OK…sorry for the delay. Unfortunately, a power failure and the fact that I must work for a living intervened.
I was running a first run of ComboFix when the power died.
I re-ran that at 4am this morning. Log file is below.
Then I ran ATF-Cleaner and Malwarebytes. Then I rebooted.
Then HijackThis. Thank you very much for your help!
Log files:
ComboFix 08-05-21.3 - Owner 2008-05-23 4:59:07.2 - NTFSx86
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\Owner\Application Data\HbTools
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\66855
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\669173
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\67226
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\67357
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\67464
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\67491
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\67506
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\67554
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\67564
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\67733
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\67821
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\67831
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\67918
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\67969
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\68016
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\68019
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\68021
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\68055
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\68076
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\68098
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\68148
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\68257
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\68370
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\68593
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\6873
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\68838
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\68870
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69031
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69045
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69054
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69076
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69111
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69118
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\6915
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69199
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69201
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69308
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69325
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69515
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69556
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69625
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69626
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69776
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69817
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\69940
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7004
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\70093
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\70181
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\70202
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\70259
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\703336
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\70342
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\70449
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\70611
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\70650
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\70692
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\70907
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\70973
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7122
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\71254
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\71340
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\71383
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\71497
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\71602
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\716588
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\71929
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\71999
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72001
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72010
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72031
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72072
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72123
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7220
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72333
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72341
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72748
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\727608
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72786
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72796
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72807
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72846
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72882
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72889
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\72912
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73119
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73174
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73391
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7341
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73415
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73458
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73484
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73506
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73560
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73561
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73576
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73664
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73670
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73722
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7376
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73814
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73840
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73846
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73922
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\73948
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\741292
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\741312
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\742099
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\742100
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\74263
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\74303
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\74398
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\74576
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\74798
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7482
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7492
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\75013
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\75045
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\75089
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\75119
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\75121
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7515
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7518
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7521
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\75296
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\75495
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\75607
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\75743
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\75746
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\75907
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\76113
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\76119
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\76125
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\76184
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7652
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7690
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\77461
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\77468
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\77494
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\78118
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\78220
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\78228
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\78245
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\78424
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\78443
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\78489
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\78592
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\78600
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\78778
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\78788
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7887
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7889
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7892
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7894
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79079
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79257
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79382
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\7946
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79580
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79596
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79674
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79683
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79805
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79824
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79973
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79977
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79987
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\79989
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\80026
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\80193
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\80309
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\80644
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\80657
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8067
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\80670
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\80689
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8081
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\80950
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\81010
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\81071
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\81293
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\81507
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\81529
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\81721
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\81736
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\81830
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\81995
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82011
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82139
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82180
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82244
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82278
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82279
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82292
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82511
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82557
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82646
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82647
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82652
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8271
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82723
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8282
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8290
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8306
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\83137
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\83209
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\83216
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\83226
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\83298
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\83634
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\83706
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\83723
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\83732
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\83743
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\83757
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\83783
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8401
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8443
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\84685
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\84753
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\84876
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\85062
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\85119
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8526
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\85365
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8544
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\85535
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\85547
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\85564
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\85588
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\85666
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\85699
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8577
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\85831
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\85854
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\85899
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86023
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86049
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86146
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86173
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86181
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8619
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86258
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86266
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86379
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86416
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86423
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86632
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86654
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\86993
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87185
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87191
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87215
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87385
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87439
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87483
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87499
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87555
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87584
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87594
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87726
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87825
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87881
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\87995
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\88533
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\88609
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\89075
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\89334
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\8941
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\89462
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\89658
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90008
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90009
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90149
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90163
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90311
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90358
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90375
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90383
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90763
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90781
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90826
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90833
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90835
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\90882
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\91096
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9114
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\91171
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\91207
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\91218
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\91224
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\91231
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\91238
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9146
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\91523
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\91589
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\916
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\91840
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\91986
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\92056
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\92061
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\92828
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\92886
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\92893
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\92930
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93025
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93110
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93113
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93192
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93286
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93295
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93438
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93544
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93568
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93575
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93598
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93857
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93899
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93921
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\93934
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\94125
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\94230
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\94303
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\94360
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\94407
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\94430
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9475
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\94844
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\94975
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\94990
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95052
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95194
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95291
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95325
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95363
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95367
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95411
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95422
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95610
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95645
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95678
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95701
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95704
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95714
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95740
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95774
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95779
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95801
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95803
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95825
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95828
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95849
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95862
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95873
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\95980
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9667
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9672
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\96913
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9695
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\96961
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9714
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\97426
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\97546
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\97623
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\97656
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9770
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\97734
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\97741
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9786
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\97964
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\98229
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\98248
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\98285
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\98351
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9836
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\98564
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\98677
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9875
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\98779
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\99008
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\99163
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\99507
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\99658
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9974
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\998
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\99871
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9991
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\dynamic\ustat\3406.dat
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\ads.cdf
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\btntrans.idx
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\btntrans1.dat
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\business_promo.htm
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\buttondir.txt
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\components.cdf
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_1000.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_2000.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_3000.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_bar.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_bbar1.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_logos.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_other.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_weather.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\default.cdf
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_511745-514279.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz1.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz10.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz11.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz12.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz13.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz14.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz15.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz16.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz17.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz18.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz19.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz2.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz20.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz3.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz4.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz5.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz6.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz7.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz8.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz9.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_categorize.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_comparison.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_explorer-Mails.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_explorer-people.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_favorites.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_Games.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_Hide.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_hotbarcom.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_Hotmail.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_hsskin.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_jemster.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_jemsterie.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_jemsteruk.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_jobsearch.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_Mails.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_new.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_premium.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_reun.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_ringtones.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_SearchBoxTrapper.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_searchfor.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_searchgo.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_weather.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Default_yellowpages.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\email-def-511724-548964.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\email-def-511724-9595.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\email-t1-bg.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\hotbar-premium-hotbar-premium.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\hotbar-premium.cdf
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\hotbar_promo.htm
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\icons2.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\keywords.idx
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\keywords1.dat
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\layout.cdf
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\linkpathlegal.txt
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\progress.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\s_icons_buttons.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\sales_buttons.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\t2_bg.res
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\theweb.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\top7.cdf
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\Top7_theweb.mnu
C:\Documents and Settings\Owner\Application Data\HbTools\v3.0\HbTools\static\2\tsd_bg.res
.
—- Previous Run ——-
.
C:\Program Files\ISM
C:\Program Files\ISM\ism.exe
C:\Program Files\ISM\Uninstall.exe
C:\WINDOWS\123messenger.per
C:\WINDOWS\b2new.exe
C:\WINDOWS\default.htm
C:\WINDOWS\didduid.ini
C:\WINDOWS\licencia.txt
C:\WINDOWS\mainms.vpi
C:\WINDOWS\megavid.cdt
C:\WINDOWS\muotr.so
C:\WINDOWS\promogif2.gif
C:\WINDOWS\promogif3.gif
C:\WINDOWS\pskt.ini
C:\WINDOWS\system32\adult.txt
C:\WINDOWS\system32\finance.txt
C:\WINDOWS\system32\lt.res
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\other.txt
C:\WINDOWS\system32\pharma.txt
C:\WINDOWS\telefonos.txt
C:\WINDOWS\textos.txt
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
——-\Legacy_MSSECURITY1.209.4
——-\Service_MsSecurity1.209.4
((((((((((((((((((((((((( Files Created from 2008-04-23 to 2008-05-23 )))))))))))))))))))))))))))))))
.
2008-05-22 21:17 . 2008-05-22 21:17 d——– C:\Documents and Settings\Administrator\Application Data\SUPERAntiSpyware.com
2008-05-22 18:25 . 2008-05-22 18:25 d——– C:\VundoFix Backups
2008-05-22 16:02 . 2008-05-22 16:02 d——– C:\Program Files\Trend Micro
2008-05-22 16:02 . 2008-05-22 16:02 d——– C:\Program Files\SUPERAntiSpyware
2008-05-22 16:02 . 2008-05-22 16:02 d——– C:\Documents and Settings\Owner\Application Data\SUPERAntiSpyware.com
2008-05-22 16:02 . 2008-05-22 16:02 d——– C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2008-05-21 21:51 . 2008-05-21 21:51 d——– C:\Documents and Settings\Administrator\Application Data\McAfee.com Personal Firewall
2008-05-21 21:14 . 2008-05-21 21:14 d——– C:\Program Files\VS Revo Group
2008-05-21 20:38 . 2004-08-27 05:54 d——– C:\Documents and Settings\Administrator\WINDOWS
2008-05-21 20:38 . 2005-07-29 08:27 d——– C:\Documents and Settings\Administrator\Application Data\You've Got Pictures Screensaver
2008-05-21 20:38 . 2005-07-29 08:25 d——– C:\Documents and Settings\Administrator\Application Data\SampleView
2008-05-21 20:38 . 2005-07-29 08:30 d——– C:\Documents and Settings\Administrator\Application Data\McAfee
2008-05-21 20:38 . 2005-08-08 11:38 d——– C:\Documents and Settings\Administrator\Application Data\CyberLink
2008-05-21 20:38 . 2008-05-21 21:47 d——– C:\Documents and Settings\Administrator\Application Data\AOL
2008-05-21 20:38 . 2008-05-21 20:38 d——– C:\Documents and Settings\Administrator
2008-05-21 20:34 . 2008-05-21 20:34 96,520 –a—— C:\WINDOWS\system32\drivers\avgldx86.sys
2008-05-21 20:34 . 2008-05-21 20:34 75,272 –a—— C:\WINDOWS\system32\drivers\avgtdix.sys
2008-05-21 20:34 . 2008-05-21 20:34 10,520 –a—— C:\WINDOWS\system32\avgrsstx.dll
2008-05-21 20:33 . 2008-05-21 20:33 d——– C:\WINDOWS\system32\drivers\Avg
2008-05-21 20:33 . 2008-05-21 20:33 d——– C:\Program Files\AVG
2008-05-21 20:33 . 2008-05-21 20:33 d——– C:\Documents and Settings\All Users\Application Data\avg8
2008-05-21 20:03 . 2008-05-21 20:03 d——– C:\Program Files\Lavasoft
2008-05-21 20:03 . 2008-05-21 20:03 d——– C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-05-21 20:02 . 2008-05-22 16:01 d——– C:\Program Files\Common Files\Wise Installation Wizard
2008-05-21 16:23 . 2008-05-21 16:23 d——– C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-05-21 16:22 . 2008-05-21 16:22 d——– C:\Program Files\Common Files\Roxio Shared
2008-05-21 16:22 . 2008-05-21 16:22 d——– C:\Program Files\Common Files\Adobe
2008-05-21 15:52 . 2008-05-21 15:52 d——– C:\Documents and Settings\All Users\Application Data\Comodo
2008-05-21 15:50 . 2005-10-30 18:10 211 –a—— C:\boot.ini.comodofirewall
2008-05-21 15:48 . 2008-05-21 15:49 d——– C:\Program Files\Comodo
2008-05-21 15:48 . 2008-05-21 15:48 d——– C:\Documents and Settings\All Users\Application Data\BOC425
2008-05-21 15:48 . 2004-08-04 15:00 22,528 –a—— C:\WINDOWS\system32\wsock32.dlb
2008-05-21 15:18 . 2008-05-21 20:35 d——– C:\Documents and Settings\LocalService\Application Data\AVGTOOLBAR
2008-05-21 15:18 . 2008-05-22 04:21 d——– C:\$AVG8.VAULT$
2008-05-21 15:17 . 2008-05-21 15:17 d——– C:\WINDOWS\system32\drivers\Avg(2)
2008-05-21 15:17 . 2008-05-21 16:22 d——– C:\Program Files\AVG(2)
2008-05-21 15:17 . 2008-05-22 04:13 d——– C:\Documents and Settings\Owner\Application Data\AVGTOOLBAR
2008-05-21 15:17 . 2008-05-21 16:22 d——– C:\Documents and Settings\All Users\Application Data\avg8(2)
2008-05-20 21:50 . 2008-05-20 21:50 1,169 –a—— C:\WINDOWS\mozver.dat
2008-05-10 06:53 . 2008-05-10 06:53 1,906 –a—— C:\WINDOWS\index.html
2008-05-10 06:53 . 2008-05-10 06:53 1,294 –a—— C:\WINDOWS\homepage.html
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-22 08:11 ——— d—–w C:\Documents and Settings\Owner\Application Data\Aim
2008-05-22 08:06 ——— d—–w C:\Program Files\McAfee.com
2008-05-22 01:54 ——— d—–w C:\Documents and Settings\All Users\Application Data\Viewpoint
2008-05-22 01:53 ——— d—–w C:\Program Files\Common Files\Real
2008-05-22 01:51 ——— d—–w C:\Documents and Settings\All Users\Application Data\McAfee.com
2008-05-22 01:48 ——— d—–w C:\Program Files\Common Files\AOL
2008-05-22 01:47 ——— d—–w C:\Documents and Settings\Owner\Application Data\AOL
2008-05-22 01:47 ——— d—–w C:\Documents and Settings\All Users\Application Data\AOL
2008-05-21 23:48 ——— d—–w C:\Program Files\Pure Networks
2008-05-21 20:22 ——— d—–w C:\Program Files\Napster
2008-05-21 20:22 ——— d—–w C:\Program Files\Common Files\InstallShield
2008-05-21 20:22 ——— d—–w C:\Documents and Settings\All Users\Application Data\Napster
2008-05-21 18:59 ——— d–h–w C:\Program Files\InstallShield Installation Information
2008-05-19 01:23 ——— d—–w C:\Documents and Settings\Owner\Application Data\LimeWire
2008-05-11 20:41 ——— d—–w C:\Documents and Settings\Owner\Application Data\U3
2008-05-07 15:43 30,734 —-a-w C:\Documents and Settings\Owner\Application Data\wklnhst.dat
2008-04-19 01:28 ——— d—–w C:\Program Files\Microsoft ActiveSync
2008-04-19 01:28 ——— d—–w C:\Program Files\Common Files\L&H
2008-04-19 01:27 ——— d—–w C:\Program Files\Microsoft.NET
2008-04-08 19:22 ——— d—–w C:\Program Files\QuickTime
2008-04-06 17:40 ——— d—–w C:\Documents and Settings\All Users\Application Data\AOL Downloads
2008-03-23 03:10 ——— d—–w C:\Program Files\Google
2007-03-10 11:45 32,352 —-a-w C:\Documents and Settings\Owner\Application Data\GDIPFONTCACHEV1.DAT
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8334A30C-49E5-489a-B63D-5B927C1EF46E}]
C:\Program Files\QdrDrive\QdrDrive15.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
2008-05-21 20:33 2050816 –a—— C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A352D40E-2264-4771-B1C9-9452D88D87D8}]
C:\WINDOWS\system32\khfDuTLD.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{c6eda351-1408-46af-9356-55c9e0c92584}]
C:\WINDOWS\system32\piuhdseq.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{A057A204-BACC-4D26-9990-79A187E2698E}"= "C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL" [2008-05-21 20:33 2050816]
[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
[HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{A057A204-BACC-4D26-9990-79A187E2698E}"= C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [2008-05-21 20:33 2050816]
[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
[HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 15:00 15360]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-05-13 12:43 1510640]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"="VTTimer.exe" [2005-03-08 06:33 53248 C:\WINDOWS\system32\VTTimer.exe]
"VTTrayp"="VTtrayp.exe" [2005-03-11 20:33 147456 C:\WINDOWS\system32\VTTrayp.exe]
"Recguard"="%WINDIR%\SMINST\RECGUARD.EXE" [ ]
"SoundMan"="SOUNDMAN.EXE" [2003-12-09 14:17 67584 C:\WINDOWS\SOUNDMAN.EXE]
"QuickTime Task"="C:\Program Files\QuickTime\bak\qttask.exe" [2005-11-13 11:59 155648]
"AAWTray"="C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe" [2007-08-08 15:53 88024]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-05-21 20:33 1177368]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-24 02:05:26 29696]
BigFix.lnk - C:\Program Files\BigFix\BigFix.exe [2005-07-29 08:15:03 1742384]
Kodak EasyShare software.lnk - C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe [2005-07-22 05:47:22 151552]
Kodak software updater.lnk - C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe [2004-02-13 16:12:08 16423]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 02:01:04 83360]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 10:13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\pmnkIAqP]
pmnkIAqP.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll
[HKLM\~\startupfolder\C:^Documents and Settings^Owner^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
path=C:\Documents and Settings\Owner\Start Menu\Programs\Startup\LimeWire On Startup.lnk
backup=C:\WINDOWS\pss\LimeWire On Startup.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\20299561]
C:\WINDOWS\system32\puwkbvoh.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOL Spyware Protection]
–a—— 2004-10-18 20:42 79448 C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BM231aa6fd]
C:\WINDOWS\system32\yyjkxhwp.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QdrModule16]
C:\Program Files\QdrModule\QdrModule16.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QdrPack16]
C:\Program Files\QdrPack\QdrPack16.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"PrismXL"=2 (0x2)
"MskService"=2 (0x2)
"MpfService"=2 (0x2)
"lanmanserver"=2 (0x2)
"dvpapi"=2 (0x2)
"Apple Mobile Device"=2 (0x2)
"AOL TopSpeedMonitor"=2 (0x2)
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Common Files\\AOL\\TopSpeed\\2.0\\aoltsmon.exe"=
"C:\\Program Files\\Common Files\\AOL\\TopSpeed\\2.0\\aoltpspd.exe"=
"C:\\Program Files\\Common Files\\AOL\\System Information\\sinf.exe"=
"C:\\Program Files\\Common Files\\AOL\\AOL Spyware Protection\\AOLSP Scheduler.exe"=
"C:\\Program Files\\Common Files\\AOL\\AOL Spyware Protection\\asp.exe"=
"C:\\Program Files\\Support.com\\bin\\tgcmd.exe"=
"C:\\Program Files\\Common Files\\AOL\\1122639952\\ee\\aolservicehost.exe"= C:\\Program Files\\Common Files\\AOL\\1122639952\\EE\\AOLServiceHost.exe
"C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
R0 PzWDM;PzWDM;C:\WINDOWS\system32\Drivers\PzWDM.sys [2007-12-28 18:32]
R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-05-21 20:34]
R1 sdcplh;sdcplh;C:\WINDOWS\system32\drivers\sdcplh.sys [2005-09-20 12:26]
R2 avg8emc;AVG8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-05-21 20:33]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-05-21 20:33]
R2 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-05-21 20:34]
S3 181d61c4-f2b0-41b1-adcc-716f7ceba753;181d61c4-f2b0-41b1-adcc-716f7ceba753;E:\CDS300\cds300.dll []
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{36db705f-3c72-11d8-a150-806d6172696f}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe folder.htt 480 480
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4021e6df-0a2a-11da-b762-806d6172696f}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe folder.htt 480 480
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{899de84e-a5be-11dc-868b-0040caa9f60e}]
\Shell\AutoRun\command - J:\LaunchU3.exe -a
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dcd886df-1ef9-11da-9a49-806d6172696f}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe folder.htt 480 480
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{deff3a65-0821-11da-8b7d-806d6172696f}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe folder.htt 480 480
.
Contents of the 'Scheduled Tasks' folder
"2008-05-05 20:18:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-05-23 05:14:49
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
———————— Other Running Processes ————————
.
C:\Program Files\BellSouth\BellSouth Internet Security\fws.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
.
**************************************************************************
.
Completion time: 2008-05-23 5:22:27 - machine was rebooted [Owner]
ComboFix-quarantined-files.txt 2008-05-23 09:22:18
Pre-Run: 141,022,306,304 bytes free
Post-Run: 143,445,340,160 bytes free
715 — E O F — 2008-02-19 08:09:30
================================================================================
===
Malwarebytes' Anti-Malware 1.12
Database version: 722
Scan type: Quick Scan
Objects scanned: 34902
Time elapsed: 6 minute(s), 6 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{66186f05-bbbb-4a39-864f-72d84615c679} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
===================================
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:07:43 PM, on 5/23/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\BellSouth\BellSouth Internet Security\fws.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file://c:/windows/homepage.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = file://c:/windows/homepage.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = file://c:/windows/homepage.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: McAfee Anti-Phishing Filter - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: StFlex IE Helper - {8334A30C-49E5-489a-B63D-5B927C1EF46E} - C:\Program Files\QdrDrive\QdrDrive15.dll (file missing)
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: (no name) - {A352D40E-2264-4771-B1C9-9452D88D87D8} - C:\WINDOWS\system32\khfDuTLD.dll (file missing)
O2 - BHO: {48529c0e-9c55-6539-fa64-8041153ade6c} - {c6eda351-1408-46af-9356-55c9e0c92584} - C:\WINDOWS\system32\piuhdseq.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\bak\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 2.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O9 - Extra 'Tools' menuitem: McAfee Anti-Phishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyGaming.Net\PartyPokerNet\RunPF.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyGaming.Net\PartyPokerNet\RunPF.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m…01/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m…,26/mcgdmgr.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) -
https://secure.logmein.com/activex/ractrl.cab?lmi=100
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: pmnkIAqP - pmnkIAqP.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Radialpoint Service (FWS) - Radialpoint Inc. - C:\Program Files\BellSouth\BellSouth Internet Security\fws.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O24 - Desktop Component 0: (no name) -
http://i9.tinypic.com/85lhk3m.jpg
–
End of file - 8222 bytes
