What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] major redirects and self installing spyware programs.

17 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
seems to be fine…. just everything is running very slowly……as we speak im typing then waiting for all letters to pop up. like my virtual memory is wrong or something is useing way to much ram.
Post #17 last edited
Ok so I think I have a problem still… I just got a system errr message telling me to save any files and shut down. or it was shutting down in 60secs. with a coutdown.

the reason im saying a problem is this is exactly what started happening before spyware gaurd 2008 started popping up.

it did it a cpl times then poof spyware gard was there.. gonna run another hijackthis log for ya….



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:43:08 AM, on 12/29/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe
C:\WINDOWS\vVX6000.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [ddoctorv2] "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
O4 - HKLM\..\Run: [VX6000] C:\WINDOWS\vVX6000.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: PowerReg Scheduler.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab
O16 - DPF: {42D06124-98A2-47EC-8098-3778B58CE7D5} (SupportSoft External Control) - http://connect.comcast.com/dl/Comcast%20Ac…%20Controls.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v5.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - http://zone.msn.com/binframework/v10/StProxy.cab55579.cab
O16 - DPF: {E93E9DF0-3E59-4331-A269-F1E077C66F00} (GameTap Web Plugin) - http://cnn-5.vo.llnwd.net/c1/static/client…er/gtplugin.cab
O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} (ChessControl Class) - http://zone.msn.com/bingame/zpagames/zpa_kqrp.cab56961.cab
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe

–
End of file - 6938 bytes
Post #18
Hi danielle69,

I go by the name of Trevuren and I will be helping you until mschroe919 is back on the job. The analysis of your different logs have brought us us to the conclusion that you have had multiple backdoor trojand and a rootkit on your system.

Hi

Identity Theft

It looks like you have been infected by a few Backdoor Trojans.

This allows hackers to remotely control your computer, steal critical system information and Download and Execute files

Its very possible that anything could have been installed on your computer by the remote attacker, including opening other backdoors and installing rootkits. While we can attempt to clean what we see in your logs, we cannot guarantee that your computer will be completely in the clear since we have no way of knowing that has been done to the computer. Your computer could be completely compromised at this moment. It may be prudent to backup your information, reformat, and reinstall.

More information on Remote Access Trojans can be found here.

I suggest you do the following immediately:
  • Call all of your banks, credit card companies, financial institutions and inform them that you may be a victim of identity theft and to put a watch on your accounts or change all your account numbers.
  • From a clean computer, change *all* your online passwords – for email, for banks, financial accounts, PayPal, eBay, online companies, any online forums or groups you belong to.
  • DO NOT change passwords or do any transactions while using the infected computer because the attacker will get the new passwords and transaction information.

If, however, you decide that the computer is not used for any sensitive work, or if you do not wish to reformat at this time, I can help you clean your computer to the best of my abilities. I must remind you that i cannot guarantee that your computer will be completely clean afterwards since we have no way of knowing what has been done to it.

To help you make your decision, here are a few related articles that i suggest you read:

  • Danger: Remote Access Trojans.
  • When should I re-format? How should I reinstall?
  • How Do I Handle Possible Identify Theft, Internet Fraud and Credit Card Fraud?

Should you have any questions, please feel free to ask.

Please let me know what you decide to do in your next post.
Post #19
My pc is mainly used for gaming. I have no transactions on this PC I had some pre paid credit cards used on here in the past but they are all non usable now. no banks and nothing I'm affraid to get out.( i have another PC that I can use if at anytime I need to do something.) So im going to just change passwords to everything. and what ever else u suggest me to do to fix my pc. I ve also downloaded and installed AVAST anti virus hope it helps a little. I'll be awaiting orders.
Post #20
A. Please download DirLook by jpshortstuff from here.
  • Double-click DirLook.exe to run it.
  • Ensure that Show Hidden Files/Folders and BBCode Ouput are both checked.
  • Copy the content of the following codebox into the main textfield:

    c:\documents and settings\Danni-Doug\Application Data\
  • Click the DirLook button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply. (Note: The log can also be found at C:\dl_log.txt)
Note: Scanning may take longer for large folders.


B. 1. Please open Notepad
  • Click Start , then Run
  • Type notepad .exe in the Run Box.
2. Now copy/paste the entire content of the codebox below into the Notepad window:

KillAll::

Files::
c:\windows\system32\drivers\iypsvl.sys
c:\documents and settings\Doug\Application Data\twext.exe
c:\documents and settings\Guest\Application Data\twext.exe
C:\uyrte.exe
C:\elbff.exe
c:\windows\system32\drivers\ff31df41.sys
c:\windows\arixabokogike.dll
c:\windows\ugupevog.dll
c:\windows\system32\drivers\etdfsvapi33.sys
C:\-1273023007
c:\documents and settings\Danni-Doug\Start Menu\Programs\Startup\PowerReg Scheduler.exe 
c:\windows\system32\drivers\e61xfmd3ppu.sys
c:\windows\system32\DRIVERS\mamotou.sys
c:\windows\Tasks\AAD8435891A3F79C.job

Folders::
c:\Program Files\PokerStars
C:\found.000

DirLook::
C:\61c22c20cbe8fe9ff137
c:\windows\ie8updates

Drivers::
etdfsvapi33.sys
ff31df41
e61xfmd3ppu.sys
mamotou

Registry::
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\e61xfmd3ppu.sys]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\etdfsvapi33.sys]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com"
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{F773E7B2-62A9-4524-9109-87D2F0BEFAA4}]
[-HKEY_CLASSES_ROOT\CLSID\{F773E7B2-62A9-4524-9109-87D2F0BEFAA4}]
Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Save the above as CFScript.txt

4. Now drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again. Do not use your computer for any other purpose while ComboFix is running.

5. All your monitoring programs (Antivirus/Antispyware, Guards and Shields) will be stopped.

[external image: Posted Image]

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.

6. ComboFix will automatically REBOOT your machine when the KillAll:: switch is used..

7. Post the following logs/Reports:
  • ComboFix.txt
  • Fresh HijackThis log run after all the other tools have performed their cleanup.
CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.


C. Using Internet Explorer, please do a Kaspersky Online Scan

Answer Yes, when prompted to install an ActiveX component.
  • The program will then begin downloading the latest definition files.
  • Once the files have been downloaded click on NEXT
  • Locate the Scan Settings button & configure as follows:
    • Scan using the following Anti-Virus database:
      • Extended
    • Scan Options:
      • Scan Archives
      • Scan Mail Bases
  • Click OK & have it scan My Computer
  • Once the scan is complete, it will provide a report if your system is infected. It does not provide an option to clean/disinfect. We only require a report from it.

    [external image: Posted Image]

  • Click the Save as Text button to save the file to your desktop and post it in your next reply along with a fresh HijackThis log.
* Turn off the real time scanner of any existing antivirus program while performing the online scan
Post #21
here is my dirlog report u asked for………………………………………


DirLook.exe v2.0 by jpshortstuff
Log created at 04:07 on 30/12/2008
==================================
Contents of "c:\documents and settings\Danni-Doug\Application Data\"

No files/folders found.

==================================
=EOF=




ok here is my combo log………………….

ComboFix 08-12-28.01 - Danni-Doug 2008-12-30 4:19:03.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.661 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: C:\CFScript.txt
AV: avast! antivirus 4.8.1296 [VPS 081229-0] *On-access scanning disabled* (Updated)
* Created a new restore point
.

((((((((((((((((((((((((( Files Created from 2008-11-28 to 2008-12-30 )))))))))))))))))))))))))))))))
.

2008-12-29 07:12 . 2008-12-29 07:12 d——– c:\program files\Alwil Software
2008-12-28 18:43 . 2008-12-28 18:45 d——– c:\documents and settings\Danni-Doug\.SunDownloadManager
2008-12-28 18:30 . 2008-12-28 18:30 d——– C:\61c22c20cbe8fe9ff137
2008-12-28 07:44 . 2008-12-28 07:44 d——– c:\documents and settings\Danni-Doug\Application Data\Malwarebytes
2008-12-28 07:41 . 2008-12-28 07:44 d——– c:\program files\detriot pistons
2008-12-28 07:41 . 2008-12-28 07:41 d——– c:\documents and settings\All Users\Application Data\Malwarebytes
2008-12-28 07:41 . 2008-12-03 19:52 38,496 –a—— c:\windows\system32\drivers\mbamswissarmy.sys
2008-12-28 07:41 . 2008-12-03 19:52 15,504 –a—— c:\windows\system32\drivers\mbam.sys
2008-12-27 02:49 . 2008-12-27 02:49 61,440 –a—— c:\windows\system32\drivers\iypsvl.sys
2008-12-27 02:35 . 2008-12-27 02:37 d——– c:\program files\Windows Live Safety Center
2008-12-25 23:34 . 2008-12-25 23:34 d——– c:\documents and settings\Guest\Application Data\Skinux
2008-12-25 23:34 . 2008-12-25 23:35 d——– c:\documents and settings\Guest\Application Data\ArcSoft
2008-12-25 23:26 . 2008-12-25 23:26 d——– c:\documents and settings\Doug\Application Data\Skinux
2008-12-25 23:26 . 2008-12-25 23:27 d——– c:\documents and settings\Doug\Application Data\ArcSoft
2008-12-25 23:26 . 2008-12-25 23:26 d——– c:\documents and settings\Doug
2008-12-25 20:04 . 2008-12-25 20:04 d——– c:\program files\Trend Micro
2008-12-25 20:04 . 2008-12-27 03:43 d——– c:\documents and settings\All Users\Application Data\CrucialSoft Ltd
2008-12-25 20:04 . 2008-12-25 20:04 44,032 –a—— C:\tnpqvcdm.exe
2008-12-25 20:04 . 2008-12-25 20:04 2 –a—— C:\-1273023007
2008-12-25 20:04 . 2008-12-26 22:01 0 –a—— c:\windows\system32\drivers\ff31df41.sys
2008-12-23 02:49 . 2008-12-23 02:49 4,648 –a—— c:\windows\arixabokogike.dll
2008-12-23 02:46 . 2008-12-23 02:46 4,648 –a—— c:\windows\ugupevog.dll
2008-12-18 06:27 . 2008-12-23 06:02 d——– c:\windows\ie8updates
2008-12-17 17:40 . 2008-12-17 17:40 410,984 –a—— c:\windows\system32\deploytk.dll
2008-11-28 21:24 . 2008-11-28 23:09 d——– c:\program files\Common Files\eSellerate
2008-11-28 21:14 . 2008-11-28 21:14 d——– c:\program files\YSFLIGHT.COM
2008-11-28 20:55 . 2008-11-28 20:55 d——– c:\documents and settings\Danni-Doug\Application Data\flightgear.org
2008-11-28 20:53 . 2008-11-28 23:11 d——– c:\program files\FlightGear
2008-11-28 02:21 . 2008-11-28 02:21 d——– c:\program files\Windows Media Connect 2
2008-11-28 02:20 . 2008-11-28 02:20 d——– c:\windows\system32\LogFiles
2008-11-28 02:20 . 2008-11-28 02:20 d——– c:\windows\system32\drivers\UMDF
2008-11-24 02:22 . 2008-11-24 02:22 0 –ah—– c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2008-11-24 02:22 . 2008-11-24 02:22 0 –ah—– c:\windows\system32\drivers\Msft_Kernel_motmodem_01005.Wdf
2008-11-24 02:21 . 2008-11-24 02:21 d——– c:\program files\Common Files\Motorola Shared
2008-11-24 02:21 . 2008-11-24 02:21 0 –a—— c:\windows\PanelExe.INI
2008-11-24 02:08 . 2008-11-24 02:08 0 –a—— c:\windows\PhoneBkExe.INI
2008-11-24 02:08 . 2008-11-24 02:08 0 –a—— c:\windows\FileMgrExe.INI
2008-11-24 02:01 . 2008-11-24 02:01 0 –a—— c:\windows\AlbumExe.INI
2008-11-24 01:50 . 2006-12-28 18:17 50,275 –a—— c:\windows\system32\drivers\NEXTELU.sys
2008-11-24 01:50 . 2005-08-18 11:44 49,867 –a—— c:\windows\system32\drivers\mardp2k.sys
2008-11-24 01:50 . 2006-12-25 14:32 49,489 –a—— c:\windows\system32\drivers\mamotou.sys
2008-11-24 01:50 . 2005-08-18 11:44 49,484 –a—— c:\windows\system32\drivers\mardpnp.sys
2008-11-24 01:50 . 2004-12-16 16:55 25,055 –a—— c:\windows\system32\drivers\NEXTELC.sys
2008-11-24 01:50 . 2005-08-18 11:44 24,789 –a—— c:\windows\system32\drivers\MaVctrl.sys
2008-11-24 01:50 . 2005-08-18 11:44 11,473 –a—— c:\windows\system32\drivers\MaVc2K.sys
2008-11-24 01:49 . 2008-11-24 01:49 d——– c:\windows\Application Data
2008-11-24 01:19 . 2008-12-24 02:41 d——– c:\documents and settings\All Users\Application Data\BVRP Software
2008-11-11 14:00 . 2008-09-04 12:15 1,106,944 —–c— c:\windows\system32\dllcache\msxml3.dll
2008-11-11 14:00 . 2008-10-24 06:21 455,296 —–c— c:\windows\system32\dllcache\mrxsmb.sys
2008-11-09 12:34 . 2008-11-09 12:34 d——– c:\documents and settings\Danni-Doug\Application Data\KodakCredentialStore
2008-11-08 22:14 . 2008-11-08 22:14 d——– c:\documents and settings\Danni-Doug\Application Data\ArcSoft
2008-11-08 22:14 . 2008-11-08 22:14 d——– c:\documents and settings\All Users\Application Data\ArcSoft
2008-11-08 22:13 . 2008-11-08 22:14 d——– c:\program files\Common Files\ArcSoft
2008-11-08 22:13 . 2008-11-08 22:13 d——– c:\program files\ArcSoft
2008-11-08 22:09 . 2008-05-02 08:25 465,920 ——— c:\windows\system32\imapi2fs.dll
2008-11-08 22:09 . 2008-05-02 08:25 465,920 —–c— c:\windows\system32\dllcache\imapi2fs.dll
2008-11-08 22:09 . 2008-05-02 08:25 317,952 ——— c:\windows\system32\imapi2.dll
2008-11-08 22:09 . 2008-05-02 08:25 317,952 —–c— c:\windows\system32\dllcache\imapi2.dll
2008-11-08 22:09 . 2008-05-02 05:49 62,976 —–c— c:\windows\system32\dllcache\cdrom.sys
2008-11-08 22:00 . 2008-11-08 22:00 d——– c:\documents and settings\Danni-Doug\Application Data\Skinux
2008-11-08 21:58 . 2008-11-08 22:10 d——– c:\program files\Common Files\Kodak
2008-11-08 21:55 . 2008-11-08 22:00 d——– c:\program files\Kodak
2008-11-08 21:53 . 2008-11-08 22:00 d——– c:\documents and settings\All Users\Application Data\Kodak
2008-11-03 22:27 . 2008-11-03 22:28 d——– c:\documents and settings\All Users\Application Data\Apple Computer
2008-11-03 22:26 . 2008-12-24 02:44 d—-c— c:\windows\system32\DRVSTORE
2008-11-03 22:17 . 2008-12-24 02:37 d——– c:\program files\Blubster
2008-11-03 22:17 . 2008-11-03 22:17 0 –ah-c— c:\windows\SwSys2.bmp
2008-11-03 22:17 . 2008-11-03 22:17 0 –ah-c— c:\windows\SwSys1.bmp
2008-11-03 22:04 . 2008-11-03 22:04 0 –a—— C:\testwma.raw
2008-11-03 21:59 . 2008-09-25 08:20 483,328 –a—— c:\windows\system32\actskn45.ocx

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-29 14:03 79,872 —-a-w c:\windows\system32\drivers\etdfsvapi33.sys
2008-12-29 11:27 ——— d—–w c:\program files\Java
2008-12-28 12:20 ——— d—–w c:\program files\PokerStars
2008-12-26 04:07 ——— d—–w c:\program files\Teamspeak2_RC2
2008-12-24 07:58 ——— d—–w c:\program files\Microsoft LifeCam
2008-12-24 07:44 ——— d—–w c:\program files\iTunes
2008-12-24 07:44 ——— d—–w c:\program files\iPod
2008-12-24 07:41 ——— d–h–w c:\program files\InstallShield Installation Information
2008-12-24 07:39 ——— d—–w c:\program files\Bonjour
2008-12-10 18:00 ——— d—–w c:\program files\Lx_cats
2008-11-04 03:28 ——— d—–w c:\program files\QuickTime
2008-09-28 19:29 24 -c–a-w c:\documents and settings\Danni-Doug\jagex_runescape_preferences.dat
2008-05-21 00:56 32,768 -csha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008052020080521\index.dat
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.

—- Directory of C:\61c22c20cbe8fe9ff137 —-

2008-12-28 18:30 788 –ah—– c:\61c22c20cbe8fe9ff137\$shtdwn$.req
2007-11-07 16:32 63488 –a—— c:\61c22c20cbe8fe9ff137\vs_setup.msi
2007-11-07 16:26 982008 –a—— c:\61c22c20cbe8fe9ff137\WapUI.dll
2007-11-07 16:26 97280 –a—— c:\61c22c20cbe8fe9ff137\DeleteTemp.exe
2007-11-07 16:26 96768 –a—— c:\61c22c20cbe8fe9ff137\setupres.1041.dll
2007-11-07 16:26 95736 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1041.dll
2007-11-07 16:26 93696 –a—— c:\61c22c20cbe8fe9ff137\setupres.1042.dll
2007-11-07 16:26 92664 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1042.dll
2007-11-07 16:26 90104 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1028.dll
2007-11-07 16:26 89080 –a—— c:\61c22c20cbe8fe9ff137\WapRes.2052.dll
2007-11-07 16:26 84992 –a—— c:\61c22c20cbe8fe9ff137\setupres.1028.dll
2007-11-07 16:26 83456 –a—— c:\61c22c20cbe8fe9ff137\setupres.2052.dll
2007-11-07 16:26 687104 –a—— c:\61c22c20cbe8fe9ff137\VSScenario.dll
2007-11-07 16:26 627712 –a—— c:\61c22c20cbe8fe9ff137\VS70UIMgr.dll
2007-11-07 16:26 411136 –a—— c:\61c22c20cbe8fe9ff137\VSBaseReqs.dll
2007-11-07 16:26 276472 –a—— c:\61c22c20cbe8fe9ff137\dlmgr.dll
2007-11-07 16:26 269304 –a—— c:\61c22c20cbe8fe9ff137\Setup.EXE
2007-11-07 16:26 177152 –a—— c:\61c22c20cbe8fe9ff137\HtmlLite.dll
2007-11-07 16:26 1361920 –a—— c:\61c22c20cbe8fe9ff137\SitSetup.DLL
2007-11-07 16:26 136192 –a—— c:\61c22c20cbe8fe9ff137\setupres.1032.dll
2007-11-07 16:26 132096 –a—— c:\61c22c20cbe8fe9ff137\setupres.1036.dll
2007-11-07 16:26 131072 –a—— c:\61c22c20cbe8fe9ff137\setupres.1038.dll
2007-11-07 16:26 130560 –a—— c:\61c22c20cbe8fe9ff137\setupres.3082.dll
2007-11-07 16:26 130048 –a—— c:\61c22c20cbe8fe9ff137\setupres.2070.dll
2007-11-07 16:26 129536 –a—— c:\61c22c20cbe8fe9ff137\setupres.1031.dll
2007-11-07 16:26 127488 –a—— c:\61c22c20cbe8fe9ff137\setupres.1043.dll
2007-11-07 16:26 127488 –a—— c:\61c22c20cbe8fe9ff137\setupres.1040.dll
2007-11-07 16:26 126976 –a—— c:\61c22c20cbe8fe9ff137\setupres.1045.dll
2007-11-07 16:26 125440 –a—— c:\61c22c20cbe8fe9ff137\setupres.1030.dll
2007-11-07 16:26 124416 –a—— c:\61c22c20cbe8fe9ff137\setupres.1029.dll
2007-11-07 16:26 122368 –a—— c:\61c22c20cbe8fe9ff137\setupres.1049.dll
2007-11-07 16:26 121856 –a—— c:\61c22c20cbe8fe9ff137\setupres.1046.dll
2007-11-07 16:26 120832 –a—— c:\61c22c20cbe8fe9ff137\setupres.1035.dll
2007-11-07 16:26 120320 –a—— c:\61c22c20cbe8fe9ff137\setupres.1053.dll
2007-11-07 16:26 120320 –a—— c:\61c22c20cbe8fe9ff137\setupres.1044.dll
2007-11-07 16:26 119808 –a—— c:\61c22c20cbe8fe9ff137\setupres.1055.dll
2007-11-07 16:26 113656 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1032.dll
2007-11-07 16:26 112128 –a—— c:\61c22c20cbe8fe9ff137\setupres.1025.dll
2007-11-07 16:26 112120 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1036.dll
2007-11-07 16:26 111608 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1031.dll
2007-11-07 16:26 111096 –a—— c:\61c22c20cbe8fe9ff137\WapRes.3082.dll
2007-11-07 16:26 111096 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1038.dll
2007-11-07 16:26 110080 –a—— c:\61c22c20cbe8fe9ff137\setupres.1037.dll
2007-11-07 16:26 110072 –a—— c:\61c22c20cbe8fe9ff137\WapRes.2070.dll
2007-11-07 16:26 110072 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1040.dll
2007-11-07 16:26 109568 –a—— c:\61c22c20cbe8fe9ff137\setupres.dll
2007-11-07 16:26 109048 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1045.dll
2007-11-07 16:26 108536 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1043.dll
2007-11-07 16:26 108536 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1030.dll
2007-11-07 16:26 108536 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1029.dll
2007-11-07 16:26 107512 –a—— c:\61c22c20cbe8fe9ff137\WapRes.dll
2007-11-07 16:26 107512 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1046.dll
2007-11-07 16:26 107000 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1049.dll
2007-11-07 16:26 106488 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1055.dll
2007-11-07 16:26 106488 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1044.dll
2007-11-07 16:26 106488 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1035.dll
2007-11-07 16:26 105976 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1053.dll
2007-11-07 16:26 1059328 –a—— c:\61c22c20cbe8fe9ff137\GenComp.dll
2007-11-07 16:26 1045504 –a—— c:\61c22c20cbe8fe9ff137\VS_Setup.dll
2007-11-07 16:26 102904 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1025.dll
2007-11-07 16:26 101368 –a—— c:\61c22c20cbe8fe9ff137\WapRes.1037.dll
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.3082.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.2070.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.2052.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1055.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1053.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1049.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1046.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1045.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1044.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1043.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1042.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1041.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1040.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1038.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1037.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1036.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1035.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1032.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1031.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1030.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1029.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1028.ini
2007-11-07 16:21 1178 –a—— c:\61c22c20cbe8fe9ff137\locdata.1025.ini
2007-11-07 16:20 9452 –a—— c:\61c22c20cbe8fe9ff137\EULA.1037.RTF
2007-11-07 16:20 792 –a—— c:\61c22c20cbe8fe9ff137\DefFactory.DAT
2007-11-07 16:20 7650 –a—— c:\61c22c20cbe8fe9ff137\EULA.1028.RTF
2007-11-07 16:20 7222 –a—— c:\61c22c20cbe8fe9ff137\EULA.2052.RTF
2007-11-07 16:20 5584 –a—— c:\61c22c20cbe8fe9ff137\EULA.1038.RTF
2007-11-07 16:20 5208 –a—— c:\61c22c20cbe8fe9ff137\logo.bmp
2007-11-07 16:20 5151 –a—— c:\61c22c20cbe8fe9ff137\EULA.1045.RTF
2007-11-07 16:20 5127 –a—— c:\61c22c20cbe8fe9ff137\EULA.1029.RTF
2007-11-07 16:20 4916 –a—— c:\61c22c20cbe8fe9ff137\EULA.1055.RTF
2007-11-07 16:20 4733 –a—— c:\61c22c20cbe8fe9ff137\EULA.2070.RTF
2007-11-07 16:20 4731 –a—— c:\61c22c20cbe8fe9ff137\EULA.1036.RTF
2007-11-07 16:20 4708 –a—— c:\61c22c20cbe8fe9ff137\EULA.1040.RTF
2007-11-07 16:20 4676 –a—— c:\61c22c20cbe8fe9ff137\EULA.3082.RTF
2007-11-07 16:20 4669 –a—— c:\61c22c20cbe8fe9ff137\EULA.1031.RTF
2007-11-07 16:20 4657 –a—— c:\61c22c20cbe8fe9ff137\EULA.1046.RTF
2007-11-07 16:20 4402 –a—— c:\61c22c20cbe8fe9ff137\EULA.1035.RTF
2007-11-07 16:20 4355 –a—— c:\61c22c20cbe8fe9ff137\EULA.1043.RTF
2007-11-07 16:20 4164 –a—— c:\61c22c20cbe8fe9ff137\EULA.1030.RTF
2007-11-07 16:20 4127 –a—— c:\61c22c20cbe8fe9ff137\EULA.1053.RTF
2007-11-07 16:20 3968 –a—— c:\61c22c20cbe8fe9ff137\EULA.1044.RTF
2007-11-07 16:20 3784 –a—— c:\61c22c20cbe8fe9ff137\EULA.1033.RTF
2007-11-07 16:20 24298 –a—— c:\61c22c20cbe8fe9ff137\Setup.SDB
2007-11-07 16:20 15970 –a—— c:\61c22c20cbe8fe9ff137\BaseLine.DAT
2007-11-07 16:20 15036 –a—— c:\61c22c20cbe8fe9ff137\EULA.1049.RTF
2007-11-07 16:20 14453 –a—— c:\61c22c20cbe8fe9ff137\EULA.1032.RTF
2007-11-07 16:20 1438 –a—— c:\61c22c20cbe8fe9ff137\VS_Setup.PDI
2007-11-07 16:20 13170 –a—— c:\61c22c20cbe8fe9ff137\EULA.1041.RTF
2007-11-07 16:20 1178 –a—— c:\61c22c20cbe8fe9ff137\LocData.INI
2007-11-07 16:20 11126 –a—— c:\61c22c20cbe8fe9ff137\EULA.1025.RTF
2007-11-07 16:20 10040 –a—— c:\61c22c20cbe8fe9ff137\EULA.1042.RTF
2007-11-07 15:12 2533376 –a—— c:\61c22c20cbe8fe9ff137\wcu\dotNetFramework\dotNetFX20\winforms.msp
2007-11-07 15:07 999936 –a—— c:\61c22c20cbe8fe9ff137\wcu\dotNetFramework\dotNetFX20\prexp.msp
2007-11-07 15:02 6473216 –a—— c:\61c22c20cbe8fe9ff137\wcu\dotNetFramework\dotNetFX20\NetFX_Other.msp
2007-11-07 15:00 3407360 –a—— c:\61c22c20cbe8fe9ff137\wcu\dotNetFramework\dotNetFX20\NetFX_Core.msp
2007-11-07 14:58 908800 –a—— c:\61c22c20cbe8fe9ff137\wcu\dotNetFramework\dotNetFX20\NetFX_CA.msp
2007-11-07 14:56 553472 –a—— c:\61c22c20cbe8fe9ff137\wcu\dotNetFramework\dotNetFX20\dw.msp
2007-11-07 14:54 507392 –a—— c:\61c22c20cbe8fe9ff137\wcu\dotNetFramework\dotNetFX20\crt.msp
2007-11-07 14:50 6055936 –a—— c:\61c22c20cbe8fe9ff137\wcu\dotNetFramework\dotNetFX20\clr.msp
2007-11-07 14:46 3010560 –a—— c:\61c22c20cbe8fe9ff137\wcu\dotNetFramework\dotNetFX20\ASPNET.msp
2007-11-07 14:43 91136 –a—— c:\61c22c20cbe8fe9ff137\wcu\dotNetFramework\dotNetFX20\Netfx20a_x86.msi

—- Directory of c:\windows\ie8updates —-



((((((((((((((((((((((((((((( snapshot@2008-12-28_21.23.45.29 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-12-28 23:34:35 69,120 —-a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2008-12-29 11:08:30 69,120 —-a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2008-12-28 23:34:48 72,192 —-a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2008-12-29 11:08:36 72,192 —-a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2008-12-28 23:34:01 4,444,160 —-a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2008-12-29 11:08:15 4,444,160 —-a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2008-12-28 23:34:53 483,840 —-a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2008-12-29 11:08:38 483,840 —-a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2008-12-28 23:34:21 3,036,160 —-a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2008-12-29 11:08:22 3,036,160 —-a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2008-12-29 11:08:41 258,048 —-a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2008-12-29 11:08:41 113,664 —-a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2008-12-28 23:34:49 261,120 —-a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2008-12-29 11:08:37 261,120 —-a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2008-12-28 23:34:17 5,431,296 —-a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2008-12-29 11:08:19 5,431,296 —-a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2008-12-28 23:34:30 10,752 —-a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2008-12-29 11:08:27 10,752 —-a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2008-12-28 23:34:19 507,904 —-a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2008-12-29 11:08:20 507,904 —-a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2008-12-28 23:34:34 13,312 —-a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2008-12-29 11:08:30 13,312 —-a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2008-12-28 23:34:40 8,192 —-a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2008-12-29 11:08:33 8,192 —-a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2008-12-28 23:34:43 77,824 —-a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2008-12-29 11:08:34 77,824 —-a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2008-12-28 23:34:44 6,656 —-a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2008-12-29 11:08:34 6,656 —-a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2008-11-09 02:56:38 413,696 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2008-12-29 11:08:42 348,160 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2008-11-09 02:56:38 36,864 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2008-12-29 11:08:42 36,864 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2008-11-09 02:56:38 647,168 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2008-12-29 11:08:43 655,360 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2008-11-09 02:56:39 73,728 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2008-12-29 11:08:44 77,824 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2008-12-28 23:34:45 749,568 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2008-12-29 11:08:35 749,568 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2008-12-28 23:34:41 110,592 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-12-29 11:08:34 110,592 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2008-12-28 23:34:39 372,736 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2008-12-29 11:08:32 372,736 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2008-12-28 23:34:54 28,672 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2008-12-29 11:08:39 28,672 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2008-12-28 23:34:38 671,744 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2008-12-29 11:08:32 671,744 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2008-12-28 23:34:11 5,632 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2008-12-29 11:08:16 5,632 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2008-12-28 23:34:57 12,800 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-12-29 11:08:40 12,800 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2008-12-28 23:34:37 32,768 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2008-12-29 11:08:31 32,768 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2008-12-28 23:34:36 7,168 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2008-12-29 11:08:31 7,168 —-a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2008-12-28 23:34:46 110,592 —-a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2008-12-29 11:08:35 110,592 —-a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2008-12-28 23:34:47 81,920 —-a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2008-12-29 11:08:36 81,920 —-a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2008-12-28 23:34:20 425,984 —-a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2008-12-29 11:08:21 425,984 —-a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2008-12-28 23:34:22 741,376 —-a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2008-12-29 11:08:22 741,376 —-a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2008-12-28 23:34:24 933,888 —-a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2008-12-29 11:08:23 933,888 —-a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2008-11-09 02:56:44 5,050,368 —-a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2008-12-29 11:08:44 5,070,848 —-a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2008-11-09 02:56:40 188,416 —-a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2008-12-29 11:08:43 188,416 —-a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2008-12-28 23:34:31 401,408 —-a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2008-12-29 11:08:28 401,408 —-a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2008-12-28 23:34:56 81,920 —-a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2008-12-29 11:08:39 81,920 —-a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2008-12-28 23:34:12 630,784 —-a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2008-12-29 11:08:17 630,784 —-a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2008-12-28 23:34:58 372,736 —-a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2008-12-29 11:08:41 372,736 —-a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2008-12-28 23:34:55 258,048 —-a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2008-12-29 11:08:39 258,048 —-a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2008-12-28 23:34:52 299,008 —-a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2008-12-29 11:08:37 299,008 —-a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2008-12-28 23:34:51 131,072 —-a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-12-29 11:08:37 131,072 —-a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2008-12-28 23:34:14 258,048 —-a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2008-12-29 11:08:17 258,048 —-a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2008-12-28 23:34:14 114,688 —-a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2008-12-29 11:08:18 114,688 —-a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2008-12-28 23:34:28 884,736 —-a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2008-12-29 11:08:25 884,736 —-a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2008-12-28 23:34:29 90,112 —-a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2008-12-29 11:08:26 90,112 —-a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2008-12-28 23:34:27 839,680 —-a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2008-12-29 11:08:24 839,680 —-a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2008-12-28 23:34:33 5,013,504 —-a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2008-12-29 11:08:29 5,013,504 —-a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2008-12-28 23:34:16 2,068,480 —-a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2008-12-29 11:08:18 2,068,480 —-a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2008-12-28 23:34:25 3,076,096 —-a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2008-12-29 11:08:24 3,076,096 —-a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2008-12-29 14:22:06 27,136 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll
+ 2008-12-29 14:22:38 884,736 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll
+ 2008-12-29 14:22:48 237,568 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll
+ 2008-12-29 14:22:43 15,360 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe
+ 2008-12-29 14:23:01 876,544 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll
+ 2008-12-29 14:23:04 81,920 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll
+ 2008-12-29 14:23:32 1,695,744 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll
+ 2008-12-29 14:23:36 167,936 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll
+ 2008-12-29 14:23:56 1,740,800 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll
+ 2008-12-29 11:10:55 11,722,752 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll
+ 2008-12-29 14:24:07 1,011,712 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll
+ 2008-12-29 11:11:52 7,049,216 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll
+ 2008-12-29 14:24:20 1,798,144 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll
+ 2008-12-29 11:12:24 10,969,088 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll
+ 2008-12-29 14:24:35 1,224,704 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll
+ 2008-12-29 14:24:42 512,000 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll
+ 2008-12-29 11:12:30 229,376 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll
+ 2008-12-29 11:12:29 1,667,072 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll
+ 2008-12-29 14:25:05 659,456 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll
+ 2008-12-29 14:25:04 294,912 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll
+ 2008-12-29 14:25:16 733,184 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll
+ 2008-12-29 14:25:23 233,472 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll
+ 2008-12-29 14:25:30 679,936 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll
+ 2008-12-29 14:27:19 2,342,912 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll
+ 2008-12-29 14:27:22 237,568 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll
+ 2008-12-29 14:27:31 1,986,560 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll
+ 2008-12-29 14:27:08 12,509,184 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll
+ 2008-12-29 11:13:07 13,193,216 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll
+ 2008-12-29 11:13:22 5,771,264 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll
+ 2008-12-29 11:11:24 8,265,728 —-a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll
- 2005-09-23 12:28:52 72,704 —-a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2007-10-24 06:47:38 82,944 —-a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
- 2005-09-23 12:28:52 7,680 —-a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2007-10-24 06:47:38 16,896 —-a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll
- 2005-09-23 12:28:56 7,680 —-a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2007-10-24 06:47:40 16,896 —-a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
- 2005-09-23 12:28:58 7,680 —-a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2007-10-24 06:47:42 16,896 —-a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
- 2005-09-23 12:28:56 7,680 —-a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2007-10-24 06:47:40 16,896 —-a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll
- 2005-09-23 12:28:52 86,528 —-a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2007-10-24 06:47:38 97,280 —-a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
- 2005-09-23 12:28:36 18,944 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2007-10-24 06:47:26 28,672 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
- 2005-09-23 12:28:42 136,192 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2007-10-24 06:47:30 145,408 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
- 2005-09-23 12:28:44 4,608 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2007-10-24 06:47:32 13,824 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
- 2005-09-23 12:29:04 183,808 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2007-10-24 06:47:48 193,016 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
- 2005-09-23 12:28:28 208,896 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2007-10-24 06:47:20 218,112 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
- 2005-09-23 12:28:56 10,752 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2007-10-24 06:47:40 10,752 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
- 2005-09-23 12:28:58 138,240 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2007-10-24 06:47:42 147,968 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
- 2005-09-23 12:28:36 87,552 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
+ 2007-10-24 06:47:26 99,320 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
- 2005-09-23 12:28:58 55,488 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2007-10-24 06:47:42 59,392 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
- 2005-09-23 12:28:32 36,864 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2007-10-24 06:47:22 36,864 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
- 2005-09-23 12:28:32 10,752 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
+ 2007-10-24 06:47:22 22,024 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2005-09-23 12:28:32 8,192 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2007-10-24 06:47:22 17,928 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
- 2005-09-23 12:28:32 23,552 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2007-10-24 06:47:22 33,288 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
- 2005-09-23 12:28:32 70,656 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2007-10-24 06:47:22 84,480 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
- 2005-09-23 12:28:32 13,824 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2007-10-24 06:47:22 24,576 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
- 2005-09-23 12:28:32 26,824 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2007-10-24 06:47:22 32,776 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
- 2005-09-23 12:28:32 106,496 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2007-10-24 06:47:22 106,496 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2005-09-23 12:28:32 29,896 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2007-10-24 06:47:22 33,800 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
- 2005-09-23 12:28:32 29,888 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2007-10-24 06:47:22 33,280 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2005-09-23 12:28:32 503,808 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2007-10-24 06:47:22 507,904 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
- 2005-09-23 12:28:56 106,496 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2007-10-24 06:47:40 106,496 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
- 2005-09-23 12:28:56 88,576 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2007-10-24 06:47:40 101,896 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
- 2005-09-23 12:28:42 76,984 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2007-10-24 06:47:30 80,376 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
- 2005-09-23 12:28:42 1,144,832 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2007-10-24 06:47:30 1,162,744 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
- 2005-09-23 12:28:42 13,312 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2007-10-24 06:47:30 13,312 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
- 2005-09-23 12:28:58 17,920 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2007-10-24 06:47:42 27,136 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
- 2005-09-23 12:28:56 68,608 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2007-10-24 06:47:40 69,120 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
- 2005-09-23 12:28:44 31,936 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2007-10-24 06:47:30 35,320 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
- 2005-09-23 12:28:38 52,736 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2007-10-24 06:47:28 66,552 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
- 2005-09-23 12:28:38 4,608 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2007-10-24 06:47:28 5,120 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
- 2005-09-23 12:29:12 547,840 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
+ 2007-10-24 06:47:54 572,936 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
- 2005-09-23 12:28:56 788,992 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2007-10-24 06:47:40 798,224 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
- 2005-09-23 12:28:50 9,216 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2007-10-24 06:47:36 18,936 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
- 2005-09-23 12:28:56 9,728 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2007-10-24 06:47:40 9,728 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
- 2005-09-23 12:28:56 8,192 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2007-10-24 06:47:40 8,192 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
- 2005-09-23 12:28:56 36,864 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2007-10-24 06:47:40 77,824 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
- 2005-09-23 12:28:56 5,632 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2007-10-24 06:47:40 6,656 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
- 2005-09-23 12:28:56 224,952 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2007-10-24 06:47:40 230,904 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
- 2005-09-23 12:28:56 28,672 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2007-10-24 06:47:40 28,672 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
- 2005-09-23 12:28:56 55,296 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2007-10-24 06:47:40 65,032 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
- 2005-09-23 12:28:56 72,192 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2007-10-24 06:47:40 72,192 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
- 2005-09-23 12:28:48 40,960 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2007-10-24 06:47:34 40,960 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- 2005-09-23 12:28:48 413,696 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2007-10-24 06:47:36 348,160 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
- 2005-09-23 12:28:48 36,864 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2007-10-24 06:47:36 36,864 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2005-09-23 12:28:48 647,168 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2007-10-24 06:47:36 655,360 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
- 2005-09-23 12:28:48 73,728 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2007-10-24 06:47:36 77,824 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
- 2005-09-23 12:28:48 745,472 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2007-10-24 06:47:34 749,568 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
- 2005-09-23 12:29:10 110,592 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2007-10-24 06:47:52 110,592 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2005-09-23 12:29:10 372,736 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2007-10-24 06:47:52 372,736 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
- 2005-09-23 12:29:08 667,648 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2007-10-24 06:47:50 671,744 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
- 2005-09-23 12:28:30 28,672 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2007-10-24 06:47:20 28,672 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2005-09-23 12:29:10 5,632 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2007-10-24 06:47:52 5,632 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
- 2005-09-23 12:28:30 32,768 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2007-10-24 06:47:20 32,768 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
- 2005-09-23 12:28:30 12,800 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2007-10-24 06:47:20 12,800 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2005-09-23 12:28:30 7,168 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
+ 2007-10-24 06:47:20 7,168 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2005-09-23 12:28:32 87,552 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
+ 2007-10-24 06:47:22 97,792 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2005-09-23 12:28:48 69,632 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2007-10-24 06:47:36 69,632 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
- 2005-09-23 12:28:56 800,768 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2007-10-24 06:47:40 822,280 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2005-09-23 12:28:56 73,216 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2007-10-24 06:47:40 83,456 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
- 2005-09-23 12:28:56 288,768 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2007-10-24 06:47:40 308,224 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
- 2005-09-23 12:28:56 36,864 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2007-10-24 06:47:40 47,104 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
- 2005-09-23 12:28:56 326,144 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2007-10-24 06:47:40 348,672 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
- 2005-09-23 12:28:56 81,408 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2007-10-24 06:47:40 94,208 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
- 2005-09-23 12:28:56 4,308,992 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2007-10-24 06:47:40 4,444,160 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2005-09-23 12:28:56 102,400 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2007-10-24 06:47:40 114,688 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
- 2005-09-23 12:29:00 330,752 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2007-10-24 06:47:44 340,992 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
- 2005-09-23 12:28:56 67,072 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2007-10-24 06:47:40 77,312 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
- 2005-09-23 12:28:50 9,216 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2007-10-24 06:47:36 18,944 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
- 2005-09-23 12:28:56 226,816 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2007-10-24 06:47:40 242,688 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
- 2005-09-23 12:28:56 66,240 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2007-10-24 06:47:40 70,144 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- 2005-09-23 12:28:56 10,240 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2007-10-24 06:47:40 19,456 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
- 2005-09-23 12:28:50 5,615,616 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2007-10-24 06:47:36 5,814,784 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2005-09-23 12:29:00 22,528 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2007-10-24 06:47:44 31,744 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
- 2005-09-23 12:28:56 96,440 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2007-10-24 06:47:40 101,880 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
- 2005-09-23 12:28:56 14,848 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2007-10-24 06:47:40 24,584 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
- 2005-09-23 12:28:56 78,336 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2007-10-24 06:47:40 89,096 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
- 2005-09-23 12:28:50 136,192 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2007-10-24 06:47:36 144,896 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
- 2005-09-23 12:28:56 53,248 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2007-10-24 06:47:40 53,248 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- 2005-09-23 12:28:56 32,768 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2007-10-24 06:47:40 32,768 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- 2005-09-23 12:29:02 59,072 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
+ 2007-10-24 06:47:46 61,952 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- 2005-09-23 12:28:58 7,680 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2007-10-24 06:47:42 16,896 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
- 2005-09-23 12:28:56 107,520 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2007-10-24 06:47:40 119,296 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
- 2005-09-23 12:29:00 85,504 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2007-10-24 06:47:44 95,232 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
- 2005-09-23 12:28:56 377,344 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2007-10-24 06:47:40 392,696 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
- 2005-09-23 12:28:56 110,592 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2007-10-24 06:47:40 110,592 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
- 2005-09-23 12:28:58 389,120 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
+ 2007-10-24 06:47:42 425,984 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2005-09-23 12:28:56 81,920 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2007-10-24 06:47:40 81,920 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
- 2005-09-23 12:28:56 2,878,976 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2007-10-24 06:47:40 3,036,160 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
- 2005-09-23 12:28:56 482,304 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2007-10-24 06:47:40 483,840 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
- 2005-09-23 12:28:56 716,800 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2007-10-24 06:47:40 741,376 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
- 2005-09-23 12:28:38 884,736 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2007-10-24 06:47:28 933,888 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
- 2005-09-23 12:28:56 5,050,368 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2007-10-24 06:47:40 5,070,848 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
- 2005-09-23 12:28:56 397,312 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2007-10-24 06:47:40 401,408 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
- 2005-09-23 12:28:56 188,416 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2007-10-24 06:47:40 188,416 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
- 2005-09-23 12:28:56 3,018,752 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2007-10-24 06:47:40 3,076,096 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
- 2005-09-23 12:28:56 81,920 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2007-10-24 06:47:40 81,920 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2005-09-23 12:28:56 700,416 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2007-10-24 06:47:40 630,784 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
- 2005-09-23 12:28:56 258,048 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2007-10-24 06:47:40 258,048 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
- 2005-09-23 12:28:56 47,616 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2007-10-24 06:47:40 57,392 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
- 2005-09-23 12:28:56 114,176 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
+ 2007-10-24 06:47:40 113,664 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
- 2005-09-23 12:28:56 368,640 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2007-10-24 06:47:40 372,736 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
- 2005-09-23 12:28:56 258,048 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2007-10-24 06:47:40 258,048 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
- 2005-09-23 12:28:56 299,008 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2007-10-24 06:47:40 299,008 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
- 2005-09-23 12:28:56 131,072 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2007-10-24 06:47:40 131,072 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
- 2005-09-23 12:28:56 258,048 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2007-10-24 06:47:40 258,048 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2005-09-23 12:28:56 114,688 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2007-10-24 06:47:40 114,688 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
- 2005-09-23 12:28:56 260,096 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
+ 2007-10-24 06:47:40 261,120 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
- 2005-09-23 12:28:56 5,025,792 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2007-10-24 06:47:40 5,431,296 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2005-09-23 12:28:56 835,584 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2007-10-24 06:47:40 884,736 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
- 2005-09-23 12:28:56 86,016 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2007-10-24 06:47:40 90,112 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
- 2005-09-23 12:28:56 823,296 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2007-10-24 06:47:40 839,680 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
- 2005-09-23 12:28:56 5,316,608 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2007-10-24 06:47:40 5,013,504 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2005-09-23 12:28:56 2,035,712 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2007-10-24 06:47:40 2,068,480 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
- 2005-09-23 12:28:56 71,680 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2007-10-24 06:47:40 81,400 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
- 2005-09-23 12:29:06 1,140,920 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2007-10-24 06:47:48 1,172,472 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- 2005-09-23 12:28:30 1,306,624 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2007-10-24 06:47:20 1,344,000 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
- 2005-09-23 12:28:32 298,496 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2007-10-24 06:47:22 434,688 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2005-09-23 12:28:56 28,160 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2007-10-24 06:47:40 37,896 —-a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2008-11-26 17:21:30 1,236,208 —-a-w c:\windows\system32\aswBoot.exe
+ 2008-11-26 17:15:10 97,480 —-a-w c:\windows\system32\AvastSS.scr
- 2005-09-23 12:28:38 83,456 —-a-w c:\windows\system32\dfshim.dll
+ 2007-10-24 06:47:28 96,760 —-a-w c:\windows\system32\dfshim.dll
+ 2008-11-26 17:15:35 26,944 —-a-w c:\windows\system32\drivers\aavmker4.sys
+ 2008-11-26 17:17:25 20,560 —-a-w c:\windows\system32\drivers\aswFsBlk.sys
+ 2008-11-26 17:18:25 93,296 —-a-w c:\windows\system32\drivers\aswmon.sys
+ 2008-11-26 17:18:18 94,032 —-a-w c:\windows\system32\drivers\aswmon2.sys
+ 2008-11-26 17:16:29 23,152 —-a-w c:\windows\system32\drivers\aswRdr.sys
+ 2008-11-26 17:17:36 111,184 —-a-w c:\windows\system32\drivers\aswSP.sys
+ 2008-11-26 17:16:38 50,864 —-a-w c:\windows\system32\drivers\aswTdi.sys
- 2006-12-22 16:28:14 271,360 —-a-w c:\windows\system32\mscoree.dll
+ 2007-10-24 06:47:38 282,112 —-a-w c:\windows\system32\mscoree.dll
- 2005-09-23 12:28:52 150,016 —-a-w c:\windows\system32\mscorier.dll
+ 2007-10-24 06:47:38 158,720 —-a-w c:\windows\system32\mscorier.dll
- 2005-09-23 12:28:52 74,240 —-a-w c:\windows\system32\mscories.dll
+ 2007-10-24 06:47:38 84,480 —-a-w c:\windows\system32\mscories.dll
- 2006-12-22 17:02:36 6,144 -c–a-w c:\windows\system32\mui\0409\mscorees.dll
+ 2007-10-24 06:47:44 15,360 —-a-w c:\windows\system32\mui\0409\mscorees.dll
- 2008-11-28 07:22:30 62,344 —-a-w c:\windows\system32\perfc009.dat
+ 2008-12-29 11:08:52 63,528 —-a-w c:\windows\system32\perfc009.dat
- 2008-11-28 07:22:30 401,064 —-a-w c:\windows\system32\perfh009.dat
+ 2008-12-29 11:08:52 406,328 —-a-w c:\windows\system32\perfh009.dat
+ 2008-12-30 09:22:56 16,384 —-atw c:\windows\Temp\Perflib_Perfdata_4a8.dat
+ 2008-12-30 09:23:08 16,384 —-atw c:\windows\Temp\Perflib_Perfdata_75c.dat
- 2008-12-28 23:34:40 8,192 —-a-w c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2008-12-29 11:08:33 8,192 —-a-w c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2008-12-29 11:08:41 258,048 —-a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2008-12-29 11:08:41 113,664 —-a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTSysVol"="c:\program files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe" [2003-09-17 57344]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-06-01 458752]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2004-06-01 217088]
"LXCGCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll" [2005-07-20 73728]
"ddoctorv2"="c:\program files\Comcast\Desktop Doctor\bin\sprtcmd.exe" [2008-04-24 202560]
"VX6000"="c:\windows\vVX6000.exe" [2006-10-13 994096]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2008-11-20 178688]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-17 136600]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
"nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe]

c:\documents and settings\Danni-Doug\Start Menu\Programs\Startup\
PowerReg Scheduler.exe [2007-07-25 256000]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.enc"= ITIG726.acm

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\PlayOnline\\SquareEnix\\PlayOnlineViewer\\pol.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
"c:\\AeriaGames\\LastChaosUSA\\LC.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"c:\\Program Files\\MySpace\\IM\\MySpaceIM.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-12-29 111184]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-12-29 20560]
S1 ff31df41;ff31df41;c:\windows\system32\drivers\ff31df41.sys [2008-12-25 0]
S2 e61xfmd3ppu.sys;e61xfmd3ppu.sys;\??\c:\windows\system32\drivers\e61xfmd3ppu.sys []
S2 etdfsvapi33.sys;etdfsvapi33.sys;\??\c:\windows\system32\drivers\etdfsvapi33.sys [2003-03-31 79872]
S3 mamotou;mamotou;c:\windows\system32\DRIVERS\mamotou.sys [2008-11-24 49489]
S3 VX6000;Microsoft LifeCam VX-6000;c:\windows\system32\DRIVERS\VX6000Xp.sys [2006-06-29 2383152]
.
Contents of the 'Scheduled Tasks' folder

2008-12-30 c:\windows\Tasks\AAD8435891A3F79C.job
- c:\docume~1\danni-~1\applic~1\showmo~1\meowdvdbarb.exe []
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.msn.com
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://www.yahoo.com

c:\windows\Downloaded Program Files\gtplugin.ocx - O16 -: {E93E9DF0-3E59-4331-A269-F1E077C66F00}
hxxp://cnn-5.vo.llnwd.net/c1/static/client/browserplayer/gtplugin.cab
c:\windows\Downloaded Program Files\gtplugin.inf
FF - ProfilePath - c:\documents and settings\Danni-Doug\Application Data\Mozilla\Firefox\Profiles\4fn9pvih.default\
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start2.mozilla.com/firefox?client=firefox-a&rls;=org.mozilla:en-US:official
FF - plugin: c:\program files\Yahoo!\Shared\npYState.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-30 04:24:14
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCGCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
———————— Other Running Processes ————————
.
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\windows\system32\CTSVCCDA.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft LifeCam\MSCamS32.exe
c:\windows\system32\nvsvc32.exe
c:\program files\Comcast\Desktop Doctor\bin\sprtsvc.exe
c:\windows\system32\rundll32.exe
c:\program files\Logitech\Video\FxSvr2.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2008-12-30 4:27:09 - machine was rebooted [Danni-Doug]
ComboFix-quarantined-files.txt 2008-12-30 09:26:45
ComboFix2.txt 2008-12-29 02:24:50

Pre-Run: 93,280,886,784 bytes free
Post-Run: 93,273,718,784 bytes free

730 — E O F — 2008-12-23 20:22:16





________________________________________________________________________________
__________________________________________


here is my new hijackthis log……………………………………..


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:29:44 AM, on 12/30/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [ddoctorv2] "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
O4 - HKLM\..\Run: [VX6000] C:\WINDOWS\vVX6000.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: PowerReg Scheduler.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab
O16 - DPF: {42D06124-98A2-47EC-8098-3778B58CE7D5} (SupportSoft External Control) - http://connect.comcast.com/dl/Comcast%20Ac…%20Controls.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v5.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - http://zone.msn.com/binframework/v10/StProxy.cab55579.cab
O16 - DPF: {E93E9DF0-3E59-4331-A269-F1E077C66F00} (GameTap Web Plugin) - http://cnn-5.vo.llnwd.net/c1/static/client…er/gtplugin.cab
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe

–
End of file - 7440 bytes
Post #22
ok the last 2 things you asked of me………

first the kaspersky


——————————————————————————–
KASPERSKY ONLINE SCANNER 7 REPORT
Tuesday, December 30, 2008
Operating System: Microsoft Windows XP Professional Service Pack 3 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Tuesday, December 30, 2008 07:52:08
Records in database: 1531685
——————————————————————————–

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan statistics:
Files scanned: 140084
Threat name: 6
Infected objects: 7
Suspicious objects: 0
Duration of the scan: 02:47:26


File name / Threat name / Threats count
C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\svhost.exe.vir Infected: Trojan-Downloader.Win32.Agent.axce 1
C:\Qoobox\Quarantine\C\WINDOWS\Downloaded Program Files\UWAS6_0001_N69M0903NetInstaller.exe.vir Infected: not-a-virus:Downloader.Win32.WinFixer.n 1
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8HMRKDI3\aasuper2[1].htm Infected: Trojan.Win32.Agent.babd 1
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8HMRKDI3\l26[1].exe Infected: Trojan-Downloader.Win32.Agent.axmn 1
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CPIF41AR\aasuper0[1].htm Infected: Trojan.Win32.Agent.babc 1
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OP2NWXUB\aasuper1[1].htm Infected: Trojan-Downloader.Win32.Agent.axce 1
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OP2NWXUB\tqanbocttq[1].txt Infected: Trojan-Downloader.Win32.Agent.axgm 1

The selected area was scanned.



____________________________________________________________________


now for the fresh hi jackthis log…………………


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:02:21 AM, on 12/30/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [ddoctorv2] "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
O4 - HKLM\..\Run: [VX6000] C:\WINDOWS\vVX6000.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: PowerReg Scheduler.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab
O16 - DPF: {42D06124-98A2-47EC-8098-3778B58CE7D5} (SupportSoft External Control) - http://connect.comcast.com/dl/Comcast%20Ac…%20Controls.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v5.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - http://zone.msn.com/binframework/v10/StProxy.cab55579.cab
O16 - DPF: {E93E9DF0-3E59-4331-A269-F1E077C66F00} (GameTap Web Plugin) - http://cnn-5.vo.llnwd.net/c1/static/client…er/gtplugin.cab
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe

–
End of file - 7403 bytes
Post #23
OK. Apparently I "goofed" meaning that I used the code for another tool. It did not do any harm to your system but also did not do what I needed it to do. So we will repeat the process using the correct switches.


1. We need to start off by "Showing Hidden Files"

To enable the viewing of Hidden files follow these steps:

1. Close all programs so that you are at your desktop.
2. Double-click on the My Computer icon.
3. Select the Tools menu and click Folder Options.
4. After the new window appears select the View tab.
5. Put a checkmark in the checkbox labeled Display the contents of system folders.
6. Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.
7. Remove the checkmark from the checkbox labeled Hide file extensions for known file types.
8. Remove the checkmark from the checkbox labeled Hide protected operating system files.
9. Press the Apply button and then the OK button and shutdown My Computer.
10. Now your computer is configured to show all hidden files.


2. Now we will re-run jpshortstuff's tool DirLook.exe

Please copy and paste the following into the tool and run it: 
c:\documents and settings\Danni-Doug\Application Data
Please post the report.

3. A. 1. Please open Notepad
  • Click Start , then Run
  • Type notepad .exe in the Run Box.
2. Now copy/paste the entire content of the codebox below into the Notepad window:

KillAll::

File::
c:\windows\system32\drivers\iypsvl.sys
c:\documents and settings\Doug\Application Data\twext.exe
c:\documents and settings\Guest\Application Data\twext.exe
C:\uyrte.exe
C:\elbff.exe
c:\windows\system32\drivers\ff31df41.sys
c:\windows\arixabokogike.dll
c:\windows\ugupevog.dll
c:\windows\system32\drivers\etdfsvapi33.sys
C:\-1273023007
c:\documents and settings\Danni-Doug\Start Menu\Programs\Startup\PowerReg Scheduler.exe
c:\windows\system32\drivers\e61xfmd3ppu.sys
c:\windows\system32\DRIVERS\mamotou.sys
c:\windows\Tasks\AAD8435891A3F79C.job
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8HMRKDI3\aasuper2[1].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8HMRKDI3\l26[1].exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CPIF41AR\aasuper0[1].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OP2NWXUB\aasuper1[1].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OP2NWXUB\tqanbocttq[1].txt 

Folder::
c:\Program Files\PokerStars
C:\found.000

Driver::
etdfsvapi33.sys
ff31df41
e61xfmd3ppu.sys
mamotou
Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Save the above as CFScript.txt

4. Now drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again. Do not use your computer for any other purpose while ComboFix is running.

5. All your monitoring programs (Antivirus/Antispyware, Guards and Shields) will be stopped.

[external image: Posted Image]

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.

6. ComboFix will automatically REBOOT your machine when the KillAll:: switch is used..

7. Post the following logs/Reports:
  • ComboFix.txt
  • Fresh HijackThis log run after all the other tools have performed their cleanup.
CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
Post #24 last edited
ok first thing u asked for……


DirLook.exe v2.0 by jpshortstuff
Log created at 16:34 on 30/12/2008
==================================
Contents of "c:\documents and settings\Danni-Doug\Application Data"

—FOLDERS—

Adobe (Created on 08/10/2006 at 15:13) d—–
AdobeUM (Created on 08/10/2006 at 15:17) d—–
Apple Computer (Created on 30/06/2008 at 20:58) d—–
ArcSoft (Created on 09/11/2008 at 03:14) d—–
COMCASTTOOLBAR (Created on 22/03/2008 at 02:29) d—–
Creative (Created on 18/01/2008 at 16:07) d—–
FaxCtr (Created on 23/09/2006 at 21:12) d—–
flightgear.org (Created on 29/11/2008 at 01:55) d—–
GetRightToGo (Created on 08/04/2007 at 12:54) d—–
Google (Created on 27/03/2007 at 10:17) d—–
Help (Created on 23/11/2005 at 10:28) d—–
Identities (Created on 23/11/2005 at 09:04) d—–
KodakCredentialStore (Created on 09/11/2008 at 17:34) d—–
LimeWire (Created on 09/05/2007 at 17:38) d—–
Macromedia (Created on 24/11/2005 at 04:11) d—–
Malwarebytes (Created on 28/12/2008 at 12:44) d—–
Microsoft (Created on 23/11/2005 at 09:04) d—s-
Move Networks (Created on 23/04/2007 at 03:28) d–h–
Mozilla (Created on 07/05/2008 at 06:21) d—–
MSN6 (Created on 29/11/2005 at 01:58) d—–
MySpace (Created on 18/10/2007 at 05:30) d—–
Nexon (Created on 01/05/2008 at 15:46) d—–
Orbit (Created on 11/04/2008 at 18:17) d—–
SHOW MORE TYPE (Created on 12/09/2007 at 02:46) d—–
Skinux (Created on 09/11/2008 at 03:00) d—–
Sun (Created on 07/12/2005 at 02:08) d—–
teamspeak2 (Created on 30/10/2006 at 04:07) d—–
Turbine (Created on 08/04/2007 at 15:26) d—–
Ventrilo (Created on 09/10/2007 at 20:57) d—–
Yahoo! (Created on 07/03/2006 at 03:55) d—–

—FILES—

ComcastSecurity.ico (7982 bytes - created on 21/03/2008 at 13:29, modified on 10/08/2007 at 22:17) –a–c
ComcastWebmail.ico (15086 bytes - created on 21/03/2008 at 13:29, modified on 17/05/2007 at 21:43) –a–c
desktop.ini (62 bytes - created on 23/11/2005 at 09:04, modified on 23/11/2005 at 03:35) –ahsc

==================================
=EOF=



here is combofix report………………………….


ComboFix 08-12-28.01 - Danni-Doug 2008-12-30 16:41:08.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.676 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: C:\CFScript.txt
AV: avast! antivirus 4.8.1296 [VPS 081230-0] *On-access scanning disabled* (Updated)
* Created a new restore point

FILE ::
C:\-1273023007
c:\documents and settings\Danni-Doug\Start Menu\Programs\Startup\PowerReg Scheduler.exe
c:\documents and settings\Doug\Application Data\twext.exe
c:\documents and settings\Guest\Application Data\twext.exe
C:\elbff.exe
C:\uyrte.exe
c:\windows\arixabokogike.dll
c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8HMRKDI3\aasuper2[1].htm
c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8HMRKDI3\l26[1].exe
c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CPIF41AR\aasuper0[1].htm
c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OP2NWXUB\aasuper1[1].htm
c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OP2NWXUB\tqanbocttq[1].txt
c:\windows\system32\drivers\e61xfmd3ppu.sys
c:\windows\system32\drivers\etdfsvapi33.sys
c:\windows\system32\drivers\ff31df41.sys
c:\windows\system32\drivers\iypsvl.sys
c:\windows\system32\DRIVERS\mamotou.sys
c:\windows\Tasks\AAD8435891A3F79C.job
c:\windows\ugupevog.dll
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\-1273023007
c:\documents and settings\Danni-Doug\Start Menu\Programs\Startup\PowerReg Scheduler.exe
c:\program files\PokerStars
c:\program files\PokerStars\_update2.dat
c:\program files\PokerStars\_update2black.dat
c:\program files\PokerStars\_update2def.dat
c:\program files\PokerStars\_update2g.dat
c:\program files\PokerStars\_update2gb.dat
c:\program files\PokerStars\_update2gcd.dat
c:\program files\PokerStars\_update2gf.dat
c:\program files\PokerStars\_update2ni.dat
c:\program files\PokerStars\_update2rare.dat
c:\program files\PokerStars\_update2renp.dat
c:\program files\PokerStars\_update2rent.dat
c:\program files\PokerStars\_update2s.dat
c:\program files\PokerStars\_update2saloon.dat
c:\program files\PokerStars\_updcache.dat
c:\program files\PokerStars\backup\Gx\cashierpaysystem.jpg
c:\program files\PokerStars\backup\Gx\fonts\subst.ini
c:\program files\PokerStars\backup\Gx\ipb.bmp
c:\program files\PokerStars\backup\Gx\label\vip-status.a.bmp
c:\program files\PokerStars\backup\Gx\label\vip-status.bmp
c:\program files\PokerStars\backup\Gx\templates\browser.css
c:\program files\PokerStars\backup\Gx\templates\dialog.css
c:\program files\PokerStars\backup\Gx\templates\dialog.html
c:\program files\PokerStars\backup\Gx\templates\help.html
c:\program files\PokerStars\backup\Gx\templates\menu.xml
c:\program files\PokerStars\backup\Gx\tmp.jpg
c:\program files\PokerStars\backup\i18n.msg_cli.txt
c:\program files\PokerStars\backup\PokerStars.exe
c:\program files\PokerStars\backup\PokerStars.ini
c:\program files\PokerStars\backup\Stub.exe
c:\program files\PokerStars\backup\Themes\&default;\gx.ini
c:\program files\PokerStars\backup\Themes\black\templates\dialog.html
c:\program files\PokerStars\backup\Themes\simple\gx.ini
c:\program files\PokerStars\backup\Themes\themes.ini
c:\program files\PokerStars\backup\trace.ini
c:\program files\PokerStars\backup\update.ini
c:\program files\PokerStars\fw.ini
c:\program files\PokerStars\Gx\arr.a.bmp
c:\program files\PokerStars\Gx\arr.bmp
c:\program files\PokerStars\Gx\bg.jpg
c:\program files\PokerStars\Gx\blt.a.bmp
c:\program files\PokerStars\Gx\blt.bmp
c:\program files\PokerStars\Gx\cashierpaysystem.a.bmp
c:\program files\PokerStars\Gx\cashierpaysystem.bmp
c:\program files\PokerStars\Gx\cashierpaysystem.jpg
c:\program files\PokerStars\Gx\cheque.jpg
c:\program files\PokerStars\Gx\chequeCA.jpg
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip-d.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip-d.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip000001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip000001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip000005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip000005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip000025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip000025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip0001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip0001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip0005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip0005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip0025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip0025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip0100.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip0100.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip0500.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip0500.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip1000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip1000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip100000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip100000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip1000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip1000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip25000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip25000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip5000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip5000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip500000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip500000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip5000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\0\chip5000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip-d.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip-d.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip000001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip000001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip000005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip000005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip000025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip000025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip0001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip0001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip0005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip0005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip0025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip0025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip0100.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip0100.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip0500.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip0500.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip1000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip1000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip100000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip100000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip1000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip1000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip25000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip25000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip5000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip5000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip500000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip500000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip5000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\1\chip5000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip-d.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip-d.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip000001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip000001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip000005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip000005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip000025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip000025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip0001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip0001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip0005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip0005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip0025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip0025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip0100.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip0100.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip0500.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip0500.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip1000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip1000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip100000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip100000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip1000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip1000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip25000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip25000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip5000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip5000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip500000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip500000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip5000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\2\chip5000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip-d.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip-d.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip000001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip000001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip000005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip000005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip000025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip000025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip0001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip0001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip0005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip0005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip0025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip0025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip0100.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip0100.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip0500.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip0500.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip1000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip1000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip100000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip100000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip1000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip1000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip25000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip25000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip5000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip5000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip500000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip500000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip5000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\3\chip5000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip-d.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip-d.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip000001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip000001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip000005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip000005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip000025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip000025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip0001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip0001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip0005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip0005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip0025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip0025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip0100.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip0100.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip0500.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip0500.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip1000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip1000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip100000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip100000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip1000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip1000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip25000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip25000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip5000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip5000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip500000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip500000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip5000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\4\chip5000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip-d.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip-d.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip000001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip000001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip000005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip000005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip000025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip000025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip0001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip0001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip0005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip0005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip0025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip0025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip0100.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip0100.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip0500.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip0500.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip1000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip1000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip100000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip100000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip1000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip1000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip25000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip25000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip5000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip5000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip500000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip500000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip5000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\5\chip5000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip-d.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip-d.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip000001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip000001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip000005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip000005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip000025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip000025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip0001.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip0001.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip0005.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip0005.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip0025.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip0025.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip0100.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip0100.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip0500.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip0500.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip1000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip1000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip100000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip100000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip1000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip1000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip25000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip25000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip5000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip5000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip500000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip500000.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip5000000.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\chips\6\chip5000000.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\0\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\0\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\0\cardface.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\0\cardface.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\1\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\1\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\1\cardface.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\1\cardface.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\2\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\2\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\2\cardface.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\2\cardface.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\2\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\2\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\3\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\3\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\3\cardface.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\3\cardface.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\3\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\3\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\4\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\4\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\4\cardface.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\4\cardface.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\4\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\4\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\5\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\5\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\5\cardface.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\5\cardface.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\5\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\5\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\6\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\6\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\6\cardface.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\6\cardface.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\6\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\6\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\back.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\cardfade.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\cardfade.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\deck.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\smback.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\default\smback.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\0\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\0\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\0\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\0\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\0\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\1\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\1\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\1\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\1\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\1\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\2\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\2\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\2\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\2\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\2\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\3\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\3\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\3\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\3\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\3\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\4\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\4\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\4\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\4\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\4\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\5\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\5\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\5\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\5\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\5\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\6\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\6\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\6\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\6\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\6\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\large\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\0\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\0\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\0\cardrank.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\0\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\0\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\0\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\0\deck.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\0\deck.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\1\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\1\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\1\cardrank.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\1\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\1\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\1\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\1\deck.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\1\deck.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\2\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\2\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\2\cardrank.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\2\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\2\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\2\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\2\deck.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\2\deck.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\3\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\3\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\3\cardrank.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\3\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\3\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\3\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\3\deck.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\3\deck.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\4\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\4\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\4\cardrank.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\4\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\4\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\4\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\4\deck.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\4\deck.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\5\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\5\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\5\cardrank.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\5\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\5\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\5\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\5\deck.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\5\deck.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\6\cardbase.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\6\cardbase.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\6\cardrank.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\6\cardrank.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\6\cardsuit.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\6\cardsuit.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\6\deck.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\6\deck.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\back.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\back.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\cardfade.a.bmp
c:\program files\PokerStars\Gx\chips&deck;\deck\simple\cardfade.bmp
c:\program files\PokerStars\Gx\close.a.bmp
c:\program files\PokerStars\Gx\close.bmp
c:\program files\PokerStars\Gx\ctep.bmp
c:\program files\PokerStars\Gx\ctrls\bb.a.bmp
c:\program files\PokerStars\Gx\ctrls\bb.bmp
c:\program files\PokerStars\Gx\ctrls\btn.a.bmp
c:\program files\PokerStars\Gx\ctrls\btn.bmp
c:\program files\PokerStars\Gx\ctrls\cashierb.a.bmp
c:\program files\PokerStars\Gx\ctrls\cashierb.bmp
c:\program files\PokerStars\Gx\ctrls\cashiergb.a.bmp
c:\program files\PokerStars\Gx\ctrls\cashiergb.bmp
c:\program files\PokerStars\Gx\ctrls\cashierrb.a.bmp
c:\program files\PokerStars\Gx\ctrls\cashierrb.bmp
c:\program files\PokerStars\Gx\ctrls\cb.a.bmp
c:\program files\PokerStars\Gx\ctrls\cb.bmp
c:\program files\PokerStars\Gx\ctrls\cb2.a.bmp
c:\program files\PokerStars\Gx\ctrls\cb2.bmp
c:\program files\PokerStars\Gx\ctrls\cbtn.a.bmp
c:\program files\PokerStars\Gx\ctrls\cbtn.bmp
c:\program files\PokerStars\Gx\ctrls\hidefulltables.a.bmp
c:\program files\PokerStars\Gx\ctrls\hidefulltables.bmp
c:\program files\PokerStars\Gx\ctrls\lb.a.bmp
c:\program files\PokerStars\Gx\ctrls\lb.bmp
c:\program files\PokerStars\Gx\ctrls\lobbyb.a.bmp
c:\program files\PokerStars\Gx\ctrls\lobbyb.bmp
c:\program files\PokerStars\Gx\ctrls\lobbybar.a.bmp
c:\program files\PokerStars\Gx\ctrls\lobbybar.bmp
c:\program files\PokerStars\Gx\ctrls\lobbydd.a.bmp
c:\program files\PokerStars\Gx\ctrls\lobbydd.bmp
c:\program files\PokerStars\Gx\ctrls\lobbylb.a.bmp
c:\program files\PokerStars\Gx\ctrls\lobbylb.bmp
c:\program files\PokerStars\Gx\ctrls\login.a.bmp
c:\program files\PokerStars\Gx\ctrls\login.bmp
c:\program files\PokerStars\Gx\ctrls\mtgb.a.bmp
c:\program files\PokerStars\Gx\ctrls\mtgb.bmp
c:\program files\PokerStars\Gx\ctrls\rbtn.a.bmp
c:\program files\PokerStars\Gx\ctrls\rbtn.bmp
c:\program files\PokerStars\Gx\ctrls\showregonly.a.bmp
c:\program files\PokerStars\Gx\ctrls\showregonly.bmp
c:\program files\PokerStars\Gx\ctrls\sizebox.a.bmp
c:\program files\PokerStars\Gx\ctrls\sizebox.bmp
c:\program files\PokerStars\Gx\ctrls\slider-grip.a.bmp
c:\program files\PokerStars\Gx\ctrls\slider-grip.bmp
c:\program files\PokerStars\Gx\ctrls\slider.bmp
c:\program files\PokerStars\Gx\ctrls\stb.a.bmp
c:\program files\PokerStars\Gx\ctrls\stb.bmp
c:\program files\PokerStars\Gx\ctrls\tabs.a.bmp
c:\program files\PokerStars\Gx\ctrls\tabs.bmp
c:\program files\PokerStars\Gx\ctrls\wb.a.bmp
c:\program files\PokerStars\Gx\ctrls\wb.bmp
c:\program files\PokerStars\Gx\cvn.jpg
c:\program files\PokerStars\Gx\dialog.a.bmp
c:\program files\PokerStars\Gx\dialog.bmp
c:\program files\PokerStars\Gx\fg.a.bmp
c:\program files\PokerStars\Gx\fg.bmp
c:\program files\PokerStars\Gx\filter-ico.a.bmp
c:\program files\PokerStars\Gx\filter-ico.bmp
c:\program files\PokerStars\Gx\filter.a.bmp
c:\program files\PokerStars\Gx\filter.bmp
c:\program files\PokerStars\Gx\filter\hfl1.bmp
c:\program files\PokerStars\Gx\filter\hfl1a.bmp
c:\program files\PokerStars\Gx\filter\hfl2.bmp
c:\program files\PokerStars\Gx\filter\hfl2a.bmp
c:\program files\PokerStars\Gx\filter\hfl3.bmp
c:\program files\PokerStars\Gx\filter\hfl3a.bmp
c:\program files\PokerStars\Gx\filter\hfl4.bmp
c:\program files\PokerStars\Gx\filter\hfl4a.bmp
c:\program files\PokerStars\Gx\filter\hfl5.bmp
c:\program files\PokerStars\Gx\filter\hfl5a.bmp
c:\program files\PokerStars\Gx\filter\hpl1.bmp
c:\program files\PokerStars\Gx\filter\hpl1a.bmp
c:\program files\PokerStars\Gx\filter\hpl2.bmp
c:\program files\PokerStars\Gx\filter\hpl2a.bmp
c:\program files\PokerStars\Gx\filter\hpl3.bmp
c:\program files\PokerStars\Gx\filter\hpl3a.bmp
c:\program files\PokerStars\Gx\filter\hpl4.bmp
c:\program files\PokerStars\Gx\filter\hpl4a.bmp
c:\program files\PokerStars\Gx\filter\hpl5.bmp
c:\program files\PokerStars\Gx\filter\hpl5a.bmp
c:\program files\PokerStars\Gx\filter\hpm1.bmp
c:\program files\PokerStars\Gx\filter\hpm1a.bmp
c:\program files\PokerStars\Gx\filter\hpm2.bmp
c:\program files\PokerStars\Gx\filter\hpm2a.bmp
c:\program files\PokerStars\Gx\filter\hpm3.bmp
c:\program files\PokerStars\Gx\filter\hpm3a.bmp
c:\program files\PokerStars\Gx\filter\hpm4.bmp
c:\program files\PokerStars\Gx\filter\hpm4a.bmp
c:\program files\PokerStars\Gx\filter\sg1t1.bmp
c:\program files\PokerStars\Gx\filter\sg1t1a.bmp
c:\program files\PokerStars\Gx\filter\sg1t2.bmp
c:\program files\PokerStars\Gx\filter\sg1t2a.bmp
c:\program files\PokerStars\Gx\filter\sg1t3.bmp
c:\program files\PokerStars\Gx\filter\sg1t3a.bmp
c:\program files\PokerStars\Gx\filter\sg1t4.bmp
c:\program files\PokerStars\Gx\filter\sg1t4a.bmp
c:\program files\PokerStars\Gx\filter\sg1t5.bmp
c:\program files\PokerStars\Gx\filter\sg1t5a.bmp
c:\program files\PokerStars\Gx\filter\sg1t6.bmp
c:\program files\PokerStars\Gx\filter\sg1t6a.bmp
c:\program files\PokerStars\Gx\filter\sghu1.bmp
c:\program files\PokerStars\Gx\filter\sghu1a.bmp
c:\program files\PokerStars\Gx\filter\sghu2.bmp
c:\program files\PokerStars\Gx\filter\sghu2a.bmp
c:\program files\PokerStars\Gx\filter\sghu3.bmp
c:\program files\PokerStars\Gx\filter\sghu3a.bmp
c:\program files\PokerStars\Gx\filter\sghu4.bmp
c:\program files\PokerStars\Gx\filter\sghu4a.bmp
c:\program files\PokerStars\Gx\filter\sghu5.bmp
c:\program files\PokerStars\Gx\filter\sghu5a.bmp
c:\program files\PokerStars\Gx\filter\sgmt1.bmp
c:\program files\PokerStars\Gx\filter\sgmt1a.bmp
c:\program files\PokerStars\Gx\filter\sgmt2.bmp
c:\program files\PokerStars\Gx\filter\sgmt2a.bmp
c:\program files\PokerStars\Gx\filter\sgmt3.bmp
c:\program files\PokerStars\Gx\filter\sgmt3a.bmp
c:\program files\PokerStars\Gx\filter\sgmt4.bmp
c:\program files\PokerStars\Gx\filter\sgmt4a.bmp
c:\program files\PokerStars\Gx\filter\sgmt5.bmp
c:\program files\PokerStars\Gx\filter\sgmt5a.bmp
c:\program files\PokerStars\Gx\filter\sgmt6.bmp
c:\program files\PokerStars\Gx\filter\sgmt6a.bmp
c:\program files\PokerStars\Gx\filter\sgpm1.bmp
c:\program files\PokerStars\Gx\filter\sgpm1a.bmp
c:\program files\PokerStars\Gx\filter\sgpm2.bmp
c:\program files\PokerStars\Gx\filter\sgpm2a.bmp
c:\program files\PokerStars\Gx\filter\sgpm3.bmp
c:\program files\PokerStars\Gx\filter\sgpm3a.bmp
c:\program files\PokerStars\Gx\filter\sgpm4.bmp
c:\program files\PokerStars\Gx\filter\sgpm4a.bmp
c:\program files\PokerStars\Gx\filter\sgs1.bmp
c:\program files\PokerStars\Gx\filter\sgs1a.bmp
c:\program files\PokerStars\Gx\filter\sgs2.bmp
c:\program files\PokerStars\Gx\filter\sgs2a.bmp
c:\program files\PokerStars\Gx\filter\sgs3.bmp
c:\program files\PokerStars\Gx\filter\sgs3a.bmp
c:\program files\PokerStars\Gx\filter\sgs4.bmp
c:\program files\PokerStars\Gx\filter\sgs4a.bmp
c:\program files\PokerStars\Gx\filter\tr1.bmp
c:\program files\PokerStars\Gx\filter\tr1a.bmp
c:\program files\PokerStars\Gx\filter\tr2.bmp
c:\program files\PokerStars\Gx\filter\tr2a.bmp
c:\program files\PokerStars\Gx\filter\tr3.bmp
c:\program files\PokerStars\Gx\filter\tr3a.bmp
c:\program files\PokerStars\Gx\filter\tr4.bmp
c:\program files\PokerStars\Gx\filter\tr4a.bmp
c:\program files\PokerStars\Gx\filter\tr5.bmp
c:\program files\PokerStars\Gx\filter\tr5a.bmp
c:\program files\PokerStars\Gx\filter\tr6.bmp
c:\program files\PokerStars\Gx\filter\tr6a.bmp
c:\program files\PokerStars\Gx\filter\tr7.bmp
c:\program files\PokerStars\Gx\filter\tr7a.bmp
c:\program files\PokerStars\Gx\filter\ts1.bmp
c:\program files\PokerStars\Gx\filter\ts1a.bmp
c:\program files\PokerStars\Gx\filter\ts2.bmp
c:\program files\PokerStars\Gx\filter\ts2a.bmp
c:\program files\PokerStars\Gx\filter\ts3.bmp
c:\program files\PokerStars\Gx\filter\ts3a.bmp
c:\program files\PokerStars\Gx\filter\ts4.bmp
c:\program files\PokerStars\Gx\filter\ts4a.bmp
c:\program files\PokerStars\Gx\filter\ts5.bmp
c:\program files\PokerStars\Gx\filter\ts5a.bmp
c:\program files\PokerStars\Gx\filterb.bmp
c:\program files\PokerStars\Gx\fonts\ar08.bmp
c:\program files\PokerStars\Gx\fonts\ar08.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\ar08.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\ar08.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\ar08.pff
c:\program files\PokerStars\Gx\fonts\ar09.bmp
c:\program files\PokerStars\Gx\fonts\ar09.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\ar09.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\ar09.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\ar09.pff
c:\program files\PokerStars\Gx\fonts\arb08.bmp
c:\program files\PokerStars\Gx\fonts\arb08.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\arb08.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\arb08.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\arb08.pff
c:\program files\PokerStars\Gx\fonts\arb09.bmp
c:\program files\PokerStars\Gx\fonts\arb09.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\arb09.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\arb09.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\arb09.pff
c:\program files\PokerStars\Gx\fonts\arb10.bmp
c:\program files\PokerStars\Gx\fonts\arb10.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\arb10.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\arb10.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\arb10.pff
c:\program files\PokerStars\Gx\fonts\arb11.bmp
c:\program files\PokerStars\Gx\fonts\arb11.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\arb11.cp1250i.bmp
c:\program files\PokerStars\Gx\fonts\arb11.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\arb11.cp1251i.bmp
c:\program files\PokerStars\Gx\fonts\arb11.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\arb11.cp1252i.bmp
c:\program files\PokerStars\Gx\fonts\arb11.pff
c:\program files\PokerStars\Gx\fonts\arb11i.bmp
c:\program files\PokerStars\Gx\fonts\arb12.bmp
c:\program files\PokerStars\Gx\fonts\arb12.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\arb12.cp1250i.bmp
c:\program files\PokerStars\Gx\fonts\arb12.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\arb12.cp1251i.bmp
c:\program files\PokerStars\Gx\fonts\arb12.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\arb12.cp1252i.bmp
c:\program files\PokerStars\Gx\fonts\arb12.pff
c:\program files\PokerStars\Gx\fonts\arb12i.bmp
c:\program files\PokerStars\Gx\fonts\arb14.bmp
c:\program files\PokerStars\Gx\fonts\arb14.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\arb14.cp1250i.bmp
c:\program files\PokerStars\Gx\fonts\arb14.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\arb14.cp1251i.bmp
c:\program files\PokerStars\Gx\fonts\arb14.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\arb14.cp1252i.bmp
c:\program files\PokerStars\Gx\fonts\arb14.pff
c:\program files\PokerStars\Gx\fonts\arb14i.bmp
c:\program files\PokerStars\Gx\fonts\arbu09.bmp
c:\program files\PokerStars\Gx\fonts\arbu09.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\arbu09.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\arbu09.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\arbu09.pff
c:\program files\PokerStars\Gx\fonts\arbu10.bmp
c:\program files\PokerStars\Gx\fonts\arbu10.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\arbu10.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\arbu10.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\arbu10.pff
c:\program files\PokerStars\Gx\fonts\arbu12.bmp
c:\program files\PokerStars\Gx\fonts\arbu12.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\arbu12.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\arbu12.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\arbu12.pff
c:\program files\PokerStars\Gx\fonts\arbu12i.bmp
c:\program files\PokerStars\Gx\fonts\aru08.bmp
c:\program files\PokerStars\Gx\fonts\aru08.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\aru08.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\aru08.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\aru08.pff
c:\program files\PokerStars\Gx\fonts\aru09.bmp
c:\program files\PokerStars\Gx\fonts\aru09.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\aru09.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\aru09.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\aru09.pff
c:\program files\PokerStars\Gx\fonts\aru10.bmp
c:\program files\PokerStars\Gx\fonts\aru10.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\aru10.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\aru10.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\aru10.pff
c:\program files\PokerStars\Gx\fonts\gmb075.bmp
c:\program files\PokerStars\Gx\fonts\gmb075.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\gmb075.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\gmb075.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\gmb075.pff
c:\program files\PokerStars\Gx\fonts\gmb08.bmp
c:\program files\PokerStars\Gx\fonts\gmb08.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\gmb08.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\gmb08.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\gmb08.pff
c:\program files\PokerStars\Gx\fonts\gmb09.bmp
c:\program files\PokerStars\Gx\fonts\gmb09.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\gmb09.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\gmb09.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\gmb09.pff
c:\program files\PokerStars\Gx\fonts\gmb10.bmp
c:\program files\PokerStars\Gx\fonts\gmb10.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\gmb10.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\gmb10.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\gmb10.pff
c:\program files\PokerStars\Gx\fonts\gmb11.bmp
c:\program files\PokerStars\Gx\fonts\gmb11.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\gmb11.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\gmb11.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\gmb11.pff
c:\program files\PokerStars\Gx\fonts\gmb12.bmp
c:\program files\PokerStars\Gx\fonts\gmb12.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\gmb12.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\gmb12.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\gmb12.pff
c:\program files\PokerStars\Gx\fonts\gmb14.bmp
c:\program files\PokerStars\Gx\fonts\gmb14.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\gmb14.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\gmb14.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\gmb14.pff
c:\program files\PokerStars\Gx\fonts\gmb16.bmp
c:\program files\PokerStars\Gx\fonts\gmb16.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\gmb16.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\gmb16.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\gmb16.pff
c:\program files\PokerStars\Gx\fonts\gmb18.bmp
c:\program files\PokerStars\Gx\fonts\gmb18.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\gmb18.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\gmb18.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\gmb18.pff
c:\program files\PokerStars\Gx\fonts\gmb20.bmp
c:\program files\PokerStars\Gx\fonts\gmb20.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\gmb20.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\gmb20.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\gmb20.pff
c:\program files\PokerStars\Gx\fonts\lg08.bmp
c:\program files\PokerStars\Gx\fonts\lg08.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\lg08.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\lg08.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\lg08.pff
c:\program files\PokerStars\Gx\fonts\lg09.bmp
c:\program files\PokerStars\Gx\fonts\lg09.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\lg09.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\lg09.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\lg09.pff
c:\program files\PokerStars\Gx\fonts\lgb075.bmp
c:\program files\PokerStars\Gx\fonts\lgb075.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\lgb075.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\lgb075.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\lgb075.pff
c:\program files\PokerStars\Gx\fonts\lgb08.bmp
c:\program files\PokerStars\Gx\fonts\lgb08.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\lgb08.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\lgb08.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\lgb08.pff
c:\program files\PokerStars\Gx\fonts\lgb09.bmp
c:\program files\PokerStars\Gx\fonts\lgb09.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\lgb09.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\lgb09.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\lgb09.pff
c:\program files\PokerStars\Gx\fonts\lgb10.bmp
c:\program files\PokerStars\Gx\fonts\lgb10.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\lgb10.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\lgb10.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\lgb10.pff
c:\program files\PokerStars\Gx\fonts\lgb11.bmp
c:\program files\PokerStars\Gx\fonts\lgb11.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\lgb11.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\lgb11.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\lgb11.pff
c:\program files\PokerStars\Gx\fonts\lgb12.bmp
c:\program files\PokerStars\Gx\fonts\lgb12.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\lgb12.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\lgb12.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\lgb12.pff
c:\program files\PokerStars\Gx\fonts\lgb14.bmp
c:\program files\PokerStars\Gx\fonts\lgb14.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\lgb14.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\lgb14.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\lgb14.pff
c:\program files\PokerStars\Gx\fonts\lgb16.bmp
c:\program files\PokerStars\Gx\fonts\lgb16.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\lgb16.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\lgb16.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\lgb16.pff
c:\program files\PokerStars\Gx\fonts\lgb18.bmp
c:\program files\PokerStars\Gx\fonts\lgb18.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\lgb18.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\lgb18.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\lgb18.pff
c:\program files\PokerStars\Gx\fonts\lgb20.bmp
c:\program files\PokerStars\Gx\fonts\lgb20.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\lgb20.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\lgb20.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\lgb20.pff
c:\program files\PokerStars\Gx\fonts\sb08.bmp
c:\program files\PokerStars\Gx\fonts\sb08.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sb08.cp1250x.bmp
c:\program files\PokerStars\Gx\fonts\sb08.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sb08.cp1251x.bmp
c:\program files\PokerStars\Gx\fonts\sb08.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sb08.cp1252x.bmp
c:\program files\PokerStars\Gx\fonts\sb08.pff
c:\program files\PokerStars\Gx\fonts\sb08x.bmp
c:\program files\PokerStars\Gx\fonts\sb09.bmp
c:\program files\PokerStars\Gx\fonts\sb09.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sb09.cp1250x.bmp
c:\program files\PokerStars\Gx\fonts\sb09.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sb09.cp1251x.bmp
c:\program files\PokerStars\Gx\fonts\sb09.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sb09.cp1252x.bmp
c:\program files\PokerStars\Gx\fonts\sb09.pff
c:\program files\PokerStars\Gx\fonts\sb09x.bmp
c:\program files\PokerStars\Gx\fonts\sb10.bmp
c:\program files\PokerStars\Gx\fonts\sb10.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sb10.cp1250x.bmp
c:\program files\PokerStars\Gx\fonts\sb10.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sb10.cp1251x.bmp
c:\program files\PokerStars\Gx\fonts\sb10.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sb10.cp1252x.bmp
c:\program files\PokerStars\Gx\fonts\sb10.pff
c:\program files\PokerStars\Gx\fonts\sb10x.bmp
c:\program files\PokerStars\Gx\fonts\sb11.bmp
c:\program files\PokerStars\Gx\fonts\sb11.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sb11.cp1250x.bmp
c:\program files\PokerStars\Gx\fonts\sb11.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sb11.cp1251x.bmp
c:\program files\PokerStars\Gx\fonts\sb11.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sb11.cp1252x.bmp
c:\program files\PokerStars\Gx\fonts\sb11.pff
c:\program files\PokerStars\Gx\fonts\sb11x.bmp
c:\program files\PokerStars\Gx\fonts\sb12.bmp
c:\program files\PokerStars\Gx\fonts\sb12.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sb12.cp1250x.bmp
c:\program files\PokerStars\Gx\fonts\sb12.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sb12.cp1251x.bmp
c:\program files\PokerStars\Gx\fonts\sb12.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sb12.cp1252x.bmp
c:\program files\PokerStars\Gx\fonts\sb12.pff
c:\program files\PokerStars\Gx\fonts\sb12x.bmp
c:\program files\PokerStars\Gx\fonts\sb14.bmp
c:\program files\PokerStars\Gx\fonts\sb14.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sb14.cp1250x.bmp
c:\program files\PokerStars\Gx\fonts\sb14.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sb14.cp1251x.bmp
c:\program files\PokerStars\Gx\fonts\sb14.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sb14.cp1252x.bmp
c:\program files\PokerStars\Gx\fonts\sb14.pff
c:\program files\PokerStars\Gx\fonts\sb14x.bmp
c:\program files\PokerStars\Gx\fonts\sb16.bmp
c:\program files\PokerStars\Gx\fonts\sb16.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sb16.cp1250x.bmp
c:\program files\PokerStars\Gx\fonts\sb16.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sb16.cp1251x.bmp
c:\program files\PokerStars\Gx\fonts\sb16.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sb16.cp1252x.bmp
c:\program files\PokerStars\Gx\fonts\sb16.pff
c:\program files\PokerStars\Gx\fonts\sb16x.bmp
c:\program files\PokerStars\Gx\fonts\sbf10.bmp
c:\program files\PokerStars\Gx\fonts\sbf10.pff
c:\program files\PokerStars\Gx\fonts\sbf10x.bmp
c:\program files\PokerStars\Gx\fonts\sbf11.bmp
c:\program files\PokerStars\Gx\fonts\sbf11.pff
c:\program files\PokerStars\Gx\fonts\sbf11x.bmp
c:\program files\PokerStars\Gx\fonts\sbr10.bmp
c:\program files\PokerStars\Gx\fonts\sbr10.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sbr10.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sbr10.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sbr10.pff
c:\program files\PokerStars\Gx\fonts\sbr11.bmp
c:\program files\PokerStars\Gx\fonts\sbr11.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sbr11.cp1250x.bmp
c:\program files\PokerStars\Gx\fonts\sbr11.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sbr11.cp1251x.bmp
c:\program files\PokerStars\Gx\fonts\sbr11.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sbr11.cp1252x.bmp
c:\program files\PokerStars\Gx\fonts\sbr11.pff
c:\program files\PokerStars\Gx\fonts\sbr11x.bmp
c:\program files\PokerStars\Gx\fonts\sf05.bmp
c:\program files\PokerStars\Gx\fonts\sf05.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sf05.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sf05.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sf05.pff
c:\program files\PokerStars\Gx\fonts\sf06.bmp
c:\program files\PokerStars\Gx\fonts\sf06.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sf06.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sf06.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sf06.pff
c:\program files\PokerStars\Gx\fonts\sf07.bmp
c:\program files\PokerStars\Gx\fonts\sf07.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sf07.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sf07.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sf07.pff
c:\program files\PokerStars\Gx\fonts\sfu06.bmp
c:\program files\PokerStars\Gx\fonts\sfu06.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sfu06.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sfu06.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sfu06.pff
c:\program files\PokerStars\Gx\fonts\sfu07.bmp
c:\program files\PokerStars\Gx\fonts\sfu07.cp1250.bmp
c:\program files\PokerStars\Gx\fonts\sfu07.cp1251.bmp
c:\program files\PokerStars\Gx\fonts\sfu07.cp1252.bmp
c:\program files\PokerStars\Gx\fonts\sfu07.pff
c:\program files\PokerStars\Gx\fonts\subst.ini
c:\program files\PokerStars\Gx\ico.a.bmp
c:\program files\PokerStars\Gx\ico.bmp
c:\program files\PokerStars\Gx\instacashlogo.bmp
c:\program files\PokerStars\Gx\ipb.a.bmp
c:\program files\PokerStars\Gx\ipb.bmp
c:\program files\PokerStars\Gx\ipkt_ab.jpg
c:\program files\PokerStars\Gx\ipkt_gr.jpg
c:\program files\PokerStars\Gx\ipkt_jh.jpg
c:\program files\PokerStars\Gx\ipkt_kt.jpg
c:\program files\PokerStars\Gx\ipkt_lp.jpg
c:\program files\PokerStars\Gx\ipkt1.a.bmp
c:\program files\PokerStars\Gx\ipkt1.bmp
c:\program files\PokerStars\Gx\ipkt2.a.bmp
c:\program files\PokerStars\Gx\ipkt2.bmp
c:\program files\PokerStars\Gx\ipkt3.a.bmp
c:\program files\PokerStars\Gx\ipkt3.bmp
c:\program files\PokerStars\Gx\L2\fb75.bmp
c:\program files\PokerStars\Gx\L2\fb75a.bmp
c:\program files\PokerStars\Gx\label\border.a.bmp
c:\program files\PokerStars\Gx\label\border.bmp
c:\program files\PokerStars\Gx\label\borderb.a.bmp
c:\program files\PokerStars\Gx\label\borderb.bmp
c:\program files\PokerStars\Gx\label\emblem.a.bmp
c:\program files\PokerStars\Gx\label\emblem.bmp
c:\program files\PokerStars\Gx\label\lang.a.bmp
c:\program files\PokerStars\Gx\label\lang.bmp
c:\program files\PokerStars\Gx\label\note.a.bmp
c:\program files\PokerStars\Gx\label\note.bmp
c:\program files\PokerStars\Gx\label\pm.a.bmp
c:\program files\PokerStars\Gx\label\seat.a.bmp
c:\program files\PokerStars\Gx\label\seat.bmp
c:\program files\PokerStars\Gx\label\status.a.bmp
c:\program files\PokerStars\Gx\label\status.bmp
c:\program files\PokerStars\Gx\label\statusb.a.bmp
c:\program files\PokerStars\Gx\label\statusb.bmp
c:\program files\PokerStars\Gx\label\tlg-w.a.bmp
c:\program files\PokerStars\Gx\label\tlg-w.bmp
c:\program files\PokerStars\Gx\label\tlg.a.bmp
c:\program files\PokerStars\Gx\label\tlg.bmp
c:\program files\PokerStars\Gx\label\tt.a.bmp
c:\program files\PokerStars\Gx\label\userface.bmp
c:\program files\PokerStars\Gx\label\vip-status-l.a.bmp
c:\program files\PokerStars\Gx\label\vip-status-l.bmp
c:\program files\PokerStars\Gx\label\vip-status.a.bmp
c:\program files\PokerStars\Gx\label\vip-status.bmp
c:\program files\PokerStars\Gx\lobby\apply.a.bmp
c:\program files\PokerStars\Gx\lobby\apply.bmp
c:\program files\PokerStars\Gx\lobby\b.a.bmp
c:\program files\PokerStars\Gx\lobby\b.bmp
c:\program files\PokerStars\Gx\lobby\bi.a.bmp
c:\program files\PokerStars\Gx\lobby\bi.bmp
c:\program files\PokerStars\Gx\lobby\bl.a.bmp
c:\program files\PokerStars\Gx\lobby\bl.bmp
c:\program files\PokerStars\Gx\lobby\bm.a.bmp
c:\program files\PokerStars\Gx\lobby\bm.bmp
c:\program files\PokerStars\Gx\lobby\cb.bmp
c:\program files\PokerStars\Gx\lobby\cbg.a.bmp
c:\program files\PokerStars\Gx\lobby\cbg.bmp
c:\program files\PokerStars\Gx\lobby\en\b.a.bmp
c:\program files\PokerStars\Gx\lobby\en\b.bmp
c:\program files\PokerStars\Gx\lobby\en\bl.a.bmp
c:\program files\PokerStars\Gx\lobby\en\bl.bmp
c:\program files\PokerStars\Gx\lobby\en\bm.a.bmp
c:\program files\PokerStars\Gx\lobby\en\bm.bmp
c:\program files\PokerStars\Gx\lobby\f-arr.a.bmp
c:\program files\PokerStars\Gx\lobby\f-arr.bmp
c:\program files\PokerStars\Gx\lobby\f.a.bmp
c:\program files\PokerStars\Gx\lobby\f.bmp
c:\program files\PokerStars\Gx\lobby\flyer-h.a.bmp
c:\program files\PokerStars\Gx\lobby\flyer-h.bmp
c:\program files\PokerStars\Gx\lobby\lang.a.bmp
c:\program files\PokerStars\Gx\lobby\lang.bmp
c:\program files\PokerStars\Gx\lobby\lb.bmp
c:\program files\PokerStars\Gx\lobby\lbbc.a.bmp
c:\program files\PokerStars\Gx\lobby\lbbc.bmp
c:\program files\PokerStars\Gx\lobby\lbbl.a.bmp
c:\program files\PokerStars\Gx\lobby\lbbl.bmp
c:\program files\PokerStars\Gx\lobby\lbbr.a.bmp
c:\program files\PokerStars\Gx\lobby\lbbr.bmp
c:\program files\PokerStars\Gx\lobby\lbml.a.bmp
c:\program files\PokerStars\Gx\lobby\lbml.bmp
c:\program files\PokerStars\Gx\lobby\lbmr.a.bmp
c:\program files\PokerStars\Gx\lobby\lbmr.bmp
c:\program files\PokerStars\Gx\lobby\lbo.a.bmp
c:\program files\PokerStars\Gx\lobby\lbo.bmp
c:\program files\PokerStars\Gx\lobby\lbtc.a.bmp
c:\program files\PokerStars\Gx\lobby\lbtc.bmp
c:\program files\PokerStars\Gx\lobby\lbtl.a.bmp
c:\program files\PokerStars\Gx\lobby\lbtl.bmp
c:\program files\PokerStars\Gx\lobby\lbtr.a.bmp
c:\program files\PokerStars\Gx\lobby\lbtr.bmp
c:\program files\PokerStars\Gx\lobby\lmi.a.bmp
c:\program files\PokerStars\Gx\lobby\lmi.bmp
c:\program files\PokerStars\Gx\lobby\ltb1.a.bmp
c:\program files\PokerStars\Gx\lobby\ltb1.bmp
c:\program files\PokerStars\Gx\lobby\ltb2.bmp
c:\program files\PokerStars\Gx\lobby\ltb3.bmp
c:\program files\PokerStars\Gx\lobby\lto.a.bmp
c:\program files\PokerStars\Gx\lobby\lto.bmp
c:\program files\PokerStars\Gx\lobby\mbc.a.bmp
c:\program files\PokerStars\Gx\lobby\mbc.bmp
c:\program files\PokerStars\Gx\lobby\mbl.a.bmp
c:\program files\PokerStars\Gx\lobby\mbl.bmp
c:\program files\PokerStars\Gx\lobby\mbr.a.bmp
c:\program files\PokerStars\Gx\lobby\mbr.bmp
c:\program files\PokerStars\Gx\lobby\pbbc.a.bmp
c:\program files\PokerStars\Gx\lobby\pbbc.bmp
c:\program files\PokerStars\Gx\lobby\pbbcr.a.bmp
c:\program files\PokerStars\Gx\lobby\pbbcr.bmp
c:\program files\PokerStars\Gx\lobby\pbbl.a.bmp
c:\program files\PokerStars\Gx\lobby\pbbl.bmp
c:\program files\PokerStars\Gx\lobby\pbbr.a.bmp
c:\program files\PokerStars\Gx\lobby\pbbr.bmp
c:\program files\PokerStars\Gx\lobby\pbml.a.bmp
c:\program files\PokerStars\Gx\lobby\pbml.bmp
c:\program files\PokerStars\Gx\lobby\pbmr.a.bmp
c:\program files\PokerStars\Gx\lobby\pbmr.bmp
c:\program files\PokerStars\Gx\lobby\pbtc.a.bmp
c:\program files\PokerStars\Gx\lobby\pbtc.bmp
c:\program files\PokerStars\Gx\lobby\pbtc2.a.bmp
c:\program files\PokerStars\Gx\lobby\pbtc2.bmp
c:\program files\PokerStars\Gx\lobby\pbtl.a.bmp
c:\program files\PokerStars\Gx\lobby\pbtl.bmp
c:\program files\PokerStars\Gx\lobby\pbtl2.a.bmp
c:\program files\PokerStars\Gx\lobby\pbtl2.bmp
c:\program files\PokerStars\Gx\lobby\pbtr.a.bmp
c:\program files\PokerStars\Gx\lobby\pbtr.bmp
c:\program files\PokerStars\Gx\lobby\pbtr2.a.bmp
c:\program files\PokerStars\Gx\lobby\pbtr2.bmp
c:\program files\PokerStars\Gx\lobby\ps.a.bmp
c:\program files\PokerStars\Gx\lobby\ps.bmp
c:\program files\PokerStars\Gx\lobby\quote.a.bmp
c:\program files\PokerStars\Gx\lobby\quote.bmp
c:\program files\PokerStars\Gx\lobby\r1.a.bmp
c:\program files\PokerStars\Gx\lobby\r1.bmp
c:\program files\PokerStars\Gx\lobby\r2.a.bmp
c:\program files\PokerStars\Gx\lobby\r2.bmp
c:\program files\PokerStars\Gx\lobby\r3.bmp
c:\program files\PokerStars\Gx\lobby\search-header.a.bmp
c:\program files\PokerStars\Gx\lobby\search-header.bmp
c:\program files\PokerStars\Gx\lobby\select-bg.a.bmp
c:\program files\PokerStars\Gx\lobby\select-bg.bmp
c:\program files\PokerStars\Gx\lobby\tlmc.a.bmp
c:\program files\PokerStars\Gx\lobby\tlmc.bmp
c:\program files\PokerStars\Gx\lobby\tlml.a.bmp
c:\program files\PokerStars\Gx\lobby\tlml.bmp
c:\program files\PokerStars\Gx\lobby\tlmr.a.bmp
c:\program files\PokerStars\Gx\lobby\tlmr.bmp
c:\program files\PokerStars\Gx\lobby\tltc.a.bmp
c:\program files\PokerStars\Gx\lobby\tltc.bmp
c:\program files\PokerStars\Gx\lobby\tltl.a.bmp
c:\program files\PokerStars\Gx\lobby\tltl.bmp
c:\program files\PokerStars\Gx\lobby\tltr.a.bmp
c:\program files\PokerStars\Gx\lobby\tltr.bmp
c:\program files\PokerStars\Gx\lobby\tm.a.bmp
c:\program files\PokerStars\Gx\lobby\tm.bmp
c:\program files\PokerStars\Gx\lobby\tmb.a.bmp
c:\program files\PokerStars\Gx\lobby\tmb.bmp
c:\program files\PokerStars\Gx\lobby\tmi.a.bmp
c:\program files\PokerStars\Gx\lobby\tmi.bmp
c:\program files\PokerStars\Gx\lobby\tn.bmp
c:\program files\PokerStars\Gx\lobby\vip-status-l.a.bmp
c:\program files\PokerStars\Gx\lobby\vip-status-l.bmp
c:\program files\PokerStars\Gx\lobby\vip-store.a.bmp
c:\program files\PokerStars\Gx\lobby\vip-store.bmp
c:\program files\PokerStars\Gx\lobby\vsc.a.bmp
c:\program files\PokerStars\Gx\lobby\vsc.bmp
c:\program files\PokerStars\Gx\lobby\vsl.a.bmp
c:\program files\PokerStars\Gx\lobby\vsl.bmp
c:\program files\PokerStars\Gx\lobby\vsr.a.bmp
c:\program files\PokerStars\Gx\lobby\vsr.bmp
c:\program files\PokerStars\Gx\ltb1.a.bmp
c:\program files\PokerStars\Gx\ltb1.bmp
c:\program files\PokerStars\Gx\ltb2.bmp
c:\program files\PokerStars\Gx\ltb3.bmp
c:\program files\PokerStars\Gx\moneygram_c.bmp
c:\program files\PokerStars\Gx\moneygram_r.bmp
c:\program files\PokerStars\Gx\pb.a.bmp
c:\program files\PokerStars\Gx\pb.bmp
c:\program files\PokerStars\Gx\pbb.a.bmp
c:\program files\PokerStars\Gx\pbb.bmp
c:\program files\PokerStars\Gx\pbc.bmp
c:\program files\PokerStars\Gx\pblt.a.bmp
c:\program files\PokerStars\Gx\pblt.bmp
c:\program files\PokerStars\Gx\pci.a.bmp
c:\program files\PokerStars\Gx\pci.bmp
c:\program files\PokerStars\Gx\pib.bmp
c:\program files\PokerStars\Gx\pmsp.bmp
c:\program files\PokerStars\Gx\pmt.bmp
c:\program files\PokerStars\Gx\ps.a.bmp
c:\program files\PokerStars\Gx\ps.bmp
c:\program files\PokerStars\Gx\ptb.bmp
c:\program files\PokerStars\Gx\replay\backward.a.bmp
c:\program files\PokerStars\Gx\replay\backward.bmp
c:\program files\PokerStars\Gx\replay\face.a.bmp
c:\program files\PokerStars\Gx\replay\face.bmp
c:\program files\PokerStars\Gx\replay\forward.a.bmp
c:\program files\PokerStars\Gx\replay\forward.bmp
c:\program files\PokerStars\Gx\replay\link.a.bmp
c:\program files\PokerStars\Gx\replay\link.bmp
c:\program files\PokerStars\Gx\replay\next.a.bmp
c:\program files\PokerStars\Gx\replay\next.bmp
c:\program files\PokerStars\Gx\replay\pause.a.bmp
c:\program files\PokerStars\Gx\replay\pause.bmp
c:\program files\PokerStars\Gx\replay\prev.a.bmp
c:\program files\PokerStars\Gx\replay\prev.bmp
c:\program files\PokerStars\Gx\replay\r.a.bmp
c:\program files\PokerStars\Gx\replay\r.bmp
c:\program files\PokerStars\Gx\replay\reset.a.bmp
c:\program files\PokerStars\Gx\replay\reset.bmp
c:\program files\PokerStars\Gx\replay\restart.a.bmp
c:\program files\PokerStars\Gx\replay\restart.bmp
c:\program files\PokerStars\Gx\replay\resume.a.bmp
c:\program files\PokerStars\Gx\replay\resume.bmp
c:\program files\PokerStars\Gx\reserved.a.bmp
c:\program files\PokerStars\Gx\reserved.bmp
c:\program files\PokerStars\Gx\table.jpg
c:\program files\PokerStars\Gx\tableseat.a.bmp
c:\program files\PokerStars\Gx\tableseat.bmp
c:\program files\PokerStars\Gx\templates\browser.css
c:\program files\PokerStars\Gx\templates\dialog.css
c:\program files\PokerStars\Gx\templates\dialog.html
c:\program files\PokerStars\Gx\templates\help.html
c:\program files\PokerStars\Gx\templates\menu.xml
c:\program files\PokerStars\Gx\tmp.jpg
c:\program files\PokerStars\Gx\update.bmp
c:\program files\PokerStars\i18n.msg_cli.txt
c:\program files\PokerStars\ImgCache\0070A15549E3D7C35800490B37593927.psi
c:\program files\PokerStars\ImgCache\0070C8BFA644B40055363305DCCBFA60.psi
c:\program files\PokerStars\ImgCache\016638A233FB245B43D09CA5EF55B1C3.psi
c:\program files\PokerStars\ImgCache\0401CB01F40785A71F52F623648A9639.psi
c:\program files\PokerStars\ImgCache\04C9AA71A47D3DA7CC40FB414F7ED816.psi
c:\program files\PokerStars\ImgCache\05022E36D01A80FEDDEC43C435C5F336.psi
c:\program files\PokerStars\ImgCache\074219322F446601CBE319F70A635F87.psi
c:\program files\PokerStars\ImgCache\092DA5EF652445A4D43FC53584226FE9.psi
c:\program files\PokerStars\ImgCache\0A0CAEC185203F3DEDEB4DFF9DD870A4.psi
c:\program files\PokerStars\ImgCache\0A5A21E0FF10B0D99A06F2BC3321D67F.psi
c:\program files\PokerStars\ImgCache\0AEBC3E3EDA5B9CC238A435B312A4C08.psi
c:\program files\PokerStars\ImgCache\0B69D15D04503106BE0126CB55540B8C.psi
c:\program files\PokerStars\ImgCache\0B863B85138ED386C219081F5E7F92B6.psi
c:\program files\PokerStars\ImgCache\0D22A6FC24E85607EEE06E4E521A797E.psi
c:\program files\PokerStars\ImgCache\0D8D507E0BE53E3EC6FBC7ED84B00AEE.psi
c:\program files\PokerStars\ImgCache\0DBF0E1048156AC9274438342ECAF624.psi
c:\program files\PokerStars\ImgCache\0E21B7D4D947604A90BE859FBA11316A.psi
c:\program files\PokerStars\ImgCache\0FADF2133B0C62A00737486539CE8C76.psi
c:\program files\PokerStars\ImgCache\104CCF31512107EBCC2EBCB1452E9828.psi
c:\program files\PokerStars\ImgCache\116323DA2B603555A6EF3DC649C813A4.psi
c:\program files\PokerStars\ImgCache\118BDB5E617AA3AE6895F1BB4488C2FA.psi
c:\program files\PokerStars\ImgCache\11E4C86D713899B3BCBFD4FEC1EFB85A.psi
c:\program files\PokerStars\ImgCache\1294C5C2BEADA2173464B359DDF9A2F3.psi
c:\program files\PokerStars\ImgCache\132A4D69B0165CC79B04B5596D9837AE.psi
c:\program files\PokerStars\ImgCache\143374FDF789D9F30E0D5AA47F83048D.psi
c:\program files\PokerStars\ImgCache\14721486F0EE757A52FC25EB1A109C19.psi
c:\program files\PokerStars\ImgCache\1537125540D72E859BF46C637BB73476.psi
c:\program files\PokerStars\ImgCache\16D1113CEB9D5EE707A2DCF41871CD45.psi
c:\program files\PokerStars\ImgCache\1778289E42C319F1F62A65837325663A.psi
c:\program files\PokerStars\ImgCache\1807A20465FFA50EE83D70DEF7AB74D1.psi
c:\program files\PokerStars\ImgCache\18512C78882182208C5FB4EBBDDB654A.psi
c:\program files\PokerStars\ImgCache\186A176D97AC480D3AECFEC3D673DBCA.psi
c:\program files\PokerStars\ImgCache\1907110DE8682F94FCD392486926D7D0.psi
c:\program files\PokerStars\ImgCache\19715CC37ACE0B148F118D1A92F5634B.psi
c:\program files\PokerStars\ImgCache\197CFD4C02DC3022A86E561A6AC5432A.psi
c:\program files\PokerStars\ImgCache\19F72B3915AE587377BBCF26BE1E30B1.psi
c:\program files\PokerStars\ImgCache\1ADADDB214E6E697427A47481294CE8D.psi
c:\program files\PokerStars\ImgCache\1BDEE9A1AD7BA95E06959814EEE4917C.psi
c:\program files\PokerStars\ImgCache\1CF9AEFCEDAB5C10070BE54844D9B945.psi
c:\program files\PokerStars\ImgCache\1D576E65053E9EAC08C07CD87191C3D8.psi
c:\program files\PokerStars\ImgCache\1DA218E33B977C089FA7899FA32FE56A.psi
c:\program files\PokerStars\ImgCache\1E9BD81A99654E4DA4D678CED0FF7416.psi
c:\program files\PokerStars\ImgCache\202D7446BF5DD0419F25B7EC0447F060.psi
c:\program files\PokerStars\ImgCache\2042BE3FC033397D912F28ED66D9412C.psi
c:\program files\PokerStars\ImgCache\2164A9AD259941A323ED9535CD20A61F.psi
c:\program files\PokerStars\ImgCache\220AE5DF7FBFF79FC0FAF4EEC8ACF515.psi
c:\program files\PokerStars\ImgCache\22A1F3912F2ABB22DA797927DA69380D.psi
c:\program files\PokerStars\ImgCache\261CDCE39269C1C70824CC65B8E0ECFE.psi
c:\program files\PokerStars\ImgCache\275648FA429C2531C83EE60642E3317E.psi
c:\program files\PokerStars\ImgCache\280939235E8C1CD1EF2A861449467088.psi
c:\program files\PokerStars\ImgCache\2849117E01C07B0481D9E8EA45296D9D.psi
c:\program files\PokerStars\ImgCache\2BB16F9EF126D440673C1F9C0A1B190B.psi
c:\program files\PokerStars\ImgCache\2BC1E9FAB6E06063292219DF5AB651C4.psi
c:\program files\PokerStars\ImgCache\2CBE1238FAC79F04F856DDADC34D14BE.psi
c:\program files\PokerStars\ImgCache\2D4E55261BB7331A63F8EA71B1B8288C.psi
c:\program files\PokerStars\ImgCache\2D93F59BA6C4A87DF1F974091803D58A.psi
c:\program files\PokerStars\ImgCache\2E40BF34EFAF917842EB719DE718A286.psi
c:\program files\PokerStars\ImgCache\2F85C9242FDFAE06EC0C3AE215439C02.psi
c:\program files\PokerStars\ImgCache\2FCA593AA8EE6F7D791F4F3B4D984E5D.psi
c:\program files\PokerStars\ImgCache\30D878D6424BA2A01FC3773CBE3ABFE2.psi
c:\program files\PokerStars\ImgCache\31384041E05A425CB6C8994C5C1E442F.psi
c:\program files\PokerStars\ImgCache\32387D7BD9A1833FFD314E38901A6E7A.psi
c:\program files\PokerStars\ImgCache\331988D9286B117CB8C6A1E59FBA537D.psi
c:\program files\PokerStars\ImgCache\33AE14BBAB60C6D9104FD86E4928D90D.psi
c:\program files\PokerStars\ImgCache\34D9589B63DDB35440B4356B178D327B.psi
c:\program files\PokerStars\ImgCache\35570CF8ED7BECE96AD8221470374982.psi
c:\program files\PokerStars\ImgCache\35FE35897356C761FD4786A6E57C12F8.psi
c:\program files\PokerStars\ImgCache\36087250E393F997CB6EF3EBBEF289E5.psi
c:\program files\PokerStars\ImgCache\367C4F63CDCA539AD0D9D51A73927903.psi
c:\program files\PokerStars\ImgCache\38F259B1D87694ABA7E7CB868C9948DB.psi
c:\program files\PokerStars\ImgCache\39585A76A56BE59446500BBA8AE9B471.psi
c:\program files\PokerStars\ImgCache\3B6643EAE1F65AE472A16F9189012416.psi
c:\program files\PokerStars\ImgCache\3C3921DBFA631AB148474C8BC86AD56C.psi
c:\program files\PokerStars\ImgCache\3E04AECC29EF1EE59E64280C46C98FB1.psi
c:\program files\PokerStars\ImgCache\3E6E345BF2CAB4AAC9FED416F5CD6F2B.psi
c:\program files\PokerStars\ImgCache\3F8D6A3D71836E3C7318FDE5600FF1A5.psi
c:\program files\PokerStars\ImgCache\3F9D32D0AFFD6614C958D4C098419011.psi
c:\program files\PokerStars\ImgCache\41574143EE05A2FED88F6B5DB07EF805.psi
c:\program files\PokerStars\ImgCache\430213B75C82A3C85B25303B5ED9C921.psi
c:\program files\PokerStars\ImgCache\446CB746D1EABAAE03768ABC90CF1CDA.psi
c:\program files\PokerStars\ImgCache\447F3B07D6B11F9C443E0432169ECD99.psi
c:\program files\PokerStars\ImgCache\47214FFE0170408BAA715F3DC775003F.psi
c:\program files\PokerStars\ImgCache\4A18D343A5C6DEAD4DE77DA548E714CA.psi
c:\program files\PokerStars\ImgCache\4BD0BC6252623DB973D05BF57E3AC33B.psi
c:\program files\PokerStars\ImgCache\4BE289CAD71BD73906CE983A3BA4F916.psi
c:\program files\PokerStars\ImgCache\4C5CBE195CACA127FDB0EE85415CF60B.psi
c:\program files\PokerStars\ImgCache\4CF954D30D1AA7E153D7BA3EBE65DA30.psi
c:\program files\PokerStars\ImgCache\4D5812F8A6C5886F2A54B91463922B35.psi
c:\program files\PokerStars\ImgCache\4D7D485A70E0380442BE6BC0C1BE3CC2.psi
c:\program files\PokerStars\ImgCache\4DC2FEDA02B2ED439BB4AA4345D779B8.psi
c:\program files\PokerStars\ImgCache\4DE5AB826CE9A9590D05CD905F2B4402.psi
c:\program files\PokerStars\ImgCache\4E6143C49DE9DB2A2561711E1CF26946.psi
c:\program files\PokerStars\ImgCache\4F48CB7E5C53FBAA1BB09370453A69A9.psi
c:\program files\PokerStars\ImgCache\512013CB42538ED4B52C00FD314F581B.psi
c:\program files\PokerStars\ImgCache\53B0F687FE300C610F1F62EEE7B93144.psi
c:\program files\PokerStars\ImgCache\54BAC315FD22E950E1652099B5B93D6A.psi
c:\program files\PokerStars\ImgCache\54DC736CB1414D304BDC8E54143C7BD6.psi
c:\program files\PokerStars\ImgCache\54FDF84B8860955DCDF51BA12FA4AAEF.psi
c:\program files\PokerStars\ImgCache\556D6EDC76BA1CF8E9A8E83500D037E5.psi
c:\program files\PokerStars\ImgCache\5576D8ED2666A583DD7AE3AC131B2044.psi
c:\program files\PokerStars\ImgCache\55790CE25361E748CDCA496D9CCC92AC.psi
c:\program files\PokerStars\ImgCache\55840CCCAF4033E5AF0D29EDEEFA41F6.psi
c:\program files\PokerStars\ImgCache\5783F41DEFEAC588A5F63AC076F4B4C7.psi
c:\program files\PokerStars\ImgCache\5790F39EBEA597B6B3E25669B962B06B.psi
c:\program files\PokerStars\ImgCache\5853EC94CC46F6CD6C507BADA7A0837F.psi
c:\program files\PokerStars\ImgCache\5917BBA844C7E9B027B889EA272A8781.psi
c:\program files\PokerStars\ImgCache\594A586356A8DF71050721603DC74020.psi
c:\program files\PokerStars\ImgCache\5BDCFDF8A067ED53C9C6CC4E3DE718AA.psi
c:\program files\PokerStars\ImgCache\5CBFE3D23268D79DFA707C564910075F.psi
c:\program files\PokerStars\ImgCache\5D6B756008B18482A5E5EAFF48EE2BAE.psi
c:\program files\PokerStars\ImgCache\5D767E1DC663DDCC665E6E9FB92670A7.psi
c:\program files\PokerStars\ImgCache\5F2AB0AD9296C9CD8B646CD7FB1CA8EA.psi
c:\program files\PokerStars\ImgCache\5F761DA4A7846D627F80221FB43BD084.psi
c:\program files\PokerStars\ImgCache\5F9801F7186C97830D6EB26AF3354377.psi
c:\program files\PokerStars\ImgCache\5FDCE8244328888FF4A0A7242247FB44.psi
c:\program files\PokerStars\ImgCache\606C19A5A057057666550CABC1E4773A.psi
c:\program files\PokerStars\ImgCache\607EC4CCEBD51251260A471A2D408133.psi
c:\program files\PokerStars\ImgCache\608A1B50A303EA48EB8FA55D2C7D8A1B.psi
c:\program files\PokerStars\ImgCache\60C975665337DEBA5AB509F8A30AB867.psi
c:\program files\PokerStars\ImgCache\61109728A01A8A588CF53FC5D4029991.psi
c:\program files\PokerStars\ImgCache\62D3FDCBEEBBDFFB0F1E6ED5F9AB1AB0.psi
c:\program files\PokerStars\ImgCache\62EAB2B14DD8E9EF15990DAB5BC5BDC8.psi
c:\program files\PokerStars\ImgCache\633D7607693D936B628E6A7AB913FF85.psi
c:\program files\PokerStars\ImgCache\648493E85FF40C5EE019893F01A532D4.psi
c:\program files\PokerStars\ImgCache\66AA52310C5F002818EB6DB709C5367E.psi
c:\program files\PokerStars\ImgCache\66E22DBE39A108D1C9CF2F3CB25BA282.psi
c:\program files\PokerStars\ImgCache\68DC5459CF6E20C36791D6B6F396A508.psi
c:\program files\PokerStars\ImgCache\6A6C9055626642EAA55021E04069E30D.psi
c:\program files\PokerStars\ImgCache\6A9E59C74B729AE3DD01041202CE137C.psi
c:\program files\PokerStars\ImgCache\714DA837F8A793421187B74684D5F188.psi
c:\program files\PokerStars\ImgCache\71B9BAF05FCF7B0B644612256A3155A3.psi
c:\program files\PokerStars\ImgCache\71CECB4AA98B7E68A5734E73E1B05F5D.psi
c:\program files\PokerStars\ImgCache\7388D3126394D280DAE8DDFD0B22D9A8.psi
c:\program files\PokerStars\ImgCache\7700FFAB68A60FC80F58A925E6FC782E.psi
c:\program files\PokerStars\ImgCache\775C3DDBFBFDDA083D012F76CB0061BE.psi
c:\program files\PokerStars\ImgCache\77FF2A85FBE80F883355229DD98E844B.psi
c:\program files\PokerStars\ImgCache\78077CE9A352E74A13A98158F06746D0.psi
c:\program files\PokerStars\ImgCache\796F480EE82AAA0704CFA229BE8156D9.psi
c:\program files\PokerStars\ImgCache\79A7DDB94B3F4BD71BB1175DEF30BCEC.psi
c:\program files\PokerStars\ImgCache\7AC3B122B7DC7BA98657E001C83B27A3.psi
c:\program files\PokerStars\ImgCache\7B5D85402D0FE00E40D53E01A7ECACE1.psi
c:\program files\PokerStars\ImgCache\7CC468CB32668DC0B36BB5BCB5925AA5.psi
c:\program files\PokerStars\ImgCache\7EDB8650962767DB88B8C42A8B60F0E4.psi
c:\program files\PokerStars\ImgCache\7F62D9B38DF17CC5D79E0DC58CC67F2E.psi
c:\program files\PokerStars\ImgCache\7F89642BD4C6F72A568D956A285889EF.psi
c:\program files\PokerStars\ImgCache\825A160A7C2F5BF110981D58859CA819.psi
c:\program files\PokerStars\ImgCache\82A7C0BD25B324BED2A120116981EBF6.psi
c:\program files\PokerStars\ImgCache\83A4F50CB3486190DBD901E4980E3A4D.psi
c:\program files\PokerStars\ImgCache\8563140AF38EE80038AECE4E6CD3B66E.psi
c:\program files\PokerStars\ImgCache\85C3442F04474BB1EB52DAA3BA300021.psi
c:\program files\PokerStars\ImgCache\860CF968F247A34DED1FC5A83FA90E3C.psi
c:\program files\PokerStars\ImgCache\87AD417378077254BB3502D2202BBE31.psi
c:\program files\PokerStars\ImgCache\8863489EC9AC4FFE9E0A9D45960951DA.psi
c:\program files\PokerStars\ImgCache\88C62ED551AC1E05F396CE9280B84BD2.psi
c:\program files\PokerStars\ImgCache\88C97346FBA03AFC8F8939FCB0F0AE10.psi
c:\program files\PokerStars\ImgCache\89742D1EA5425F8E367B6F4CE07D795D.psi
c:\program files\PokerStars\ImgCache\8A1C0431BDCE502A2682C80061CC5263.psi
c:\program files\PokerStars\ImgCache\8A922DCE69629B2C5A77F0471F6A3EC1.psi
c:\program files\PokerStars\ImgCache\8C3AA6E804713E5D33B7932EAE1C4E28.psi
c:\program files\PokerStars\ImgCache\8C7A224EECE504B92C40BFDB0AA6ACA1.psi
c:\program files\PokerStars\ImgCache\8CD05E749788C30D04B6F6A832E0BB53.psi
c:\program files\PokerStars\ImgCache\8E4438E73C35F3457C7A33D1764F00B9.psi
c:\program files\PokerStars\ImgCache\8EEE9B2D61549F9CBB797364D200C2F3.psi
c:\program files\PokerStars\ImgCache\90492CB769A109B4326E39FA1B9C68A7.psi
c:\program files\PokerStars\ImgCache\90812E8D825FAAB3737BDADB456E2C7E.psi
c:\program files\PokerStars\ImgCache\916C2E95FD3509FA6121187033DDBC78.psi
c:\program files\PokerStars\ImgCache\958A9570CFFB2F5B3C569121D49A7AFE.psi
c:\program files\PokerStars\ImgCache\95DB32DC81710F7EB2B3FD238FAE6C8E.psi
c:\program files\PokerStars\ImgCache\95EF1C4F498811EE25430F25CE28D59F.psi
c:\program files\PokerStars\ImgCache\96B72CE748A6DCBB2858EFA4D99C60DF.psi
c:\program files\PokerStars\ImgCache\96B74D240B73278052C5035526BADF8F.psi
c:\program files\PokerStars\ImgCache\96F64BDBD281A3219E6CF5F2A669F0B2.psi
c:\program files\PokerStars\ImgCache\9842F3E51A4EC2322806BB4FA326DD70.psi
c:\program files\PokerStars\ImgCache\99F44EA0401AB51459627181A4F44530.psi
c:\program files\PokerStars\ImgCache\9A03554F346D86FEB6469C63F8328D2A.psi
c:\program files\PokerStars\ImgCache\9B169B65CD59B9B65C6CDFAD256A7790.psi
c:\program files\PokerStars\ImgCache\9B67BCA3BEBAED2F09615633B4E4E167.psi
c:\program files\PokerStars\ImgCache\9BCD5F4CFD0BA684BBC1EEB7C32793F5.psi
c:\program files\PokerStars\ImgCache\9CAF7AC20EC24712062B81ADDF3C760D.psi
c:\program files\PokerStars\ImgCache\9D13AF5614B5845CAEA63041FD29E11E.psi
c:\program files\PokerStars\ImgCache\9D36EAC01B1FDDE20965CB16923A10E7.psi
c:\program files\PokerStars\ImgCache\9ED5871B849B86D4EAF4479B27148298.psi
c:\program files\PokerStars\ImgCache\9F696E01926A5C129CD34D421C3B1510.psi
c:\program files\PokerStars\ImgCache\9FA3C2E6016601AABA1281B294B4E91E.psi
c:\program files\PokerStars\ImgCache\A4A4946F68B9E7F5769080A30E6F4AED.psi
c:\program files\PokerStars\ImgCache\A57E015E081D647FE03B675CCBB4686B.psi
c:\program files\PokerStars\ImgCache\A65D5BAAC6F01E6A24E7E02C6237852C.psi
c:\program files\PokerStars\ImgCache\A76FA264F5C28C1A18AAEE30DB4E7F4D.psi
c:\program files\PokerStars\ImgCache\A870249B2D3850A9329847BAF1EB6A3B.psi
c:\program files\PokerStars\ImgCache\A98BDDDFAB5D421F42FBD6A2440D1E91.psi
c:\program files\PokerStars\ImgCache\AABE0A7637FFD8FE9B4CA675FD8185FF.psi
c:\program files\PokerStars\ImgCache\AAD4DB4AA2C0A20CC3B91012BADA8DFC.psi
c:\program files\PokerStars\ImgCache\AADF18CE07A3FFB76B05111BC2E3C5A4.psi
c:\program files\PokerStars\ImgCache\AB43B25D48162A271C02A8478F9349B4.psi
c:\program files\PokerStars\ImgCache\AC56A90F728255274B928244DB6CFE41.psi
c:\program files\PokerStars\ImgCache\AD2BB84F6F2138E9B8530E132C7C4789.psi
c:\program files\PokerStars\ImgCache\ADA36E27161BCE41A074E59A3F5B5CCE.psi
c:\program files\PokerStars\ImgCache\ADE7BE0069C154AC37CE4B05260EC8E4.psi
c:\program files\PokerStars\ImgCache\AEC7F42241E96E707ABA41921E585FAE.psi
c:\program files\PokerStars\ImgCache\AF84D6B2FD2ED0F5ECA8D9B21E671B7B.psi
c:\program files\PokerStars\ImgCache\AFA894EBCF54BFC7900C3531B2195355.psi
c:\program files\PokerStars\ImgCache\B06847BD5BBC3D873962BE54FF65A6FA.psi
c:\program files\PokerStars\ImgCache\B1220701E3D351020585F0707128ED13.psi
c:\program files\PokerStars\ImgCache\B1AE80A4DDF7F31426139B6C79308010.psi
c:\program files\PokerStars\ImgCache\B1B2BA89172B8A380332458882678EA7.psi
c:\program files\PokerStars\ImgCache\B3A0445572D81E2D0FC423850E8287CE.psi
c:\program files\PokerStars\ImgCache\B3AB00599E85056CE25EC60B6AB1AF61.psi
c:\program files\PokerStars\ImgCache\B48401080AF06FF674A4A2E60803112A.psi
c:\program files\PokerStars\ImgCache\B5B943517145A5F2B66958CCE63423B3.psi
c:\program files\PokerStars\ImgCache\B5DE5D95D9A2CC425157D683D2667B02.psi
c:\program files\PokerStars\ImgCache\B5F95B7615D806692B084C1DEE999D53.psi
c:\program files\PokerStars\ImgCache\B67969E33E390858370D1B7B44C1B4B8.psi
c:\program files\PokerStars\ImgCache\B78C2B4978DCDE2A5202CFB34AA0FD3E.psi
c:\program files\PokerStars\ImgCache\B79CC17D79A411E979A7DE97229F9241.psi
c:\program files\PokerStars\ImgCache\B7D9C328201F8552DA5137742EADB363.psi
c:\program files\PokerStars\ImgCache\B9797DEDBA92384FB99A4155A26BCC1A.psi
c:\program files\PokerStars\ImgCache\B9D7CB44565B1A8E77875616E3A65A6C.psi
c:\program files\PokerStars\ImgCache\B9FE10D5C9A89DAC5FF18C50EB451A20.psi
c:\program files\PokerStars\ImgCache\BA7003D789ABBC3D3FB3035197E5F288.psi
c:\program files\PokerStars\ImgCache\BA78790E299F5E9754517862E25162D3.psi
c:\program files\PokerStars\ImgCache\BB1009AAA40B16A56C939FF03702AE26.psi
c:\program files\PokerStars\ImgCache\BB687D62140C2A5328C739F6E1AB3265.psi
c:\program files\PokerStars\ImgCache\BCD859DCB74BF381A31F20484B2EF38D.psi
c:\program files\PokerStars\ImgCache\BD9F4E9C50BB4DA51B738F6D509529F1.psi
c:\program files\PokerStars\ImgCache\BDB393333BCAED0F2CCA0D36CB031562.psi
c:\program files\PokerStars\ImgCache\BDB7FA0392536C7B2F9F4D749E33C0CF.psi
c:\program files\PokerStars\ImgCache\BFC9ADC88C1ED88F266D4A92302CB8E8.psi
c:\program files\PokerStars\ImgCache\C01900DD15C312C6E2D895B80027FF22.psi
c:\program files\PokerStars\ImgCache\C0AE45653F05CFFD9EFF8098952F55A1.psi
c:\program files\PokerStars\ImgCache\C1EE32D4BE756F77A99C0C306D3C4745.psi
c:\program files\PokerStars\ImgCache\C24A541BF9E90453565FF8BCCA001B5C.psi
c:\program files\PokerStars\ImgCache\C2FA6D8B5C0363429EE5EDFC886DC04C.psi
c:\program files\PokerStars\ImgCache\C3C261017D70B1F85A38650C2287E0B3.psi
c:\program files\PokerStars\ImgCache\C3E6A3D0B03EA756F58DF2510F4497EA.psi
c:\program files\PokerStars\ImgCache\C798C380697CD33D381CC2009CB8555D.psi
c:\program files\PokerStars\ImgCache\C898A1042366E20DEDEF4ECE5C17B5A7.psi
c:\program files\PokerStars\ImgCache\C8E8AA71B6E5C19A99800C3272ABE079.psi
c:\program files\PokerStars\ImgCache\C99E7A603725C3D54CF57B36605F40A5.psi
c:\program files\PokerStars\ImgCache\CB5F47CBC82CC3502C250DBD19DED7DC.psi
c:\program files\PokerStars\ImgCache\CB92B574ADA9A0847BE52B32F263F5A7.psi
c:\program files\PokerStars\ImgCache\CBF5070F464738BA933AFD331567CADC.psi
c:\program files\PokerStars\ImgCache\CD14088F586743AF409E17898B4B2B51.psi
c:\program files\PokerStars\ImgCache\CDB95492A62250A1DCF893A739B7B17F.psi
c:\program files\PokerStars\ImgCache\CDD0AB67AA35BDEABD9E1313044712C7.psi
c:\program files\PokerStars\ImgCache\CFD3C896A9856C6D33F153B25AF6FDEF.psi
c:\program files\PokerStars\ImgCache\D03F08B4A44C9E0AA95F30F69F2D86CB.psi
c:\program files\PokerStars\ImgCache\D10212341173D8C8B7CD6856C3AB342B.psi
c:\program files\PokerStars\ImgCache\D1500E2D81C00996A6EB4425E91EAC9E.psi
c:\program files\PokerStars\ImgCache\D2086161533FB8DA4FD99DD959C54271.psi
c:\program files\PokerStars\ImgCache\D342AF49AD458F2B87F7DDE7EA8E8200.psi
c:\program files\PokerStars\ImgCache\D43A9BB9C153B016F2471E483D48B774.psi
c:\program files\PokerStars\ImgCache\D5E074CA33F89B9E2CD8D146FBB1DD1E.psi
c:\program files\PokerStars\ImgCache\D6618AC0ABCB4CB6C20B00A21E4DCA1A.psi
c:\program files\PokerStars\ImgCache\D6ECE23F513F7B731CD7B375D498F2F6.psi
c:\program files\PokerStars\ImgCache\D777786130B46B3B248DE95AFCCE2B32.psi
c:\program files\PokerStars\ImgCache\D7FA52B0AFE6758DC0371B3C3AD2D60F.psi
c:\program files\PokerStars\ImgCache\D9852E73353FFF7349F4012325FA31FA.psi
c:\program files\PokerStars\ImgCache\D9B0180E8692D4DAB2FA79021DEF8AC0.psi
c:\program files\PokerStars\ImgCache\DA60484362300AADF90512F92A73C77A.psi
c:\program files\PokerStars\ImgCache\DCD72F297A974C80B4DC53BEFD3403A2.psi
c:\program files\PokerStars\ImgCache\DD4804D0624F720DE1D7E1D69FD179D0.psi
c:\program files\PokerStars\ImgCache\DECC4ABDF4B6423419D8B25DCBD32881.psi
c:\program files\PokerStars\ImgCache\DF8667D6C45409E3510F99191D10C955.psi
c:\program files\PokerStars\ImgCache\E2F407779A07EF02B116404E5A1E0BDA.psi
c:\program files\PokerStars\ImgCache\E5669816B4165B860595B1AA54FA2F77.psi
c:\program files\PokerStars\ImgCache\E596A131F45A7DD86CDC93B0A947405E.psi
c:\program files\PokerStars\ImgCache\E754A296A4645D3C178F0CD30D1E15D0.psi
c:\program files\PokerStars\ImgCache\E7FE85CCD92AF7736168E1FE168166F1.psi
c:\program files\PokerStars\ImgCache\E81D1C519A4BEF60EC9D1AB785EF2ED3.psi
c:\program files\PokerStars\ImgCache\E86C50C1198443D6283C39F5EF180EE1.psi
c:\program files\PokerStars\ImgCache\E9F7A68543305FCF64677737CEA77DAD.psi
c:\program files\PokerStars\ImgCache\EB7FD9D1737946FC6D41A704C910A21A.psi
c:\program files\PokerStars\ImgCache\EB98F6CC0DE4F76A8A7C4F99760E7C11.psi
c:\program files\PokerStars\ImgCache\EBF23CC427EDD4F6D93E7B41C439B3AB.psi
c:\program files\PokerStars\ImgCache\EBFB7A31FCDD445C25C5C4A921F9A5D1.psi
c:\program files\PokerStars\ImgCache\ED1D5C9DF60E48F64CDCA7FEECFCBEDE.psi
c:\program files\PokerStars\ImgCache\EE55169B197B92A55ECBD2A1B83A50C7.psi
c:\program files\PokerStars\ImgCache\EEB7B5F22F68CDA91B75497CA05D83EF.psi
c:\program files\PokerStars\ImgCache\EEC246A9FA6F0259A2B9FA4651183A18.psi
c:\program files\PokerStars\ImgCache\EF535C06685F80DDDE7CC941BB9ECF98.psi
c:\program files\PokerStars\ImgCache\EFB083AD96BE3C653BFF32AD54018DB8.psi
c:\program files\PokerStars\ImgCache\F107CBC7762B57E2861E7E34759FF328.psi
c:\program files\PokerStars\ImgCache\F1720E18EA0DEEE41996DE5572D9019A.psi
c:\program files\PokerStars\ImgCache\F227D12527435147CF302610E33C1327.psi
c:\program files\PokerStars\ImgCache\F241C1A76673E2D52BB633360D9CCF7F.psi
c:\program files\PokerStars\ImgCache\F27A76C4FC3E6D61DFEEC4387F2297B8.psi
c:\program files\PokerStars\ImgCache\F38B52898E4F076BAB37C19179CF5C2F.psi
c:\program files\PokerStars\ImgCache\F39265B7F96D6730EF2FAD9C97AA9353.psi
c:\program files\PokerStars\ImgCache\F40EF7EDF062F6781523AFFAD72B109D.psi
c:\program files\PokerStars\ImgCache\F5A5A2A7D822D6ECB67A1E9F0EB32628.psi
c:\program files\PokerStars\ImgCache\F5ABCE8CC646C5F1717E4B51C416F09F.psi
c:\program files\PokerStars\ImgCache\F5E20C233EDCAB42D0B2F5614B41E3D2.psi
c:\program files\PokerStars\ImgCache\F6C6C3FBA89C776431A0F2DB8B35C1C2.psi
c:\program files\PokerStars\ImgCache\F6D11C72B5C56EDD1D0DA04EC1681053.psi
c:\program files\PokerStars\ImgCache\F6E311A4529D2EA4E46E9F7B219FA68E.psi
c:\program files\PokerStars\ImgCache\F81842818E1CC41CE91504D99E652926.psi
c:\program files\PokerStars\ImgCache\F87973395EB5B956FAF976775672244F.psi
c:\program files\PokerStars\ImgCache\FAB59A2E6901BEA07B49D0FD5C425048.psi
c:\program files\PokerStars\ImgCache\FAE7973A321C6ED77BAFA1267AC75DE1.psi
c:\program files\PokerStars\ImgCache\FE79584938A10BC69F6FCA596AB82DA7.psi
c:\program files\PokerStars\ImgCache\img.idx
c:\program files\PokerStars\Install.log
c:\program files\PokerStars\main.ico
c:\program files\PokerStars\Malwarebytes' Anti-Malware\mbam.exe
c:\program files\PokerStars\Malwarebytes' Anti-Malware\unins001.dat
c:\program files\PokerStars\Malwarebytes' Anti-Malware\unins001.exe
c:\program files\PokerStars\Notes.txt
c:\program files\PokerStars\PokerStars.exe
c:\program files\PokerStars\PokerStars.ini
c:\program files\PokerStars\PokerStars.log.0
c:\program files\PokerStars\PokerStars.log.1
c:\program files\PokerStars\PokerStarsCommunicate.exe
c:\program files\PokerStars\PokerStarsOnlineUpdate.exe
c:\program files\PokerStars\PokerStarsUninstall.exe
c:\program files\PokerStars\PokerStarsUpdate.exe
c:\program files\PokerStars\PokerStarsUpdate.log.0
c:\program files\PokerStars\PokerStarsUpdate.log.1
c:\program files\PokerStars\Snd\snd0.wav
c:\program files\PokerStars\Snd\snd1.wav
c:\program files\PokerStars\Snd\snd2.wav
c:\program files\PokerStars\Snd\snd3.wav
c:\program files\PokerStars\Snd\snd4.wav
c:\program files\PokerStars\Snd\snd5.wav
c:\program files\PokerStars\Snd\snd6.wav
c:\program files\PokerStars\Snd\snd7.wav
c:\program files\PokerStars\Stub.exe
c:\program files\PokerStars\stub.log.0
c:\program files\PokerStars\Themes\&default;\gx.ini
c:\program files\PokerStars\Themes\&lobby;\black\dialog.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\dialog.bmp
c:\program files\PokerStars\Themes\&lobby;\black\gx.ini
c:\program files\PokerStars\Themes\&lobby;\black\images\b-b.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\b-b.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\b-i.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\b-i.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\b-r.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\b-r.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\b.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\b.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\bg.jpg
c:\program files\PokerStars\Themes\&lobby;\black\images\brbc.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\brbc.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\brbl.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\brbl.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\brbr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\brbr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\cashier.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\cashier.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\cbc.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\cbc.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\cbl.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\cbl.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\cbr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\cbr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\cps.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\cps.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\f-arr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\f-arr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\f-r.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\f-r.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\f.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\f.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\faceborder.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\faceborder.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\faceshape.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter-b.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter-b.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter-bg.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter-close.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter-close.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter-gr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter-gr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter-header.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter-header.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter-lp.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter-lp.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\filter.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lb.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbbc.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbbc.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbbl.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbbl.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbbr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbbr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbml.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbml.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbmr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbmr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbtc.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbtc.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbtl.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbtl.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbtr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\lbtr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\login.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\login.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\mbc.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\mbc.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\mbl.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\mbl.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\mbr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\mbr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\name.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\pay-blt.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\pay-blt.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\pay-br.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\pay-sep.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\pay-sum.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\pbc.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\pbc.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\pbl.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\pbl.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\pbr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\pbr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\ps-tourn.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\ps.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\ps.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\r0.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\r1.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\r2.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\rbtc.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\rbtc.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\rbtl.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\rbtl.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\rbtr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\rbtr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\sbtc.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\sbtc.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\sbtl.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\sbtl.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\sbtr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\sbtr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\tmbc.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\tmbc.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\tmbl.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\tmbl.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\tmbr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\tmbr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\tourn-info.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\tourn-info.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\tourn-name.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\ttbc.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\ttbc.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\ttbl.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\ttbl.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\ttbr.a.bmp
c:\program files\PokerStars\Themes\&lobby;\black\images\ttbr.bmp
c:\program files\PokerStars\Themes\&lobby;\black\templates\browser.css
c:\program files\PokerStars\Themes\&lobby;\black\templates\dialog.html
c:\program files\PokerStars\Themes\&lobby;\black\templates\help.html
c:\program files\PokerStars\Themes\black\bg.jpg
c:\program files\PokerStars\Themes\black\ctrls\bb.a.bmp
c:\program files\PokerStars\Themes\black\ctrls\bb.bmp
c:\program files\PokerStars\Themes\black\ctrls\btn.a.bmp
c:\program files\PokerStars\Themes\black\ctrls\btn.bmp
c:\program files\PokerStars\Themes\black\ctrls\cbtn.a.bmp
c:\program files\PokerStars\Themes\black\ctrls\cbtn.bmp
c:\program files\PokerStars\Themes\black\ctrls\lb.a.bmp
c:\program files\PokerStars\Themes\black\ctrls\lb.bmp
c:\program files\PokerStars\Themes\black\ctrls\lt.a.bmp
c:\program files\PokerStars\Themes\black\ctrls\lt.bmp
c:\program files\PokerStars\Themes\black\ctrls\rbtn.a.bmp
c:\program files\PokerStars\Themes\black\ctrls\rbtn.bmp
c:\program files\PokerStars\Themes\black\ctrls\slider-grip.a.bmp
c:\program files\PokerStars\Themes\black\ctrls\slider-grip.bmp
c:\program files\PokerStars\Themes\black\ctrls\slider.a.bmp
c:\program files\PokerStars\Themes\black\ctrls\slider.bmp
c:\program files\PokerStars\Themes\black\ctrls\tabs.bmp
c:\program files\PokerStars\Themes\black\ctrls\vl.a.bmp
c:\program files\PokerStars\Themes\black\ctrls\vl.bmp
c:\program files\PokerStars\Themes\black\ctrls\wb.a.bmp
c:\program files\PokerStars\Themes\black\ctrls\wb.bmp
c:\program files\PokerStars\Themes\black\dialog.a.bmp
c:\program files\PokerStars\Themes\black\dialog.bmp
c:\program files\PokerStars\Themes\black\fg.a.bmp
c:\program files\PokerStars\Themes\black\fg.bmp
c:\program files\PokerStars\Themes\black\gx.ini
c:\program files\PokerStars\Themes\black\images\b-b.a.bmp
c:\program files\PokerStars\Themes\black\images\b-b.bmp
c:\program files\PokerStars\Themes\black\images\b-i.a.bmp
c:\program files\PokerStars\Themes\black\images\b-i.bmp
c:\program files\PokerStars\Themes\black\images\b-r.a.bmp
c:\program files\PokerStars\Themes\black\images\b-r.bmp
c:\program files\PokerStars\Themes\black\images\b.a.bmp
c:\program files\PokerStars\Themes\black\images\b.bmp
c:\program files\PokerStars\Themes\black\images\bg.jpg
c:\program files\PokerStars\Themes\black\images\brbc.a.bmp
c:\program files\PokerStars\Themes\black\images\brbc.bmp
c:\program files\PokerStars\Themes\black\images\brbl.a.bmp
c:\program files\PokerStars\Themes\black\images\brbl.bmp
c:\program files\PokerStars\Themes\black\images\brbr.a.bmp
c:\program files\PokerStars\Themes\black\images\brbr.bmp
c:\program files\PokerStars\Themes\black\images\cashier.a.bmp
c:\program files\PokerStars\Themes\black\images\cashier.bmp
c:\program files\PokerStars\Themes\black\images\cbc.a.bmp
c:\program files\PokerStars\Themes\black\images\cbc.bmp
c:\program files\PokerStars\Themes\black\images\cbl.a.bmp
c:\program files\PokerStars\Themes\black\images\cbl.bmp
c:\program files\PokerStars\Themes\black\images\cbr.a.bmp
c:\program files\PokerStars\Themes\black\images\cbr.bmp
c:\program files\PokerStars\Themes\black\images\cps.a.bmp
c:\program files\PokerStars\Themes\black\images\cps.bmp
c:\program files\PokerStars\Themes\black\images\f-arr.a.bmp
c:\program files\PokerStars\Themes\black\images\f-arr.bmp
c:\program files\PokerStars\Themes\black\images\f-r.a.bmp
c:\program files\PokerStars\Themes\black\images\f-r.bmp
c:\program files\PokerStars\Themes\black\images\f.a.bmp
c:\program files\PokerStars\Themes\black\images\f.bmp
c:\program files\PokerStars\Themes\black\images\faceborder.a.bmp
c:\program files\PokerStars\Themes\black\images\faceborder.bmp
c:\program files\PokerStars\Themes\black\images\faceshape.bmp
c:\program files\PokerStars\Themes\black\images\filter-b.a.bmp
c:\program files\PokerStars\Themes\black\images\filter-b.bmp
c:\program files\PokerStars\Themes\black\images\filter-bg.bmp
c:\program files\PokerStars\Themes\black\images\filter-close.a.bmp
c:\program files\PokerStars\Themes\black\images\filter-close.bmp
c:\program files\PokerStars\Themes\black\images\filter-gr.a.bmp
c:\program files\PokerStars\Themes\black\images\filter-gr.bmp
c:\program files\PokerStars\Themes\black\images\filter-header.a.bmp
c:\program files\PokerStars\Themes\black\images\filter-header.bmp
c:\program files\PokerStars\Themes\black\images\filter-lp.a.bmp
c:\program files\PokerStars\Themes\black\images\filter-lp.bmp
c:\program files\PokerStars\Themes\black\images\filter.a.bmp
c:\program files\PokerStars\Themes\black\images\filter.bmp
c:\program files\PokerStars\Themes\black\images\lb.bmp
c:\program files\PokerStars\Themes\black\images\lbbc.a.bmp
c:\program files\PokerStars\Themes\black\images\lbbc.bmp
c:\program files\PokerStars\Themes\black\images\lbbl.a.bmp
c:\program files\PokerStars\Themes\black\images\lbbl.bmp
c:\program files\PokerStars\Themes\black\images\lbbr.a.bmp
c:\program files\PokerStars\Themes\black\images\lbbr.bmp
c:\program files\PokerStars\Themes\black\images\lbml.a.bmp
c:\program files\PokerStars\Themes\black\images\lbml.bmp
c:\program files\PokerStars\Themes\black\images\lbmr.a.bmp
c:\program files\PokerStars\Themes\black\images\lbmr.bmp
c:\program files\PokerStars\Themes\black\images\lbtc.a.bmp
c:\program files\PokerStars\Themes\black\images\lbtc.bmp
c:\program files\PokerStars\Themes\black\images\lbtl.a.bmp
c:\program files\PokerStars\Themes\black\images\lbtl.bmp
c:\program files\PokerStars\Themes\black\images\lbtr.a.bmp
c:\program files\PokerStars\Themes\black\images\lbtr.bmp
c:\program files\PokerStars\Themes\black\images\login.a.bmp
c:\program files\PokerStars\Themes\black\images\login.bmp
c:\program files\PokerStars\Themes\black\images\mbc.a.bmp
c:\program files\PokerStars\Themes\black\images\mbc.bmp
c:\program files\PokerStars\Themes\black\images\mbl.a.bmp
c:\program files\PokerStars\Themes\black\images\mbl.bmp
c:\program files\PokerStars\Themes\black\images\mbr.a.bmp
c:\program files\PokerStars\Themes\black\images\mbr.bmp
c:\program files\PokerStars\Themes\black\images\name.bmp
c:\program files\PokerStars\Themes\black\images\pay-blt.a.bmp
c:\program files\PokerStars\Themes\black\images\pay-blt.bmp
c:\program files\PokerStars\Themes\black\images\pay-br.bmp
c:\program files\PokerStars\Themes\black\images\pay-sep.bmp
c:\program files\PokerStars\Themes\black\images\pay-sum.bmp
c:\program files\PokerStars\Themes\black\images\pbc.a.bmp
c:\program files\PokerStars\Themes\black\images\pbc.bmp
c:\program files\PokerStars\Themes\black\images\pbl.a.bmp
c:\program files\PokerStars\Themes\black\images\pbl.bmp
c:\program files\PokerStars\Themes\black\images\pbr.a.bmp
c:\program files\PokerStars\Themes\black\images\pbr.bmp
c:\program files\PokerStars\Themes\black\images\ps-tourn.bmp
c:\program files\PokerStars\Themes\black\images\ps.a.bmp
c:\program files\PokerStars\Themes\black\images\ps.bmp
c:\program files\PokerStars\Themes\black\images\r0.bmp
c:\program files\PokerStars\Themes\black\images\r1.bmp
c:\program files\PokerStars\Themes\black\images\r2.bmp
c:\program files\PokerStars\Themes\black\images\rbtc.a.bmp
c:\program files\PokerStars\Themes\black\images\rbtc.bmp
c:\program files\PokerStars\Themes\black\images\rbtl.a.bmp
c:\program files\PokerStars\Themes\black\images\rbtl.bmp
c:\program files\PokerStars\Themes\black\images\rbtr.a.bmp
c:\program files\PokerStars\Themes\black\images\rbtr.bmp
c:\program files\PokerStars\Themes\black\images\sbtc.a.bmp
c:\program files\PokerStars\Themes\black\images\sbtc.bmp
c:\program files\PokerStars\Themes\black\images\sbtl.a.bmp
c:\program files\PokerStars\Themes\black\images\sbtl.bmp
c:\program files\PokerStars\Themes\black\images\sbtr.a.bmp
c:\program files\PokerStars\Themes\black\images\sbtr.bmp
c:\program files\PokerStars\Themes\black\images\tmbc.a.bmp
c:\program files\PokerStars\Themes\black\images\tmbc.bmp
c:\program files\PokerStars\Themes\black\images\tmbl.a.bmp
c:\program files\PokerStars\Themes\black\images\tmbl.bmp
c:\program files\PokerStars\Themes\black\images\tmbr.a.bmp
c:\program files\PokerStars\Themes\black\images\tmbr.bmp
c:\program files\PokerStars\Themes\black\images\tourn-info.a.bmp
c:\program files\PokerStars\Themes\black\images\tourn-info.bmp
c:\program files\PokerStars\Themes\black\images\tourn-name.bmp
c:\program files\PokerStars\Themes\black\images\ttbc.a.bmp
c:\program files\PokerStars\Themes\black\images\ttbc.bmp
c:\program files\PokerStars\Themes\black\images\ttbl.a.bmp
c:\program files\PokerStars\Themes\black\images\ttbl.bmp
c:\program files\PokerStars\Themes\black\images\ttbr.a.bmp
c:\program files\PokerStars\Themes\black\images\ttbr.bmp
c:\program files\PokerStars\Themes\black\images\vip-status-l.a.bmp
c:\program files\PokerStars\Themes\black\images\vip-status-l.bmp
c:\program files\PokerStars\Themes\black\images\vsc.bmp
c:\program files\PokerStars\Themes\black\images\vsl.bmp
c:\program files\PokerStars\Themes\black\images\vsr.bmp
c:\program files\PokerStars\Themes\black\label\border.a.bmp
c:\program files\PokerStars\Themes\black\label\border.bmp
c:\program files\PokerStars\Themes\black\label\borderb.a.bmp
c:\program files\PokerStars\Themes\black\label\borderb.bmp
c:\program files\PokerStars\Themes\black\label\seat.a.bmp
c:\program files\PokerStars\Themes\black\label\seat.bmp
c:\program files\PokerStars\Themes\black\label\status.a.bmp
c:\program files\PokerStars\Themes\black\label\status.bmp
c:\program files\PokerStars\Themes\black\label\statusb.a.bmp
c:\program files\PokerStars\Themes\black\label\statusb.bmp
c:\program files\PokerStars\Themes\black\templates\browser.css
c:\program files\PokerStars\Themes\black\templates\dialog.css
c:\program files\PokerStars\Themes\black\templates\dialog.html
c:\program files\PokerStars\Themes\black\templates\help.html
c:\program files\PokerStars\Themes\black\update.bmp
c:\program files\PokerStars\Themes\preview\azure.jpg
c:\program files\PokerStars\Themes\preview\lobby\&default.jpg;
c:\program files\PokerStars\Themes\preview\lobby\black.jpg
c:\program files\PokerStars\Themes\preview\lobby\old-black.jpg
c:\program files\PokerStars\Themes\preview\marine.jpg
c:\program files\PokerStars\Themes\preview\ordinary.jpg
c:\program files\PokerStars\Themes\preview\renaissance.green.jpg
c:\program files\PokerStars\Themes\preview\renaissance.jpg
c:\program files\PokerStars\Themes\preview\renaissance.purple.jpg
c:\program files\PokerStars\Themes\preview\renaissance.red.jpg
c:\program files\PokerStars\Themes\preview\saloon.jpg
c:\program files\PokerStars\Themes\preview\shiny.jpg
c:\program files\PokerStars\Themes\preview\stars.jpg
c:\program files\PokerStars\Themes\preview\techno.jpg
c:\program files\PokerStars\Themes\renaissance\purple\ctrls\tabs.a.bmp
c:\program files\PokerStars\Themes\renaissance\purple\ctrls\tabs.bmp
c:\program files\PokerStars\Themes\renaissance\purple\fg.a.bmp
c:\program files\PokerStars\Themes\renaissance\purple\fg.bmp
c:\program files\PokerStars\Themes\renaissance\teal\bg.jpg
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\bb.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\bb.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\btn.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\btn.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\cbtn.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\cbtn.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\rbtn.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\rbtn.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\sizebox.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\sizebox.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\slider-grip.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\slider-grip.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\slider.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\slider.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\stb.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\stb.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\tabs.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\tabs.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\wb.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\ctrls\wb.bmp
c:\program files\PokerStars\Themes\renaissance\teal\fg.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\fg.bmp
c:\program files\PokerStars\Themes\renaissance\teal\gx.ini
c:\program files\PokerStars\Themes\renaissance\teal\label\border.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\border.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\borderb.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\borderb.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\pm.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\pm.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\seat.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\seat.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\seatb.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\seatb.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\status.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\status.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\statusb.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\statusb.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\tt.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\label\tt.bmp
c:\program files\PokerStars\Themes\renaissance\teal\reserved.a.bmp
c:\program files\PokerStars\Themes\renaissance\teal\reserved.bmp
c:\program files\PokerStars\Themes\saloon\bg.jpg
c:\program files\PokerStars\Themes\saloon\ctrls\bb.a.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\bb.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\btn.a.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\btn.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\cbtn.a.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\cbtn.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\rbtn.a.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\rbtn.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\sizebox.a.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\sizebox.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\slider-grip.a.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\slider-grip.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\slider.a.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\slider.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\stb.a.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\stb.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\tabs.a.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\tabs.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\wb.a.bmp
c:\program files\PokerStars\Themes\saloon\ctrls\wb.bmp
c:\program files\PokerStars\Themes\saloon\fg.a.bmp
c:\program files\PokerStars\Themes\saloon\fg.bmp
c:\program files\PokerStars\Themes\saloon\gx.ini
c:\program files\PokerStars\Themes\saloon\label\border.a.bmp
c:\program files\PokerStars\Themes\saloon\label\border.bmp
c:\program files\PokerStars\Themes\saloon\label\borderb.a.bmp
c:\program files\PokerStars\Themes\saloon\label\borderb.bmp
c:\program files\PokerStars\Themes\saloon\label\pm.a.bmp
c:\program files\PokerStars\Themes\saloon\label\pm.bmp
c:\program files\PokerStars\Themes\saloon\label\seat.a.bmp
c:\program files\PokerStars\Themes\saloon\label\seat.bmp
c:\program files\PokerStars\Themes\saloon\label\seatb.a.bmp
c:\program files\PokerStars\Themes\saloon\label\seatb.bmp
c:\program files\PokerStars\Themes\saloon\label\status.a.bmp
c:\program files\PokerStars\Themes\saloon\label\status.bmp
c:\program files\PokerStars\Themes\saloon\label\statusb.a.bmp
c:\program files\PokerStars\Themes\saloon\label\statusb.bmp
c:\program files\PokerStars\Themes\saloon\label\tt.a.bmp
c:\program files\PokerStars\Themes\saloon\label\tt.bmp
c:\program files\PokerStars\Themes\saloon\reserved.a.bmp
c:\program files\PokerStars\Themes\saloon\reserved.bmp
c:\program files\PokerStars\Themes\simple\gx.ini
c:\program files\PokerStars\Themes\simple\label\border.a.bmp
c:\program files\PokerStars\Themes\simple\label\border.bmp
c:\program files\PokerStars\Themes\simple\label\borderb.a.bmp
c:\program files\PokerStars\Themes\simple\label\borderb.bmp
c:\program files\PokerStars\Themes\simple\label\seat.a.bmp
c:\program files\PokerStars\Themes\simple\label\seat.bmp
c:\program files\PokerStars\Themes\simple\label\status.a.bmp
c:\program files\PokerStars\Themes\simple\label\status.bmp
c:\program files\PokerStars\Themes\simple\label\statusb.a.bmp
c:\program files\PokerStars\Themes\simple\label\statusb.bmp
c:\program files\PokerStars\Themes\simple\reserved.a.bmp
c:\program files\PokerStars\Themes\simple\reserved.bmp
c:\program files\PokerStars\Themes\themes.ini
c:\program files\PokerStars\tinfo.dat
c:\program files\PokerStars\trace.ini
c:\program files\PokerStars\Tracer.exe
c:\program files\PokerStars\Uninstall PokerStars.lnk
c:\program files\PokerStars\update.ini
c:\program files\PokerStars\update\_update2.dat
c:\program files\PokerStars\update\_update2black.dat
c:\program files\PokerStars\update\_update2def.dat
c:\program files\PokerStars\update\_update2g.dat
c:\program files\PokerStars\update\_update2ni.dat
c:\program files\PokerStars\update\_update2rare.dat
c:\program files\PokerStars\update\Gx\cashierpaysystem.jpg
c:\program files\PokerStars\update\Gx\fonts\subst.ini
c:\program files\PokerStars\update\Gx\ipb.bmp
c:\program files\PokerStars\update\Gx\ipkt_ab.jpg
c:\program files\PokerStars\update\Gx\ipkt_gr.jpg
c:\program files\PokerStars\update\Gx\ipkt_jh.jpg
c:\program files\PokerStars\update\Gx\ipkt_kt.jpg
c:\program files\PokerStars\update\Gx\ipkt_lp.jpg
c:\program files\PokerStars\update\Gx\label\lang.a.bmp
c:\program files\PokerStars\update\Gx\label\lang.bmp
c:\program files\PokerStars\update\Gx\label\vip-status-l.a.bmp
c:\program files\PokerStars\update\Gx\label\vip-status-l.bmp
c:\program files\PokerStars\update\Gx\label\vip-status.a.bmp
c:\program files\PokerStars\update\Gx\label\vip-status.bmp
c:\program files\PokerStars\update\Gx\lobby\flyer-h.a.bmp
c:\program files\PokerStars\update\Gx\lobby\flyer-h.bmp
c:\program files\PokerStars\update\Gx\lobby\lang.a.bmp
c:\program files\PokerStars\update\Gx\lobby\lang.bmp
c:\program files\PokerStars\update\Gx\lobby\search-header.a.bmp
c:\program files\PokerStars\update\Gx\lobby\search-header.bmp
c:\program files\PokerStars\update\Gx\lobby\vip-status-l.a.bmp
c:\program files\PokerStars\update\Gx\lobby\vip-status-l.bmp
c:\program files\PokerStars\update\Gx\lobby\vip-store.a.bmp
c:\program files\PokerStars\update\Gx\lobby\vip-store.bmp
c:\program files\PokerStars\update\Gx\lobby\vsc.a.bmp
c:\program files\PokerStars\update\Gx\lobby\vsc.bmp
c:\program files\PokerStars\update\Gx\lobby\vsl.a.bmp
c:\program files\PokerStars\update\Gx\lobby\vsl.bmp
c:\program files\PokerStars\update\Gx\lobby\vsr.a.bmp
c:\program files\PokerStars\update\Gx\lobby\vsr.bmp
c:\program files\PokerStars\update\Gx\replay\backward.a.bmp
c:\program files\PokerStars\update\Gx\replay\backward.bmp
c:\program files\PokerStars\update\Gx\replay\face.a.bmp
c:\program files\PokerStars\update\Gx\replay\face.bmp
c:\program files\PokerStars\update\Gx\replay\forward.a.bmp
c:\program files\PokerStars\update\Gx\replay\forward.bmp
c:\program files\PokerStars\update\Gx\replay\link.a.bmp
c:\program files\PokerStars\update\Gx\replay\link.bmp
c:\program files\PokerStars\update\Gx\replay\next.a.bmp
c:\program files\PokerStars\update\Gx\replay\next.bmp
c:\program files\PokerStars\update\Gx\replay\pause.a.bmp
c:\program files\PokerStars\update\Gx\replay\pause.bmp
c:\program files\PokerStars\update\Gx\replay\prev.a.bmp
c:\program files\PokerStars\update\Gx\replay\prev.bmp
c:\program files\PokerStars\update\Gx\replay\r.a.bmp
c:\program files\PokerStars\update\Gx\replay\r.bmp
c:\program files\PokerStars\update\Gx\replay\reset.a.bmp
c:\program files\PokerStars\update\Gx\replay\reset.bmp
c:\program files\PokerStars\update\Gx\replay\restart.a.bmp
c:\program files\PokerStars\update\Gx\replay\restart.bmp
c:\program files\PokerStars\update\Gx\replay\resume.a.bmp
c:\program files\PokerStars\update\Gx\replay\resume.bmp
c:\program files\PokerStars\update\Gx\templates\browser.css
c:\program files\PokerStars\update\Gx\templates\dialog.css
c:\program files\PokerStars\update\Gx\templates\dialog.html
c:\program files\PokerStars\update\Gx\templates\help.html
c:\program files\PokerStars\update\Gx\templates\menu.xml
c:\program files\PokerStars\update\Gx\tmp.jpg
c:\program files\PokerStars\update\i18n.msg_cli.txt
c:\program files\PokerStars\update\PokerStars.exe
c:\program files\PokerStars\update\PokerStars.ini
c:\program files\PokerStars\update\PokerStarsOnlineUpdate.exe
c:\program files\PokerStars\update\Stub.exe
c:\program files\PokerStars\update\Themes\&default;\gx.ini
c:\program files\PokerStars\update\Themes\&lobby;\black\dialog.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\dialog.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\gx.ini
c:\program files\PokerStars\update\Themes\&lobby;\black\images\b-b.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\b-b.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\b-i.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\b-i.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\b-r.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\b-r.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\b.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\b.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\bg.jpg
c:\program files\PokerStars\update\Themes\&lobby;\black\images\brbc.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\brbc.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\brbl.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\brbl.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\brbr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\brbr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\cashier.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\cashier.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\cbc.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\cbc.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\cbl.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\cbl.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\cbr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\cbr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\cps.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\cps.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\f-arr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\f-arr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\f-r.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\f-r.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\f.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\f.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\faceborder.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\faceborder.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\faceshape.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter-b.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter-b.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter-bg.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter-close.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter-close.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter-gr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter-gr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter-header.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter-header.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter-lp.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter-lp.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\filter.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lb.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbbc.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbbc.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbbl.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbbl.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbbr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbbr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbml.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbml.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbmr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbmr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbtc.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbtc.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbtl.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbtl.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbtr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\lbtr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\login.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\login.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\mbc.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\mbc.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\mbl.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\mbl.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\mbr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\mbr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\name.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\pay-blt.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\pay-blt.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\pay-br.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\pay-sep.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\pay-sum.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\pbc.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\pbc.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\pbl.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\pbl.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\pbr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\pbr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\ps-tourn.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\ps.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\ps.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\r0.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\r1.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\r2.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\rbtc.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\rbtc.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\rbtl.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\rbtl.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\rbtr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\rbtr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\sbtc.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\sbtc.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\sbtl.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\sbtl.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\sbtr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\sbtr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\tmbc.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\tmbc.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\tmbl.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\tmbl.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\tmbr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\tmbr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\tourn-info.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\tourn-info.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\tourn-name.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\ttbc.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\ttbc.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\ttbl.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\ttbl.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\ttbr.a.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\images\ttbr.bmp
c:\program files\PokerStars\update\Themes\&lobby;\black\templates\browser.css
c:\program files\PokerStars\update\Themes\&lobby;\black\templates\dialog.html
c:\program files\PokerStars\update\Themes\&lobby;\black\templates\help.html
c:\program files\PokerStars\update\Themes\black\bg.jpg
c:\program files\PokerStars\update\Themes\black\ctrls\bb.a.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\bb.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\btn.a.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\btn.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\cbtn.a.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\cbtn.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\lb.a.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\lb.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\lt.a.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\lt.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\rbtn.a.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\rbtn.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\slider-grip.a.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\slider-grip.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\slider.a.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\slider.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\tabs.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\vl.a.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\vl.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\wb.a.bmp
c:\program files\PokerStars\update\Themes\black\ctrls\wb.bmp
c:\program files\PokerStars\update\Themes\black\dialog.a.bmp
c:\program files\PokerStars\update\Themes\black\dialog.bmp
c:\program files\PokerStars\update\Themes\black\fg.a.bmp
c:\program files\PokerStars\update\Themes\black\fg.bmp
c:\program files\PokerStars\update\Themes\black\gx.ini
c:\program files\PokerStars\update\Themes\black\images\b-b.a.bmp
c:\program files\PokerStars\update\Themes\black\images\b-b.bmp
c:\program files\PokerStars\update\Themes\black\images\b-i.a.bmp
c:\program files\PokerStars\update\Themes\black\images\b-i.bmp
c:\program files\PokerStars\update\Themes\black\images\b-r.a.bmp
c:\program files\PokerStars\update\Themes\black\images\b-r.bmp
c:\program files\PokerStars\update\Themes\black\images\b.a.bmp
c:\program files\PokerStars\update\Themes\black\images\b.bmp
c:\program files\PokerStars\update\Themes\black\images\bg.jpg
c:\program files\PokerStars\update\Themes\black\images\brbc.a.bmp
c:\program files\PokerStars\update\Themes\black\images\brbc.bmp
c:\program files\PokerStars\update\Themes\black\images\brbl.a.bmp
c:\program files\PokerStars\update\Themes\black\images\brbl.bmp
c:\program files\PokerStars\update\Themes\black\images\brbr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\brbr.bmp
c:\program files\PokerStars\update\Themes\black\images\cashier.a.bmp
c:\program files\PokerStars\update\Themes\black\images\cashier.bmp
c:\program files\PokerStars\update\Themes\black\images\cbc.a.bmp
c:\program files\PokerStars\update\Themes\black\images\cbc.bmp
c:\program files\PokerStars\update\Themes\black\images\cbl.a.bmp
c:\program files\PokerStars\update\Themes\black\images\cbl.bmp
c:\program files\PokerStars\update\Themes\black\images\cbr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\cbr.bmp
c:\program files\PokerStars\update\Themes\black\images\cps.a.bmp
c:\program files\PokerStars\update\Themes\black\images\cps.bmp
c:\program files\PokerStars\update\Themes\black\images\f-arr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\f-arr.bmp
c:\program files\PokerStars\update\Themes\black\images\f-r.a.bmp
c:\program files\PokerStars\update\Themes\black\images\f-r.bmp
c:\program files\PokerStars\update\Themes\black\images\f.a.bmp
c:\program files\PokerStars\update\Themes\black\images\f.bmp
c:\program files\PokerStars\update\Themes\black\images\faceborder.a.bmp
c:\program files\PokerStars\update\Themes\black\images\faceborder.bmp
c:\program files\PokerStars\update\Themes\black\images\faceshape.bmp
c:\program files\PokerStars\update\Themes\black\images\filter-b.a.bmp
c:\program files\PokerStars\update\Themes\black\images\filter-b.bmp
c:\program files\PokerStars\update\Themes\black\images\filter-bg.bmp
c:\program files\PokerStars\update\Themes\black\images\filter-close.a.bmp
c:\program files\PokerStars\update\Themes\black\images\filter-close.bmp
c:\program files\PokerStars\update\Themes\black\images\filter-gr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\filter-gr.bmp
c:\program files\PokerStars\update\Themes\black\images\filter-header.a.bmp
c:\program files\PokerStars\update\Themes\black\images\filter-header.bmp
c:\program files\PokerStars\update\Themes\black\images\filter-lp.a.bmp
c:\program files\PokerStars\update\Themes\black\images\filter-lp.bmp
c:\program files\PokerStars\update\Themes\black\images\filter.a.bmp
c:\program files\PokerStars\update\Themes\black\images\filter.bmp
c:\program files\PokerStars\update\Themes\black\images\lb.bmp
c:\program files\PokerStars\update\Themes\black\images\lbbc.a.bmp
c:\program files\PokerStars\update\Themes\black\images\lbbc.bmp
c:\program files\PokerStars\update\Themes\black\images\lbbl.a.bmp
c:\program files\PokerStars\update\Themes\black\images\lbbl.bmp
c:\program files\PokerStars\update\Themes\black\images\lbbr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\lbbr.bmp
c:\program files\PokerStars\update\Themes\black\images\lbml.a.bmp
c:\program files\PokerStars\update\Themes\black\images\lbml.bmp
c:\program files\PokerStars\update\Themes\black\images\lbmr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\lbmr.bmp
c:\program files\PokerStars\update\Themes\black\images\lbtc.a.bmp
c:\program files\PokerStars\update\Themes\black\images\lbtc.bmp
c:\program files\PokerStars\update\Themes\black\images\lbtl.a.bmp
c:\program files\PokerStars\update\Themes\black\images\lbtl.bmp
c:\program files\PokerStars\update\Themes\black\images\lbtr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\lbtr.bmp
c:\program files\PokerStars\update\Themes\black\images\login.a.bmp
c:\program files\PokerStars\update\Themes\black\images\login.bmp
c:\program files\PokerStars\update\Themes\black\images\mbc.a.bmp
c:\program files\PokerStars\update\Themes\black\images\mbc.bmp
c:\program files\PokerStars\update\Themes\black\images\mbl.a.bmp
c:\program files\PokerStars\update\Themes\black\images\mbl.bmp
c:\program files\PokerStars\update\Themes\black\images\mbr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\mbr.bmp
c:\program files\PokerStars\update\Themes\black\images\name.bmp
c:\program files\PokerStars\update\Themes\black\images\pay-blt.a.bmp
c:\program files\PokerStars\update\Themes\black\images\pay-blt.bmp
c:\program files\PokerStars\update\Themes\black\images\pay-br.bmp
c:\program files\PokerStars\update\Themes\black\images\pay-sep.bmp
c:\program files\PokerStars\update\Themes\black\images\pay-sum.bmp
c:\program files\PokerStars\update\Themes\black\images\pbc.a.bmp
c:\program files\PokerStars\update\Themes\black\images\pbc.bmp
c:\program files\PokerStars\update\Themes\black\images\pbl.a.bmp
c:\program files\PokerStars\update\Themes\black\images\pbl.bmp
c:\program files\PokerStars\update\Themes\black\images\pbr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\pbr.bmp
c:\program files\PokerStars\update\Themes\black\images\ps-tourn.bmp
c:\program files\PokerStars\update\Themes\black\images\ps.a.bmp
c:\program files\PokerStars\update\Themes\black\images\ps.bmp
c:\program files\PokerStars\update\Themes\black\images\r0.bmp
c:\program files\PokerStars\update\Themes\black\images\r1.bmp
c:\program files\PokerStars\update\Themes\black\images\r2.bmp
c:\program files\PokerStars\update\Themes\black\images\rbtc.a.bmp
c:\program files\PokerStars\update\Themes\black\images\rbtc.bmp
c:\program files\PokerStars\update\Themes\black\images\rbtl.a.bmp
c:\program files\PokerStars\update\Themes\black\images\rbtl.bmp
c:\program files\PokerStars\update\Themes\black\images\rbtr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\rbtr.bmp
c:\program files\PokerStars\update\Themes\black\images\sbtc.a.bmp
c:\program files\PokerStars\update\Themes\black\images\sbtc.bmp
c:\program files\PokerStars\update\Themes\black\images\sbtl.a.bmp
c:\program files\PokerStars\update\Themes\black\images\sbtl.bmp
c:\program files\PokerStars\update\Themes\black\images\sbtr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\sbtr.bmp
c:\program files\PokerStars\update\Themes\black\images\tmbc.a.bmp
c:\program files\PokerStars\update\Themes\black\images\tmbc.bmp
c:\program files\PokerStars\update\Themes\black\images\tmbl.a.bmp
c:\program files\PokerStars\update\Themes\black\images\tmbl.bmp
c:\program files\PokerStars\update\Themes\black\images\tmbr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\tmbr.bmp
c:\program files\PokerStars\update\Themes\black\images\tourn-info.a.bmp
c:\program files\PokerStars\update\Themes\black\images\tourn-info.bmp
c:\program files\PokerStars\update\Themes\black\images\tourn-name.bmp
c:\program files\PokerStars\update\Themes\black\images\ttbc.a.bmp
c:\program files\PokerStars\update\Themes\black\images\ttbc.bmp
c:\program files\PokerStars\update\Themes\black\images\ttbl.a.bmp
c:\program files\PokerStars\update\Themes\black\images\ttbl.bmp
c:\program files\PokerStars\update\Themes\black\images\ttbr.a.bmp
c:\program files\PokerStars\update\Themes\black\images\ttbr.bmp
c:\program files\PokerStars\update\Themes\black\images\vip-status-l.a.bmp
c:\program files\PokerStars\update\Themes\black\images\vip-status-l.bmp
c:\program files\PokerStars\update\Themes\black\images\vsc.bmp
c:\program files\PokerStars\update\Themes\black\images\vsl.bmp
c:\program files\PokerStars\update\Themes\black\images\vsr.bmp
c:\program files\PokerStars\update\Themes\black\label\border.a.bmp
c:\program files\PokerStars\update\Themes\black\label\border.bmp
c:\program files\PokerStars\update\Themes\black\label\borderb.a.bmp
c:\program files\PokerStars\update\Themes\black\label\borderb.bmp
c:\program files\PokerStars\update\Themes\black\label\seat.a.bmp
c:\program files\PokerStars\update\Themes\black\label\seat.bmp
c:\program files\PokerStars\update\Themes\black\label\status.a.bmp
c:\program files\PokerStars\update\Themes\black\label\status.bmp
c:\program files\PokerStars\update\Themes\black\label\statusb.a.bmp
c:\program files\PokerStars\update\Themes\black\label\statusb.bmp
c:\program files\PokerStars\update\Themes\black\templates\browser.css
c:\program files\PokerStars\update\Themes\black\templates\dialog.css
c:\program files\PokerStars\update\Themes\black\templates\dialog.html
c:\program files\PokerStars\update\Themes\black\templates\help.html
c:\program files\PokerStars\update\Themes\black\update.bmp
c:\program files\PokerStars\update\Themes\preview\lobby\&default.jpg;
c:\program files\PokerStars\update\Themes\preview\lobby\black.jpg
c:\program files\PokerStars\update\Themes\preview\lobby\old-black.jpg
c:\program files\PokerStars\update\Themes\simple\gx.ini
c:\program files\PokerStars\update\Themes\themes.ini
c:\program files\PokerStars\update\trace.ini
c:\program files\PokerStars\update\update.ini
c:\program files\PokerStars\user.ini
c:\program files\PokerStars\user.ini.bak
c:\windows\arixabokogike.dll
c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8HMRKDI3\aasuper2[1].htm
c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8HMRKDI3\l26[1].exe
c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CPIF41AR\aasuper0[1].htm
c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OP2NWXUB\aasuper1[1].htm
c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OP2NWXUB\tqanbocttq[1].txt
c:\windows\system32\drivers\etdfsvapi33.sys
c:\windows\system32\drivers\ff31df41.sys
c:\windows\system32\drivers\iypsvl.sys
c:\windows\system32\DRIVERS\mamotou.sys
c:\windows\Tasks\AAD8435891A3F79C.job
c:\windows\ugupevog.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Legacy_E61XFMD3PPU.SYS
——-\Legacy_ETDFSVAPI33.SYS
——-\Service_e61xfmd3ppu.sys
——-\Service_etdfsvapi33.sys
——-\Service_ff31df41
——-\Service_mamotou


((((((((((((((((((((((((( Files Created from 2008-11-28 to 2008-12-30 )))))))))))))))))))))))))))))))
.

2008-12-29 07:12 . 2008-12-29 07:12 d——– c:\program files\Alwil Software
2008-12-28 18:43 . 2008-12-28 18:45 d——– c:\documents and settings\Danni-Doug\.SunDownloadManager
2008-12-28 18:30 . 2008-12-28 18:30 d——– C:\61c22c20cbe8fe9ff137
2008-12-28 07:44 . 2008-12-28 07:44 d——– c:\documents and settings\Danni-Doug\Application Data\Malwarebytes
2008-12-28 07:41 . 2008-12-28 07:44 d——– c:\program files\detriot pistons
2008-12-28 07:41 . 2008-12-28 07:41 d——– c:\documents and settings\All Users\Application Data\Malwarebytes
2008-12-28 07:41 . 2008-12-03 19:52 38,496 –a—— c:\windows\system32\drivers\mbamswissarmy.sys
2008-12-28 07:41 . 2008-12-03 19:52 15,504 –a—— c:\windows\system32\drivers\mbam.sys
2008-12-27 02:35 . 2008-12-27 02:37 d——– c:\program files\Windows Live Safety Center
2008-12-25 23:34 . 2008-12-25 23:34 d——– c:\documents and settings\Guest\Application Data\Skinux
2008-12-25 23:34 . 2008-12-25 23:35 d——– c:\documents and settings\Guest\Application Data\ArcSoft
2008-12-25 23:26 . 2008-12-25 23:26 d——– c:\documents and settings\Doug\Application Data\Skinux
2008-12-25 23:26 . 2008-12-25 23:27 d——– c:\documents and settings\Doug\Application Data\ArcSoft
2008-12-25 23:26 . 2008-12-25 23:26 d——– c:\documents and settings\Doug
2008-12-25 20:04 . 2008-12-25 20:04 d——– c:\program files\Trend Micro
2008-12-25 20:04 . 2008-12-27 03:43 d——– c:\documents and settings\All Users\Application Data\CrucialSoft Ltd
2008-12-25 20:04 . 2008-12-25 20:04 44,032 –a—— C:\tnpqvcdm.exe
2008-12-18 06:27 . 2008-12-23 06:02 d——– c:\windows\ie8updates
2008-12-17 17:40 . 2008-12-17 17:40 410,984 –a—— c:\windows\system32\deploytk.dll
2008-11-28 21:24 . 2008-11-28 23:09 d——– c:\program files\Common Files\eSellerate
2008-11-28 21:14 . 2008-11-28 21:14 d——– c:\program files\YSFLIGHT.COM
2008-11-28 20:55 . 2008-11-28 20:55 d——– c:\documents and settings\Danni-Doug\Application Data\flightgear.org
2008-11-28 20:53 . 2008-11-28 23:11 d——– c:\program files\FlightGear
2008-11-28 02:21 . 2008-11-28 02:21 d——– c:\program files\Windows Media Connect 2
2008-11-28 02:20 . 2008-11-28 02:20 d——– c:\windows\system32\LogFiles
2008-11-28 02:20 . 2008-11-28 02:20 d——– c:\windows\system32\drivers\UMDF
2008-11-24 02:22 . 2008-11-24 02:22 0 –ah—– c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2008-11-24 02:22 . 2008-11-24 02:22 0 –ah—– c:\windows\system32\drivers\Msft_Kernel_motmodem_01005.Wdf
2008-11-24 02:21 . 2008-11-24 02:21 d——– c:\program files\Common Files\Motorola Shared
2008-11-24 02:21 . 2008-11-24 02:21 0 –a—— c:\windows\PanelExe.INI
2008-11-24 02:08 . 2008-11-24 02:08 0 –a—— c:\windows\PhoneBkExe.INI
2008-11-24 02:08 . 2008-11-24 02:08 0 –a—— c:\windows\FileMgrExe.INI
2008-11-24 02:01 . 2008-11-24 02:01 0 –a—— c:\windows\AlbumExe.INI
2008-11-24 01:50 . 2006-12-28 18:17 50,275 –a—— c:\windows\system32\drivers\NEXTELU.sys
2008-11-24 01:50 . 2005-08-18 11:44 49,867 –a—— c:\windows\system32\drivers\mardp2k.sys
2008-11-24 01:50 . 2005-08-18 11:44 49,484 –a—— c:\windows\system32\drivers\mardpnp.sys
2008-11-24 01:50 . 2004-12-16 16:55 25,055 –a—— c:\windows\system32\drivers\NEXTELC.sys
2008-11-24 01:50 . 2005-08-18 11:44 24,789 –a—— c:\windows\system32\drivers\MaVctrl.sys
2008-11-24 01:50 . 2005-08-18 11:44 11,473 –a—— c:\windows\system32\drivers\MaVc2K.sys
2008-11-24 01:49 . 2008-11-24 01:49 d——– c:\windows\Application Data
2008-11-24 01:19 . 2008-12-24 02:41 d——– c:\documents and settings\All Users\Application Data\BVRP Software
2008-11-11 14:00 . 2008-09-04 12:15 1,106,944 —–c— c:\windows\system32\dllcache\msxml3.dll
2008-11-11 14:00 . 2008-10-24 06:21 455,296 —–c— c:\windows\system32\dllcache\mrxsmb.sys
2008-11-09 12:34 . 2008-11-09 12:34 d——– c:\documents and settings\Danni-Doug\Application Data\KodakCredentialStore
2008-11-08 22:14 . 2008-11-08 22:14 d——– c:\documents and settings\Danni-Doug\Application Data\ArcSoft
2008-11-08 22:14 . 2008-11-08 22:14 d——– c:\documents and settings\All Users\Application Data\ArcSoft
2008-11-08 22:13 . 2008-11-08 22:14 d——– c:\program files\Common Files\ArcSoft
2008-11-08 22:13 . 2008-11-08 22:13 d——– c:\program files\ArcSoft
2008-11-08 22:09 . 2008-05-02 08:25 465,920 ——— c:\windows\system32\imapi2fs.dll
2008-11-08 22:09 . 2008-05-02 08:25 465,920 —–c— c:\windows\system32\dllcache\imapi2fs.dll
2008-11-08 22:09 . 2008-05-02 08:25 317,952 ——— c:\windows\system32\imapi2.dll
2008-11-08 22:09 . 2008-05-02 08:25 317,952 —–c— c:\windows\system32\dllcache\imapi2.dll
2008-11-08 22:09 . 2008-05-02 05:49 62,976 —–c— c:\windows\system32\dllcache\cdrom.sys
2008-11-08 22:00 . 2008-11-08 22:00 d——– c:\documents and settings\Danni-Doug\Application Data\Skinux
2008-11-08 21:58 . 2008-11-08 22:10 d——– c:\program files\Common Files\Kodak
2008-11-08 21:55 . 2008-11-08 22:00 d——– c:\program files\Kodak
2008-11-08 21:53 . 2008-11-08 22:00 d——– c:\documents and settings\All Users\Application Data\Kodak
2008-11-03 22:27 . 2008-11-03 22:28 d——– c:\documents and settings\All Users\Application Data\Apple Computer
2008-11-03 22:26 . 2008-12-24 02:44 d—-c— c:\windows\system32\DRVSTORE
2008-11-03 22:17 . 2008-12-24 02:37 d——– c:\program files\Blubster
2008-11-03 22:17 . 2008-11-03 22:17 0 –ah-c— c:\windows\SwSys2.bmp
2008-11-03 22:17 . 2008-11-03 22:17 0 –ah-c— c:\windows\SwSys1.bmp
2008-11-03 22:04 . 2008-11-03 22:04 0 –a—— C:\testwma.raw
2008-11-03 21:59 . 2008-09-25 08:20 483,328 –a—— c:\windows\system32\actskn45.ocx

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-29 11:27 ——— d—–w c:\program files\Java
2008-12-26 04:07 ——— d—–w c:\program files\Teamspeak2_RC2
2008-12-24 07:58 ——— d—–w c:\program files\Microsoft LifeCam
2008-12-24 07:44 ——— d—–w c:\program files\iTunes
2008-12-24 07:44 ——— d—–w c:\program files\iPod
2008-12-24 07:41 ——— d–h–w c:\program files\InstallShield Installation Information
2008-12-24 07:39 ——— d—–w c:\program files\Bonjour
2008-12-10 18:00 ——— d—–w c:\program files\Lx_cats
2008-11-04 03:28 ——— d—–w c:\program files\QuickTime
2008-09-28 19:29 24 -c–a-w c:\documents and settings\Danni-Doug\jagex_runescape_preferences.dat
2008-05-21 00:56 32,768 -csha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008052020080521\index.dat
.

((((((((((((((((((((((((((((( snapshot_2008-12-30_ 4.26.12.40 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-12-30 21:49:26 16,384 —-atw c:\windows\Temp\Perflib_Perfdata_488.dat
+ 2008-12-30 21:49:39 16,384 —-atw c:\windows\Temp\Perflib_Perfdata_64c.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTSysVol"="c:\program files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe" [2003-09-17 57344]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-06-01 458752]
"LXCGCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll" [2005-07-20 73728]
"ddoctorv2"="c:\program files\Comcast\Desktop Doctor\bin\sprtcmd.exe" [2008-04-24 202560]
"VX6000"="c:\windows\vVX6000.exe" [2006-10-13 994096]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2008-11-20 178688]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-17 136600]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
"nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.enc"= ITIG726.acm

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray]
——— 2004-06-01 11:03 217088 c:\program files\Logitech\Video\LogiTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
–a—— 2008-09-06 15:09 413696 c:\program files\QuickTime\QTTask.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\PlayOnline\\SquareEnix\\PlayOnlineViewer\\pol.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
"c:\\AeriaGames\\LastChaosUSA\\LC.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"c:\\Program Files\\MySpace\\IM\\MySpaceIM.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-12-29 111184]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-12-29 20560]
S3 VX6000;Microsoft LifeCam VX-6000;c:\windows\system32\DRIVERS\VX6000Xp.sys [2006-06-29 2383152]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.msn.com
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://www.yahoo.com

c:\windows\Downloaded Program Files\gtplugin.ocx - O16 -: {E93E9DF0-3E59-4331-A269-F1E077C66F00}
hxxp://cnn-5.vo.llnwd.net/c1/static/client/browserplayer/gtplugin.cab
c:\windows\Downloaded Program Files\gtplugin.inf
FF - ProfilePath - c:\documents and settings\Danni-Doug\Application Data\Mozilla\Firefox\Profiles\4fn9pvih.default\
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start2.mozilla.com/firefox?client=firefox-a&rls;=org.mozilla:en-US:official
FF - plugin: c:\program files\Yahoo!\Shared\npYState.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-30 16:51:32
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCGCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
———————— Other Running Processes ————————
.
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\windows\system32\CTSVCCDA.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft LifeCam\MSCamS32.exe
c:\windows\system32\nvsvc32.exe
c:\program files\Comcast\Desktop Doctor\bin\sprtsvc.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2008-12-30 16:54:21 - machine was rebooted [Danni-Doug]
ComboFix-quarantined-files.txt 2008-12-30 21:53:56
ComboFix2.txt 2008-12-29 02:24:50

Pre-Run: 93,441,384,448 bytes free
Post-Run: 93,377,581,056 bytes free

2431 — E O F — 2008-12-23 20:22:16



ok theres stuff I see on there I have no clue why or how its on my PC…. Blubster, Bonjour, nextell drivers
Post #25
1. That's better. Please provide a list of uninstallable programs.

To Provide a List of Installed Programs
  • Run HijackThis.
  • Click Config>>Miscellaneous Tools>>Open Uninstall Manager>>Save List
  • Save list to Desktop
  • Copy the Notepad list and Paste it into this thread.


2. Please post a fresh HijackThis log.

3. Also tell me how your system is now running
Post #26 last edited
Here is the list of installed programs u asked for…………………………..


2moons
ABBYY FineReader 6.0 Sprint
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
Adobe Flash Player ActiveX
Adobe Reader 8.1.2
Adobe Shockwave Player
ArcSoft Print Creations
ArcSoft Print Creations - Album Page
ArcSoft Print Creations - Funhouse
ArcSoft Print Creations - Greeting Card
ArcSoft Print Creations - Photo Book
ArcSoft Print Creations - Photo Calendar
ArcSoft Print Creations - Scrapbook
ArcSoft Print Creations - Slimline Card
avast! Antivirus
CCScore
Creative System Information
Creative ZEN Stone User's Guide
Desktop Doctor
ESSBrwr
ESSCDBK
ESScore
ESSgui
ESSini
ESSPCD
ESSPDock
ESSTOOLS
essvatgt
FINAL FANTASY XI
FINAL FANTASY XI: Chains of Promathia
FINAL FANTASY XI: Rise of the Zilart
FINAL FANTASY XI: Treasures of Aht Urhgan
FINAL FANTASY XI: Wings of the Goddess
HijackThis 2.0.2
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB932716-v2)
Hotfix for Windows XP (KB945060-v3)
Hotfix for Windows XP (KB952287)
Java™ 6 Update 11
Kodak EasyShare software
LastChaos
Lexmark 2300 Series
Logitech Gaming Software
Logitech QuickCam
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft LifeCam
Microsoft National Language Support Downlevel APIs
Microsoft User-Mode Driver Framework Feature Pack 1.0
Move Networks Player for Internet Explorer
Mozilla Firefox (3.0.5)
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 Parser and SDK
MySpaceIM
netbrdg
NVIDIA Drivers
OfotoXMI
Picasa 2
PlayOnline Viewer and Tetra Master
PokerStars
ProSavageDDR and Utilities
QuickTime
S3Display
S3Gamma2
S3Info2
S3Overlay
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
SFR
SHASTA
skin0001
SKINXSDK
Sound Blaster Live! 24-bit
staticcr
TeamSpeak 2 Server RC2
tooltips
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Ventrilo Client
VPRINTOL
Windows Genuine Advantage v1.3.0254.0
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Service Pack 3
WIRELESS
Yahoo! Messenger










heres the new HIJACKTHIS log………………………………………………..


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:00:49 AM, on 12/31/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [ddoctorv2] "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
O4 - HKLM\..\Run: [VX6000] C:\WINDOWS\vVX6000.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab
O16 - DPF: {42D06124-98A2-47EC-8098-3778B58CE7D5} (SupportSoft External Control) - http://connect.comcast.com/dl/Comcast%20Ac…%20Controls.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v5.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - http://zone.msn.com/binframework/v10/StProxy.cab55579.cab
O16 - DPF: {E93E9DF0-3E59-4331-A269-F1E077C66F00} (GameTap Web Plugin) - http://cnn-5.vo.llnwd.net/c1/static/client…er/gtplugin.cab
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe

–
End of file - 7101 bytes



its running alot better actually pretty good… but I do have alot of stuff on here from doing this now like all my notebook files and other stuff I would like to know how to delete everything when i'm cleared.
Post #27
Ok I just had my firewall shut off on its own . not sure why or how but as soon as it was shut off I turned it back on and made another Hijack log so here it is…………….


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:42:07 AM, on 12/31/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\WINDOWS\system32\rn.tmp
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [ddoctorv2] "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
O4 - HKLM\..\Run: [VX6000] C:\WINDOWS\vVX6000.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab
O16 - DPF: {42D06124-98A2-47EC-8098-3778B58CE7D5} (SupportSoft External Control) - http://connect.comcast.com/dl/Comcast%20Ac…%20Controls.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v5.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - http://zone.msn.com/binframework/v10/StProxy.cab55579.cab
O16 - DPF: {E93E9DF0-3E59-4331-A269-F1E077C66F00} (GameTap Web Plugin) - http://cnn-5.vo.llnwd.net/c1/static/client…er/gtplugin.cab
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe

–
End of file - 7264 bytes


also just got a cpl virus warning from avast I've sent them into chest 1 was a trojan horse….

and now gettting pop ups like crazy avast said blocked a malware pop up
Post #28
A. First we must disable some of your security programs so that they do not interfere with the running of our tools:

AVAST
Right click on the avast! icon in system tray (looks like this: [external image: Posted Image]) and choose (Stop On-Access Protection)



B. 1. Please open Notepad
  • Click Start , then Run
  • Type notepad .exe in the Run Box.
2. Now copy/paste the entire content of the codebox below into the Notepad window:

KillAll::

Folder::
c:\documents and settings\Danni-Doug\Application Data\SHOW MORE TYPE

File::
C:\tnpqvcdm.exe
C:\dl_log.txt
c:\documents and settings\Danni-Doug\Desktop\DirLook.exe
Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Save the above as CFScript.txt

4. Now drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again. Do not use your computer for any other purpose while ComboFix is running.

5. All your monitoring programs (Antivirus/Antispyware, Guards and Shields) will be stopped.

[external image: Posted Image]

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.

6. ComboFix will automatically REBOOT your machine when the KillAll:: switch is used..

7. Post the following logs/Reports:
  • ComboFix.txt
  • Fresh HijackThis log run after all the other tools have performed their cleanup.
CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
Post #29
ok I just had a severe issue, spyware attack once again auto installed some porn site or something on my desktop. It wouldnt let me access this till I ran malwarebytes,
this is a hijackthis log of that issue followed by the malwarebytesa log I ran. to be able to access here.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:57:17 PM, on 12/31/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\msiconf.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe
C:\WINDOWS\vVX6000.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [ddoctorv2] "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
O4 - HKLM\..\Run: [VX6000] C:\WINDOWS\vVX6000.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [prunnet] "C:\WINDOWS\system32\prunnet.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [prunnet] "C:\WINDOWS\system32\prunnet.exe"
O4 - HKUS\S-1-5-18\..\Run: [msiexec.exe] msiconf.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msiexec.exe] msiconf.exe (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab
O16 - DPF: {42D06124-98A2-47EC-8098-3778B58CE7D5} (SupportSoft External Control) - http://connect.comcast.com/dl/Comcast%20Ac…%20Controls.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v5.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - http://zone.msn.com/binframework/v10/StProxy.cab55579.cab
O16 - DPF: {E93E9DF0-3E59-4331-A269-F1E077C66F00} (GameTap Web Plugin) - http://cnn-5.vo.llnwd.net/c1/static/client…er/gtplugin.cab
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe

–
End of file - 7518 bytes




malwarebytes log………………………………………..


Malwarebytes' Anti-Malware 1.31
Database version: 1562
Windows 5.1.2600 Service Pack 3

12/31/2008 3:03:19 PM
mbam-log-

Scan type: Quick Scan
Objects scanned: 57509
Time elapsed: 3 minute(s), 12 second(s)

Memory Processes Infected: 1
Memory Modules Infected: 0
Registry Keys Infected: 4
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 15

Memory Processes Infected:
C:\WINDOWS\system32\msiconf.exe (Trojan.Downloader) -> No action taken.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\prunnet (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\xpreapp (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Spyware Guard 2008 (Rogue.SpywareGuard) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{17e60241-cb03-48b2-aa68-d2af1ab5875f} (Trojan.FakeAlert) -> No action taken.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\prunnet (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\prunnet (Trojan.Agent) -> No action taken.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Documents and Settings\All Users\Application Data\CrucialSoft Ltd (Rogue.Multiple) -> No action taken.

Files Infected:
C:\WINDOWS\system32\senekaissigbgg.dll (Trojan.Seneka) -> No action taken.
C:\tnpqvcdm.exe (Trojan.Vundo) -> No action taken.
C:\Documents and Settings\Danni-Doug\Local Settings\temp\seneka4eaf.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\prunnet.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\senekaairaecmw.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\senekaffpreygj.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\senekadf.dat (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\seneka.dat (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\senekalog.dat (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\drivers\seneka.sys (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\drivers\senekaiwnjumdj.sys (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\msiconf.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\All Users\Desktop\Best BDSM P0rn.url (Rogue.Link) -> No action taken.
C:\Documents and Settings\All Users\Desktop\Gay Fetish Sex.url (Rogue.Link) -> No action taken.
C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\nnswpwsegr.dll (Trojan.FakeAlert) -> No action taken.


Now I will run what you asked me too
Post #30
ok here is the combofix report and a new hijackthis log


ComboFix 08-12-28.01 - Danni-Doug 2008-12-31 15:14:06.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.714 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Danni-Doug\Desktop\CFScript.txt
AV: avast! antivirus 4.8.1296 [VPS 081231-0] *On-access scanning disabled* (Updated)
* Created a new restore point

FILE ::
C:\dl_log.txt
c:\documents and settings\Danni-Doug\Desktop\DirLook.exe
C:\tnpqvcdm.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Danni-Doug\Application Data\SHOW MORE TYPE
c:\documents and settings\Danni-Doug\Application Data\SHOW MORE TYPE\0
c:\documents and settings\Danni-Doug\Desktop\DirLook.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Service_seneka


((((((((((((((((((((((((( Files Created from 2008-11-28 to 2008-12-31 )))))))))))))))))))))))))))))))
.

2008-12-29 07:12 . 2008-12-29 07:12 d——– c:\program files\Alwil Software
2008-12-28 18:43 . 2008-12-28 18:45 d——– c:\documents and settings\Danni-Doug\.SunDownloadManager
2008-12-28 18:30 . 2008-12-28 18:30 d——– C:\61c22c20cbe8fe9ff137
2008-12-28 07:44 . 2008-12-28 07:44 d——– c:\documents and settings\Danni-Doug\Application Data\Malwarebytes
2008-12-28 07:41 . 2008-12-28 07:44 d——– c:\program files\detriot pistons
2008-12-28 07:41 . 2008-12-28 07:41 d——– c:\documents and settings\All Users\Application Data\Malwarebytes
2008-12-28 07:41 . 2008-12-03 19:52 38,496 –a—— c:\windows\system32\drivers\mbamswissarmy.sys
2008-12-28 07:41 . 2008-12-03 19:52 15,504 –a—— c:\windows\system32\drivers\mbam.sys
2008-12-27 02:35 . 2008-12-27 02:37 d——– c:\program files\Windows Live Safety Center
2008-12-25 23:34 . 2008-12-25 23:34 d——– c:\documents and settings\Guest\Application Data\Skinux
2008-12-25 23:34 . 2008-12-25 23:35 d——– c:\documents and settings\Guest\Application Data\ArcSoft
2008-12-25 23:26 . 2008-12-25 23:26 d——– c:\documents and settings\Doug\Application Data\Skinux
2008-12-25 23:26 . 2008-12-25 23:27 d——– c:\documents and settings\Doug\Application Data\ArcSoft
2008-12-25 23:26 . 2008-12-25 23:26 d——– c:\documents and settings\Doug
2008-12-25 20:04 . 2008-12-25 20:04 d——– c:\program files\Trend Micro
2008-12-18 06:27 . 2008-12-23 06:02 d——– c:\windows\ie8updates
2008-12-17 17:40 . 2008-12-17 17:40 410,984 –a—— c:\windows\system32\deploytk.dll
2008-11-28 21:24 . 2008-11-28 23:09 d——– c:\program files\Common Files\eSellerate
2008-11-28 21:14 . 2008-11-28 21:14 d——– c:\program files\YSFLIGHT.COM
2008-11-28 20:55 . 2008-11-28 20:55 d——– c:\documents and settings\Danni-Doug\Application Data\flightgear.org
2008-11-28 20:53 . 2008-11-28 23:11 d——– c:\program files\FlightGear
2008-11-28 02:21 . 2008-11-28 02:21 d——– c:\program files\Windows Media Connect 2
2008-11-28 02:20 . 2008-11-28 02:20 d——– c:\windows\system32\LogFiles
2008-11-28 02:20 . 2008-11-28 02:20 d——– c:\windows\system32\drivers\UMDF
2008-11-24 02:22 . 2008-11-24 02:22 0 –ah—– c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2008-11-24 02:22 . 2008-11-24 02:22 0 –ah—– c:\windows\system32\drivers\Msft_Kernel_motmodem_01005.Wdf
2008-11-24 02:21 . 2008-11-24 02:21 d——– c:\program files\Common Files\Motorola Shared
2008-11-24 02:21 . 2008-11-24 02:21 0 –a—— c:\windows\PanelExe.INI
2008-11-24 02:08 . 2008-11-24 02:08 0 –a—— c:\windows\PhoneBkExe.INI
2008-11-24 02:08 . 2008-11-24 02:08 0 –a—— c:\windows\FileMgrExe.INI
2008-11-24 02:01 . 2008-11-24 02:01 0 –a—— c:\windows\AlbumExe.INI
2008-11-24 01:50 . 2006-12-28 18:17 50,275 –a—— c:\windows\system32\drivers\NEXTELU.sys
2008-11-24 01:50 . 2005-08-18 11:44 49,867 –a—— c:\windows\system32\drivers\mardp2k.sys
2008-11-24 01:50 . 2005-08-18 11:44 49,484 –a—— c:\windows\system32\drivers\mardpnp.sys
2008-11-24 01:50 . 2004-12-16 16:55 25,055 –a—— c:\windows\system32\drivers\NEXTELC.sys
2008-11-24 01:50 . 2005-08-18 11:44 24,789 –a—— c:\windows\system32\drivers\MaVctrl.sys
2008-11-24 01:50 . 2005-08-18 11:44 11,473 –a—— c:\windows\system32\drivers\MaVc2K.sys
2008-11-24 01:49 . 2008-11-24 01:49 d——– c:\windows\Application Data
2008-11-24 01:19 . 2008-12-24 02:41 d——– c:\documents and settings\All Users\Application Data\BVRP Software
2008-11-11 14:00 . 2008-09-04 12:15 1,106,944 —–c— c:\windows\system32\dllcache\msxml3.dll
2008-11-11 14:00 . 2008-10-24 06:21 455,296 —–c— c:\windows\system32\dllcache\mrxsmb.sys
2008-11-09 12:34 . 2008-11-09 12:34 d——– c:\documents and settings\Danni-Doug\Application Data\KodakCredentialStore
2008-11-08 22:14 . 2008-11-08 22:14 d——– c:\documents and settings\Danni-Doug\Application Data\ArcSoft
2008-11-08 22:14 . 2008-11-08 22:14 d——– c:\documents and settings\All Users\Application Data\ArcSoft
2008-11-08 22:13 . 2008-11-08 22:14 d——– c:\program files\Common Files\ArcSoft
2008-11-08 22:13 . 2008-11-08 22:13 d——– c:\program files\ArcSoft
2008-11-08 22:09 . 2008-05-02 08:25 465,920 ——— c:\windows\system32\imapi2fs.dll
2008-11-08 22:09 . 2008-05-02 08:25 465,920 —–c— c:\windows\system32\dllcache\imapi2fs.dll
2008-11-08 22:09 . 2008-05-02 08:25 317,952 ——— c:\windows\system32\imapi2.dll
2008-11-08 22:09 . 2008-05-02 08:25 317,952 —–c— c:\windows\system32\dllcache\imapi2.dll
2008-11-08 22:09 . 2008-05-02 05:49 62,976 —–c— c:\windows\system32\dllcache\cdrom.sys
2008-11-08 22:00 . 2008-11-08 22:00 d——– c:\documents and settings\Danni-Doug\Application Data\Skinux
2008-11-08 21:58 . 2008-11-08 22:10 d——– c:\program files\Common Files\Kodak
2008-11-08 21:55 . 2008-11-08 22:00 d——– c:\program files\Kodak
2008-11-08 21:53 . 2008-11-08 22:00 d——– c:\documents and settings\All Users\Application Data\Kodak
2008-11-03 22:27 . 2008-11-03 22:28 d——– c:\documents and settings\All Users\Application Data\Apple Computer
2008-11-03 22:26 . 2008-12-24 02:44 d—-c— c:\windows\system32\DRVSTORE
2008-11-03 22:17 . 2008-12-24 02:37 d——– c:\program files\Blubster
2008-11-03 22:17 . 2008-11-03 22:17 0 –ah-c— c:\windows\SwSys2.bmp
2008-11-03 22:17 . 2008-11-03 22:17 0 –ah-c— c:\windows\SwSys1.bmp
2008-11-03 22:04 . 2008-11-03 22:04 0 –a—— C:\testwma.raw
2008-11-03 21:59 . 2008-09-25 08:20 483,328 –a—— c:\windows\system32\actskn45.ocx

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-29 11:27 ——— d—–w c:\program files\Java
2008-12-26 04:07 ——— d—–w c:\program files\Teamspeak2_RC2
2008-12-24 07:58 ——— d—–w c:\program files\Microsoft LifeCam
2008-12-24 07:44 ——— d—–w c:\program files\iTunes
2008-12-24 07:44 ——— d—–w c:\program files\iPod
2008-12-24 07:41 ——— d–h–w c:\program files\InstallShield Installation Information
2008-12-24 07:39 ——— d—–w c:\program files\Bonjour
2008-12-10 18:00 ——— d—–w c:\program files\Lx_cats
2008-11-04 03:28 ——— d—–w c:\program files\QuickTime
2008-09-28 19:29 24 -c–a-w c:\documents and settings\Danni-Doug\jagex_runescape_preferences.dat
2008-05-21 00:56 32,768 -csha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008052020080521\index.dat
.

((((((((((((((((((((((((((((( snapshot_2008-12-30_ 4.26.12.40 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-12-28 12:33:35 32,768 -c–a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2008-12-31 19:33:03 32,768 -c–a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
- 2008-12-28 12:33:35 32,768 -c–a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-12-31 19:33:03 32,768 -c–a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2008-12-28 12:33:35 49,152 -c–a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-12-31 19:33:03 49,152 -c–a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-12-31 20:18:15 16,384 —-atw c:\windows\Temp\Perflib_Perfdata_48c.dat
+ 2008-12-31 20:18:22 16,384 —-atw c:\windows\Temp\Perflib_Perfdata_65c.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTSysVol"="c:\program files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe" [2003-09-17 57344]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-06-01 458752]
"LXCGCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll" [2005-07-20 73728]
"ddoctorv2"="c:\program files\Comcast\Desktop Doctor\bin\sprtcmd.exe" [2008-04-24 202560]
"VX6000"="c:\windows\vVX6000.exe" [2006-10-13 994096]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2008-11-20 178688]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-17 136600]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
"nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.enc"= ITIG726.acm

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray]
——— 2004-06-01 11:03 217088 c:\program files\Logitech\Video\LogiTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
–a—— 2008-09-06 15:09 413696 c:\program files\QuickTime\QTTask.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\PlayOnline\\SquareEnix\\PlayOnlineViewer\\pol.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
"c:\\AeriaGames\\LastChaosUSA\\LC.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\MySpace\\IM\\MySpaceIM.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-12-29 111184]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-12-29 20560]
S3 VX6000;Microsoft LifeCam VX-6000;c:\windows\system32\DRIVERS\VX6000Xp.sys [2006-06-29 2383152]
.
- - - - ORPHANS REMOVED - - - -

HKU-Default-Run-msiexec.exe - msiconf.exe


.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.msn.com
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://www.yahoo.com

c:\windows\Downloaded Program Files\gtplugin.ocx - O16 -: {E93E9DF0-3E59-4331-A269-F1E077C66F00}
hxxp://cnn-5.vo.llnwd.net/c1/static/client/browserplayer/gtplugin.cab
c:\windows\Downloaded Program Files\gtplugin.inf
FF - ProfilePath - c:\documents and settings\Danni-Doug\Application Data\Mozilla\Firefox\Profiles\4fn9pvih.default\
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start2.mozilla.com/firefox?client=firefox-a&rls;=org.mozilla:en-US:official
FF - plugin: c:\program files\Yahoo!\Shared\npYState.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-31 15:20:55
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCGCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
———————— Other Running Processes ————————
.
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\windows\system32\CTSVCCDA.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft LifeCam\MSCamS32.exe
c:\windows\system32\nvsvc32.exe
c:\program files\Comcast\Desktop Doctor\bin\sprtsvc.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2008-12-31 15:23:46 - machine was rebooted
ComboFix-quarantined-files.txt 2008-12-31 20:23:20
ComboFix2.txt 2008-12-30 21:54:23
ComboFix3.txt 2008-12-29 02:24:50

Pre-Run: 93,404,266,496 bytes free
Post-Run: 93,350,875,136 bytes free

200 — E O F — 2008-12-23 20:22:16




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:26:28 PM, on 12/31/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [ddoctorv2] "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
O4 - HKLM\..\Run: [VX6000] C:\WINDOWS\vVX6000.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab
O16 - DPF: {42D06124-98A2-47EC-8098-3778B58CE7D5} (SupportSoft External Control) - http://connect.comcast.com/dl/Comcast%20Ac…%20Controls.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v5.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - http://zone.msn.com/binframework/v10/StProxy.cab55579.cab
O16 - DPF: {E93E9DF0-3E59-4331-A269-F1E077C66F00} (GameTap Web Plugin) - http://cnn-5.vo.llnwd.net/c1/static/client…er/gtplugin.cab
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe

–
End of file - 7150 bytes

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI