C:\Program Files\Ipwindows\set9C2.tmp - Deleted C:\Program Files\Ipwindows\set9C3.tmp - Deleted C:\Program Files\Ipwindows\set9C4.tmp - Deleted C:\Program Files\Ipwindows\set9C5.tmp - Deleted C:\Program Files\Ipwindows\set9C6.tmp - Deleted C:\Program Files\Ipwindows\set9C7.tmp - Deleted C:\Program Files\Ipwindows\set9C8.tmp - Deleted C:\Program Files\Ipwindows\set9C9.tmp - Deleted C:\Program Files\Ipwindows\set9CA.tmp - Deleted C:\Program Files\Ipwindows\set9CB.tmp - Deleted C:\Program Files\Ipwindows\set9CC.tmp - Deleted C:\Program Files\Ipwindows\set9CD.tmp - Deleted C:\Program Files\Ipwindows\set9CE.tmp - Deleted C:\Program Files\Ipwindows\set9CF.tmp - Deleted C:\Program Files\Ipwindows\set9D.tmp - Deleted C:\Program Files\Ipwindows\set9D0.tmp - Deleted C:\Program Files\Ipwindows\set9D1.tmp - Deleted C:\Program Files\Ipwindows\set9D2.tmp - Deleted C:\Program Files\Ipwindows\set9D3.tmp - Deleted C:\Program Files\Ipwindows\set9D4.tmp - Deleted C:\Program Files\Ipwindows\set9D5.tmp - Deleted C:\Program Files\Ipwindows\set9D6.tmp - Deleted C:\Program Files\Ipwindows\set9D7.tmp - Deleted C:\Program Files\Ipwindows\set9D8.tmp - Deleted C:\Program Files\Ipwindows\set9D9.tmp - Deleted C:\Program Files\Ipwindows\set9DA.tmp - Deleted C:\Program Files\Ipwindows\set9DB.tmp - Deleted C:\Program Files\Ipwindows\set9DC.tmp - Deleted C:\Program Files\Ipwindows\set9DD.tmp - Deleted C:\Program Files\Ipwindows\set9DE.tmp - Deleted C:\Program Files\Ipwindows\set9DF.tmp - Deleted C:\Program Files\Ipwindows\set9E.tmp - Deleted C:\Program Files\Ipwindows\set9E0.tmp - Deleted C:\Program Files\Ipwindows\set9E1.tmp - Deleted C:\Program Files\Ipwindows\set9E2.tmp - Deleted C:\Program Files\Ipwindows\set9E3.tmp - Deleted C:\Program Files\Ipwindows\set9E4.tmp - Deleted C:\Program Files\Ipwindows\set9E5.tmp - Deleted C:\Program Files\Ipwindows\set9E6.tmp - Deleted C:\Program Files\Ipwindows\set9E7.tmp - Deleted C:\Program Files\Ipwindows\set9E8.tmp - Deleted C:\Program Files\Ipwindows\set9E9.tmp - Deleted C:\Program Files\Ipwindows\set9EA.tmp - Deleted C:\Program Files\Ipwindows\set9EB.tmp - Deleted C:\Program Files\Ipwindows\set9EC.tmp - Deleted C:\Program Files\Ipwindows\set9ED.tmp - Deleted C:\Program Files\Ipwindows\set9EE.tmp - Deleted C:\Program Files\Ipwindows\set9EF.tmp - Deleted C:\Program Files\Ipwindows\set9F.tmp - Deleted C:\Program Files\Ipwindows\set9F0.tmp - Deleted C:\Program Files\Ipwindows\set9F1.tmp - Deleted C:\Program Files\Ipwindows\set9F2.tmp - Deleted C:\Program Files\Ipwindows\set9F3.tmp - Deleted C:\Program Files\Ipwindows\set9F4.tmp - Deleted C:\Program Files\Ipwindows\set9F5.tmp - Deleted C:\Program Files\Ipwindows\set9F6.tmp - Deleted C:\Program Files\Ipwindows\set9F7.tmp - Deleted C:\Program Files\Ipwindows\set9F8.tmp - Deleted C:\Program Files\Ipwindows\set9F9.tmp - Deleted C:\Program Files\Ipwindows\set9FA.tmp - Deleted C:\Program Files\Ipwindows\set9FB.tmp - Deleted C:\Program Files\Ipwindows\set9FC.tmp - Deleted C:\Program Files\Ipwindows\set9FD.tmp - Deleted C:\Program Files\Ipwindows\set9FE.tmp - Deleted C:\Program Files\Ipwindows\set9FF.tmp - Deleted C:\Program Files\Ipwindows\setA.tmp - Deleted C:\Program Files\Ipwindows\setA0.tmp - Deleted C:\Program Files\Ipwindows\setA00.tmp - Deleted C:\Program Files\Ipwindows\setA01.tmp - Deleted C:\Program Files\Ipwindows\setA02.tmp - Deleted C:\Program Files\Ipwindows\setA03.tmp - Deleted C:\Program Files\Ipwindows\setA04.tmp - Deleted C:\Program Files\Ipwindows\setA05.tmp - Deleted C:\Program Files\Ipwindows\setA06.tmp - Deleted C:\Program Files\Ipwindows\setA07.tmp - Deleted C:\Program Files\Ipwindows\setA08.tmp - Deleted C:\Program Files\Ipwindows\setA09.tmp - Deleted C:\Program Files\Ipwindows\setA0A.tmp - Deleted C:\Program Files\Ipwindows\setA0B.tmp - Deleted C:\Program Files\Ipwindows\setA0C.tmp - Deleted C:\Program Files\Ipwindows\setA0D.tmp - Deleted C:\Program Files\Ipwindows\setA0E.tmp - Deleted C:\Program Files\Ipwindows\setA0F.tmp - Deleted C:\Program Files\Ipwindows\setA1.tmp - Deleted C:\Program Files\Ipwindows\setA10.tmp - Deleted C:\Program Files\Ipwindows\setA11.tmp - Deleted C:\Program Files\Ipwindows\setA12.tmp - Deleted C:\Program Files\Ipwindows\setA13.tmp - Deleted C:\Program Files\Ipwindows\setA14.tmp - Deleted C:\Program Files\Ipwindows\setA15.tmp - Deleted C:\Program Files\Ipwindows\setA16.tmp - Deleted C:\Program Files\Ipwindows\setA17.tmp - Deleted C:\Program Files\Ipwindows\setA18.tmp - Deleted C:\Program Files\Ipwindows\setA19.tmp - Deleted C:\Program Files\Ipwindows\setA1A.tmp - Deleted C:\Program Files\Ipwindows\setA1B.tmp - Deleted C:\Program Files\Ipwindows\setA1C.tmp - Deleted C:\Program Files\Ipwindows\setA1D.tmp - Deleted C:\Program Files\Ipwindows\setA1E.tmp - Deleted C:\Program Files\Ipwindows\setA1F.tmp - Deleted C:\Program Files\Ipwindows\setA2.tmp - Deleted C:\Program Files\Ipwindows\setA20.tmp - Deleted C:\Program Files\Ipwindows\setA21.tmp - Deleted C:\Program Files\Ipwindows\setA22.tmp - Deleted C:\Program Files\Ipwindows\setA23.tmp - Deleted C:\Program Files\Ipwindows\setA24.tmp - Deleted C:\Program Files\Ipwindows\setA25.tmp - Deleted C:\Program Files\Ipwindows\setA26.tmp - Deleted C:\Program Files\Ipwindows\setA27.tmp - Deleted C:\Program Files\Ipwindows\setA28.tmp - Deleted C:\Program Files\Ipwindows\setA29.tmp - Deleted C:\Program Files\Ipwindows\setA2A.tmp - Deleted C:\Program Files\Ipwindows\setA2B.tmp - Deleted C:\Program Files\Ipwindows\setA2C.tmp - Deleted C:\Program Files\Ipwindows\setA2D.tmp - Deleted C:\Program Files\Ipwindows\setA2E.tmp - Deleted C:\Program Files\Ipwindows\setA2F.tmp - Deleted C:\Program Files\Ipwindows\setA3.tmp - Deleted C:\Program Files\Ipwindows\setA30.tmp - Deleted C:\Program Files\Ipwindows\setA31.tmp - Deleted C:\Program Files\Ipwindows\setA32.tmp - Deleted C:\Program Files\Ipwindows\setA33.tmp - Deleted C:\Program Files\Ipwindows\setA34.tmp - Deleted C:\Program Files\Ipwindows\setA35.tmp - Deleted C:\Program Files\Ipwindows\setA36.tmp - Deleted C:\Program Files\Ipwindows\setA37.tmp - Deleted C:\Program Files\Ipwindows\setA38.tmp - Deleted C:\Program Files\Ipwindows\setA39.tmp - Deleted C:\Program Files\Ipwindows\setA3A.tmp - Deleted C:\Program Files\Ipwindows\setA3B.tmp - Deleted C:\Program Files\Ipwindows\setA3C.tmp - Deleted C:\Program Files\Ipwindows\setA3D.tmp - Deleted C:\Program Files\Ipwindows\setA3E.tmp - Deleted C:\Program Files\Ipwindows\setA3F.tmp - Deleted C:\Program Files\Ipwindows\setA4.tmp - Deleted C:\Program Files\Ipwindows\setA40.tmp - Deleted C:\Program Files\Ipwindows\setA41.tmp - Deleted C:\Program Files\Ipwindows\setA42.tmp - Deleted C:\Program Files\Ipwindows\setA43.tmp - Deleted C:\Program Files\Ipwindows\setA44.tmp - Deleted C:\Program Files\Ipwindows\setA45.tmp - Deleted C:\Program Files\Ipwindows\setA46.tmp - Deleted C:\Program Files\Ipwindows\setA47.tmp - Deleted C:\Program Files\Ipwindows\setA48.tmp - Deleted C:\Program Files\Ipwindows\setA49.tmp - Deleted C:\Program Files\Ipwindows\setA4A.tmp - Deleted C:\Program Files\Ipwindows\setA4B.tmp - Deleted C:\Program Files\Ipwindows\setA4C.tmp - Deleted C:\Program Files\Ipwindows\setA4D.tmp - Deleted C:\Program Files\Ipwindows\setA4E.tmp - Deleted C:\Program Files\Ipwindows\setA4F.tmp - Deleted C:\Program Files\Ipwindows\setA5.tmp - Deleted C:\Program Files\Ipwindows\setA50.tmp - Deleted C:\Program Files\Ipwindows\setA51.tmp - Deleted C:\Program Files\Ipwindows\setA52.tmp - Deleted C:\Program Files\Ipwindows\setA53.tmp - Deleted C:\Program Files\Ipwindows\setA54.tmp - Deleted C:\Program Files\Ipwindows\setA55.tmp - Deleted C:\Program Files\Ipwindows\setA56.tmp - Deleted C:\Program Files\Ipwindows\setA57.tmp - Deleted C:\Program Files\Ipwindows\setA58.tmp - Deleted C:\Program Files\Ipwindows\setA59.tmp - Deleted C:\Program Files\Ipwindows\setA5A.tmp - Deleted C:\Program Files\Ipwindows\setA5B.tmp - Deleted C:\Program Files\Ipwindows\setA5C.tmp - Deleted C:\Program Files\Ipwindows\setA5D.tmp - Deleted C:\Program Files\Ipwindows\setA5E.tmp - Deleted C:\Program Files\Ipwindows\setA5F.tmp - Deleted C:\Program Files\Ipwindows\setA6.tmp - Deleted C:\Program Files\Ipwindows\setA60.tmp - Deleted C:\Program Files\Ipwindows\setA61.tmp - Deleted C:\Program Files\Ipwindows\setA62.tmp - Deleted C:\Program Files\Ipwindows\setA63.tmp - Deleted C:\Program Files\Ipwindows\setA64.tmp - Deleted C:\Program Files\Ipwindows\setA65.tmp - Deleted C:\Program Files\Ipwindows\setA66.tmp - Deleted C:\Program Files\Ipwindows\setA67.tmp - Deleted C:\Program Files\Ipwindows\setA68.tmp - Deleted C:\Program Files\Ipwindows\setA69.tmp - Deleted C:\Program Files\Ipwindows\setA6A.tmp - Deleted C:\Program Files\Ipwindows\setA6B.tmp - Deleted C:\Program Files\Ipwindows\setA6C.tmp - Deleted C:\Program Files\Ipwindows\setA6F.tmp - Deleted C:\Program Files\Ipwindows\setA7.tmp - Deleted C:\Program Files\Ipwindows\setA70.tmp - Deleted C:\Program Files\Ipwindows\setA71.tmp - Deleted C:\Program Files\Ipwindows\setA72.tmp - Deleted C:\Program Files\Ipwindows\setA73.tmp - Deleted C:\Program Files\Ipwindows\setA74.tmp - Deleted C:\Program Files\Ipwindows\setA75.tmp - Deleted C:\Program Files\Ipwindows\setA76.tmp - Deleted C:\Program Files\Ipwindows\setA77.tmp - Deleted C:\Program Files\Ipwindows\setA78.tmp - Deleted C:\Program Files\Ipwindows\setA79.tmp - Deleted C:\Program Files\Ipwindows\setA7A.tmp - Deleted C:\Program Files\Ipwindows\setA7B.tmp - Deleted C:\Program Files\Ipwindows\setA7C.tmp - Deleted C:\Program Files\Ipwindows\setA7D.tmp - Deleted C:\Program Files\Ipwindows\setA7E.tmp - Deleted C:\Program Files\Ipwindows\setA8.tmp - Deleted C:\Program Files\Ipwindows\setA80.tmp - Deleted C:\Program Files\Ipwindows\setA81.tmp - Deleted C:\Program Files\Ipwindows\setA82.tmp - Deleted C:\Program Files\Ipwindows\setA83.tmp - Deleted C:\Program Files\Ipwindows\setA84.tmp - Deleted C:\Program Files\Ipwindows\setA85.tmp - Deleted C:\Program Files\Ipwindows\setA86.tmp - Deleted C:\Program Files\Ipwindows\setA87.tmp - Deleted C:\Program Files\Ipwindows\setA88.tmp - Deleted C:\Program Files\Ipwindows\setA89.tmp - Deleted C:\Program Files\Ipwindows\setA8A.tmp - Deleted C:\Program Files\Ipwindows\setA8B.tmp - Deleted C:\Program Files\Ipwindows\setA8C.tmp - Deleted C:\Program Files\Ipwindows\setA8D.tmp - Deleted C:\Program Files\Ipwindows\setA8E.tmp - Deleted C:\Program Files\Ipwindows\setA8F.tmp - Deleted C:\Program Files\Ipwindows\setA9.tmp - Deleted C:\Program Files\Ipwindows\setA90.tmp - Deleted C:\Program Files\Ipwindows\setA91.tmp - Deleted C:\Program Files\Ipwindows\setA92.tmp - Deleted C:\Program Files\Ipwindows\setA93.tmp - Deleted C:\Program Files\Ipwindows\setA94.tmp - Deleted C:\Program Files\Ipwindows\setA95.tmp - Deleted C:\Program Files\Ipwindows\setA96.tmp - Deleted C:\Program Files\Ipwindows\setA97.tmp - Deleted C:\Program Files\Ipwindows\setA98.tmp - Deleted C:\Program Files\Ipwindows\setA99.tmp - Deleted C:\Program Files\Ipwindows\setA9A.tmp - Deleted C:\Program Files\Ipwindows\setA9B.tmp - Deleted C:\Program Files\Ipwindows\setA9C.tmp - Deleted C:\Program Files\Ipwindows\setA9D.tmp - Deleted C:\Program Files\Ipwindows\setA9E.tmp - Deleted C:\Program Files\Ipwindows\setA9F.tmp - Deleted C:\Program Files\Ipwindows\setAA.tmp - Deleted C:\Program Files\Ipwindows\setAA0.tmp - Deleted C:\Program Files\Ipwindows\setAA1.tmp - Deleted C:\Program Files\Ipwindows\setAA2.tmp - Deleted C:\Program Files\Ipwindows\setAA3.tmp - Deleted C:\Program Files\Ipwindows\setAA4.tmp - Deleted C:\Program Files\Ipwindows\setAA5.tmp - Deleted C:\Program Files\Ipwindows\setAA6.tmp - Deleted C:\Program Files\Ipwindows\setAA7.tmp - Deleted C:\Program Files\Ipwindows\setAA8.tmp - Deleted C:\Program Files\Ipwindows\setAA9.tmp - Deleted C:\Program Files\Ipwindows\setAAA.tmp - Deleted C:\Program Files\Ipwindows\setAAB.tmp - Deleted C:\Program Files\Ipwindows\setAAC.tmp - Deleted C:\Program Files\Ipwindows\setAAD.tmp - Deleted C:\Program Files\Ipwindows\setAAE.tmp - Deleted C:\Program Files\Ipwindows\setAAF.tmp - Deleted C:\Program Files\Ipwindows\setAB.tmp - Deleted C:\Program Files\Ipwindows\setAB0.tmp - Deleted C:\Program Files\Ipwindows\setAB1.tmp - Deleted C:\Program Files\Ipwindows\setAB2.tmp - Deleted C:\Program Files\Ipwindows\setAB3.tmp - Deleted C:\Program Files\Ipwindows\setAB4.tmp - Deleted C:\Program Files\Ipwindows\setAB5.tmp - Deleted C:\Program Files\Ipwindows\setAB6.tmp - Deleted C:\Program Files\Ipwindows\setAB7.tmp - Deleted C:\Program Files\Ipwindows\setAB8.tmp - Deleted C:\Program Files\Ipwindows\setAB9.tmp - Deleted C:\Program Files\Ipwindows\setABA.tmp - Deleted C:\Program Files\Ipwindows\setABB.tmp - Deleted C:\Program Files\Ipwindows\setABC.tmp - Deleted C:\Program Files\Ipwindows\setABD.tmp - Deleted C:\Program Files\Ipwindows\setABE.tmp - Deleted C:\Program Files\Ipwindows\setABF.tmp - Deleted C:\Program Files\Ipwindows\setAC.tmp - Deleted C:\Program Files\Ipwindows\setAC0.tmp - Deleted C:\Program Files\Ipwindows\setAC1.tmp - Deleted C:\Program Files\Ipwindows\setAC2.tmp - Deleted C:\Program Files\Ipwindows\setAC3.tmp - Deleted C:\Program Files\Ipwindows\setAC4.tmp - Deleted C:\Program Files\Ipwindows\setAC5.tmp - Deleted C:\Program Files\Ipwindows\setAC6.tmp - Deleted C:\Program Files\Ipwindows\setAC7.tmp - Deleted C:\Program Files\Ipwindows\setAC8.tmp - Deleted C:\Program Files\Ipwindows\setAC9.tmp - Deleted C:\Program Files\Ipwindows\setACA.tmp - Deleted C:\Program Files\Ipwindows\setACB.tmp - Deleted C:\Program Files\Ipwindows\setACC.tmp - Deleted C:\Program Files\Ipwindows\setACD.tmp - Deleted C:\Program Files\Ipwindows\setACE.tmp - Deleted C:\Program Files\Ipwindows\setACF.tmp - Deleted C:\Program Files\Ipwindows\setAD.tmp - Deleted C:\Program Files\Ipwindows\setAD0.tmp - Deleted C:\Program Files\Ipwindows\setAD1.tmp - Deleted C:\Program Files\Ipwindows\setAD2.tmp - Deleted C:\Program Files\Ipwindows\setAD3.tmp - Deleted C:\Program Files\Ipwindows\setAD4.tmp - Deleted C:\Program Files\Ipwindows\setAD5.tmp - Deleted C:\Program Files\Ipwindows\setAD6.tmp - Deleted C:\Program Files\Ipwindows\setAD7.tmp - Deleted C:\Program Files\Ipwindows\setAD8.tmp - Deleted C:\Program Files\Ipwindows\setAD9.tmp - Deleted C:\Program Files\Ipwindows\setADA.tmp - Deleted C:\Program Files\Ipwindows\setADB.tmp - Deleted C:\Program Files\Ipwindows\setADC.tmp - Deleted C:\Program Files\Ipwindows\setADD.tmp - Deleted C:\Program Files\Ipwindows\setADE.tmp - Deleted C:\Program Files\Ipwindows\setADF.tmp - Deleted C:\Program Files\Ipwindows\setAE.tmp - Deleted C:\Program Files\Ipwindows\setAE0.tmp - Deleted C:\Program Files\Ipwindows\setAE1.tmp - Deleted C:\Program Files\Ipwindows\setAE2.tmp - Deleted C:\Program Files\Ipwindows\setAE3.tmp - Deleted C:\Program Files\Ipwindows\setAE4.tmp - Deleted C:\Program Files\Ipwindows\setAE5.tmp - Deleted C:\Program Files\Ipwindows\setAE6.tmp - Deleted C:\Program Files\Ipwindows\setAE7.tmp - Deleted C:\Program Files\Ipwindows\setAE8.tmp - Deleted C:\Program Files\Ipwindows\setAE9.tmp - Deleted C:\Program Files\Ipwindows\setAEA.tmp - Deleted C:\Program Files\Ipwindows\setAEB.tmp - Deleted C:\Program Files\Ipwindows\setAEC.tmp - Deleted C:\Program Files\Ipwindows\setAED.tmp - Deleted C:\Program Files\Ipwindows\setAEE.tmp - Deleted C:\Program Files\Ipwindows\setAEF.tmp - Deleted C:\Program Files\Ipwindows\setAF.tmp - Deleted C:\Program Files\Ipwindows\setAF0.tmp - Deleted C:\Program Files\Ipwindows\setAF1.tmp - Deleted C:\Program Files\Ipwindows\setAF2.tmp - Deleted C:\Program Files\Ipwindows\setAF3.tmp - Deleted C:\Program Files\Ipwindows\setAF4.tmp - Deleted C:\Program Files\Ipwindows\setAF5.tmp - Deleted C:\Program Files\Ipwindows\setAF6.tmp - Deleted C:\Program Files\Ipwindows\setAF7.tmp - Deleted C:\Program Files\Ipwindows\setAF8.tmp - Deleted C:\Program Files\Ipwindows\setAF9.tmp - Deleted C:\Program Files\Ipwindows\setAFA.tmp - Deleted C:\Program Files\Ipwindows\setAFB.tmp - Deleted C:\Program Files\Ipwindows\setAFC.tmp - Deleted C:\Program Files\Ipwindows\setAFD.tmp - Deleted C:\Program Files\Ipwindows\setAFE.tmp - Deleted C:\Program Files\Ipwindows\setAFF.tmp - Deleted C:\Program Files\Ipwindows\setB.tmp - Deleted C:\Program Files\Ipwindows\setB0.tmp - Deleted C:\Program Files\Ipwindows\setB00.tmp - Deleted C:\Program Files\Ipwindows\setB01.tmp - Deleted C:\Program Files\Ipwindows\setB02.tmp - Deleted C:\Program Files\Ipwindows\setB03.tmp - Deleted C:\Program Files\Ipwindows\setB04.tmp - Deleted C:\Program Files\Ipwindows\setB05.tmp - Deleted C:\Program Files\Ipwindows\setB06.tmp - Deleted C:\Program Files\Ipwindows\setB07.tmp - Deleted C:\Program Files\Ipwindows\setB08.tmp - Deleted C:\Program Files\Ipwindows\setB09.tmp - Deleted C:\Program Files\Ipwindows\setB0A.tmp - Deleted C:\Program Files\Ipwindows\setB0B.tmp - Deleted C:\Program Files\Ipwindows\setB0C.tmp - Deleted C:\Program Files\Ipwindows\setB0D.tmp - Deleted C:\Program Files\Ipwindows\setB0E.tmp - Deleted C:\Program Files\Ipwindows\setB0F.tmp - Deleted C:\Program Files\Ipwindows\setB1.tmp - Deleted C:\Program Files\Ipwindows\setB10.tmp - Deleted C:\Program Files\Ipwindows\setB11.tmp - Deleted C:\Program Files\Ipwindows\setB12.tmp - Deleted C:\Program Files\Ipwindows\setB13.tmp - Deleted C:\Program Files\Ipwindows\setB14.tmp - Deleted C:\Program Files\Ipwindows\setB15.tmp - Deleted C:\Program Files\Ipwindows\setB16.tmp - Deleted C:\Program Files\Ipwindows\setB17.tmp - Deleted C:\Program Files\Ipwindows\setB18.tmp - Deleted C:\Program Files\Ipwindows\setB19.tmp - Deleted C:\Program Files\Ipwindows\setB1A.tmp - Deleted C:\Program Files\Ipwindows\setB1B.tmp - Deleted C:\Program Files\Ipwindows\setB1C.tmp - Deleted C:\Program Files\Ipwindows\setB1D.tmp - Deleted C:\Program Files\Ipwindows\setB1E.tmp - Deleted C:\Program Files\Ipwindows\setB1F.tmp - Deleted C:\Program Files\Ipwindows\setB2.tmp - Deleted C:\Program Files\Ipwindows\setB20.tmp - Deleted C:\Program Files\Ipwindows\setB21.tmp - Deleted C:\Program Files\Ipwindows\setB22.tmp - Deleted C:\Program Files\Ipwindows\setB23.tmp - Deleted C:\Program Files\Ipwindows\setB24.tmp - Deleted C:\Program Files\Ipwindows\setB25.tmp - Deleted C:\Program Files\Ipwindows\setB26.tmp - Deleted C:\Program Files\Ipwindows\setB27.tmp - Deleted C:\Program Files\Ipwindows\setB28.tmp - Deleted C:\Program Files\Ipwindows\setB29.tmp - Deleted C:\Program Files\Ipwindows\setB2A.tmp - Deleted C:\Program Files\Ipwindows\setB2B.tmp - Deleted C:\Program Files\Ipwindows\setB2C.tmp - Deleted C:\Program Files\Ipwindows\setB2D.tmp - Deleted C:\Program Files\Ipwindows\setB2E.tmp - Deleted C:\Program Files\Ipwindows\setB2F.tmp - Deleted C:\Program Files\Ipwindows\setB3.tmp - Deleted C:\Program Files\Ipwindows\setB30.tmp - Deleted C:\Program Files\Ipwindows\setB31.tmp - Deleted C:\Program Files\Ipwindows\setB32.tmp - Deleted C:\Program Files\Ipwindows\setB33.tmp - Deleted C:\Program Files\Ipwindows\setB34.tmp - Deleted C:\Program Files\Ipwindows\setB35.tmp - Deleted C:\Program Files\Ipwindows\setB36.tmp - Deleted C:\Program Files\Ipwindows\setB37.tmp - Deleted C:\Program Files\Ipwindows\setB38.tmp - Deleted C:\Program Files\Ipwindows\setB39.tmp - Deleted C:\Program Files\Ipwindows\setB3A.tmp - Deleted C:\Program Files\Ipwindows\setB3B.tmp - Deleted C:\Program Files\Ipwindows\setB3C.tmp - Deleted C:\Program Files\Ipwindows\setB3D.tmp - Deleted C:\Program Files\Ipwindows\setB3E.tmp - Deleted C:\Program Files\Ipwindows\setB3F.tmp - Deleted C:\Program Files\Ipwindows\setB4.tmp - Deleted C:\Program Files\Ipwindows\setB40.tmp - Deleted C:\Program Files\Ipwindows\setB41.tmp - Deleted C:\Program Files\Ipwindows\setB42.tmp - Deleted C:\Program Files\Ipwindows\setB43.tmp - Deleted C:\Program Files\Ipwindows\setB44.tmp - Deleted C:\Program Files\Ipwindows\setB45.tmp - Deleted C:\Program Files\Ipwindows\setB46.tmp - Deleted C:\Program Files\Ipwindows\setB47.tmp - Deleted C:\Program Files\Ipwindows\setB48.tmp - Deleted C:\Program Files\Ipwindows\setB49.tmp - Deleted C:\Program Files\Ipwindows\setB4A.tmp - Deleted C:\Program Files\Ipwindows\setB4B.tmp - Deleted C:\Program Files\Ipwindows\setB4C.tmp - Deleted C:\Program Files\Ipwindows\setB4D.tmp - Deleted C:\Program Files\Ipwindows\setB4E.tmp - Deleted C:\Program Files\Ipwindows\setB4F.tmp - Deleted C:\Program Files\Ipwindows\setB5.tmp - Deleted C:\Program Files\Ipwindows\setB50.tmp - Deleted C:\Program Files\Ipwindows\setB51.tmp - Deleted C:\Program Files\Ipwindows\setB52.tmp - Deleted C:\Program Files\Ipwindows\setB53.tmp - Deleted C:\Program Files\Ipwindows\setB54.tmp - Deleted C:\Program Files\Ipwindows\setB55.tmp - Deleted C:\Program Files\Ipwindows\setB56.tmp - Deleted C:\Program Files\Ipwindows\setB57.tmp - Deleted C:\Program Files\Ipwindows\setB58.tmp - Deleted C:\Program Files\Ipwindows\setB59.tmp - Deleted C:\Program Files\Ipwindows\setB5A.tmp - Deleted C:\Program Files\Ipwindows\setB5B.tmp - Deleted C:\Program Files\Ipwindows\setB5C.tmp - Deleted C:\Program Files\Ipwindows\setB5D.tmp - Deleted C:\Program Files\Ipwindows\setB5E.tmp - Deleted C:\Program Files\Ipwindows\setB5F.tmp - Deleted C:\Program Files\Ipwindows\setB6.tmp - Deleted C:\Program Files\Ipwindows\setB60.tmp - Deleted C:\Program Files\Ipwindows\setB61.tmp - Deleted C:\Program Files\Ipwindows\setB62.tmp - Deleted C:\Program Files\Ipwindows\setB63.tmp - Deleted C:\Program Files\Ipwindows\setB64.tmp - Deleted C:\Program Files\Ipwindows\setB65.tmp - Deleted C:\Program Files\Ipwindows\setB66.tmp - Deleted C:\Program Files\Ipwindows\setB67.tmp - Deleted C:\Program Files\Ipwindows\setB68.tmp - Deleted C:\Program Files\Ipwindows\setB69.tmp - Deleted C:\Program Files\Ipwindows\setB6A.tmp - Deleted C:\Program Files\Ipwindows\setB6B.tmp - Deleted C:\Program Files\Ipwindows\setB6C.tmp - Deleted C:\Program Files\Ipwindows\setB6D.tmp - Deleted C:\Program Files\Ipwindows\setB6E.tmp - Deleted C:\Program Files\Ipwindows\setB6F.tmp - Deleted C:\Program Files\Ipwindows\setB7.tmp - Deleted C:\Program Files\Ipwindows\setB71.tmp - Deleted C:\Program Files\Ipwindows\setB72.tmp - Deleted C:\Program Files\Ipwindows\setB73.tmp - Deleted C:\Program Files\Ipwindows\setB74.tmp - Deleted C:\Program Files\Ipwindows\setB75.tmp - Deleted C:\Program Files\Ipwindows\setB76.tmp - Deleted C:\Program Files\Ipwindows\setB77.tmp - Deleted C:\Program Files\Ipwindows\setB78.tmp - Deleted C:\Program Files\Ipwindows\setB79.tmp - Deleted C:\Program Files\Ipwindows\setB7A.tmp - Deleted C:\Program Files\Ipwindows\setB7B.tmp - Deleted C:\Program Files\Ipwindows\setB7C.tmp - Deleted C:\Program Files\Ipwindows\setB7D.tmp - Deleted C:\Program Files\Ipwindows\setB7E.tmp - Deleted C:\Program Files\Ipwindows\setB7F.tmp - Deleted C:\Program Files\Ipwindows\setB8.tmp - Deleted C:\Program Files\Ipwindows\setB80.tmp - Deleted C:\Program Files\Ipwindows\setB81.tmp - Deleted C:\Program Files\Ipwindows\setB82.tmp - Deleted C:\Program Files\Ipwindows\setB83.tmp - Deleted C:\Program Files\Ipwindows\setB84.tmp - Deleted C:\Program Files\Ipwindows\setB85.tmp - Deleted C:\Program Files\Ipwindows\setB86.tmp - Deleted C:\Program Files\Ipwindows\setB87.tmp - Deleted C:\Program Files\Ipwindows\setB88.tmp - Deleted C:\Program Files\Ipwindows\setB89.tmp - Deleted C:\Program Files\Ipwindows\setB8A.tmp - Deleted C:\Program Files\Ipwindows\setB8B.tmp - Deleted C:\Program Files\Ipwindows\setB8C.tmp - Deleted C:\Program Files\Ipwindows\setB8D.tmp - Deleted C:\Program Files\Ipwindows\setB8E.tmp - Deleted C:\Program Files\Ipwindows\setB8F.tmp - Deleted C:\Program Files\Ipwindows\setB9.tmp - Deleted C:\Program Files\Ipwindows\setB90.tmp - Deleted C:\Program Files\Ipwindows\setB91.tmp - Deleted C:\Program Files\Ipwindows\setB92.tmp - Deleted C:\Program Files\Ipwindows\setB93.tmp - Deleted C:\Program Files\Ipwindows\setB94.tmp - Deleted C:\Program Files\Ipwindows\setB95.tmp - Deleted C:\Program Files\Ipwindows\setB96.tmp - Deleted C:\Program Files\Ipwindows\setB97.tmp - Deleted C:\Program Files\Ipwindows\setB98.tmp - Deleted C:\Program Files\Ipwindows\setB99.tmp - Deleted C:\Program Files\Ipwindows\setB9A.tmp - Deleted C:\Program Files\Ipwindows\setB9B.tmp - Deleted C:\Program Files\Ipwindows\setB9C.tmp - Deleted C:\Program Files\Ipwindows\setB9D.tmp - Deleted C:\Program Files\Ipwindows\setB9E.tmp - Deleted C:\Program Files\Ipwindows\setB9F.tmp - Deleted C:\Program Files\Ipwindows\setBA.tmp - Deleted C:\Program Files\Ipwindows\setBA0.tmp - Deleted C:\Program Files\Ipwindows\setBA1.tmp - Deleted C:\Program Files\Ipwindows\setBA2.tmp - Deleted C:\Program Files\Ipwindows\setBA3.tmp - Deleted C:\Program Files\Ipwindows\setBA4.tmp - Deleted C:\Program Files\Ipwindows\setBA5.tmp - Deleted C:\Program Files\Ipwindows\setBA6.tmp - Deleted C:\Program Files\Ipwindows\setBA7.tmp - Deleted C:\Program Files\Ipwindows\setBA8.tmp - Deleted C:\Program Files\Ipwindows\setBA9.tmp - Deleted C:\Program Files\Ipwindows\setBAA.tmp - Deleted C:\Program Files\Ipwindows\setBAB.tmp - Deleted C:\Program Files\Ipwindows\setBAC.tmp - Deleted C:\Program Files\Ipwindows\setBAD.tmp - Deleted C:\Program Files\Ipwindows\setBAE.tmp - Deleted C:\Program Files\Ipwindows\setBAF.tmp - Deleted C:\Program Files\Ipwindows\setBB.tmp - Deleted C:\Program Files\Ipwindows\setBB0.tmp - Deleted C:\Program Files\Ipwindows\setBB1.tmp - Deleted C:\Program Files\Ipwindows\setBB2.tmp - Deleted C:\Program Files\Ipwindows\setBB3.tmp - Deleted C:\Program Files\Ipwindows\setBB4.tmp - Deleted C:\Program Files\Ipwindows\setBB5.tmp - Deleted C:\Program Files\Ipwindows\setBB6.tmp - Deleted C:\Program Files\Ipwindows\setBB7.tmp - Deleted C:\Program Files\Ipwindows\setBB8.tmp - Deleted C:\Program Files\Ipwindows\setBB9.tmp - Deleted C:\Program Files\Ipwindows\setBBA.tmp - Deleted C:\Program Files\Ipwindows\setBBB.tmp - Deleted C:\Program Files\Ipwindows\setBBC.tmp - Deleted C:\Program Files\Ipwindows\setBBD.tmp - Deleted C:\Program Files\Ipwindows\setBBE.tmp - Deleted C:\Program Files\Ipwindows\setBBF.tmp - Deleted C:\Program Files\Ipwindows\setBC.tmp - Deleted C:\Program Files\Ipwindows\setBC0.tmp - Deleted C:\Program Files\Ipwindows\setBC1.tmp - Deleted C:\Program Files\Ipwindows\setBC2.tmp - Deleted C:\Program Files\Ipwindows\setBC3.tmp - Deleted C:\Program Files\Ipwindows\setBC4.tmp - Deleted C:\Program Files\Ipwindows\setBC5.tmp - Deleted C:\Program Files\Ipwindows\setBC6.tmp - Deleted C:\Program Files\Ipwindows\setBC7.tmp - Deleted C:\Program Files\Ipwindows\setBC8.tmp - Deleted C:\Program Files\Ipwindows\setBC9.tmp - Deleted C:\Program Files\Ipwindows\setBCA.tmp - Deleted C:\Program Files\Ipwindows\setBCB.tmp - Deleted C:\Program Files\Ipwindows\setBCC.tmp - Deleted C:\Program Files\Ipwindows\setBCD.tmp - Deleted C:\Program Files\Ipwindows\setBCE.tmp - Deleted C:\Program Files\Ipwindows\setBCF.tmp - Deleted C:\Program Files\Ipwindows\setBD.tmp - Deleted C:\Program Files\Ipwindows\setBD0.tmp - Deleted C:\Program Files\Ipwindows\setBD1.tmp - Deleted C:\Program Files\Ipwindows\setBD2.tmp - Deleted C:\Program Files\Ipwindows\setBD3.tmp - Deleted C:\Program Files\Ipwindows\setBD4.tmp - Deleted C:\Program Files\Ipwindows\setBD5.tmp - Deleted C:\Program Files\Ipwindows\setBD6.tmp - Deleted C:\Program Files\Ipwindows\setBD7.tmp - Deleted C:\Program Files\Ipwindows\setBD8.tmp - Deleted C:\Program Files\Ipwindows\setBD9.tmp - Deleted C:\Program Files\Ipwindows\setBDA.tmp - Deleted C:\Program Files\Ipwindows\setBDB.tmp - Deleted C:\Program Files\Ipwindows\setBDC.tmp - Deleted C:\Program Files\Ipwindows\setBDD.tmp - Deleted C:\Program Files\Ipwindows\setBDE.tmp - Deleted C:\Program Files\Ipwindows\setBDF.tmp - Deleted C:\Program Files\Ipwindows\setBE.tmp - Deleted C:\Program Files\Ipwindows\setBE0.tmp - Deleted C:\Program Files\Ipwindows\setBE1.tmp - Deleted C:\Program Files\Ipwindows\setBE2.tmp - Deleted C:\Program Files\Ipwindows\setBE4.tmp - Deleted C:\Program Files\Ipwindows\setBE5.tmp - Deleted C:\Program Files\Ipwindows\setBE6.tmp - Deleted C:\Program Files\Ipwindows\setBE7.tmp - Deleted C:\Program Files\Ipwindows\setBE8.tmp - Deleted C:\Program Files\Ipwindows\setBE9.tmp - Deleted C:\Program Files\Ipwindows\setBEA.tmp - Deleted C:\Program Files\Ipwindows\setBEB.tmp - Deleted C:\Program Files\Ipwindows\setBEC.tmp - Deleted C:\Program Files\Ipwindows\setBED.tmp - Deleted C:\Program Files\Ipwindows\setBEE.tmp - Deleted C:\Program Files\Ipwindows\setBEF.tmp - Deleted C:\Program Files\Ipwindows\setBF.tmp - Deleted C:\Program Files\Ipwindows\setBF0.tmp - Deleted C:\Program Files\Ipwindows\setBF1.tmp - Deleted C:\Program Files\Ipwindows\setBF2.tmp - Deleted C:\Program Files\Ipwindows\setBF3.tmp - Deleted C:\Program Files\Ipwindows\setBF4.tmp - Deleted C:\Program Files\Ipwindows\setBF5.tmp - Deleted C:\Program Files\Ipwindows\setBF6.tmp - Deleted C:\Program Files\Ipwindows\setBF7.tmp - Deleted C:\Program Files\Ipwindows\setBF8.tmp - Deleted C:\Program Files\Ipwindows\setBF9.tmp - Deleted C:\Program Files\Ipwindows\setBFA.tmp - Deleted C:\Program Files\Ipwindows\setBFB.tmp - Deleted C:\Program Files\Ipwindows\setBFC.tmp - Deleted C:\Program Files\Ipwindows\setBFD.tmp - Deleted C:\Program Files\Ipwindows\setBFE.tmp - Deleted C:\Program Files\Ipwindows\setBFF.tmp - Deleted C:\Program Files\Ipwindows\setC0.tmp - Deleted C:\Program Files\Ipwindows\setC00.tmp - Deleted C:\Program Files\Ipwindows\setC01.tmp - Deleted C:\Program Files\Ipwindows\setC02.tmp - Deleted C:\Program Files\Ipwindows\setC03.tmp - Deleted C:\Program Files\Ipwindows\setC04.tmp - Deleted C:\Program Files\Ipwindows\setC05.tmp - Deleted C:\Program Files\Ipwindows\setC06.tmp - Deleted C:\Program Files\Ipwindows\setC07.tmp - Deleted C:\Program Files\Ipwindows\setC08.tmp - Deleted C:\Program Files\Ipwindows\setC09.tmp - Deleted C:\Program Files\Ipwindows\setC0A.tmp - Deleted C:\Program Files\Ipwindows\setC0B.tmp - Deleted C:\Program Files\Ipwindows\setC0C.tmp - Deleted C:\Program Files\Ipwindows\setC0D.tmp - Deleted C:\Program Files\Ipwindows\setC0E.tmp - Deleted C:\Program Files\Ipwindows\setC0F.tmp - Deleted C:\Program Files\Ipwindows\setC1.tmp - Deleted C:\Program Files\Ipwindows\setC10.tmp - Deleted C:\Program Files\Ipwindows\setC11.tmp - Deleted C:\Program Files\Ipwindows\setC12.tmp - Deleted C:\Program Files\Ipwindows\setC13.tmp - Deleted C:\Program Files\Ipwindows\setC14.tmp - Deleted C:\Program Files\Ipwindows\setC15.tmp - Deleted C:\Program Files\Ipwindows\setC16.tmp - Deleted C:\Program Files\Ipwindows\setC17.tmp - Deleted C:\Program Files\Ipwindows\setC18.tmp - Deleted C:\Program Files\Ipwindows\setC19.tmp - Deleted C:\Program Files\Ipwindows\setC1A.tmp - Deleted C:\Program Files\Ipwindows\setC1B.tmp - Deleted C:\Program Files\Ipwindows\setC1C.tmp - Deleted C:\Program Files\Ipwindows\setC1D.tmp - Deleted C:\Program Files\Ipwindows\setC1E.tmp - Deleted C:\Program Files\Ipwindows\setC1F.tmp - Deleted C:\Program Files\Ipwindows\setC2.tmp - Deleted C:\Program Files\Ipwindows\setC20.tmp - Deleted C:\Program Files\Ipwindows\setC21.tmp - Deleted C:\Program Files\Ipwindows\setC22.tmp - Deleted C:\Program Files\Ipwindows\setC23.tmp - Deleted C:\Program Files\Ipwindows\setC24.tmp - Deleted C:\Program Files\Ipwindows\setC25.tmp - Deleted C:\Program Files\Ipwindows\setC26.tmp - Deleted C:\Program Files\Ipwindows\setC27.tmp - Deleted C:\Program Files\Ipwindows\setC28.tmp - Deleted C:\Program Files\Ipwindows\setC29.tmp - Deleted C:\Program Files\Ipwindows\setC2A.tmp - Deleted C:\Program Files\Ipwindows\setC2B.tmp - Deleted C:\Program Files\Ipwindows\setC2C.tmp - Deleted C:\Program Files\Ipwindows\setC2D.tmp - Deleted C:\Program Files\Ipwindows\setC2E.tmp - Deleted C:\Program Files\Ipwindows\setC2F.tmp - Deleted C:\Program Files\Ipwindows\setC3.tmp - Deleted C:\Program Files\Ipwindows\setC30.tmp - Deleted C:\Program Files\Ipwindows\setC31.tmp - Deleted C:\Program Files\Ipwindows\setC32.tmp - Deleted C:\Program Files\Ipwindows\setC33.tmp - Deleted C:\Program Files\Ipwindows\setC34.tmp - Deleted C:\Program Files\Ipwindows\setC35.tmp - Deleted C:\Program Files\Ipwindows\setC36.tmp - Deleted C:\Program Files\Ipwindows\setC37.tmp - Deleted C:\Program Files\Ipwindows\setC38.tmp - Deleted C:\Program Files\Ipwindows\setC39.tmp - Deleted C:\Program Files\Ipwindows\setC3A.tmp - Deleted C:\Program Files\Ipwindows\setC3B.tmp - Deleted C:\Program Files\Ipwindows\setC3C.tmp - Deleted C:\Program Files\Ipwindows\setC3D.tmp - Deleted C:\Program Files\Ipwindows\setC3E.tmp - Deleted C:\Program Files\Ipwindows\setC3F.tmp - Deleted C:\Program Files\Ipwindows\setC4.tmp - Deleted C:\Program Files\Ipwindows\setC40.tmp - Deleted C:\Program Files\Ipwindows\setC41.tmp - Deleted C:\Program Files\Ipwindows\setC42.tmp - Deleted C:\Program Files\Ipwindows\setC43.tmp - Deleted C:\Program Files\Ipwindows\setC44.tmp - Deleted C:\Program Files\Ipwindows\setC45.tmp - Deleted C:\Program Files\Ipwindows\setC46.tmp - Deleted C:\Program Files\Ipwindows\setC47.tmp - Deleted C:\Program Files\Ipwindows\setC48.tmp - Deleted C:\Program Files\Ipwindows\setC49.tmp - Deleted C:\Program Files\Ipwindows\setC4A.tmp - Deleted C:\Program Files\Ipwindows\setC4B.tmp - Deleted C:\Program Files\Ipwindows\setC4C.tmp - Deleted C:\Program Files\Ipwindows\setC4D.tmp - Deleted C:\Program Files\Ipwindows\setC4E.tmp - Deleted C:\Program Files\Ipwindows\setC4F.tmp - Deleted C:\Program Files\Ipwindows\setC5.tmp - Deleted C:\Program Files\Ipwindows\setC50.tmp - Deleted C:\Program Files\Ipwindows\setC51.tmp - Deleted C:\Program Files\Ipwindows\setC52.tmp - Deleted C:\Program Files\Ipwindows\setC53.tmp - Deleted C:\Program Files\Ipwindows\setC54.tmp - Deleted C:\Program Files\Ipwindows\setC55.tmp - Deleted C:\Program Files\Ipwindows\setC57.tmp - Deleted C:\Program Files\Ipwindows\setC58.tmp - Deleted C:\Program Files\Ipwindows\setC59.tmp - Deleted C:\Program Files\Ipwindows\setC5A.tmp - Deleted C:\Program Files\Ipwindows\setC5B.tmp - Deleted C:\Program Files\Ipwindows\setC5C.tmp - Deleted C:\Program Files\Ipwindows\setC5D.tmp - Deleted C:\Program Files\Ipwindows\setC5E.tmp - Deleted C:\Program Files\Ipwindows\setC5F.tmp - Deleted C:\Program Files\Ipwindows\setC6.tmp - Deleted C:\Program Files\Ipwindows\setC60.tmp - Deleted C:\Program Files\Ipwindows\setC61.tmp - Deleted C:\Program Files\Ipwindows\setC62.tmp - Deleted C:\Program Files\Ipwindows\setC63.tmp - Deleted C:\Program Files\Ipwindows\setC64.tmp - Deleted C:\Program Files\Ipwindows\setC65.tmp - Deleted C:\Program Files\Ipwindows\setC66.tmp - Deleted C:\Program Files\Ipwindows\setC67.tmp - Deleted C:\Program Files\Ipwindows\setC68.tmp - Deleted C:\Program Files\Ipwindows\setC69.tmp - Deleted C:\Program Files\Ipwindows\setC6A.tmp - Deleted C:\Program Files\Ipwindows\setC6B.tmp - Deleted C:\Program Files\Ipwindows\setC6C.tmp - Deleted C:\Program Files\Ipwindows\setC6D.tmp - Deleted C:\Program Files\Ipwindows\setC6E.tmp - Deleted C:\Program Files\Ipwindows\setC6F.tmp - Deleted C:\Program Files\Ipwindows\setC7.tmp - Deleted C:\Program Files\Ipwindows\setC70.tmp - Deleted C:\Program Files\Ipwindows\setC71.tmp - Deleted C:\Program Files\Ipwindows\setC72.tmp - Deleted C:\Program Files\Ipwindows\setC73.tmp - Deleted C:\Program Files\Ipwindows\setC74.tmp - Deleted C:\Program Files\Ipwindows\setC75.tmp - Deleted C:\Program Files\Ipwindows\setC76.tmp - Deleted C:\Program Files\Ipwindows\setC77.tmp - Deleted C:\Program Files\Ipwindows\setC78.tmp - Deleted C:\Program Files\Ipwindows\setC79.tmp - Deleted C:\Program Files\Ipwindows\setC7A.tmp - Deleted C:\Program Files\Ipwindows\setC7B.tmp - Deleted C:\Program Files\Ipwindows\setC7C.tmp - Deleted C:\Program Files\Ipwindows\setC7D.tmp - Deleted C:\Program Files\Ipwindows\setC7E.tmp - Deleted C:\Program Files\Ipwindows\setC7F.tmp - Deleted C:\Program Files\Ipwindows\setC8.tmp - Deleted C:\Program Files\Ipwindows\setC80.tmp - Deleted C:\Program Files\Ipwindows\setC81.tmp - Deleted C:\Program Files\Ipwindows\setC82.tmp - Deleted C:\Program Files\Ipwindows\setC83.tmp - Deleted C:\Program Files\Ipwindows\setC84.tmp - Deleted C:\Program Files\Ipwindows\setC85.tmp - Deleted C:\Program Files\Ipwindows\setC86.tmp - Deleted C:\Program Files\Ipwindows\setC87.tmp - Deleted C:\Program Files\Ipwindows\setC88.tmp - Deleted C:\Program Files\Ipwindows\setC89.tmp - Deleted C:\Program Files\Ipwindows\setC8A.tmp - Deleted C:\Program Files\Ipwindows\setC8B.tmp - Deleted C:\Program Files\Ipwindows\setC8C.tmp - Deleted C:\Program Files\Ipwindows\setC8D.tmp - Deleted C:\Program Files\Ipwindows\setC8E.tmp - Deleted C:\Program Files\Ipwindows\setC8F.tmp - Deleted C:\Program Files\Ipwindows\setC9.tmp - Deleted C:\Program Files\Ipwindows\setC90.tmp - Deleted C:\Program Files\Ipwindows\setC91.tmp - Deleted C:\Program Files\Ipwindows\setC92.tmp - Deleted C:\Program Files\Ipwindows\setC93.tmp - Deleted C:\Program Files\Ipwindows\setC94.tmp - Deleted C:\Program Files\Ipwindows\setC95.tmp - Deleted C:\Program Files\Ipwindows\setC96.tmp - Deleted C:\Program Files\Ipwindows\setC97.tmp - Deleted C:\Program Files\Ipwindows\setC98.tmp - Deleted C:\Program Files\Ipwindows\setC99.tmp - Deleted C:\Program Files\Ipwindows\setC9A.tmp - Deleted C:\Program Files\Ipwindows\setC9B.tmp - Deleted C:\Program Files\Ipwindows\setC9C.tmp - Deleted C:\Program Files\Ipwindows\setC9D.tmp - Deleted C:\Program Files\Ipwindows\setC9E.tmp - Deleted C:\Program Files\Ipwindows\setC9F.tmp - Deleted C:\Program Files\Ipwindows\setCA.tmp - Deleted C:\Program Files\Ipwindows\setCA0.tmp - Deleted C:\Program Files\Ipwindows\setCA1.tmp - Deleted C:\Program Files\Ipwindows\setCA2.tmp - Deleted C:\Program Files\Ipwindows\setCA3.tmp - Deleted C:\Program Files\Ipwindows\setCA4.tmp - Deleted C:\Program Files\Ipwindows\setCA5.tmp - Deleted C:\Program Files\Ipwindows\setCA6.tmp - Deleted C:\Program Files\Ipwindows\setCA7.tmp - Deleted C:\Program Files\Ipwindows\setCA8.tmp - Deleted C:\Program Files\Ipwindows\setCA9.tmp - Deleted C:\Program Files\Ipwindows\setCAA.tmp - Deleted C:\Program Files\Ipwindows\setCAB.tmp - Deleted C:\Program Files\Ipwindows\setCAC.tmp - Deleted C:\Program Files\Ipwindows\setCAD.tmp - Deleted C:\Program Files\Ipwindows\setCAE.tmp - Deleted C:\Program Files\Ipwindows\setCAF.tmp - Deleted C:\Program Files\Ipwindows\setCB.tmp - Deleted C:\Program Files\Ipwindows\setCB0.tmp - Deleted C:\Program Files\Ipwindows\setCB1.tmp - Deleted C:\Program Files\Ipwindows\setCB2.tmp - Deleted C:\Program Files\Ipwindows\setCB3.tmp - Deleted C:\Program Files\Ipwindows\setCB4.tmp - Deleted C:\Program Files\Ipwindows\setCB5.tmp - Deleted C:\Program Files\Ipwindows\setCB6.tmp - Deleted C:\Program Files\Ipwindows\setCB7.tmp - Deleted C:\Program Files\Ipwindows\setCB8.tmp - Deleted C:\Program Files\Ipwindows\setCB9.tmp - Deleted C:\Program Files\Ipwindows\setCBA.tmp - Deleted C:\Program Files\Ipwindows\setCBB.tmp - Deleted C:\Program Files\Ipwindows\setCBC.tmp - Deleted C:\Program Files\Ipwindows\setCBD.tmp - Deleted C:\Program Files\Ipwindows\setCBE.tmp - Deleted C:\Program Files\Ipwindows\setCBF.tmp - Deleted C:\Program Files\Ipwindows\setCC.tmp - Deleted C:\Program Files\Ipwindows\setCC0.tmp - Deleted C:\Program Files\Ipwindows\setCC1.tmp - Deleted C:\Program Files\Ipwindows\setCC2.tmp - Deleted C:\Program Files\Ipwindows\setCC3.tmp - Deleted C:\Program Files\Ipwindows\setCC4.tmp - Deleted C:\Program Files\Ipwindows\setCC5.tmp - Deleted C:\Program Files\Ipwindows\setCC6.tmp - Deleted C:\Program Files\Ipwindows\setCC7.tmp - Deleted C:\Program Files\Ipwindows\setCC8.tmp - Deleted C:\Program Files\Ipwindows\setCCA.tmp - Deleted C:\Program Files\Ipwindows\setCCB.tmp - Deleted C:\Program Files\Ipwindows\setCCC.tmp - Deleted C:\Program Files\Ipwindows\setCCD.tmp - Deleted C:\Program Files\Ipwindows\setCCE.tmp - Deleted C:\Program Files\Ipwindows\setCCF.tmp - Deleted C:\Program Files\Ipwindows\setCD.tmp - Deleted C:\Program Files\Ipwindows\setCD0.tmp - Deleted C:\Program Files\Ipwindows\setCD1.tmp - Deleted C:\Program Files\Ipwindows\setCD2.tmp - Deleted C:\Program Files\Ipwindows\setCD3.tmp - Deleted C:\Program Files\Ipwindows\setCD4.tmp - Deleted C:\Program Files\Ipwindows\setCD5.tmp - Deleted C:\Program Files\Ipwindows\setCD6.tmp - Deleted C:\Program Files\Ipwindows\setCD7.tmp - Deleted C:\Program Files\Ipwindows\setCD8.tmp - Deleted C:\Program Files\Ipwindows\setCD9.tmp - Deleted C:\Program Files\Ipwindows\setCDA.tmp - Deleted C:\Program Files\Ipwindows\setCDB.tmp - Deleted C:\Program Files\Ipwindows\setCDC.tmp - Deleted C:\Program Files\Ipwindows\setCDD.tmp - Deleted C:\Program Files\Ipwindows\setCDE.tmp - Deleted C:\Program Files\Ipwindows\setCDF.tmp - Deleted C:\Program Files\Ipwindows\setCE.tmp - Deleted C:\Program Files\Ipwindows\setCE0.tmp - Deleted C:\Program Files\Ipwindows\setCE1.tmp - Deleted C:\Program Files\Ipwindows\setCE2.tmp - Deleted C:\Program Files\Ipwindows\setCE3.tmp - Deleted C:\Program Files\Ipwindows\setCE4.tmp - Deleted C:\Program Files\Ipwindows\setCE5.tmp - Deleted C:\Program Files\Ipwindows\setCE6.tmp - Deleted C:\Program Files\Ipwindows\setCE7.tmp - Deleted C:\Program Files\Ipwindows\setCE8.tmp - Deleted C:\Program Files\Ipwindows\setCE9.tmp - Deleted C:\Program Files\Ipwindows\setCEA.tmp - Deleted C:\Program Files\Ipwindows\setCEB.tmp - Deleted C:\Program Files\Ipwindows\setCEC.tmp - Deleted C:\Program Files\Ipwindows\setCED.tmp - Deleted C:\Program Files\Ipwindows\setCEE.tmp - Deleted C:\Program Files\Ipwindows\setCEF.tmp - Deleted C:\Program Files\Ipwindows\setCF.tmp - Deleted C:\Program Files\Ipwindows\setCF0.tmp - Deleted C:\Program Files\Ipwindows\setCF1.tmp - Deleted C:\Program Files\Ipwindows\setCF2.tmp - Deleted C:\Program Files\Ipwindows\setCF3.tmp - Deleted C:\Program Files\Ipwindows\setCF4.tmp - Deleted C:\Program Files\Ipwindows\setCF5.tmp - Deleted C:\Program Files\Ipwindows\setCF6.tmp - Deleted C:\Program Files\Ipwindows\setCF7.tmp - Deleted C:\Program Files\Ipwindows\setCF8.tmp - Deleted C:\Program Files\Ipwindows\setCF9.tmp - Deleted C:\Program Files\Ipwindows\setCFA.tmp - Deleted C:\Program Files\Ipwindows\setCFB.tmp - Deleted C:\Program Files\Ipwindows\setCFC.tmp - Deleted C:\Program Files\Ipwindows\setCFD.tmp - Deleted C:\Program Files\Ipwindows\setCFE.tmp - Deleted C:\Program Files\Ipwindows\setCFF.tmp - Deleted C:\Program Files\Ipwindows\setD0.tmp - Deleted C:\Program Files\Ipwindows\setD00.tmp - Deleted C:\Program Files\Ipwindows\setD01.tmp - Deleted C:\Program Files\Ipwindows\setD02.tmp - Deleted C:\Program Files\Ipwindows\setD03.tmp - Deleted C:\Program Files\Ipwindows\setD04.tmp - Deleted C:\Program Files\Ipwindows\setD05.tmp - Deleted C:\Program Files\Ipwindows\setD06.tmp - Deleted C:\Program Files\Ipwindows\setD07.tmp - Deleted C:\Program Files\Ipwindows\setD08.tmp - Deleted C:\Program Files\Ipwindows\setD09.tmp - Deleted C:\Program Files\Ipwindows\setD0A.tmp - Deleted C:\Program Files\Ipwindows\setD0B.tmp - Deleted C:\Program Files\Ipwindows\setD0C.tmp - Deleted C:\Program Files\Ipwindows\setD0D.tmp - Deleted C:\Program Files\Ipwindows\setD0E.tmp - Deleted C:\Program Files\Ipwindows\setD0F.tmp - Deleted C:\Program Files\Ipwindows\setD1.tmp - Deleted C:\Program Files\Ipwindows\setD12.tmp - Deleted C:\Program Files\Ipwindows\setD13.tmp - Deleted C:\Program Files\Ipwindows\setD14.tmp - Deleted C:\Program Files\Ipwindows\setD15.tmp - Deleted C:\Program Files\Ipwindows\setD16.tmp - Deleted C:\Program Files\Ipwindows\setD17.tmp - Deleted C:\Program Files\Ipwindows\setD18.tmp - Deleted C:\Program Files\Ipwindows\setD19.tmp - Deleted C:\Program Files\Ipwindows\setD1A.tmp - Deleted C:\Program Files\Ipwindows\setD1B.tmp - Deleted C:\Program Files\Ipwindows\setD1C.tmp - Deleted C:\Program Files\Ipwindows\setD1D.tmp - Deleted C:\Program Files\Ipwindows\setD1E.tmp - Deleted C:\Program Files\Ipwindows\setD1F.tmp - Deleted C:\Program Files\Ipwindows\setD2.tmp - Deleted C:\Program Files\Ipwindows\setD20.tmp - Deleted C:\Program Files\Ipwindows\setD21.tmp - Deleted C:\Program Files\Ipwindows\setD22.tmp - Deleted C:\Program Files\Ipwindows\setD23.tmp - Deleted C:\Program Files\Ipwindows\setD24.tmp - Deleted C:\Program Files\Ipwindows\setD25.tmp - Deleted C:\Program Files\Ipwindows\setD26.tmp - Deleted C:\Program Files\Ipwindows\setD27.tmp - Deleted C:\Program Files\Ipwindows\setD28.tmp - Deleted C:\Program Files\Ipwindows\setD29.tmp - Deleted C:\Program Files\Ipwindows\setD2A.tmp - Deleted C:\Program Files\Ipwindows\setD2B.tmp - Deleted C:\Program Files\Ipwindows\setD2C.tmp - Deleted C:\Program Files\Ipwindows\setD2D.tmp - Deleted C:\Program Files\Ipwindows\setD2E.tmp - Deleted C:\Program Files\Ipwindows\setD2F.tmp - Deleted C:\Program Files\Ipwindows\setD3.tmp - Deleted C:\Program Files\Ipwindows\setD30.tmp - Deleted C:\Program Files\Ipwindows\setD31.tmp - Deleted C:\Program Files\Ipwindows\setD32.tmp - Deleted C:\Program Files\Ipwindows\setD33.tmp - Deleted C:\Program Files\Ipwindows\setD34.tmp - Deleted C:\Program Files\Ipwindows\setD35.tmp - Deleted C:\Program Files\Ipwindows\setD36.tmp - Deleted C:\Program Files\Ipwindows\setD37.tmp - Deleted C:\Program Files\Ipwindows\setD38.tmp - Deleted C:\Program Files\Ipwindows\setD39.tmp - Deleted C:\Program Files\Ipwindows\setD3A.tmp - Deleted C:\Program Files\Ipwindows\setD3B.tmp - Deleted C:\Program Files\Ipwindows\setD3C.tmp - Deleted C:\Program Files\Ipwindows\setD3D.tmp - Deleted C:\Program Files\Ipwindows\setD3F.tmp - Deleted C:\Program Files\Ipwindows\setD4.tmp - Deleted C:\Program Files\Ipwindows\setD40.tmp - Deleted C:\Program Files\Ipwindows\setD41.tmp - Deleted C:\Program Files\Ipwindows\setD42.tmp - Deleted C:\Program Files\Ipwindows\setD43.tmp - Deleted C:\Program Files\Ipwindows\setD44.tmp - Deleted C:\Program Files\Ipwindows\setD45.tmp - Deleted C:\Program Files\Ipwindows\setD46.tmp - Deleted C:\Program Files\Ipwindows\setD47.tmp - Deleted C:\Program Files\Ipwindows\setD48.tmp - Deleted C:\Program Files\Ipwindows\setD49.tmp - Deleted C:\Program Files\Ipwindows\setD4A.tmp - Deleted C:\Program Files\Ipwindows\setD4B.tmp - Deleted C:\Program Files\Ipwindows\setD4C.tmp - Deleted C:\Program Files\Ipwindows\setD4D.tmp - Deleted C:\Program Files\Ipwindows\setD4E.tmp - Deleted C:\Program Files\Ipwindows\setD4F.tmp - Deleted C:\Program Files\Ipwindows\setD5.tmp - Deleted C:\Program Files\Ipwindows\setD50.tmp - Deleted C:\Program Files\Ipwindows\setD51.tmp - Deleted C:\Program Files\Ipwindows\setD52.tmp - Deleted C:\Program Files\Ipwindows\setD53.tmp - Deleted C:\Program Files\Ipwindows\setD54.tmp - Deleted C:\Program Files\Ipwindows\setD55.tmp - Deleted C:\Program Files\Ipwindows\setD56.tmp - Deleted C:\Program Files\Ipwindows\setD57.tmp - Deleted C:\Program Files\Ipwindows\setD58.tmp - Deleted C:\Program Files\Ipwindows\setD59.tmp - Deleted C:\Program Files\Ipwindows\setD5A.tmp - Deleted C:\Program Files\Ipwindows\setD5B.tmp - Deleted C:\Program Files\Ipwindows\setD5C.tmp - Deleted C:\Program Files\Ipwindows\setD5D.tmp - Deleted C:\Program Files\Ipwindows\setD5E.tmp - Deleted C:\Program Files\Ipwindows\setD5F.tmp - Deleted C:\Program Files\Ipwindows\setD6.tmp - Deleted C:\Program Files\Ipwindows\setD60.tmp - Deleted C:\Program Files\Ipwindows\setD61.tmp - Deleted C:\Program Files\Ipwindows\setD62.tmp - Deleted C:\Program Files\Ipwindows\setD63.tmp - Deleted C:\Program Files\Ipwindows\setD64.tmp - Deleted C:\Program Files\Ipwindows\setD65.tmp - Deleted C:\Program Files\Ipwindows\setD66.tmp - Deleted C:\Program Files\Ipwindows\setD67.tmp - Deleted C:\Program Files\Ipwindows\setD68.tmp - Deleted C:\Program Files\Ipwindows\setD69.tmp - Deleted C:\Program Files\Ipwindows\setD6A.tmp - Deleted C:\Program Files\Ipwindows\setD6B.tmp - Deleted C:\Program Files\Ipwindows\setD6C.tmp - Deleted C:\Program Files\Ipwindows\setD6D.tmp - Deleted C:\Program Files\Ipwindows\setD6E.tmp - Deleted C:\Program Files\Ipwindows\setD6F.tmp - Deleted C:\Program Files\Ipwindows\setD7.tmp - Deleted C:\Program Files\Ipwindows\setD70.tmp - Deleted C:\Program Files\Ipwindows\setD71.tmp - Deleted C:\Program Files\Ipwindows\setD72.tmp - Deleted C:\Program Files\Ipwindows\setD73.tmp - Deleted C:\Program Files\Ipwindows\setD74.tmp - Deleted C:\Program Files\Ipwindows\setD75.tmp - Deleted C:\Program Files\Ipwindows\setD76.tmp - Deleted C:\Program Files\Ipwindows\setD77.tmp - Deleted C:\Program Files\Ipwindows\setD78.tmp - Deleted C:\Program Files\Ipwindows\setD79.tmp - Deleted C:\Program Files\Ipwindows\setD7A.tmp - Deleted C:\Program Files\Ipwindows\setD7B.tmp - Deleted C:\Program Files\Ipwindows\setD7C.tmp - Deleted C:\Program Files\Ipwindows\setD7D.tmp - Deleted C:\Program Files\Ipwindows\setD7E.tmp - Deleted C:\Program Files\Ipwindows\setD7F.tmp - Deleted C:\Program Files\Ipwindows\setD8.tmp - Deleted C:\Program Files\Ipwindows\setD80.tmp - Deleted C:\Program Files\Ipwindows\setD81.tmp - Deleted C:\Program Files\Ipwindows\setD82.tmp - Deleted C:\Program Files\Ipwindows\setD83.tmp - Deleted C:\Program Files\Ipwindows\setD84.tmp - Deleted C:\Program Files\Ipwindows\setD85.tmp - Deleted C:\Program Files\Ipwindows\setD86.tmp - Deleted C:\Program Files\Ipwindows\setD87.tmp - Deleted C:\Program Files\Ipwindows\setD88.tmp - Deleted C:\Program Files\Ipwindows\setD89.tmp - Deleted C:\Program Files\Ipwindows\setD8A.tmp - Deleted C:\Program Files\Ipwindows\setD8B.tmp - Deleted C:\Program Files\Ipwindows\setD8C.tmp - Deleted C:\Program Files\Ipwindows\setD8D.tmp - Deleted C:\Program Files\Ipwindows\setD8E.tmp - Deleted C:\Program Files\Ipwindows\setD8F.tmp - Deleted C:\Program Files\Ipwindows\setD9.tmp - Deleted C:\Program Files\Ipwindows\setD90.tmp - Deleted C:\Program Files\Ipwindows\setD91.tmp - Deleted C:\Program Files\Ipwindows\setD92.tmp - Deleted C:\Program Files\Ipwindows\setD93.tmp - Deleted C:\Program Files\Ipwindows\setD94.tmp - Deleted C:\Program Files\Ipwindows\setD95.tmp - Deleted C:\Program Files\Ipwindows\setD96.tmp - Deleted C:\Program Files\Ipwindows\setD97.tmp - Deleted C:\Program Files\Ipwindows\setD98.tmp - Deleted C:\Program Files\Ipwindows\setD99.tmp - Deleted C:\Program Files\Ipwindows\setD9A.tmp - Deleted C:\Program Files\Ipwindows\setD9B.tmp - Deleted C:\Program Files\Ipwindows\setD9C.tmp - Deleted C:\Program Files\Ipwindows\setD9D.tmp - Deleted C:\Program Files\Ipwindows\setD9E.tmp - Deleted C:\Program Files\Ipwindows\setD9F.tmp - Deleted C:\Program Files\Ipwindows\setDA.tmp - Deleted C:\Program Files\Ipwindows\setDA0.tmp - Deleted C:\Program Files\Ipwindows\setDA1.tmp - Deleted C:\Program Files\Ipwindows\setDA2.tmp - Deleted C:\Program Files\Ipwindows\setDA3.tmp - Deleted C:\Program Files\Ipwindows\setDA4.tmp - Deleted C:\Program Files\Ipwindows\setDA5.tmp - Deleted C:\Program Files\Ipwindows\setDA6.tmp - Deleted C:\Program Files\Ipwindows\setDA7.tmp - Deleted C:\Program Files\Ipwindows\setDA8.tmp - Deleted C:\Program Files\Ipwindows\setDA9.tmp - Deleted C:\Program Files\Ipwindows\setDAA.tmp - Deleted C:\Program Files\Ipwindows\setDAB.tmp - Deleted C:\Program Files\Ipwindows\setDAC.tmp - Deleted C:\Program Files\Ipwindows\setDAD.tmp - Deleted C:\Program Files\Ipwindows\setDAE.tmp - Deleted C:\Program Files\Ipwindows\setDAF.tmp - Deleted C:\Program Files\Ipwindows\setDB.tmp - Deleted C:\Program Files\Ipwindows\setDB0.tmp - Deleted C:\Program Files\Ipwindows\setDB2.tmp - Deleted C:\Program Files\Ipwindows\setDB3.tmp - Deleted C:\Program Files\Ipwindows\setDB4.tmp - Deleted C:\Program Files\Ipwindows\setDB5.tmp - Deleted C:\Program Files\Ipwindows\setDB6.tmp - Deleted C:\Program Files\Ipwindows\setDB7.tmp - Deleted C:\Program Files\Ipwindows\setDB8.tmp - Deleted C:\Program Files\Ipwindows\setDB9.tmp - Deleted C:\Program Files\Ipwindows\setDBA.tmp - Deleted C:\Program Files\Ipwindows\setDBB.tmp - Deleted C:\Program Files\Ipwindows\setDBC.tmp - Deleted C:\Program Files\Ipwindows\setDBD.tmp - Deleted C:\Program Files\Ipwindows\setDBE.tmp - Deleted C:\Program Files\Ipwindows\setDBF.tmp - Deleted C:\Program Files\Ipwindows\setDC.tmp - Deleted C:\Program Files\Ipwindows\setDC0.tmp - Deleted C:\Program Files\Ipwindows\setDC1.tmp - Deleted C:\Program Files\Ipwindows\setDC2.tmp - Deleted C:\Program Files\Ipwindows\setDC3.tmp - Deleted C:\Program Files\Ipwindows\setDC4.tmp - Deleted C:\Program Files\Ipwindows\setDC5.tmp - Deleted C:\Program Files\Ipwindows\setDC6.tmp - Deleted C:\Program Files\Ipwindows\setDC7.tmp - Deleted C:\Program Files\Ipwindows\setDC8.tmp - Deleted C:\Program Files\Ipwindows\setDC9.tmp - Deleted C:\Program Files\Ipwindows\setDCA.tmp - Deleted C:\Program Files\Ipwindows\setDCB.tmp - Deleted C:\Program Files\Ipwindows\setDCC.tmp - Deleted C:\Program Files\Ipwindows\setDCD.tmp - Deleted C:\Program Files\Ipwindows\setDCE.tmp - Deleted C:\Program Files\Ipwindows\setDCF.tmp - Deleted C:\Program Files\Ipwindows\setDD.tmp - Deleted C:\Program Files\Ipwindows\setDD0.tmp - Deleted C:\Program Files\Ipwindows\setDD1.tmp - Deleted C:\Program Files\Ipwindows\setDD2.tmp - Deleted C:\Program Files\Ipwindows\setDD3.tmp - Deleted C:\Program Files\Ipwindows\setDD4.tmp - Deleted C:\Program Files\Ipwindows\setDD5.tmp - Deleted C:\Program Files\Ipwindows\setDD6.tmp - Deleted C:\Program Files\Ipwindows\setDD7.tmp - Deleted C:\Program Files\Ipwindows\setDD8.tmp - Deleted C:\Program Files\Ipwindows\setDD9.tmp - Deleted C:\Program Files\Ipwindows\setDDA.tmp - Deleted C:\Program Files\Ipwindows\setDDB.tmp - Deleted C:\Program Files\Ipwindows\setDDC.tmp - Deleted C:\Program Files\Ipwindows\setDDD.tmp - Deleted C:\Program Files\Ipwindows\setDDE.tmp - Deleted C:\Program Files\Ipwindows\setDDF.tmp - Deleted C:\Program Files\Ipwindows\setDE.tmp - Deleted C:\Program Files\Ipwindows\setDE0.tmp - Deleted C:\Program Files\Ipwindows\setDE1.tmp - Deleted C:\Program Files\Ipwindows\setDE2.tmp - Deleted C:\Program Files\Ipwindows\setDE3.tmp - Deleted C:\Program Files\Ipwindows\setDE4.tmp - Deleted C:\Program Files\Ipwindows\setDE5.tmp - Deleted C:\Program Files\Ipwindows\setDE6.tmp - Deleted C:\Program Files\Ipwindows\setDE7.tmp - Deleted C:\Program Files\Ipwindows\setDE8.tmp - Deleted C:\Program Files\Ipwindows\setDE9.tmp - Deleted C:\Program Files\Ipwindows\setDEA.tmp - Deleted C:\Program Files\Ipwindows\setDEB.tmp - Deleted C:\Program Files\Ipwindows\setDEC.tmp - Deleted C:\Program Files\Ipwindows\setDED.tmp - Deleted C:\Program Files\Ipwindows\setDEE.tmp - Deleted C:\Program Files\Ipwindows\setDEF.tmp - Deleted C:\Program Files\Ipwindows\setDF.tmp - Deleted C:\Program Files\Ipwindows\setDF0.tmp - Deleted C:\Program Files\Ipwindows\setDF1.tmp - Deleted C:\Program Files\Ipwindows\setDF2.tmp - Deleted C:\Program Files\Ipwindows\setDF3.tmp - Deleted C:\Program Files\Ipwindows\setDF4.tmp - Deleted C:\Program Files\Ipwindows\setDF5.tmp - Deleted C:\Program Files\Ipwindows\setDF6.tmp - Deleted C:\Program Files\Ipwindows\setDF7.tmp - Deleted C:\Program Files\Ipwindows\setDF8.tmp - Deleted C:\Program Files\Ipwindows\setDF9.tmp - Deleted C:\Program Files\Ipwindows\setDFA.tmp - Deleted C:\Program Files\Ipwindows\setDFB.tmp - Deleted C:\Program Files\Ipwindows\setDFC.tmp - Deleted C:\Program Files\Ipwindows\setDFD.tmp - Deleted C:\Program Files\Ipwindows\setDFE.tmp - Deleted C:\Program Files\Ipwindows\setDFF.tmp - Deleted C:\Program Files\Ipwindows\setE.tmp - Deleted C:\Program Files\Ipwindows\setE0.tmp - Deleted C:\Program Files\Ipwindows\setE00.tmp - Deleted C:\Program Files\Ipwindows\setE01.tmp - Deleted C:\Program Files\Ipwindows\setE02.tmp - Deleted C:\Program Files\Ipwindows\setE03.tmp - Deleted C:\Program Files\Ipwindows\setE04.tmp - Deleted C:\Program Files\Ipwindows\setE05.tmp - Deleted C:\Program Files\Ipwindows\setE06.tmp - Deleted C:\Program Files\Ipwindows\setE07.tmp - Deleted C:\Program Files\Ipwindows\setE08.tmp - Deleted C:\Program Files\Ipwindows\setE09.tmp - Deleted C:\Program Files\Ipwindows\setE0A.tmp - Deleted C:\Program Files\Ipwindows\setE0B.tmp - Deleted C:\Program Files\Ipwindows\setE0C.tmp - Deleted C:\Program Files\Ipwindows\setE0D.tmp - Deleted C:\Program Files\Ipwindows\setE0E.tmp - Deleted C:\Program Files\Ipwindows\setE0F.tmp - Deleted C:\Program Files\Ipwindows\setE1.tmp - Deleted C:\Program Files\Ipwindows\setE10.tmp - Deleted C:\Program Files\Ipwindows\setE11.tmp - Deleted C:\Program Files\Ipwindows\setE12.tmp - Deleted C:\Program Files\Ipwindows\setE13.tmp - Deleted C:\Program Files\Ipwindows\setE14.tmp - Deleted C:\Program Files\Ipwindows\setE15.tmp - Deleted C:\Program Files\Ipwindows\setE16.tmp - Deleted C:\Program Files\Ipwindows\setE17.tmp - Deleted C:\Program Files\Ipwindows\setE18.tmp - Deleted C:\Program Files\Ipwindows\setE19.tmp - Deleted C:\Program Files\Ipwindows\setE1A.tmp - Deleted C:\Program Files\Ipwindows\setE1B.tmp - Deleted C:\Program Files\Ipwindows\setE1C.tmp - Deleted C:\Program Files\Ipwindows\setE1D.tmp - Deleted C:\Program Files\Ipwindows\setE1E.tmp - Deleted C:\Program Files\Ipwindows\setE1F.tmp - Deleted C:\Program Files\Ipwindows\setE2.tmp - Deleted C:\Program Files\Ipwindows\setE20.tmp - Deleted C:\Program Files\Ipwindows\setE21.tmp - Deleted C:\Program Files\Ipwindows\setE22.tmp - Deleted C:\Program Files\Ipwindows\setE23.tmp - Deleted C:\Program Files\Ipwindows\setE24.tmp - Deleted C:\Program Files\Ipwindows\setE25.tmp - Deleted C:\Program Files\Ipwindows\setE26.tmp - Deleted C:\Program Files\Ipwindows\setE27.tmp - Deleted C:\Program Files\Ipwindows\setE28.tmp - Deleted C:\Program Files\Ipwindows\setE29.tmp - Deleted C:\Program Files\Ipwindows\setE2A.tmp - Deleted C:\Program Files\Ipwindows\setE2B.tmp - Deleted C:\Program Files\Ipwindows\setE2C.tmp - Deleted C:\Program Files\Ipwindows\setE2D.tmp - Deleted C:\Program Files\Ipwindows\setE2E.tmp - Deleted C:\Program Files\Ipwindows\setE2F.tmp - Deleted C:\Program Files\Ipwindows\setE3.tmp - Deleted C:\Program Files\Ipwindows\setE30.tmp - Deleted C:\Program Files\Ipwindows\setE31.tmp - Deleted C:\Program Files\Ipwindows\setE32.tmp - Deleted C:\Program Files\Ipwindows\setE33.tmp - Deleted C:\Program Files\Ipwindows\setE34.tmp - Deleted C:\Program Files\Ipwindows\setE35.tmp - Deleted C:\Program Files\Ipwindows\setE36.tmp - Deleted C:\Program Files\Ipwindows\setE37.tmp - Deleted C:\Program Files\Ipwindows\setE38.tmp - Deleted C:\Program Files\Ipwindows\setE39.tmp - Deleted C:\Program Files\Ipwindows\setE3A.tmp - Deleted C:\Program Files\Ipwindows\setE3B.tmp - Deleted C:\Program Files\Ipwindows\setE3C.tmp - Deleted C:\Program Files\Ipwindows\setE3D.tmp - Deleted C:\Program Files\Ipwindows\setE3E.tmp - Deleted C:\Program Files\Ipwindows\setE3F.tmp - Deleted C:\Program Files\Ipwindows\setE4.tmp - Deleted C:\Program Files\Ipwindows\setE40.tmp - Deleted C:\Program Files\Ipwindows\setE41.tmp - Deleted C:\Program Files\Ipwindows\setE42.tmp - Deleted C:\Program Files\Ipwindows\setE43.tmp - Deleted C:\Program Files\Ipwindows\setE44.tmp - Deleted C:\Program Files\Ipwindows\setE45.tmp - Deleted C:\Program Files\Ipwindows\setE46.tmp - Deleted C:\Program Files\Ipwindows\setE47.tmp - Deleted C:\Program Files\Ipwindows\setE48.tmp - Deleted C:\Program Files\Ipwindows\setE49.tmp - Deleted C:\Program Files\Ipwindows\setE4A.tmp - Deleted C:\Program Files\Ipwindows\setE4B.tmp - Deleted C:\Program Files\Ipwindows\setE4C.tmp - Deleted C:\Program Files\Ipwindows\setE4D.tmp - Deleted C:\Program Files\Ipwindows\setE4E.tmp - Deleted C:\Program Files\Ipwindows\setE4F.tmp - Deleted C:\Program Files\Ipwindows\setE5.tmp - Deleted C:\Program Files\Ipwindows\setE50.tmp - Deleted C:\Program Files\Ipwindows\setE51.tmp - Deleted C:\Program Files\Ipwindows\setE52.tmp - Deleted C:\Program Files\Ipwindows\setE53.tmp - Deleted C:\Program Files\Ipwindows\setE54.tmp - Deleted C:\Program Files\Ipwindows\setE55.tmp - Deleted C:\Program Files\Ipwindows\setE56.tmp - Deleted C:\Program Files\Ipwindows\setE57.tmp - Deleted C:\Program Files\Ipwindows\setE58.tmp - Deleted C:\Program Files\Ipwindows\setE59.tmp - Deleted C:\Program Files\Ipwindows\setE5A.tmp - Deleted C:\Program Files\Ipwindows\setE5B.tmp - Deleted C:\Program Files\Ipwindows\setE5C.tmp - Deleted C:\Program Files\Ipwindows\setE5D.tmp - Deleted C:\Program Files\Ipwindows\setE5E.tmp - Deleted C:\Program Files\Ipwindows\setE5F.tmp - Deleted C:\Program Files\Ipwindows\setE6.tmp - Deleted C:\Program Files\Ipwindows\setE60.tmp - Deleted C:\Program Files\Ipwindows\setE61.tmp - Deleted C:\Program Files\Ipwindows\setE62.tmp - Deleted C:\Program Files\Ipwindows\setE63.tmp - Deleted C:\Program Files\Ipwindows\setE64.tmp - Deleted C:\Program Files\Ipwindows\setE65.tmp - Deleted C:\Program Files\Ipwindows\setE66.tmp - Deleted C:\Program Files\Ipwindows\setE67.tmp - Deleted C:\Program Files\Ipwindows\setE68.tmp - Deleted C:\Program Files\Ipwindows\setE69.tmp - Deleted C:\Program Files\Ipwindows\setE6A.tmp - Deleted C:\Program Files\Ipwindows\setE6B.tmp - Deleted C:\Program Files\Ipwindows\setE6C.tmp - Deleted C:\Program Files\Ipwindows\setE6D.tmp - Deleted C:\Program Files\Ipwindows\setE6E.tmp - Deleted C:\Program Files\Ipwindows\setE6F.tmp - Deleted C:\Program Files\Ipwindows\setE7.tmp - Deleted C:\Program Files\Ipwindows\setE70.tmp - Deleted C:\Program Files\Ipwindows\setE71.tmp - Deleted C:\Program Files\Ipwindows\setE72.tmp - Deleted C:\Program Files\Ipwindows\setE73.tmp - Deleted C:\Program Files\Ipwindows\setE74.tmp - Deleted C:\Program Files\Ipwindows\setE75.tmp - Deleted C:\Program Files\Ipwindows\setE76.tmp - Deleted C:\Program Files\Ipwindows\setE77.tmp - Deleted C:\Program Files\Ipwindows\setE78.tmp - Deleted C:\Program Files\Ipwindows\setE79.tmp - Deleted C:\Program Files\Ipwindows\setE7A.tmp - Deleted C:\Program Files\Ipwindows\setE7B.tmp - Deleted C:\Program Files\Ipwindows\setE7C.tmp - Deleted C:\Program Files\Ipwindows\setE7D.tmp - Deleted C:\Program Files\Ipwindows\setE7E.tmp - Deleted C:\Program Files\Ipwindows\setE7F.tmp - Deleted C:\Program Files\Ipwindows\setE8.tmp - Deleted C:\Program Files\Ipwindows\setE80.tmp - Deleted C:\Program Files\Ipwindows\setE81.tmp - Deleted C:\Program Files\Ipwindows\setE82.tmp - Deleted C:\Program Files\Ipwindows\setE83.tmp - Deleted C:\Program Files\Ipwindows\setE84.tmp - Deleted C:\Program Files\Ipwindows\setE85.tmp - Deleted C:\Program Files\Ipwindows\setE86.tmp - Deleted C:\Program Files\Ipwindows\setE87.tmp - Deleted C:\Program Files\Ipwindows\setE88.tmp - Deleted C:\Program Files\Ipwindows\setE89.tmp - Deleted C:\Program Files\Ipwindows\setE8A.tmp - Deleted C:\Program Files\Ipwindows\setE8B.tmp - Deleted C:\Program Files\Ipwindows\setE8C.tmp - Deleted C:\Program Files\Ipwindows\setE8D.tmp - Deleted C:\Program Files\Ipwindows\setE8E.tmp - Deleted C:\Program Files\Ipwindows\setE8F.tmp - Deleted C:\Program Files\Ipwindows\setE9.tmp - Deleted C:\Program Files\Ipwindows\setE90.tmp - Deleted C:\Program Files\Ipwindows\setE91.tmp - Deleted C:\Program Files\Ipwindows\setE92.tmp - Deleted C:\Program Files\Ipwindows\setE93.tmp - Deleted C:\Program Files\Ipwindows\setE94.tmp - Deleted C:\Program Files\Ipwindows\setE95.tmp - Deleted C:\Program Files\Ipwindows\setE96.tmp - Deleted C:\Program Files\Ipwindows\setE97.tmp - Deleted C:\Program Files\Ipwindows\setE98.tmp - Deleted C:\Program Files\Ipwindows\setE99.tmp - Deleted C:\Program Files\Ipwindows\setE9A.tmp - Deleted C:\Program Files\Ipwindows\setE9B.tmp - Deleted C:\Program Files\Ipwindows\setE9C.tmp - Deleted C:\Program Files\Ipwindows\setE9D.tmp - Deleted C:\Program Files\Ipwindows\setE9E.tmp - Deleted C:\Program Files\Ipwindows\setE9F.tmp - Deleted C:\Program Files\Ipwindows\setEA.tmp - Deleted C:\Program Files\Ipwindows\setEA0.tmp - Deleted C:\Program Files\Ipwindows\setEA1.tmp - Deleted C:\Program Files\Ipwindows\setEA2.tmp - Deleted C:\Program Files\Ipwindows\setEA3.tmp - Deleted C:\Program Files\Ipwindows\setEA4.tmp - Deleted C:\Program Files\Ipwindows\setEA5.tmp - Deleted C:\Program Files\Ipwindows\setEA6.tmp - Deleted C:\Program Files\Ipwindows\setEA7.tmp - Deleted C:\Program Files\Ipwindows\setEA8.tmp - Deleted C:\Program Files\Ipwindows\setEA9.tmp - Deleted C:\Program Files\Ipwindows\setEAA.tmp - Deleted C:\Program Files\Ipwindows\setEAB.tmp - Deleted C:\Program Files\Ipwindows\setEAC.tmp - Deleted C:\Program Files\Ipwindows\setEAD.tmp - Deleted C:\Program Files\Ipwindows\setEAE.tmp - Deleted C:\Program Files\Ipwindows\setEAF.tmp - Deleted C:\Program Files\Ipwindows\setEB.tmp - Deleted C:\Program Files\Ipwindows\setEB0.tmp - Deleted C:\Program Files\Ipwindows\setEB1.tmp - Deleted C:\Program Files\Ipwindows\setEB2.tmp - Deleted C:\Program Files\Ipwindows\setEB3.tmp - Deleted C:\Program Files\Ipwindows\setEB4.tmp - Deleted C:\Program Files\Ipwindows\setEB5.tmp - Deleted C:\Program Files\Ipwindows\setEB6.tmp - Deleted C:\Program Files\Ipwindows\setEB7.tmp - Deleted C:\Program Files\Ipwindows\setEB8.tmp - Deleted C:\Program Files\Ipwindows\setEB9.tmp - Deleted C:\Program Files\Ipwindows\setEBA.tmp - Deleted C:\Program Files\Ipwindows\setEBB.tmp - Deleted C:\Program Files\Ipwindows\setEBC.tmp - Deleted C:\Program Files\Ipwindows\setEBD.tmp - Deleted C:\Program Files\Ipwindows\setEBE.tmp - Deleted C:\Program Files\Ipwindows\setEBF.tmp - Deleted C:\Program Files\Ipwindows\setEC.tmp - Deleted C:\Program Files\Ipwindows\setEC0.tmp - Deleted C:\Program Files\Ipwindows\setEC1.tmp - Deleted C:\Program Files\Ipwindows\setEC2.tmp - Deleted C:\Program Files\Ipwindows\setEC3.tmp - Deleted C:\Program Files\Ipwindows\setEC4.tmp - Deleted C:\Program Files\Ipwindows\setEC5.tmp - Deleted C:\Program Files\Ipwindows\setEC6.tmp - Deleted C:\Program Files\Ipwindows\setEC7.tmp - Deleted C:\Program Files\Ipwindows\setEC8.tmp - Deleted C:\Program Files\Ipwindows\setEC9.tmp - Deleted C:\Program Files\Ipwindows\setECA.tmp - Deleted C:\Program Files\Ipwindows\setECB.tmp - Deleted C:\Program Files\Ipwindows\setECC.tmp - Deleted C:\Program Files\Ipwindows\setECD.tmp - Deleted C:\Program Files\Ipwindows\setECE.tmp - Deleted C:\Program Files\Ipwindows\setECF.tmp - Deleted C:\Program Files\Ipwindows\setED.tmp - Deleted C:\Program Files\Ipwindows\setED0.tmp - Deleted C:\Program Files\Ipwindows\setED1.tmp - Deleted C:\Program Files\Ipwindows\setED2.tmp - Deleted C:\Program Files\Ipwindows\setED3.tmp - Deleted C:\Program Files\Ipwindows\setED4.tmp - Deleted C:\Program Files\Ipwindows\setED5.tmp - Deleted C:\Program Files\Ipwindows\setED6.tmp - Deleted C:\Program Files\Ipwindows\setED7.tmp - Deleted C:\Program Files\Ipwindows\setED8.tmp - Deleted C:\Program Files\Ipwindows\setED9.tmp - Deleted C:\Program Files\Ipwindows\setEDA.tmp - Deleted C:\Program Files\Ipwindows\setEDB.tmp - Deleted C:\Program Files\Ipwindows\setEDC.tmp - Deleted C:\Program Files\Ipwindows\setEDD.tmp - Deleted C:\Program Files\Ipwindows\setEDE.tmp - Deleted C:\Program Files\Ipwindows\setEDF.tmp - Deleted C:\Program Files\Ipwindows\setEE.tmp - Deleted C:\Program Files\Ipwindows\setEE0.tmp - Deleted C:\Program Files\Ipwindows\setEE1.tmp - Deleted C:\Program Files\Ipwindows\setEE2.tmp - Deleted C:\Program Files\Ipwindows\setEE3.tmp - Deleted C:\Program Files\Ipwindows\setEE4.tmp - Deleted C:\Program Files\Ipwindows\setEE5.tmp - Deleted C:\Program Files\Ipwindows\setEE6.tmp - Deleted C:\Program Files\Ipwindows\setEE7.tmp - Deleted C:\Program Files\Ipwindows\setEE8.tmp - Deleted C:\Program Files\Ipwindows\setEE9.tmp - Deleted C:\Program Files\Ipwindows\setEEA.tmp - Deleted C:\Program Files\Ipwindows\setEEB.tmp - Deleted C:\Program Files\Ipwindows\setEEC.tmp - Deleted C:\Program Files\Ipwindows\setEED.tmp - Deleted C:\Program Files\Ipwindows\setEEE.tmp - Deleted C:\Program Files\Ipwindows\setEEF.tmp - Deleted C:\Program Files\Ipwindows\setEF.tmp - Deleted C:\Program Files\Ipwindows\setEF0.tmp - Deleted C:\Program Files\Ipwindows\setEF1.tmp - Deleted C:\Program Files\Ipwindows\setEF2.tmp - Deleted C:\Program Files\Ipwindows\setEF3.tmp - Deleted C:\Program Files\Ipwindows\setEF4.tmp - Deleted C:\Program Files\Ipwindows\setEF5.tmp - Deleted C:\Program Files\Ipwindows\setEF6.tmp - Deleted C:\Program Files\Ipwindows\setEF7.tmp - Deleted C:\Program Files\Ipwindows\setEF8.tmp - Deleted C:\Program Files\Ipwindows\setEF9.tmp - Deleted C:\Program Files\Ipwindows\setEFA.tmp - Deleted C:\Program Files\Ipwindows\setEFB.tmp - Deleted C:\Program Files\Ipwindows\setEFC.tmp - Deleted C:\Program Files\Ipwindows\setEFD.tmp - Deleted C:\Program Files\Ipwindows\setEFE.tmp - Deleted C:\Program Files\Ipwindows\setEFF.tmp - Deleted C:\Program Files\Ipwindows\setF.tmp - Deleted C:\Program Files\Ipwindows\setF0.tmp - Deleted C:\Program Files\Ipwindows\setF00.tmp - Deleted C:\Program Files\Ipwindows\setF01.tmp - Deleted C:\Program Files\Ipwindows\setF02.tmp - Deleted C:\Program Files\Ipwindows\setF03.tmp - Deleted C:\Program Files\Ipwindows\setF04.tmp - Deleted C:\Program Files\Ipwindows\setF05.tmp - Deleted C:\Program Files\Ipwindows\setF06.tmp - Deleted
C:\Program Files\Ipwindows\setF07.tmp - Deleted
C:\Program Files\Ipwindows\setF08.tmp - Deleted
C:\Program Files\Ipwindows\setF09.tmp - Deleted
C:\Program Files\Ipwindows\setF0A.tmp - Deleted
C:\Program Files\Ipwindows\setF0B.tmp - Deleted
C:\Program Files\Ipwindows\setF0C.tmp - Deleted
C:\Program Files\Ipwindows\setF0D.tmp - Deleted
C:\Program Files\Ipwindows\setF0E.tmp - Deleted
C:\Program Files\Ipwindows\setF0F.tmp - Deleted
C:\Program Files\Ipwindows\setF1.tmp - Deleted
C:\Program Files\Ipwindows\setF10.tmp - Deleted
C:\Program Files\Ipwindows\setF11.tmp - Deleted
C:\Program Files\Ipwindows\setF12.tmp - Deleted
C:\Program Files\Ipwindows\setF13.tmp - Deleted
C:\Program Files\Ipwindows\setF14.tmp - Deleted
C:\Program Files\Ipwindows\setF15.tmp - Deleted
C:\Program Files\Ipwindows\setF16.tmp - Deleted
C:\Program Files\Ipwindows\setF17.tmp - Deleted
C:\Program Files\Ipwindows\setF19.tmp - Deleted
C:\Program Files\Ipwindows\setF1A.tmp - Deleted
C:\Program Files\Ipwindows\setF1B.tmp - Deleted
C:\Program Files\Ipwindows\setF1C.tmp - Deleted
C:\Program Files\Ipwindows\setF1D.tmp - Deleted
C:\Program Files\Ipwindows\setF1E.tmp - Deleted
C:\Program Files\Ipwindows\setF1F.tmp - Deleted
C:\Program Files\Ipwindows\setF2.tmp - Deleted
C:\Program Files\Ipwindows\setF20.tmp - Deleted
C:\Program Files\Ipwindows\setF21.tmp - Deleted
C:\Program Files\Ipwindows\setF22.tmp - Deleted
C:\Program Files\Ipwindows\setF23.tmp - Deleted
C:\Program Files\Ipwindows\setF24.tmp - Deleted
C:\Program Files\Ipwindows\setF25.tmp - Deleted
C:\Program Files\Ipwindows\setF26.tmp - Deleted
C:\Program Files\Ipwindows\setF27.tmp - Deleted
C:\Program Files\Ipwindows\setF28.tmp - Deleted
C:\Program Files\Ipwindows\setF29.tmp - Deleted
C:\Program Files\Ipwindows\setF2A.tmp - Deleted
C:\Program Files\Ipwindows\setF2B.tmp - Deleted
C:\Program Files\Ipwindows\setF2C.tmp - Deleted
C:\Program Files\Ipwindows\setF2D.tmp - Deleted
C:\Program Files\Ipwindows\setF2E.tmp - Deleted
C:\Program Files\Ipwindows\setF2F.tmp - Deleted
C:\Program Files\Ipwindows\setF3.tmp - Deleted
C:\Program Files\Ipwindows\setF30.tmp - Deleted
C:\Program Files\Ipwindows\setF31.tmp - Deleted
C:\Program Files\Ipwindows\setF32.tmp - Deleted
C:\Program Files\Ipwindows\setF33.tmp - Deleted
C:\Program Files\Ipwindows\setF34.tmp - Deleted
C:\Program Files\Ipwindows\setF35.tmp - Deleted
C:\Program Files\Ipwindows\setF36.tmp - Deleted
C:\Program Files\Ipwindows\setF37.tmp - Deleted
C:\Program Files\Ipwindows\setF38.tmp - Deleted
C:\Program Files\Ipwindows\setF39.tmp - Deleted
C:\Program Files\Ipwindows\setF3A.tmp - Deleted
C:\Program Files\Ipwindows\setF3B.tmp - Deleted
C:\Program Files\Ipwindows\setF3C.tmp - Deleted
C:\Program Files\Ipwindows\setF3D.tmp - Deleted
C:\Program Files\Ipwindows\setF3E.tmp - Deleted
C:\Program Files\Ipwindows\setF3F.tmp - Deleted
C:\Program Files\Ipwindows\setF4.tmp - Deleted
C:\Program Files\Ipwindows\setF40.tmp - Deleted
C:\Program Files\Ipwindows\setF41.tmp - Deleted
C:\Program Files\Ipwindows\setF42.tmp - Deleted
C:\Program Files\Ipwindows\setF43.tmp - Deleted
C:\Program Files\Ipwindows\setF44.tmp - Deleted
C:\Program Files\Ipwindows\setF45.tmp - Deleted
C:\Program Files\Ipwindows\setF46.tmp - Deleted
C:\Program Files\Ipwindows\setF47.tmp - Deleted
C:\Program Files\Ipwindows\setF48.tmp - Deleted
C:\Program Files\Ipwindows\setF49.tmp - Deleted
C:\Program Files\Ipwindows\setF4A.tmp - Deleted
C:\Program Files\Ipwindows\setF4B.tmp - Deleted
C:\Program Files\Ipwindows\setF4C.tmp - Deleted
C:\Program Files\Ipwindows\setF4D.tmp - Deleted
C:\Program Files\Ipwindows\setF4E.tmp - Deleted
C:\Program Files\Ipwindows\setF4F.tmp - Deleted
C:\Program Files\Ipwindows\setF5.tmp - Deleted
C:\Program Files\Ipwindows\setF50.tmp - Deleted
C:\Program Files\Ipwindows\setF51.tmp - Deleted
C:\Program Files\Ipwindows\setF52.tmp - Deleted
C:\Program Files\Ipwindows\setF53.tmp - Deleted
C:\Program Files\Ipwindows\setF54.tmp - Deleted
C:\Program Files\Ipwindows\setF55.tmp - Deleted
C:\Program Files\Ipwindows\setF56.tmp - Deleted
C:\Program Files\Ipwindows\setF57.tmp - Deleted
C:\Program Files\Ipwindows\setF58.tmp - Deleted
C:\Program Files\Ipwindows\setF59.tmp - Deleted
C:\Program Files\Ipwindows\setF5A.tmp - Deleted
C:\Program Files\Ipwindows\setF5B.tmp - Deleted
C:\Program Files\Ipwindows\setF5C.tmp - Deleted
C:\Program Files\Ipwindows\setF5D.tmp - Deleted
C:\Program Files\Ipwindows\setF5E.tmp - Deleted
C:\Program Files\Ipwindows\setF5F.tmp - Deleted
C:\Program Files\Ipwindows\setF60.tmp - Deleted
C:\Program Files\Ipwindows\setF61.tmp - Deleted
C:\Program Files\Ipwindows\setF62.tmp - Deleted
C:\Program Files\Ipwindows\setF63.tmp - Deleted
C:\Program Files\Ipwindows\setF64.tmp - Deleted
C:\Program Files\Ipwindows\setF65.tmp - Deleted
C:\Program Files\Ipwindows\setF66.tmp - Deleted
C:\Program Files\Ipwindows\setF67.tmp - Deleted
C:\Program Files\Ipwindows\setF68.tmp - Deleted
C:\Program Files\Ipwindows\setF69.tmp - Deleted
C:\Program Files\Ipwindows\setF6A.tmp - Deleted
C:\Program Files\Ipwindows\setF6B.tmp - Deleted
C:\Program Files\Ipwindows\setF6C.tmp - Deleted
C:\Program Files\Ipwindows\setF6D.tmp - Deleted
C:\Program Files\Ipwindows\setF6E.tmp - Deleted
C:\Program Files\Ipwindows\setF6F.tmp - Deleted
C:\Program Files\Ipwindows\setF70.tmp - Deleted
C:\Program Files\Ipwindows\setF71.tmp - Deleted
C:\Program Files\Ipwindows\setF72.tmp - Deleted
C:\Program Files\Ipwindows\setF73.tmp - Deleted
C:\Program Files\Ipwindows\setF74.tmp - Deleted
C:\Program Files\Ipwindows\setF75.tmp - Deleted
C:\Program Files\Ipwindows\setF76.tmp - Deleted
C:\Program Files\Ipwindows\setF77.tmp - Deleted
C:\Program Files\Ipwindows\setF78.tmp - Deleted
C:\Program Files\Ipwindows\setF79.tmp - Deleted
C:\Program Files\Ipwindows\setF7A.tmp - Deleted
C:\Program Files\Ipwindows\setF7B.tmp - Deleted
C:\Program Files\Ipwindows\setF7C.tmp - Deleted
C:\Program Files\Ipwindows\setF7D.tmp - Deleted
C:\Program Files\Ipwindows\setF7E.tmp - Deleted
C:\Program Files\Ipwindows\setF7F.tmp - Deleted
C:\Program Files\Ipwindows\setF80.tmp - Deleted
C:\Program Files\Ipwindows\setF81.tmp - Deleted
C:\Program Files\Ipwindows\setF82.tmp - Deleted
C:\Program Files\Ipwindows\setF83.tmp - Deleted
C:\Program Files\Ipwindows\setF84.tmp - Deleted
C:\Program Files\Ipwindows\setF85.tmp - Deleted
C:\Program Files\Ipwindows\setF86.tmp - Deleted
C:\Program Files\Ipwindows\setF87.tmp - Deleted
C:\Program Files\Ipwindows\setF88.tmp - Deleted
C:\Program Files\Ipwindows\setF89.tmp - Deleted
C:\Program Files\Ipwindows\setF8A.tmp - Deleted
C:\Program Files\Ipwindows\setF8B.tmp - Deleted
C:\Program Files\Ipwindows\setF8C.tmp - Deleted
C:\Program Files\Ipwindows\setF8D.tmp - Deleted
C:\Program Files\Ipwindows\setF8E.tmp - Deleted
C:\Program Files\Ipwindows\setF8F.tmp - Deleted
C:\Program Files\Ipwindows\setF90.tmp - Deleted
C:\Program Files\Ipwindows\setF91.tmp - Deleted
C:\Program Files\Ipwindows\setF92.tmp - Deleted
C:\Program Files\Ipwindows\setF93.tmp - Deleted
C:\Program Files\Ipwindows\setF94.tmp - Deleted
C:\Program Files\Ipwindows\setF95.tmp - Deleted
C:\Program Files\Ipwindows\setF96.tmp - Deleted
C:\Program Files\Ipwindows\setF97.tmp - Deleted
C:\Program Files\Ipwindows\setF98.tmp - Deleted
C:\Program Files\Ipwindows\setF99.tmp - Deleted
C:\Program Files\Ipwindows\setF9A.tmp - Deleted
C:\Program Files\Ipwindows\setF9B.tmp - Deleted
C:\Program Files\Ipwindows\setF9C.tmp - Deleted
C:\Program Files\Ipwindows\setF9D.tmp - Deleted
C:\Program Files\Ipwindows\setF9E.tmp - Deleted
C:\Program Files\Ipwindows\setF9F.tmp - Deleted
C:\Program Files\Ipwindows\setFA.tmp - Deleted
C:\Program Files\Ipwindows\setFA0.tmp - Deleted
C:\Program Files\Ipwindows\setFA1.tmp - Deleted
C:\Program Files\Ipwindows\setFA2.tmp - Deleted
C:\Program Files\Ipwindows\setFA3.tmp - Deleted
C:\Program Files\Ipwindows\setFA4.tmp - Deleted
C:\Program Files\Ipwindows\setFA5.tmp - Deleted
C:\Program Files\Ipwindows\setFA6.tmp - Deleted
C:\Program Files\Ipwindows\setFA7.tmp - Deleted
C:\Program Files\Ipwindows\setFA8.tmp - Deleted
C:\Program Files\Ipwindows\setFA9.tmp - Deleted
C:\Program Files\Ipwindows\setFAA.tmp - Deleted
C:\Program Files\Ipwindows\setFAB.tmp - Deleted
C:\Program Files\Ipwindows\setFAC.tmp - Deleted
C:\Program Files\Ipwindows\setFAD.tmp - Deleted
C:\Program Files\Ipwindows\setFAE.tmp - Deleted
C:\Program Files\Ipwindows\setFAF.tmp - Deleted
C:\Program Files\Ipwindows\setFB.tmp - Deleted
C:\Program Files\Ipwindows\setFB0.tmp - Deleted
C:\Program Files\Ipwindows\setFB1.tmp - Deleted
C:\Program Files\Ipwindows\setFB2.tmp - Deleted
C:\Program Files\Ipwindows\setFB3.tmp - Deleted
C:\Program Files\Ipwindows\setFB4.tmp - Deleted
C:\Program Files\Ipwindows\setFB5.tmp - Deleted
C:\Program Files\Ipwindows\setFB6.tmp - Deleted
C:\Program Files\Ipwindows\setFB7.tmp - Deleted
C:\Program Files\Ipwindows\setFB8.tmp - Deleted
C:\Program Files\Ipwindows\setFB9.tmp - Deleted
C:\Program Files\Ipwindows\setFBA.tmp - Deleted
C:\Program Files\Ipwindows\setFBB.tmp - Deleted
C:\Program Files\Ipwindows\setFBC.tmp - Deleted
C:\Program Files\Ipwindows\setFBD.tmp - Deleted
C:\Program Files\Ipwindows\setFBE.tmp - Deleted
C:\Program Files\Ipwindows\setFBF.tmp - Deleted
C:\Program Files\Ipwindows\setFC.tmp - Deleted
C:\Program Files\Ipwindows\setFC0.tmp - Deleted
C:\Program Files\Ipwindows\setFC1.tmp - Deleted
C:\Program Files\Ipwindows\setFC2.tmp - Deleted
C:\Program Files\Ipwindows\setFC3.tmp - Deleted
C:\Program Files\Ipwindows\setFC4.tmp - Deleted
C:\Program Files\Ipwindows\setFC5.tmp - Deleted
C:\Program Files\Ipwindows\setFC6.tmp - Deleted
C:\Program Files\Ipwindows\setFC7.tmp - Deleted
C:\Program Files\Ipwindows\setFC8.tmp - Deleted
C:\Program Files\Ipwindows\setFC9.tmp - Deleted
C:\Program Files\Ipwindows\setFCA.tmp - Deleted
C:\Program Files\Ipwindows\setFCB.tmp - Deleted
C:\Program Files\Ipwindows\setFCC.tmp - Deleted
C:\Program Files\Ipwindows\setFCD.tmp - Deleted
C:\Program Files\Ipwindows\setFCE.tmp - Deleted
C:\Program Files\Ipwindows\setFCF.tmp - Deleted
C:\Program Files\Ipwindows\setFD.tmp - Deleted
C:\Program Files\Ipwindows\setFD0.tmp - Deleted
C:\Program Files\Ipwindows\setFD1.tmp - Deleted
C:\Program Files\Ipwindows\setFD2.tmp - Deleted
C:\Program Files\Ipwindows\setFD3.tmp - Deleted
C:\Program Files\Ipwindows\setFD4.tmp - Deleted
C:\Program Files\Ipwindows\setFD5.tmp - Deleted
C:\Program Files\Ipwindows\setFD6.tmp - Deleted
C:\Program Files\Ipwindows\setFD7.tmp - Deleted
C:\Program Files\Ipwindows\setFD8.tmp - Deleted
C:\Program Files\Ipwindows\setFD9.tmp - Deleted
C:\Program Files\Ipwindows\setFDA.tmp - Deleted
C:\Program Files\Ipwindows\setFDB.tmp - Deleted
C:\Program Files\Ipwindows\setFDC.tmp - Deleted
C:\Program Files\Ipwindows\setFDD.tmp - Deleted
C:\Program Files\Ipwindows\setFDE.tmp - Deleted
C:\Program Files\Ipwindows\setFDF.tmp - Deleted
C:\Program Files\Ipwindows\setFE.tmp - Deleted
C:\Program Files\Ipwindows\setFE0.tmp - Deleted
C:\Program Files\Ipwindows\setFE1.tmp - Deleted
C:\Program Files\Ipwindows\setFE2.tmp - Deleted
C:\Program Files\Ipwindows\setFE3.tmp - Deleted
C:\Program Files\Ipwindows\setFE4.tmp - Deleted
C:\Program Files\Ipwindows\setFE5.tmp - Deleted
C:\Program Files\Ipwindows\setFE6.tmp - Deleted
C:\Program Files\Ipwindows\setFE7.tmp - Deleted
C:\Program Files\Ipwindows\setFE8.tmp - Deleted
C:\Program Files\Ipwindows\setFE9.tmp - Deleted
C:\Program Files\Ipwindows\setFEA.tmp - Deleted
C:\Program Files\Ipwindows\setFEB.tmp - Deleted
C:\Program Files\Ipwindows\setFEC.tmp - Deleted
C:\Program Files\Ipwindows\setFED.tmp - Deleted
C:\Program Files\Ipwindows\setFEE.tmp - Deleted
C:\Program Files\Ipwindows\setFEF.tmp - Deleted
C:\Program Files\Ipwindows\setFF.tmp - Deleted
C:\Program Files\Ipwindows\setFF0.tmp - Deleted
C:\Program Files\Ipwindows\setFF1.tmp - Deleted
C:\Program Files\Ipwindows\setFF2.tmp - Deleted
C:\Program Files\Ipwindows\setFF3.tmp - Deleted
C:\Program Files\Ipwindows\setFF4.tmp - Deleted
C:\Program Files\Ipwindows\setFF5.tmp - Deleted
C:\Program Files\Ipwindows\setFF6.tmp - Deleted
C:\Program Files\Ipwindows\setFF7.tmp - Deleted
C:\Program Files\Ipwindows\setFF8.tmp - Deleted
C:\Program Files\Ipwindows\setFF9.tmp - Deleted
C:\Program Files\Ipwindows\setFFA.tmp - Deleted
C:\Program Files\Ipwindows\setFFB.tmp - Deleted
C:\Program Files\Ipwindows\setFFC.tmp - Deleted
C:\Program Files\Ipwindows\setFFD.tmp - Deleted
C:\Program Files\Ipwindows\setFFE.tmp - Deleted
C:\Program Files\Ipwindows\setFFF.tmp - Deleted
C:\Program Files\Ipwindows\Uninst.exe - Deleted
C:\a.exe - Deleted
C:\WINDOWS\system32\scvhost.exe - Deleted



Folder C:\Program Files\Ipwindows - Removed

Removing Temp Files…

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1333.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-30 20:29:31
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden services & system hive …

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:b09b8752
"s2"=dword:c1dfc9a3
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:4c,cc,01,a4,eb,aa,b6,ac,35,26,9b,1f,27,c3,2d,23,b2,2b,94,05,63,..
"p0"="C:\Program Files\DAEMON Tools\"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,e5,ff,5d,6f,d2,1c,3d,3b,2d,08,66,aa,a3,ac,ba,74,9b,..
"khjeh"=hex:fd,40,13,8c,0c,4f,e7,5b,bd,1c,50,6f,ef,29,25,b3,d8,a2,62,3d,40,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:09,a5,0c,b9,c9,db,96,f7,63,42,26,37,25,0f,74,de,1f,3e,16,ba,cd,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:4c,cc,01,a4,eb,aa,b6,ac,35,26,9b,1f,27,c3,2d,23,b2,2b,94,05,63,..
"p0"="C:\Program Files\DAEMON Tools\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,e5,ff,5d,6f,d2,1c,3d,3b,2d,08,66,aa,a3,ac,ba,74,9b,..
"khjeh"=hex:fd,40,13,8c,0c,4f,e7,5b,bd,1c,50,6f,ef,29,25,b3,d8,a2,62,3d,40,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:09,a5,0c,b9,c9,db,96,f7,63,42,26,37,25,0f,74,de,1f,3e,16,ba,cd,..

scanning hidden registry entries …

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Reinstall\\24\xe1\21]
"DisplayName"="\x8ee0\x230\x8ee0\x230\1"
"DeviceDesc"="\x8ee0\x230\x8ee0\x230\1"
"ProviderName"="\xfed4\21\xee18\x7c90\xff44\21\b"
"MFG"="\x670"
"ReinstallString"="C:\WINDOWS\System32\ReinstallBackups\\xe114\21\x80\xc010\DriverFiles\.INF"
"DeviceInstanceIds"=str(7):"d:\software\drivers\chipset_inf\sbdrv\sbdrv\smbus\smbusati.inf"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\\x2019\1N]
"Order"=hex:08,00,00,00,02,00,00,00,ea,00,00,00,01,00,00,00,02,00,00,00,6e,..

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\\x2019\1N\MayQueen]
"Order"=hex:08,00,00,00,02,00,00,00,86,00,00,00,01,00,00,00,01,00,00,00,7a,..

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\\x2019\1N\MayReason]
"Order"=hex:08,00,00,00,02,00,00,00,88,00,00,00,01,00,00,00,01,00,00,00,7c,..

scanning hidden files …

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services:
——————



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Ares\\Ares.exe"="C:\\Program Files\\Ares\\Ares.exe:*:Enabled:Ares"
"C:\\Program Files\\Kazaa Lite K++\\AVIPreview.exe"="C:\\Program Files\\Kazaa Lite K++\\AVIPreview.exe:*:Enabled:AVI Preview"
"C:\\Program Files\\Conquer1.0\\play.exe"="C:\\Program Files\\Conquer1.0\\play.exe:*:Enabled:Conquer 1.0"
"C:\\Diablo II\\Diablo II.exe"="C:\\Diablo II\\Diablo II.exe:*:Enabled:Diablo II - Lord of Destruction"
"C:\\Program Files\\Warcraft III\\Frozen Throne.exe"="C:\\Program Files\\Warcraft III\\Frozen Throne.exe:*:Enabled:Warcraft III - The Frozen Throne"
"C:\\Program Files\\Warcraft III\\Warcraft III.exe"="C:\\Program Files\\Warcraft III\\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\\Program Files\\Yahoo!\\Messenger\\YPager.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YPager.exe:*:Enabled:Yahoo! Messenger"
"C:\\WINDOWS\\system32\\requester.10.exe"="C:\\WINDOWS\\system32\\requester.10.exe:*:Enabled:requester.10"
"C:\\Program Files\\Warcraft III\\war3.exe"="C:\\Program Files\\Warcraft III\\war3.exe:*:Enabled:Warcraft III"
"C:\\Program Files\\Wizet\\MapleStory\\Patcher.exe"="C:\\Program Files\\Wizet\\MapleStory\\Patcher.exe:*:Enabled:Patcher MFC ?? ????"
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:YServer Module"
"C:\\Program Files\\mIRC\\mirc.exe"="C:\\Program Files\\mIRC\\mirc.exe:*:Enabled:mIRC"
"C:\\Program Files\\BitComet\\BitComet.exe"="C:\\Program Files\\BitComet\\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"I:\\World of Warcraft\\WoW.exe"="I:\\World of Warcraft\\WoW.exe:*:Enabled:World of Warcraft"
"C:\\Program Files\\Silver Golem\\Silver.exe"="C:\\Program Files\\Silver Golem\\Silver.exe:*:Enabled:Silver Golem is a botmaking client created by Codraconic/Sourcerer for use in Furcadia that uses a scripting language based on DragonSpeak which is appropriately called GolemSpeak. Post questions, comments, suggestions, and/or bug reports in the appropriate "
"C:\\Program Files\\Alias\\Maya6.0\\bin\\maya.exe"="C:\\Program Files\\Alias\\Maya6.0\\bin\\maya.exe:*:Enabled:Maya"
"C:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe"="C:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe:*:Enabled:ET"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Disabled:Run a DLL as an App"
"C:\\Program Files\\AIM\\aim.exe"="C:\\Program Files\\AIM\\aim.exe:*:Enabled:AOL Instant Messenger"
"C:\\Documents and Settings\\Dustin Duke\\Desktop\\PWSC1.4.2\\PWSC1.4.2\\server\\server.exe"="C:\\Documents and Settings\\Dustin Duke\\Desktop\\PWSC1.4.2\\PWSC1.4.2\\server\\server.exe:*:Enabled:server"
"C:\\Program Files\\DogProxy2\\DogProxy2.exe"="C:\\Program Files\\DogProxy2\\DogProxy2.exe:*:Enabled:DogProxy2"
"C:\\Program Files\\Starcraft\\StarCraft.exe"="C:\\Program Files\\Starcraft\\StarCraft.exe:*:Enabled:Starcraft"
"I:\\america's army\\System\\ArmyOps.exe"="I:\\america's army\\System\\ArmyOps.exe:*:Enabled:ArmyOps"
"C:\\Program Files\\DAP\\DAP.exe"="C:\\Program Files\\DAP\\DAP.exe:*:Enabled:Download Accelerator Plus"
"C:\\Program Files\\Xfire\\Xfire.exe"="C:\\Program Files\\Xfire\\Xfire.exe:*:Enabled:Xfire"
"C:\\Program Files\\MAIET\\Gunz\\Gunz.exe"="C:\\Program Files\\MAIET\\Gunz\\Gunz.exe:*:Enabled:Gunz"
"C:\\Program Files\\FurBot\\furbot.exe"="C:\\Program Files\\FurBot\\furbot.exe:*:Enabled:FurBot 1.80"
"C:\\Program Files\\MAIET\\Gunz\\GunzLauncher.exe"="C:\\Program Files\\MAIET\\Gunz\\GunzLauncher.exe:*:Enabled:GunzLauncher"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\\Program Files\\Furcadia\\Furcadia.exe"="C:\\Program Files\\Furcadia\\Furcadia.exe:*:Enabled:Furcadia"
"C:\\Program Files\\Wizet\\MapleStory\\NewPatcher.exe"="C:\\Program Files\\Wizet\\MapleStory\\NewPatcher.exe:*:Enabled:Patcher MFC ?? ????"
"C:\\Program Files\\Call of Duty Game of the Year Edition\\CoDMP.exe"="C:\\Program Files\\Call of Duty Game of the Year Edition\\CoDMP.exe:*:Enabled:CoDMP"
"C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent"
"I:\\Program Files\\Rakion\\Bin\\rakion.bin"="I:\\Program Files\\Rakion\\Bin\\rakion.bin:*:Enabled:rakion"
"C:\\WINDOWS\\PCHealth\\HelpCtr\\Binaries\\helpctr.exe"="C:\\WINDOWS\\PCHealth\\HelpCtr\\Binaries\\helpctr.exe:*:Enabled:Remote Assistance - Windows Messenger and Voice"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\uTorrent\\utorrent.exe"="C:\\Program Files\\uTorrent\\utorrent.exe:*:Enabled:æTorrent"
"C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"="C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe:*:Enabled:AOL Loader"
"C:\\PROGRA~1\\PEERIM~1\\PEERIM~1.EXE"="C:\\PROGRA~1\\PEERIM~1\\PEERIM~1.EXE:*:Enabled:Peer Impact"
"I:\\Program Files\\ICQ6\\ICQ.exe"="I:\\Program Files\\ICQ6\\ICQ.exe:*:Enabled:ICQ6"
"I:\\Alien Arena 2007\\crx.exe"="I:\\Alien Arena 2007\\crx.exe:*:Enabled:crx"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
"I:\\Program Files\\MAIET\\Gunz\\GunzLauncher.exe"="I:\\Program Files\\MAIET\\Gunz\\GunzLauncher.exe:*:Enabled:GunzLauncher"
"I:\\Program Files\\MAIET\\Gunz\\Gunz.exe"="I:\\Program Files\\MAIET\\Gunz\\Gunz.exe:*:Enabled:Gunz"
"I:\\Program Files\\Softnyx\\Rakion\\Bin\\rakion.bin"="I:\\Program Files\\Softnyx\\Rakion\\Bin\\rakion.bin:*:Enabled:rakion"
"I:\\Program Files\\Sierra\\FEAR\\fpupdate.exe"="I:\\Program Files\\Sierra\\FEAR\\fpupdate.exe:*:Enabled:fpupdate"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype. Take a deep breath "
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"I:\\Nexon\\MapleStory\\MapleStory.exe"="I:\\Nexon\\MapleStory\\MapleStory.exe:*:Enabled:MapleStory"
"C:\\Program Files\\MAIET\\Gunz\\BAReport.exe"="C:\\Program Files\\MAIET\\Gunz\\BAReport.exe:*:Disabled:BAReport MFC ?? ????"
"C:\\Program Files\\BitTornado\\btdownloadgui.exe"="C:\\Program Files\\BitTornado\\btdownloadgui.exe:*:Disabled:btdownloadgui"
"I:\\Roseonline\\TRose.exe"="I:\\Roseonline\\TRose.exe:*:Disabled:Client"
"C:\\Program Files\\eDonkey2000\\edonkey2000.exe"="C:\\Program Files\\eDonkey2000\\edonkey2000.exe:*:Disabled:edonkey2000"
"C:\\Program Files\\furbot.exe"="C:\\Program Files\\furbot.exe:*:Disabled:FurBot 1.70"
"C:\\furbot.exe"="C:\\furbot.exe:*:Disabled:FurBot 1.70"
"C:\\Program Files\\Kazaa Lite K++\\KazaaLite.kpp"="C:\\Program Files\\Kazaa Lite K++\\KazaaLite.kpp:*:Disabled:KazaaLite"
"C:\\Program Files\\LimeWire\\LimeWire 4.2.6\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire 4.2.6\\LimeWire.exe:*:Disabled:LimeWire"
"I:\\Program Files\\Turbine\\The Lord of the Rings Online\\lotroclient.exe"="I:\\Program Files\\Turbine\\The Lord of the Rings Online\\lotroclient.exe:*:Enabled:lotroclient.exe"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Disabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Disabled:Windows Live Messenger 8.1"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\AIM\\aim.exe"="C:\\Program Files\\AIM\\aim.exe:*:Enabled:AOL Instant Messenger"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\PROGRA~1\\PEERIM~1\\PEERIM~1.EXE"="C:\\PROGRA~1\\PEERIM~1\\PEERIM~1.EXE:*:Enabled:Peer Impact"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

Remaining Files:
—————

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

Fri 1 Oct 2004 294,912 A..H. — "C:\Program Files\MSN\txsrvc.dll"
Wed 29 Sep 2004 302,080 A..H. — "C:\Program Files\MSN\unicows.dll"
Wed 26 Dec 2007 81,920 ..SH. — "C:\WINDOWS\system32\pkguard32.exe"
Sat 20 Oct 2007 4,348 ..SH. — "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sat 7 Aug 2004 4,348 ..SH. — "C:\Documents and Settings\All Users\DRM\DRMv1.key.bak"
Sat 3 Nov 2007 95 A..H. — "C:\Program Files\InterActual\InterActual Player\iti697.tmp"
Sun 21 Jul 2002 418,816 A..HR — "C:\WINDOWS\system32\Tools\All.exe"
Thu 18 Jul 2002 390,144 A..HR — "C:\WINDOWS\system32\Tools\Change.exe"
Thu 18 Jul 2002 574,464 A..HR — "C:\WINDOWS\system32\Tools\CheckPath.exe"
Mon 19 Aug 2002 430,592 A..HR — "C:\WINDOWS\system32\Tools\Counter.exe"
Mon 22 Jul 2002 390,656 A..HR — "C:\WINDOWS\system32\Tools\DelFolders.exe"
Fri 22 Nov 2002 399,872 A..HR — "C:\WINDOWS\system32\Tools\DirectSetup.exe"
Fri 19 Jul 2002 388,096 A..HR — "C:\WINDOWS\system32\Tools\RegClean.exe"
Fri 19 Jul 2002 388,608 A..HR — "C:\WINDOWS\system32\Tools\Regexe.exe"
Sun 1 Dec 2002 431,616 A..HR — "C:\WINDOWS\system32\Tools\Restart.exe"
Fri 19 Jul 2002 388,096 A..HR — "C:\WINDOWS\system32\Tools\RunRegexe.exe"
Tue 25 Dec 2007 0 A.SH. — "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Thu 18 Oct 2007 1,977 …HR — "C:\Documents and Settings\Dustin Duke\Application Data\SecuROM\UserData\securom_v7_01.bak"
Sat 20 Oct 2007 4,348 …H. — "C:\Documents and Settings\Owner\My Documents\My Music\License Backup\drmv1key.bak"
Sat 10 Nov 2007 20 A..H. — "C:\Documents and Settings\Owner\My Documents\My Music\License Backup\drmv1lic.bak"
Sat 20 Oct 2007 9,654 A.SH. — "C:\Documents and Settings\Owner\My Documents\My Music\License Backup\drmv2key.bak"

Finished!
Hi,

Ares and uTorrent are installed on your computer. While both are clean P2P programs, there's no guarantee that the files downloaded are. Please refrain from using them while cleaning your computer to prevent getting more infections.

A list of clean and infected P2P programs can be found at Malware Removal and Spyware Info.

The risks of using a P2P program are stated in this Sourceforge website and Information Week article.
____________________

If you already have Combofix, please delete this copy and download it again as it's being updated regularly.

Please download Combofix from Bleeping Computer. Save it to your desktop.

If you can't download it, please try these 2 alternative sites:

Forospyware
Geeks to Go

Double click to run it. Follow the prompts. Once done, it will reboot and a log will be produced. Please post that log and a new HijackThis log in your next reply.

Do not mouse click on Combofix while it is running. That may cause it to stall.
____________________

Please go to Virus Total or Jotti and upload C:\Program Files\MSN\txsrvc.dll for scanning.

For Virus Total

  • Please copy and paste C:\Program Files\MSN\txsrvc.dll in the text box next to the Browse button.
  • Click on Send File.

For Jotti

  • Please copy and paste C:\Program Files\MSN\txsrvc.dll in the text box next to the Browse button.
  • Click on Submit.

Repeat for these files:

  • C:\Program Files\MSN\unicows.dll
  • C:\WINDOWS\system32\Tools\All.exe
  • C:\WINDOWS\system32\Tools\Change.exe
  • C:\WINDOWS\system32\Tools\CheckPath.exe
  • C:\WINDOWS\system32\Tools\Counter.exe
  • C:\WINDOWS\system32\Tools\DelFolders.exe
  • C:\WINDOWS\system32\Tools\DirectSetup.exe
  • C:\WINDOWS\system32\Tools\RegClean.exe
  • C:\WINDOWS\system32\Tools\Regexe.exe
  • C:\WINDOWS\system32\Tools\Restart.exe
  • C:\WINDOWS\system32\Tools\RunRegexe.exe
Logfile of HijackThis v1.99.1
Scan saved at 10:20:43 AM, on 1/1/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\DRIVERS\WtSrv.exe
C:\Program Files\Linksys Wireless-G PCI Network Adapter with SpeedBooster\WLService.exe
C:\Program Files\Linksys Wireless-G PCI Network Adapter with SpeedBooster\WMP54GSv1_1.exe
C:\WINDOWS\system32\ZuneBusEnum.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\IC\Card Reader Driver v1.9e2\Disk_Monitor.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\WService.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\Common Files\Logitech\LCD Manager\lcdmon.exe
C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe
C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Zune\ZuneLauncher.exe
C:\WINDOWS\system32\pkguard32.exe
C:\WINDOWS\system32\windurs.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe
C:\Program Files\Xfire\Xfire.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\DogProxy2\DogProxy2.exe
C:\PROGRAM FILES\FURCADIA\furcadia.exe
C:\Documents and Settings\Dustin Duke\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?.home=ytie
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/?.home=ytie
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?.home=ytie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
O1 - Hosts: 127.0.2.5 sarc.com
O1 - Hosts: 127.0.2.5 www.sarc.com
O1 - Hosts: 127.0.2.5 f-prot.com
O1 - Hosts: 127.0.2.5 www.f-prot.com
O1 - Hosts: 127.0.2.5 housecall.trendmicro.com
O1 - Hosts: 127.0.2.5 free.grisoft.com
O1 - Hosts: 127.0.2.5 grisoft.com
O1 - Hosts: 127.0.2.5 clamav.net
O1 - Hosts: 127.0.2.5 www.clamav.net
O1 - Hosts: 127.0.2.5 free-av.com
O1 - Hosts: 127.0.2.5 www.free-av.com
O1 - Hosts: 127.0.2.5 www.avast.com
O1 - Hosts: 127.0.2.5 avast.com
O1 - Hosts: 127.0.2.5 cert.org
O1 - Hosts: 127.0.2.5 www.cert.org
O1 - Hosts: 127.0.2.5 update.microsoft.com
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [Disk Monitor] C:\Program Files\IC\Card Reader Driver v1.9e2\Disk_Monitor.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [WService] WService.EXE
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Common Files\Logitech\LCD Manager\lcdmon.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zune Launcher] "C:\Program Files\Zune\ZuneLauncher.exe"
O4 - HKLM\..\Run: [PK Guard] C:\WINDOWS\system32\pkguard32.exe
O4 - HKLM\..\Run: [WIndos Updater] C:\WINDOWS\system32\windurs.exe
O4 - HKLM\..\RunServices: [PK Guard] C:\WINDOWS\system32\pkguard32.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [Steam] "I:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Veoh] "I:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [PK Guard] C:\WINDOWS\system32\pkguard32.exe
O4 - HKCU\..\Run: [WIndos Updater] C:\WINDOWS\system32\windurs.exe
O4 - HKCU\..\RunServices: [WIndos Updater] C:\WINDOWS\system32\windurs.exe
O4 - Startup: Spybot - Search & Destroy.lnk = C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - I:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - I:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://*.msjc.edu
O16 - DPF: {02ECD07A-22D0-4AF0-BA0A-3F6B06086D08} (GamesCampus Control) - http://www.gamescampus.com/xiah/luncher/GamesCampus.cab
O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowsonecare.com/install/cli/…nSSWebAgent.CAB
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1181489616640
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MySQL - Unknown owner - C:\AppServ\mysql\bin\mysqld-nt.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\system32\DRIVERS\WtSrv.exe
O23 - Service: WMP54GSSVC - Unknown owner - C:\Program Files\Linksys Wireless-G PCI Network Adapter with SpeedBooster\WLService.exe" "WMP54GSv1_1.exe (file missing)
Since you've ran it, the log is located at C:\Combofix.txt. Please also post back the Virus Total or Jotti's scan results of the files.
ComboFix 07-12-31.4 - Dustin Duke 2008-01-01 9:06:42.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.501 [GMT -8:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\Common Files\{34A42~1
C:\Program Files\Common Files\{B4A42~1
C:\WINDOWS\hosts
C:\WINDOWS\system32\_000234_.tmp.dll
C:\WINDOWS\system32\_000235_.tmp.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
——-\LEGACY_COM+_MESSAGES
——-\LEGACY_NPF
——-\LEGACY_NWSAPAGENT
——-\LEGACY_POWERMANAGER
——-\NwSapAgent


((((((((((((((((((((((((( Files Created from 2007-12-01 to 2008-01-01 )))))))))))))))))))))))))))))))
.

2008-01-01 09:04 . 2000-08-31 08:00 51,200 –a—— C:\WINDOWS\NirCmd.exe
2007-12-30 10:23 . 2007-12-30 10:24 d——– C:\WINDOWS\ERUNT
2007-12-30 09:30 . 2007-12-30 09:30 d——– C:\Program Files\CCleaner
2007-12-26 15:57 . 2007-12-26 15:57 d——– C:\Documents and Settings\Dustin Duke\Application Data\PCF-VLC
2007-12-26 08:47 . 2007-12-26 08:47 695,039 –a—— C:\WINDOWS\system32\windurs.exe
2007-12-26 08:47 . 2007-12-26 08:47 695,039 –a—— C:\WINDOWS\shells.exe
2007-12-26 08:47 . 2007-12-26 08:47 6,690 –a—— C:\WINDOWS\system32\rock.exe
2007-12-26 05:41 . 2007-12-26 05:41 81,920 —hs—- C:\WINDOWS\system32\pkguard32.exe
2007-12-26 05:41 . 2007-12-26 05:41 81,920 –a—— C:\installer.exe
2007-12-25 10:18 . 2007-12-25 10:18 0 –ah—– C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2007-12-25 10:18 . 2007-12-25 10:18 0 –ah—– C:\WINDOWS\system32\drivers\Msft_Kernel_zumbus_01005.Wdf
2007-12-25 10:17 . 2007-12-25 10:20 d——– C:\Program Files\Zune
2007-12-25 10:14 . 2007-12-25 10:20 d——– C:\WINDOWS\system32\drivers\UMDF
2007-12-04 12:04 . 2007-12-04 12:04 180,324 –a—— C:\meer.exe
2007-12-04 12:01 . 2007-12-04 12:01 180,324 –a—— C:\WINDOWS\wincap.exe
2007-12-04 11:59 . 2007-12-04 11:59 108,336 –a—— C:\mswinsck.ocx
2007-12-03 12:52 . 2007-12-03 12:52 49,252 –a—— C:\WINDOWS\windir.exe
2007-12-03 12:52 . 2007-12-03 12:52 0 –a—— C:\Window
2007-12-02 20:58 . 2007-12-02 20:58 d——– C:\Program Files\SpacialAudio
2007-12-02 20:58 . 2007-12-02 20:58 d——– C:\Program Files\Firebird
2007-12-02 20:58 . 2004-12-13 01:05 356,437 –a—— C:\WINDOWS\system32\GDS32.DLL
2007-12-02 17:34 . 2007-12-02 17:34 79 –a—— C:\WINDOWS\APOapp.INI
2007-12-02 17:32 . 2007-12-02 17:32 d——– C:\Photo2Album
2007-12-01 16:41 . 2002-10-01 14:43 119,798 –a—— C:\WINDOWS\system32\drivers\spca561.sys
2007-12-01 16:41 . 2002-11-22 15:56 118,784 –a—— C:\WINDOWS\ShowBmp.exe
2007-12-01 16:41 . 2003-08-05 11:41 53,248 –a—— C:\WINDOWS\ap561.exe
2007-12-01 16:41 . 2002-08-13 18:01 14,385 –a—— C:\WINDOWS\Tw561a.ini
2007-12-01 16:41 . 2002-08-13 18:01 7,431 –a—— C:\WINDOWS\Tw561a.src
2007-12-01 16:41 . 2002-03-19 14:11 81 –a—— C:\WINDOWS\Setup8a.ini

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-01 17:05 ——— d—–w C:\Program Files\Furcadia
2008-01-01 06:45 ——— d—–w C:\Program Files\Microsoft Windows OneCare Live
2008-01-01 04:37 ——— d—a-w C:\Documents and Settings\All Users\Application Data\TEMP
2007-12-31 06:28 ——— d—–w C:\Program Files\SpywareBlaster
2007-12-31 04:47 ——— d—–w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-12-30 05:15 ——— d—–w C:\Documents and Settings\Dustin Duke\Application Data\uTorrent
2007-12-19 21:26 ——— d-s—w C:\Program Files\Xfire
2007-12-13 00:24 ——— d–h–w C:\Program Files\InstallShield Installation Information
2007-12-11 00:29 ——— d—–w C:\Documents and Settings\Dustin Duke\Application Data\Xfire
2007-12-03 05:20 ——— d—–w C:\Program Files\Winamp
2007-12-02 00:50 ——— d—–w C:\Documents and Settings\Dustin Duke\Application Data\dvdcss
2007-11-27 06:22 ——— d—–w C:\Program Files\FurBot
2007-11-27 06:21 ——— d—–w C:\Program Files\Conquer 2.0
2007-11-27 06:19 ——— d—–w C:\Program Files\Common Files\Macromedia
2007-11-25 05:12 ——— d—–w C:\Program Files\Crime Nation
2007-11-24 05:28 ——— d—–w C:\Program Files\Project64 1.6
2007-11-21 08:58 ——— d—–w C:\Program Files\Ares
2007-11-16 05:38 40,832 —-a-w C:\WINDOWS\system32\drivers\zumbus.sys
2007-11-13 10:25 20,480 —-a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-11-12 21:27 ——— d—–w C:\Program Files\IGN
2007-11-12 21:27 ——— d—–w C:\Documents and Settings\Dustin Duke\Application Data\IGN_DLM
2007-11-12 21:04 ——— d—–w C:\Program Files\Browser Mouse
2007-11-12 17:29 ——— d—–w C:\Documents and Settings\Dustin Duke\Application Data\.purple
2007-11-12 06:35 ——— d—–w C:\Program Files\DiceMage
2007-11-09 09:24 ——— d—–w C:\Program Files\Pidgin
2007-11-09 09:24 ——— d—–w C:\Program Files\Aspell
2007-11-09 09:22 ——— d—–w C:\Program Files\Common Files\GTK
2007-11-09 07:29 ——— d—–w C:\Program Files\UnZixWin
2007-11-09 07:28 73,216 —-a-w C:\WINDOWS\ST6UNST.EXE
2007-11-09 07:28 249,856 ——w C:\WINDOWS\Setup1.exe
2007-11-07 04:06 ——— d—–w C:\Program Files\Warcraft III
2007-11-03 01:56 ——— d—–w C:\Program Files\Game Elements
2007-11-01 09:55 ——— d—–w C:\Documents and Settings\Dustin Duke\Application Data\Participatory Culture Foundation
2007-11-01 09:54 ——— d—–w C:\Documents and Settings\Dustin Duke\Application Data\Thunderbird
2007-11-01 09:53 ——— d—–w C:\Program Files\Participatory Culture Foundation
2007-04-26 23:25 122 —-a-w C:\Program Files\piconfig.lx
2006-11-25 04:16 8 —-a-w C:\Documents and Settings\Dustin Duke\Application Data\usb.dat.bin
2006-07-12 06:15 8 —-a-w C:\Documents and Settings\Dustin Duke\options.dat
2005-09-25 00:05 275 -c–a-w C:\Program Files\config.cfg
2004-09-26 21:23 531,456 —-a-w C:\Documents and Settings\Dustin Duke\Maya 6 Keygen.exe
1999-07-07 00:00 6 –sh–r C:\WINDOWS\@@desktop.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATI Launchpad"="" []
"ares"="C:\Program Files\Ares\Ares.exe" [2007-07-16 13:54 961536]
"FreeRAM XP"="C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" [2006-03-22 23:13 1591808]
"Steam"="I:\Program Files\Steam\Steam.exe" [2007-12-02 15:53 1266936]
"Veoh"="I:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2007-12-03 13:21 3461120]
"PK Guard"="C:\WINDOWS\system32\pkguard32.exe" [2007-12-26 05:41 81920]
"WIndos Updater"="C:\WINDOWS\system32\windurs.exe" [2007-12-26 08:47 695039]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"WIndos Updater"="C:\WINDOWS\system32\windurs.exe" [2007-12-26 08:47 695039]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Disk Monitor"="C:\Program Files\IC\Card Reader Driver v1.9e2\Disk_Monitor.exe" [2003-06-18 01:57 466944]
"NeroCheck"="C:\WINDOWS\System32\\NeroCheck.exe" [2001-07-09 02:50 155648]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-03 21:32 208952]
"IMEKRMIG6.1"="C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE" [2003-03-31 04:00 44032]
"RTHDCPL"="RTHDCPL.EXE" [2005-10-14 17:51 14864384 C:\WINDOWS\RTHDCPL.exe]
"WService"="WService.EXE" [2002-09-07 02:23 28672 C:\WINDOWS\system32\WService.exe]
"zBrowser Launcher"="C:\Program Files\Logitech\iTouch\iTouch.exe" [2003-12-01 10:38 892928]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 18:20 866584]
"Launch LCDMon"="C:\Program Files\Common Files\Logitech\LCD Manager\lcdmon.exe" [2006-11-09 12:45 549376]
"Launch LGDCore"="C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe" [2006-11-09 13:10 1126400]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-11-13 20:06 185896]
"OneCareUI"="C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe" [2007-10-01 08:53 66600]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 11:35 90112]
"UserFaultCheck"="C:\WINDOWS\system32\dumprep 0 -u" [ ]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-10-09 21:28 36352]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-06-28 21:21 282624]
"Zune Launcher"="C:\Program Files\Zune\ZuneLauncher.exe" [2007-11-15 21:51 166304]
"PK Guard"="C:\WINDOWS\system32\pkguard32.exe" [2007-12-26 05:41 81920]
"WIndos Updater"="C:\WINDOWS\system32\windurs.exe" [2007-12-26 08:47 695039]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"PK Guard"="C:\WINDOWS\system32\pkguard32.exe" [2007-12-26 05:41 81920]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2005-04-25 12:45 36040]

C:\Documents and Settings\Dustin Duke\Start Menu\Programs\Startup\
Spybot - Search & Destroy.lnk - C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe [2004-05-12 00:03:00]
Xfire.lnk - C:\Program Files\Xfire\Xfire.exe [2007-12-04 18:25:52]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\OneCareMP]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Utility Tray.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk
backup=C:\WINDOWS\pss\Utility Tray.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Dustin Duke^Start Menu^Programs^Startup^HOTLLAMA Update Check.lnk]
path=C:\Documents and Settings\Dustin Duke\Start Menu\Programs\Startup\HOTLLAMA Update Check.lnk
backup=C:\WINDOWS\pss\HOTLLAMA Update Check.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]
2004-11-30 21:10 344064 –a—— C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare]
C:\Program Files\BearShare\BearShare.exe /pause

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DownloadAccelerator]
C:\PROGRA~1\DAP\DAP.EXE /STARTUP

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\gcasServ]
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2006-02-23 15:45 278528 –a—— C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\New.net Startup]
rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,NewDotNetStartup -s

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SFP]
C:\Program Files\Common Files\Verizon Online\SFP\vzSFPWin.EXE /s

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
SOUNDMAN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2007-10-09 21:28 36352 –a—— C:\Program Files\Winamp\winampa.exe

R1 amdtools;AMD Special Tools Driver;C:\WINDOWS\system32\DRIVERS\amdtools.sys [2006-02-23 10:18]
R1 NPPTNT;NPPTNT;C:\WINDOWS\System32\npptNT.sys [2003-07-21 22:14]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe [2004-12-13 01:05]
R2 zumbus;Zune Bus Enumerator Driver;C:\WINDOWS\system32\DRIVERS\zumbus.sys [2007-11-15 21:38]
R2 ZuneBusEnum;Zune Bus Enumerator;C:\WINDOWS\system32\ZuneBusEnum.exe [2007-11-15 21:51]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe [2004-12-13 01:05]
S3 40920;40920;C:\WINDOWS\system32\40920.sys []
S3 6ba1C;6ba1C;C:\WINDOWS\system32\6ba1C.sys []
S3 75321;75321;C:\WINDOWS\system32\75321.sys []
S3 78d1B;78d1B;C:\WINDOWS\system32\78d1B.sys []
S3 7b023;7b023;C:\WINDOWS\system32\7b023.sys []
S3 8faC;8faC;C:\WINDOWS\system32\8faC.sys [2007-11-13 13:23]
S3 9ba24;9ba24;C:\WINDOWS\system32\9ba24.sys []
S3 a0c1D;a0c1D;C:\WINDOWS\system32\a0c1D.sys []
S3 a1827;a1827;C:\WINDOWS\system32\a1827.sys []
S3 d3029;d3029;C:\WINDOWS\system32\d3029.sys []
S3 d9725;d9725;C:\WINDOWS\system32\d9725.sys []
S3 e5c1F;e5c1F;C:\WINDOWS\system32\e5c1F.sys []
S3 ebc28;ebc28;C:\WINDOWS\system32\ebc28.sys []
S3 PRISM;D-Link Air Wireless Prism3 Adapter Driver;C:\WINDOWS\system32\DRIVERS\PRISMNDS.sys [2003-09-19 14:00]
S3 samhid;samhid;C:\WINDOWS\system32\drivers\samhid.sys [2006-01-07 11:09]
S3 XDva016;XDva016;C:\WINDOWS\system32\XDva016.sys []
S3 ZuneWlanCfgSvc;Zune Wireless Configuration Service;C:\WINDOWS\system32\ZuneWlanCfgSvc.exe [2007-11-15 21:51]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
\Shell\AutoRun\command - D:\autoplay.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{51cfba30-9e04-11db-9e81-000d886d856c}]
\Shell\AutoRun\command - L:\LaunchU3.exe -a


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CAC7B150-B41B-B8F0-F160-F2F006DD303D}]
C:\WINDOWS\winsck.exe
.
Contents of the 'Scheduled Tasks' folder
"2007-06-03 02:12:40 C:\WINDOWS\Tasks\MP Scheduled Quick Scan.job"
- C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MpCmdRun.exe%Scan -RestrictPrivileges -ScanType 1
.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-01 09:17:52
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

C:\WINDOWS\HOSTS 1779 bytes

scan completed successfully
hidden files: 1

**************************************************************************
.
Completion time: 2008-01-01 9:28:10 - machine was rebooted
C:\qoobox\ComboFix-quarantined-files.txt 2008-01-01 17:28:01
.
2007-12-25 22:49:27 — E O F —

And I didn't think to save the results. Most of them came up as clean. A few of them had one flag. I ran second scans just to make sure and every time the second scan said it was clean. So…. Yeah. If you still want the results I'll rescan.
This might be a little useful. The Pkguard thing seems to hold the spam bot. I've noticed that when I hit those processes with the Task Manager the spam stops.
C:\Program Files\MSN\txsrvc.dll Clean. C:\Program Files\MSN\unicows.dll Clean. C:\WINDOWS\system32\Tools\All.exe MD5: ea8f34774f223d44ff60010e95750668 Date: 03.15.2007 22:36:28 (CET) [>292D] Results: 1/31 Permalink: analisis/df3284b776e4de14ad1593958e8968f1 C:\WINDOWS\system32\Tools\Change.exe MD5: 8cdf2d95be091bfbe3e70e15a01cb6a5 Date: 03.15.2007 22:48:06 (CET) [>292D] Results: 1/31 Permalink: analisis/329f86cc16baefba2cb0346cef22e1f0 C:\WINDOWS\system32\Tools\CheckPath.exe MD5: 51e72217e652de7d9a97091d33093f64 Date: 03.15.2007 22:36:26 (CET) [>292D] Results: 1/31 Permalink: analisis/fbe24ce447eff698cabc65f96e315476 C:\WINDOWS\system32\Tools\Counter.exe MD5: c5078cd92a36f5ee1bf3ec1464a21ea9 Date: 12.29.2007 16:51:29 (CET) [>3D] Results: 1/32 Permalink: analisis/f11be692735a83a52e7f94cfd85d782e C:\WINDOWS\system32\Tools\DelFolders.exe MD5: e0389d2a44cdf4fc8fddf874eaa45c71 Date: 03.15.2007 09:37:29 (CET) [>292D] Results: 1/31 Permalink: analisis/c2c25918f98192e05804547932f95dcc C:\WINDOWS\system32\Tools\DirectSetup.exe MD5: 606891892e40043ede2e417f37b88a35 Date: 03.15.2007 22:37:57 (CET) [>292D] Results: 1/31 Permalink: analisis/eb4b5d85e76472727b4b8053261f446d C:\WINDOWS\system32\Tools\RegClean.exe MD5: cd6bea943126703fd7320193c46e2e9e Date: 03.15.2007 22:37:56 (CET) [>292D] Results: 1/31 Permalink: analisis/f14ebe54cf7fe63f4b4a687c73553209 C:\WINDOWS\system32\Tools\Regexe.exe MD5: efca03be2f7e5202510a5f02ed8d49a6 Date: 03.15.2007 09:28:05 (CET) [>292D] Results: 1/31 Permalink: analisis/6ef7f24661219260e61ab885b746ecd8 C:\WINDOWS\system32\Tools\Restart.exe MD5: eb1b125ee5d2022cbf5e2f7226f47638 Date: 12.30.2007 17:55:10 (CET) [>2D] Results: 8/32 Permalink: analisis/a23e571179e380a19f4093de1c1343e6 C:\WINDOWS\system32\Tools\RunRegexe.exe MD5: 2d67db4122e79a7d0c6bc9dd9323dc0e Date: 02.21.2007 18:47:33 (CET) [>314D] Results: 1/30 Permalink: analisis/da669cabf9905dc07fce2574a4606ef7 I feel so… So dirty. How could I not catch these? For did One Care miss them?
Seriously… it doesn't look good. As I've warned earlier, you are infected by a backdoor and they open up your computer to a lot of infections.

Have you bought Windows Live OneCare and keep it up to date?

Please disable Windows Defender temporarily as it may interfere with the fixes.

  • Go to Start > All Programs > Windows Defender.
  • Click on Tools at the top.
  • Under Settings, click on Options.
  • Under Automatic scanning, uncheck (untick) Automatically scan my computer (recommended) box.
  • Under Real-time protection options, uncheck (untick) Use real-time protection (recommended) box.
  • Click on the Save button at the bottom right hand corner.
___________________

Please open Notepad and copy and paste the following in the Code box into Notepad:

http://forums.whatthetech.com/German_spam_bot_t86707.html

Collect::
C:\WINDOWS\system32\windurs.exe
C:\WINDOWS\shells.exe
C:\WINDOWS\system32\rock.exe
C:\WINDOWS\system32\pkguard32.exe
C:\meer.exe
C:\WINDOWS\wincap.exe
C:\mswinsck.ocx
C:\WINDOWS\windir.exe
C:\Window
C:\WINDOWS\ShowBmp.exe
C:\WINDOWS\ap561.exe
C:\WINDOWS\Tw561a.ini
C:\WINDOWS\Tw561a.src
C:\WINDOWS\Setup8a.ini
C:\WINDOWS\@@desktop.dat
C:\WINDOWS\winsck.exe
C:\WINDOWS\system32\Tools\All.exe
C:\WINDOWS\system32\Tools\Change.exe
C:\WINDOWS\system32\Tools\CheckPath.exe
C:\WINDOWS\system32\Tools\Counter.exe
C:\WINDOWS\system32\Tools\DelFolders.exe
C:\WINDOWS\system32\Tools\DirectSetup.exe
C:\WINDOWS\system32\Tools\RegClean.exe
C:\WINDOWS\system32\Tools\Regexe.exe
C:\WINDOWS\system32\Tools\Restart.exe
C:\WINDOWS\system32\Tools\RunRegexe.exe

Suspect::
C:\installer.exe
C:\WINDOWS\Setup1.exe
C:\WINDOWS\system32\8faC.sys
C:\WINDOWS\system32\drivers\samhid.sys

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PK Guard"=-
"WIndos Updater"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"WIndos Updater"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PK Guard"=-
"WIndos Updater"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"PK Guard"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\gcasServ]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\New.net Startup]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CAC7B150-B41B-B8F0-F160-F2F006DD303D}]

Driver::
40920
6ba1C
75321
78d1B
7b023
9ba24
a0c1D
a1827
d3029
d9725
e5c1F
ebc28
XDva016

File::
C:\WINDOWS\system32\40920.sys
C:\WINDOWS\system32\6ba1C.sys
C:\WINDOWS\system32\75321.sys
C:\WINDOWS\system32\78d1B.sys
C:\WINDOWS\system32\7b023.sys
C:\WINDOWS\system32\9ba24.sys
C:\WINDOWS\system32\a0c1D.sys
C:\WINDOWS\system32\a1827.sys
C:\WINDOWS\system32\d3029.sys
C:\WINDOWS\system32\d9725.sys
C:\WINDOWS\system32\e5c1F.sys
C:\WINDOWS\system32\ebc28.sys
C:\Program Files\MSN\txsrvc.dll
C:\Program Files\MSN\unicows.dll
C:\Documents and Settings\Dustin Duke\Maya 6 Keygen.exe

Rootkit::
C:\WINDOWS\HOSTS

Warning: The above script is just for DustinD. If you are not DustinD, do not use this script as it may damage the workings of your system.

Click on File > Save As….

In the File Name field, copy and paste in CFScript.txt. Do not change the file name.

Click Save.

Referring to the picture below, drag CFScript.txt into Combofix.

[external image: Posted Image]

Combofix will start running. When done, a log will be produced. Please post this log as well as a new HijackThis log in your next reply.

Do not mouse click on Combofix while it is running. That may cause it to stall.

In addition, Combofix will prompt you to upload some files to be analyzed.

First, you will see this:

[external image: Posted Image]

Click OK.

Internet Explorer will open.

Copy and paste the bolded file path at the bottom into the box next to the Browse button. It's the one boxed up in red.

[external image: Posted Image]
___________________

After submitting the files, please do the following:

Please download HostsXpert from Funkytoad and save it to your desktop.

  • Right click on HostsXpert.zip and select Extract All….
  • Click Next on seeing the Welcome to the Compressed (zipped) Folders Extraction Wizard.
  • Click on the Browse button. Click on Desktop. Then click OK.
  • Once done, check (tick) the Show extracted files box and click Finish.
  • Once extracted, HostsXpert folder will open.
  • Double click on HostsXpert.exe to start it.
  • On your left hand side, click on Restore MS Hosts File (see screenshot below, boxed up in red).

    [external image: Posted Image]
  • Exit HostsXpert.

In your next reply, please post:

  • Combofix log (C:\Combofix.txt)
  • A new HijackThis log
ComboFix 07-12-31.4 - Dustin Duke 2008-01-01 21:49:09.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.580 [GMT -8:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Dustin Duke\Desktop\CFScript.txt
* Created a new restore point

FILE
C:\Documents and Settings\Dustin Duke\Maya 6 Keygen.exe
C:\Program Files\MSN\txsrvc.dll
C:\Program Files\MSN\unicows.dll
C:\WINDOWS\system32\40920.sys
C:\WINDOWS\system32\6ba1C.sys
C:\WINDOWS\system32\75321.sys
C:\WINDOWS\system32\78d1B.sys
C:\WINDOWS\system32\7b023.sys
C:\WINDOWS\system32\9ba24.sys
C:\WINDOWS\system32\a0c1D.sys
C:\WINDOWS\system32\a1827.sys
C:\WINDOWS\system32\d3029.sys
C:\WINDOWS\system32\d9725.sys
C:\WINDOWS\system32\e5c1F.sys
C:\WINDOWS\system32\ebc28.sys
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Dustin Duke\Maya 6 Keygen.exe
C:\meer.exe
C:\mswinsck.ocx
C:\Program Files\MSN\txsrvc.dll
C:\Program Files\MSN\unicows.dll
C:\Window
C:\WINDOWS\@@desktop.dat
C:\WINDOWS\ap561.exe
C:\WINDOWS\hosts
C:\WINDOWS\Setup8a.ini
C:\WINDOWS\shells.exe
C:\WINDOWS\ShowBmp.exe
C:\WINDOWS\system32\pkguard32.exe
C:\WINDOWS\system32\rock.exe
C:\WINDOWS\system32\Tools\All.exe
C:\WINDOWS\system32\Tools\Change.exe
C:\WINDOWS\system32\Tools\CheckPath.exe
C:\WINDOWS\system32\Tools\Counter.exe
C:\WINDOWS\system32\Tools\DelFolders.exe
C:\WINDOWS\system32\Tools\DirectSetup.exe
C:\WINDOWS\system32\Tools\RegClean.exe
C:\WINDOWS\system32\Tools\Regexe.exe
C:\WINDOWS\system32\Tools\Restart.exe
C:\WINDOWS\system32\Tools\RunRegexe.exe
C:\WINDOWS\system32\windurs.exe
C:\WINDOWS\Tw561a.ini
C:\WINDOWS\Tw561a.src
C:\WINDOWS\wincap.exe
C:\WINDOWS\windir.exe
C:\WINDOWS\winsck.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
——-\LEGACY_40920
——-\LEGACY_6BA1C
——-\LEGACY_75321
——-\LEGACY_78D1B
——-\LEGACY_7B023
——-\LEGACY_9BA24
——-\LEGACY_A0C1D
——-\LEGACY_A1827
——-\LEGACY_D3029
——-\LEGACY_D9725
——-\LEGACY_E5C1F
——-\LEGACY_EBC28
——-\LEGACY_XDVA016
——-\40920
——-\6ba1C
——-\75321
——-\78d1B
——-\7b023
——-\9ba24
——-\a0c1D
——-\a1827
——-\d3029
——-\d9725
——-\e5c1F
——-\ebc28
——-\XDva016


((((((((((((((((((((((((( Files Created from 2007-12-02 to 2008-01-02 )))))))))))))))))))))))))))))))
.

2008-01-01 09:04 . 2000-08-31 08:00 51,200 –a—— C:\WINDOWS\NirCmd.exe
2007-12-30 10:23 . 2007-12-30 10:24 d——– C:\WINDOWS\ERUNT
2007-12-30 09:30 . 2007-12-30 09:30 d——– C:\Program Files\CCleaner
2007-12-26 15:57 . 2007-12-26 15:57 d——– C:\Documents and Settings\Dustin Duke\Application Data\PCF-VLC
2007-12-26 05:41 . 2007-12-26 05:41 81,920 –a—— C:\installer.exe
2007-12-25 10:18 . 2007-12-25 10:18 0 –ah—– C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2007-12-25 10:18 . 2007-12-25 10:18 0 –ah—– C:\WINDOWS\system32\drivers\Msft_Kernel_zumbus_01005.Wdf
2007-12-25 10:17 . 2007-12-25 10:20 d——– C:\Program Files\Zune
2007-12-25 10:14 . 2007-12-25 10:20 d——– C:\WINDOWS\system32\drivers\UMDF
2007-12-02 20:58 . 2007-12-02 20:58 d——– C:\Program Files\SpacialAudio
2007-12-02 20:58 . 2007-12-02 20:58 d——– C:\Program Files\Firebird
2007-12-02 20:58 . 2004-12-13 01:05 356,437 –a—— C:\WINDOWS\system32\GDS32.DLL
2007-12-02 17:34 . 2007-12-02 17:34 79 –a—— C:\WINDOWS\APOapp.INI
2007-12-02 17:32 . 2007-12-02 17:32 d——– C:\Photo2Album

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-02 04:39 ——— d—a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-01-02 04:36 ——— d—–w C:\Program Files\Furcadia
2008-01-02 03:15 ——— d—–w C:\Documents and Settings\Dustin Duke\Application Data\uTorrent
2008-01-02 01:45 ——— d—–w C:\Program Files\AIM
2008-01-01 21:46 ——— d—–w C:\Program Files\Warcraft III
2008-01-01 17:20 ——— d—–w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-01-01 06:45 ——— d—–w C:\Program Files\Microsoft Windows OneCare Live
2007-12-31 06:28 ——— d—–w C:\Program Files\SpywareBlaster
2007-12-19 21:26 ——— d-s—w C:\Program Files\Xfire
2007-12-13 00:24 ——— d–h–w C:\Program Files\InstallShield Installation Information
2007-12-11 00:29 ——— d—–w C:\Documents and Settings\Dustin Duke\Application Data\Xfire
2007-12-03 05:20 ——— d—–w C:\Program Files\Winamp
2007-12-02 00:50 ——— d—–w C:\Documents and Settings\Dustin Duke\Application Data\dvdcss
2007-11-27 06:22 ——— d—–w C:\Program Files\FurBot
2007-11-27 06:21 ——— d—–w C:\Program Files\Conquer 2.0
2007-11-27 06:19 ——— d—–w C:\Program Files\Common Files\Macromedia
2007-11-25 05:12 ——— d—–w C:\Program Files\Crime Nation
2007-11-24 05:28 ——— d—–w C:\Program Files\Project64 1.6
2007-11-21 08:58 ——— d—–w C:\Program Files\Ares
2007-11-20 19:09 104,320 —-a-w C:\WINDOWS\system32\drivers\Rtnicxp.sys
2007-11-16 05:38 40,832 —-a-w C:\WINDOWS\system32\drivers\zumbus.sys
2007-11-13 10:25 20,480 —-a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-11-12 21:27 ——— d—–w C:\Program Files\IGN
2007-11-12 21:27 ——— d—–w C:\Documents and Settings\Dustin Duke\Application Data\IGN_DLM
2007-11-12 21:04 ——— d—–w C:\Program Files\Browser Mouse
2007-11-12 17:29 ——— d—–w C:\Documents and Settings\Dustin Duke\Application Data\.purple
2007-11-12 06:35 ——— d—–w C:\Program Files\DiceMage
2007-11-09 09:24 ——— d—–w C:\Program Files\Pidgin
2007-11-09 09:24 ——— d—–w C:\Program Files\Aspell
2007-11-09 09:22 ——— d—–w C:\Program Files\Common Files\GTK
2007-11-09 07:29 ——— d—–w C:\Program Files\UnZixWin
2007-11-09 07:28 73,216 —-a-w C:\WINDOWS\ST6UNST.EXE
2007-11-09 07:28 249,856 ——w C:\WINDOWS\Setup1.exe
2007-11-03 01:56 ——— d—–w C:\Program Files\Game Elements
2007-04-26 23:25 122 —-a-w C:\Program Files\piconfig.lx
2006-11-25 04:16 8 —-a-w C:\Documents and Settings\Dustin Duke\Application Data\usb.dat.bin
2006-07-12 06:15 8 —-a-w C:\Documents and Settings\Dustin Duke\options.dat
2005-09-25 00:05 275 -c–a-w C:\Program Files\config.cfg
2003-08-05 19:41 53,248 —-a-w C:\WINDOWS\inf\ap561.exe
2002-11-27 00:24 32,768 —-a-w C:\WINDOWS\inf\Remove561.exe
2002-11-22 23:56 118,784 —-a-w C:\WINDOWS\inf\ShowBmp.exe
2002-10-30 02:07 36,864 —-a-w C:\WINDOWS\inf\Setup8a.exe
2002-10-01 22:43 119,798 —-a-w C:\WINDOWS\inf\spca561.sys
.

((((((((((((((((((((((((((((( snapshot@2008-01-01_ 9.27.32.11 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-01-02 05:57:48 16,384 —-atw C:\WINDOWS\Temp\Perflib_Perfdata_6f4.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATI Launchpad"="" []
"ares"="C:\Program Files\Ares\Ares.exe" [2007-07-16 13:54 961536]
"FreeRAM XP"="C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" [2006-03-22 23:13 1591808]
"Steam"="I:\Program Files\Steam\Steam.exe" [2007-12-02 15:53 1266936]
"Veoh"="I:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2007-12-03 13:21 3461120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Disk Monitor"="C:\Program Files\IC\Card Reader Driver v1.9e2\Disk_Monitor.exe" [2003-06-18 01:57 466944]
"NeroCheck"="C:\WINDOWS\System32\\NeroCheck.exe" [2001-07-09 02:50 155648]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-03 21:32 208952]
"IMEKRMIG6.1"="C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE" [2003-03-31 04:00 44032]
"RTHDCPL"="RTHDCPL.EXE" [2005-10-14 17:51 14864384 C:\WINDOWS\RTHDCPL.exe]
"WService"="WService.EXE" [2002-09-07 02:23 28672 C:\WINDOWS\system32\WService.exe]
"zBrowser Launcher"="C:\Program Files\Logitech\iTouch\iTouch.exe" [2003-12-01 10:38 892928]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 18:20 866584]
"Launch LCDMon"="C:\Program Files\Common Files\Logitech\LCD Manager\lcdmon.exe" [2006-11-09 12:45 549376]
"Launch LGDCore"="C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe" [2006-11-09 13:10 1126400]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-11-13 20:06 185896]
"OneCareUI"="C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe" [2007-10-01 08:53 66600]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 11:35 90112]
"UserFaultCheck"="C:\WINDOWS\system32\dumprep 0 -u" [ ]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-10-09 21:28 36352]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-06-28 21:21 282624]
"Zune Launcher"="C:\Program Files\Zune\ZuneLauncher.exe" [2007-11-15 21:51 166304]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2005-04-25 12:45 36040]

C:\Documents and Settings\Dustin Duke\Start Menu\Programs\Startup\
Spybot - Search & Destroy.lnk - C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe [2004-05-12 00:03:00]
Xfire.lnk - C:\Program Files\Xfire\Xfire.exe [2007-12-04 18:25:52]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\OneCareMP]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Utility Tray.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk
backup=C:\WINDOWS\pss\Utility Tray.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Dustin Duke^Start Menu^Programs^Startup^HOTLLAMA Update Check.lnk]
path=C:\Documents and Settings\Dustin Duke\Start Menu\Programs\Startup\HOTLLAMA Update Check.lnk
backup=C:\WINDOWS\pss\HOTLLAMA Update Check.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]
2004-11-30 21:10 344064 –a—— C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DownloadAccelerator]
C:\PROGRA~1\DAP\DAP.EXE /STARTUP

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2006-02-23 15:45 278528 –a—— C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SFP]
C:\Program Files\Common Files\Verizon Online\SFP\vzSFPWin.EXE /s

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
SOUNDMAN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2007-10-09 21:28 36352 –a—— C:\Program Files\Winamp\winampa.exe

R1 amdtools;AMD Special Tools Driver;C:\WINDOWS\system32\DRIVERS\amdtools.sys [2006-02-23 10:18]
R1 NPPTNT;NPPTNT;C:\WINDOWS\System32\npptNT.sys [2003-07-21 22:14]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe [2004-12-13 01:05]
R2 zumbus;Zune Bus Enumerator Driver;C:\WINDOWS\system32\DRIVERS\zumbus.sys [2007-11-15 21:38]
R2 ZuneBusEnum;Zune Bus Enumerator;C:\WINDOWS\system32\ZuneBusEnum.exe [2007-11-15 21:51]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe [2004-12-13 01:05]
S3 8faC;8faC;C:\WINDOWS\system32\8faC.sys [2007-11-13 13:23]
S3 PRISM;D-Link Air Wireless Prism3 Adapter Driver;C:\WINDOWS\system32\DRIVERS\PRISMNDS.sys [2003-09-19 14:00]
S3 samhid;samhid;C:\WINDOWS\system32\drivers\samhid.sys [2006-01-07 11:09]
S3 ZuneWlanCfgSvc;Zune Wireless Configuration Service;C:\WINDOWS\system32\ZuneWlanCfgSvc.exe [2007-11-15 21:51]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{51cfba30-9e04-11db-9e81-000d886d856c}]
\Shell\AutoRun\command - L:\LaunchU3.exe -a

*Newly Created Service* - GTNDIS5
.
Contents of the 'Scheduled Tasks' folder
"2007-06-03 02:12:40 C:\WINDOWS\Tasks\MP Scheduled Quick Scan.job"
- C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MpCmdRun.exe%Scan -RestrictPrivileges -ScanType 1
.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-01 21:59:29
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-01-01 22:09:03 - machine was rebooted [Dustin Duke]
C:\qoobox\ComboFix-quarantined-files.txt 2008-01-02 06:08:54
C:\qoobox\ComboFix2.txt 2008-01-01 17:28:11
.
2007-12-25 22:49:27 — E O F —


Logfile of HijackThis v1.99.1
Scan saved at 10:23:16 PM, on 1/1/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\DRIVERS\WtSrv.exe
C:\Program Files\Linksys Wireless-G PCI Network Adapter with SpeedBooster\WLService.exe
C:\Program Files\Linksys Wireless-G PCI Network Adapter with SpeedBooster\WMP54GSv1_1.exe
C:\WINDOWS\system32\ZuneBusEnum.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\IC\Card Reader Driver v1.9e2\Disk_Monitor.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\WService.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\Common Files\Logitech\LCD Manager\lcdmon.exe
C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Zune\ZuneLauncher.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe
C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe
C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe
C:\Program Files\Xfire\Xfire.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Dustin Duke\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?.home=ytie
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/?.home=ytie
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?.home=ytie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [Disk Monitor] C:\Program Files\IC\Card Reader Driver v1.9e2\Disk_Monitor.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [WService] WService.EXE
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Common Files\Logitech\LCD Manager\lcdmon.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zune Launcher] "C:\Program Files\Zune\ZuneLauncher.exe"
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [Steam] "I:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Veoh] "I:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - Startup: Spybot - Search & Destroy.lnk = C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - I:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - I:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://*.msjc.edu
O16 - DPF: {02ECD07A-22D0-4AF0-BA0A-3F6B06086D08} (GamesCampus Control) - http://www.gamescampus.com/xiah/luncher/GamesCampus.cab
O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowsonecare.com/install/cli/…nSSWebAgent.CAB
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1181489616640
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MySQL - Unknown owner - C:\AppServ\mysql\bin\mysqld-nt.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\system32\DRIVERS\WtSrv.exe
O23 - Service: WMP54GSSVC - Unknown owner - C:\Program Files\Linksys Wireless-G PCI Network Adapter with SpeedBooster\WLService.exe" "WMP54GSv1_1.exe (file missing)

I also uploaded the thing. And as for Updating One Care. I have it set to Auto-update once a day. It also checks for Windows updates at 6 AM each day.
Hi,

Now your logs look better. :)

Step 1

Open HijackThis and select Do a system scan only. Put a check (tick) next to this line:

O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)

Click Fix checked. Close HijackThis.

Step 2

  • Please download AVG Anti-Spyware and save it to your desktop.
  • Double click on avgas-setup-7.5.0.50.exe to install AVG Anti-Spyware. Install it in the default location.
  • Once installed, start AVG Anti-Spyware by going to Start > All Programs > AVG Anti-Spyware 7.5 > AVG Anti-Spyware.
  • In the main screen, you should see Your Computer's Security.
    • Next to Resident Shield, click on Change state. It should now be Inactive.
    • Next to Automatic Updates, click on Change state. It should now be Inactive.
    • Next to Last Update, click on Update now. If your firewall prompts you, tell your firewall to allow it. Should you be unable to update it, download the updates from here. Save it to your desktop. Double click to run the installation and the updates will be installed. Make sure AVG Anti-Spyware is closed during the installation.
    • Right-click the AVG Anti-Spyware icon near the clock and uncheck (untick) Start with Windows. Confirm by clicking Yes.
  • Now click on the Scanner button at the top.
  • Select the Settings tab.
  • Under How to act?, click on Recommended actions and select Quarantine.
  • Under How to scan?, check (tick) all the boxes.
  • Under Possibly unwanted software:, check (tick) all the boxes.
  • Under Reports:, uncheck (untick) the Only if threats were found box and select Do not automatically generate report.
  • Under What to scan?, select Scan every file.

Do not run a scan yet. You will run a scan later.

Step 3

  • Click on Start > All Programs > CCleaner > CCleaner.
  • On the Windows tab, leave the default options alone.
  • On the Applications tab, check (tick) all the boxes except Saved Form Information. This will remove all your saved passwords if you leave this box checked.
  • Click on the Run Cleaner button at the bottom right hand corner.
  • Close CCleaner.

Step 4

Please print out or save this set of instructions as you will not have internet access during the fix.

Reboot into Safe Mode by following the instructions below:

  • When you see BIOS screen, start pressing F8.
  • A boot menu will appear shortly.
  • Using the up down arrows, select Safe Mode and press the Enter key.
  • Windows will now load.
  • Log in to your usual account.

Step 5

  • Start AVG Anti-Spyware by going to Start > All Programs > AVG Anti-Spyware 7.5 > AVG Anti-Spyware.
  • Click on the Scanner button at the top.
  • Select the Scan tab.
  • Click on Complete System Scan to start the scan.
  • When the scan has finished, follow the instructions below.
    IMPORTANT: Don't click on the Save Scan Report button before you did hit the Apply all Actions button.
    • Make sure that Set all elements to: shows Quarantine (1), if not click on the link and choose Quarantine from the popup menu. (2)
    • At the bottom of the window click on the Apply all Actions button. (3)
      [external image: Posted Image]
  • When done, click the Save Scan Report button. (4)
    • Click the Save Report as button.
    • Save the report to your Desktop.
  • Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.

Restart your computer in Normal Mode.

In your next reply, please post:

  • AVG Antispyware scan report
  • A new HijackThis log

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI