Mourning the loss of our friend, WhitPhil.
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
 
Malware Removal & HijackThis Logs
Tag Cloud
access audio black screen blue screen boot bsod connection crash dell desktop drivers dvd email error excel excel 2003 firefox hard drive hardware hdmi hijackthis internet keyboard laptop malware monitor motherboard network networking outlook problem processor recovery router safe mode slow sound spyware tdlwsp.dll trojan vba video virus vista vundo windows windows 7 windows vista windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > Malware Removal & HijackThis Logs >
I have a trojan horse BHO infection. Pls help... (New)

Tip: Click here to scan for System Errors and Optimize PC performance
[ Sponsored Link ]

Closed Thread
 
Thread Tools
ah_lim's Avatar
Junior Member with 6 posts.
  
Join Date: Jul 2008
08-Jul-2008, 11:59 AM #1
I have a trojan horse BHO infection. Pls help...
Hi I recently got infected with the above virus with a few various extensions like BHO.EOV and BHO.EPJ. Other than the BHO "series" there are also a few other infections such as trojan horse Generic10.AXXH, Downloader.Zlob.YXR, Downloader.Zlob and BackDoor.Generic9.AYAI. These are gotten from my AVG vault. I ran Spybot S&D a couple of times trying to remove these but to no avail. Pls help...thanks!\

My Trend Micro HijackThis log is as follows:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:51:15 PM, on 8/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\NUS-VPN\cvpnd.exe
C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Maxtor\Utils\SyncServices.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Maxtor\ManagerApp\Onetouch.exe
C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
C:\Program Files\Lexmark 2400 Series\ezprint.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\WINDOWS\system32\lxcrcoms.exe
C:\WINDOWS\VMSnap3.EXE
C:\WINDOWS\Domino.EXE
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe
C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\notepad.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.standardchartered.com.sg/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O1 - Hosts: 127.0.0.41 active-max.com
O1 - Hosts: 127.0.0.238 www.active-max.com
O1 - Hosts: 127.0.0.84 allaboutsearching.com
O1 - Hosts: 127.0.0.230 amazingautossearch.com
O1 - Hosts: 127.0.0.48 www.amazingautossearch.com
O1 - Hosts: 127.0.0.38 www.contexualsearch.com
O1 - Hosts: 127.0.0.80 crap2.com
O1 - Hosts: 127.0.0.205 www.dialup2.com
O1 - Hosts: 127.0.0.63 www.ecpm.com
O1 - Hosts: 127.0.0.55 find-quick.com
O1 - Hosts: 127.0.0.237 www.find-quick.com
O1 - Hosts: 127.0.0.201 lop.com
O1 - Hosts: 127.0.0.4 ao.lop.com
O1 - Hosts: 127.0.0.92 srch.lop.com
O1 - Hosts: 127.0.0.38 www.lop2.com
O1 - Hosts: 127.0.0.83 search200.com
O1 - Hosts: 127.0.0.91 www.netsearchsoft.com
O1 - Hosts: 127.0.0.242 www.rub.to
O1 - Hosts: 127.0.0.80 searchexe.com
O1 - Hosts: 127.0.0.92 www.searchweb2.com
O1 - Hosts: 127.0.0.91 www.spawnet.com
O1 - Hosts: 127.0.0.59 tdmy.com
O1 - Hosts: 127.0.0.212 www.tfil.com
O1 - Hosts: 127.0.0.245 www.tdko.com
O1 - Hosts: 127.0.0.225 wrn.net
O1 - Hosts: 127.0.0.87 www.wrn.net
O1 - Hosts: 127.0.0.89 www.mp3search.com
O1 - Hosts: 127.0.0.97 www.lyricsdomain.com
O1 - Hosts: 127.0.0.72 trinityacquisitions.com
O1 - Hosts: 127.0.0.36 www.trinityacquisitions.com
O1 - Hosts: 127.0.0.253 wethere.com
O1 - Hosts: 127.0.0.88 asearchforyou.org
O1 - Hosts: 127.0.0.37 www.asearchforyou.org
O1 - Hosts: 127.0.0.24 intelesearch.com
O1 - Hosts: 127.0.0.205 www.intelesearch.com
O1 - Hosts: 127.0.0.83 www.isearchhere.com
O1 - Hosts: 127.0.0.80 www.iwantosearch.com
O1 - Hosts: 127.0.0.236 opensearch.org
O1 - Hosts: 127.0.0.7 searchbee.net
O1 - Hosts: 127.0.0.227 searchhotsex.com
O1 - Hosts: 127.0.0.50 www.searchhotsex.com
O1 - Hosts: 127.0.0.221 ifsearch.com
O1 - Hosts: 127.0.0.35 www.ifsearch.com
O1 - Hosts: 127.0.0.203 mastersearcher.com
O1 - Hosts: 127.0.0.40 look-today.com
O1 - Hosts: 127.0.0.250 aavc.com
O1 - Hosts: 127.0.0.247 www.aavc.com
O1 - Hosts: 127.0.0.56 acjp.com
O1 - Hosts: 127.0.0.86 www.acjp.com
O1 - Hosts: 127.0.0.225 www.ecmh.com
O1 - Hosts: 127.0.0.34 wabu.com
O1 - Hosts: 127.0.0.59 wabq.com
O1 - Hosts: 127.0.0.97 maximumexperience.com
O1 - Hosts: 127.0.0.27 www.maximumexperience.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: (no name) - {11C3BA09-3770-4C61-80E1-30589BCC2529} - (no file)
O2 - BHO: (no name) - {30AA1511-5129-41F3-AE22-F13FC9470116} - (no file)
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll
O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [MaxtorOneTouch] C:\Program Files\Maxtor\ManagerApp\Onetouch.exe
O4 - HKLM\..\Run: [mxomssmenu] "C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [PC Suite for Smartphones] "C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.EXE
O4 - HKLM\..\Run: [1cc423ab] rundll32.exe "C:\WINDOWS\system32\ykdehyan.dll",b
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab30149.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/25087fbb...p/RdxIE601.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.can.com.sg/mwf/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1095845994671
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1134570027093
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab30149.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ED210F10-D235-485D-B3C7-1BF75FE9BD48}: NameServer = 202.156.1.68,202.156.1.48,218.186.1.58
O20 - Winlogon Notify: efcAQjKe - efcAQjKe.dll (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\NUS-VPN\cvpnd.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: MaxBackServiceInt - Unknown owner - C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe
O23 - Service: MaxSyncService (NTService1) - - C:\Program Files\Maxtor\Utils\SyncServices.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

--
End of file - 14761 bytes
Register for free to hide this ad!
ah_lim's Avatar
Junior Member with 6 posts.
  
Join Date: Jul 2008
08-Jul-2008, 12:32 PM #2
VundoFix did not find any infected files.

Deskard's System Scanner returns the following log:

Deckard's System Scanner v20071014.68
Run by Kelvin Lim on 2008-07-09 00:30:44
Computer is in Normal Mode.
--------------------------------------------------------------------------------



-- HijackThis (run as Kelvin Lim.exe) ------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:30:51 AM, on 9/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\NUS-VPN\cvpnd.exe
C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Maxtor\Utils\SyncServices.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Maxtor\ManagerApp\Onetouch.exe
C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
C:\Program Files\Lexmark 2400 Series\ezprint.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\WINDOWS\system32\lxcrcoms.exe
C:\WINDOWS\VMSnap3.EXE
C:\WINDOWS\Domino.EXE
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe
C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Kelvin Lim\desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\KELVIN~1.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.standardchartered.com.sg/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O1 - Hosts: 127.0.0.41 active-max.com
O1 - Hosts: 127.0.0.238 www.active-max.com
O1 - Hosts: 127.0.0.84 allaboutsearching.com
O1 - Hosts: 127.0.0.230 amazingautossearch.com
O1 - Hosts: 127.0.0.48 www.amazingautossearch.com
O1 - Hosts: 127.0.0.38 www.contexualsearch.com
O1 - Hosts: 127.0.0.80 crap2.com
O1 - Hosts: 127.0.0.205 www.dialup2.com
O1 - Hosts: 127.0.0.63 www.ecpm.com
O1 - Hosts: 127.0.0.55 find-quick.com
O1 - Hosts: 127.0.0.237 www.find-quick.com
O1 - Hosts: 127.0.0.201 lop.com
O1 - Hosts: 127.0.0.4 ao.lop.com
O1 - Hosts: 127.0.0.92 srch.lop.com
O1 - Hosts: 127.0.0.38 www.lop2.com
O1 - Hosts: 127.0.0.83 search200.com
O1 - Hosts: 127.0.0.91 www.netsearchsoft.com
O1 - Hosts: 127.0.0.242 www.rub.to
O1 - Hosts: 127.0.0.80 searchexe.com
O1 - Hosts: 127.0.0.92 www.searchweb2.com
O1 - Hosts: 127.0.0.91 www.spawnet.com
O1 - Hosts: 127.0.0.59 tdmy.com
O1 - Hosts: 127.0.0.212 www.tfil.com
O1 - Hosts: 127.0.0.245 www.tdko.com
O1 - Hosts: 127.0.0.225 wrn.net
O1 - Hosts: 127.0.0.87 www.wrn.net
O1 - Hosts: 127.0.0.89 www.mp3search.com
O1 - Hosts: 127.0.0.97 www.lyricsdomain.com
O1 - Hosts: 127.0.0.72 trinityacquisitions.com
O1 - Hosts: 127.0.0.36 www.trinityacquisitions.com
O1 - Hosts: 127.0.0.253 wethere.com
O1 - Hosts: 127.0.0.88 asearchforyou.org
O1 - Hosts: 127.0.0.37 www.asearchforyou.org
O1 - Hosts: 127.0.0.24 intelesearch.com
O1 - Hosts: 127.0.0.205 www.intelesearch.com
O1 - Hosts: 127.0.0.83 www.isearchhere.com
O1 - Hosts: 127.0.0.80 www.iwantosearch.com
O1 - Hosts: 127.0.0.236 opensearch.org
O1 - Hosts: 127.0.0.7 searchbee.net
O1 - Hosts: 127.0.0.227 searchhotsex.com
O1 - Hosts: 127.0.0.50 www.searchhotsex.com
O1 - Hosts: 127.0.0.221 ifsearch.com
O1 - Hosts: 127.0.0.35 www.ifsearch.com
O1 - Hosts: 127.0.0.203 mastersearcher.com
O1 - Hosts: 127.0.0.40 look-today.com
O1 - Hosts: 127.0.0.250 aavc.com
O1 - Hosts: 127.0.0.247 www.aavc.com
O1 - Hosts: 127.0.0.56 acjp.com
O1 - Hosts: 127.0.0.86 www.acjp.com
O1 - Hosts: 127.0.0.225 www.ecmh.com
O1 - Hosts: 127.0.0.34 wabu.com
O1 - Hosts: 127.0.0.59 wabq.com
O1 - Hosts: 127.0.0.97 maximumexperience.com
O1 - Hosts: 127.0.0.27 www.maximumexperience.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: (no name) - {11C3BA09-3770-4C61-80E1-30589BCC2529} - (no file)
O2 - BHO: (no name) - {30AA1511-5129-41F3-AE22-F13FC9470116} - (no file)
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll
O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [MaxtorOneTouch] C:\Program Files\Maxtor\ManagerApp\Onetouch.exe
O4 - HKLM\..\Run: [mxomssmenu] "C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [PC Suite for Smartphones] "C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.EXE
O4 - HKLM\..\Run: [1cc423ab] rundll32.exe "C:\WINDOWS\system32\ykdehyan.dll",b
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab30149.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/25087fbb...p/RdxIE601.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.can.com.sg/mwf/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1095845994671
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1134570027093
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab30149.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ED210F10-D235-485D-B3C7-1BF75FE9BD48}: NameServer = 202.156.1.68,202.156.1.48,218.186.1.58
O20 - Winlogon Notify: efcAQjKe - efcAQjKe.dll (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\NUS-VPN\cvpnd.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: MaxBackServiceInt - Unknown owner - C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe
O23 - Service: MaxSyncService (NTService1) - - C:\Program Files\Maxtor\Utils\SyncServices.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

--
End of file - 14850 bytes

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R0 Teefer (Teefer for NT) - c:\windows\system32\drivers\teefer.sys <Not Verified; Sygate Technologies, Inc.; Sygate Teefer Driver>
R0 uGuru - c:\windows\system32\drivers\uguru.sys <Not Verified; ABIT Computer Corporation; uGuru V2.0 device driver>
R1 NPPTNT2 - c:\windows\system32\npptnt2.sys <Not Verified; INCA Internet Co., Ltd.; nProtect NPSC Kernel Mode Driver for NT>
R1 wpsdrvnt - c:\windows\system32\drivers\wpsdrvnt.sys <Not Verified; Sygate Technologies, Inc.; wpsdrvnt>
R2 ProcObsrv - c:\windows\system32\drivers\procobsrv.sys <Not Verified; ABIT Computer Corp.; ProcObsrv>

S3 atitray - c:\program files\ati tray tools\atitray.sys (file missing)
S3 EagleNT - c:\windows\system32\drivers\eaglent.sys (file missing)
S3 Epiusb (USB Flash) - c:\windows\system32\drivers\epiusb.sys <Not Verified; Ericsson Mobile Communications AB; Ericsson Programming Interface USB Driver>
S3 Memctl - c:\program files\abit\abit uguru\memctl.sys
S3 Ndisusb (GeneLink Network Driver) - c:\windows\system32\drivers\genelan.sys (file missing)
S3 PavSRK.sys - c:\windows\system32\pavsrk.sys (file missing)
S3 PavTPK.sys - c:\windows\system32\pavtpk.sys (file missing)
S3 SE27bus (Sony Ericsson Device 039 Driver driver (WDM)) - c:\windows\system32\drivers\se27bus.sys <Not Verified; MCCI; Sony Ericsson Device 039 Driver>
S3 USBHSB (GeneLink USB Driver) - c:\windows\system32\drivers\glkusb.sys <Not Verified; Genesys Logic; GeneLink>
S3 Usblink (Usblink Driver) - c:\windows\system32\drivers\ulink.sys (file missing)
S3 VNic (ULan Network Driver Module) - c:\windows\system32\drivers\vnic.sys <Not Verified; Provider; ALi VNic>
S3 w800obex (Sony Ericsson W800 USB WMC OBEX Interface Drivers) - c:\windows\system32\drivers\w800obex.sys <Not Verified; MCCI; Sony Ericsson W800 USB WMC OBEX Interface>
S3 Winflash - c:\program files\abit\abit uguru\winflash.sys


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 MaxBackServiceInt - "c:\program files\maxtor\maxtor backup\maxbackserviceint.exe" <Not Verified; ; MaxBackServiceInt Module>
R2 NTService1 (MaxSyncService) - "c:\program files\maxtor\utils\syncservices.exe" <Not Verified; ; SyncServices>

S2 CCALib8 (Canon Camera Access Library 8) - c:\program files\canon\cal\calmain.exe <Not Verified; Canon Inc.; >
S3 TUWinStylerThemeSvc (TuneUp WinStyler Theme Service) - c:\program files\tuneup utilities 2004\winstylerthemesvc.exe <Not Verified; TuneUp Software GmbH; TuneUp Utilities>


-- Files created between 2008-06-09 and 2008-07-09 -----------------------------

2008-07-08 23:09:08 0 d-------- C:\VundoFix Backups
2008-07-08 22:57:51 0 d-------- C:\Program Files\Trend Micro
2008-07-08 22:53:58 4632 --a------ C:\WINDOWS\system32\tmp.reg
2008-07-04 20:12:13 89891 --ahs---- C:\WINDOWS\system32\HRYFNUvw.ini2
2008-07-04 20:01:33 60928 --a------ C:\WINDOWS\system32\blphcaghj0e9ce.scr <Not Verified; Sysinternals; Sysinternals Blue Screen>
2008-07-04 20:01:29 109056 --a------ C:\WINDOWS\system32\lphcaghj0e9ce.exe
2008-07-04 19:48:19 0 d-------- C:\WINDOWS\SxsCaPendDel
2008-07-04 19:28:40 61266 --a------ C:\WINDOWS\War3Unin.dat
2008-07-04 19:28:39 2829 --a------ C:\WINDOWS\War3Unin.pif
2008-07-04 19:28:39 139264 --a------ C:\WINDOWS\War3Unin.exe <Not Verified; Blizzard Entertainment; Warcraft III Uninstaller>
2008-06-23 22:14:24 0 d-------- C:\Program Files\SpywareBlaster


-- Find3M Report ---------------------------------------------------------------

2008-07-08 23:07:50 0 d-------- C:\Program Files\lx_cats
2008-07-08 22:26:26 0 d-------- C:\Documents and Settings\Kelvin Lim\Application Data\AVG7
2008-07-06 00:25:12 0 d-------- C:\Program Files\mIRC
2008-07-05 10:37:17 0 d-------- C:\Program Files\CPU_Z_124
2008-07-05 10:35:41 0 d-------- C:\Documents and Settings\Kelvin Lim\Application Data\MegauploadToolbar
2008-07-04 21:07:29 8535 --a----c- C:\WINDOWS\mozver.dat
2008-07-04 19:19:50 0 d-------- C:\Program Files\Azureus
2008-06-07 16:55:26 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-06-01 17:39:32 0 d-------- C:\Program Files\RealPlayer
2008-05-31 20:39:10 0 d-------- C:\Program Files\Lavasoft
2008-05-31 20:32:46 0 d-------- C:\Documents and Settings\Kelvin Lim\Application Data\Lavasoft
2008-05-31 20:31:01 0 d-------- C:\Program Files\ICQLite
2008-05-31 12:10:48 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-05-23 17:20:12 0 d-------- C:\Program Files\Google
2008-05-17 03:06:10 0 d-------- C:\Program Files\Windows Live
2008-05-17 03:05:43 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller
2008-05-17 03:05:25 0 d-------- C:\Program Files\Common Files
2008-05-17 02:41:46 0 d-------- C:\Program Files\Sun
2008-05-17 02:41:28 0 d-------- C:\Program Files\Java


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{11C3BA09-3770-4C61-80E1-30589BCC2529}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30AA1511-5129-41F3-AE22-F13FC9470116}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmcService"="C:\PROGRA~1\Sygate\SPF\smc.exe" [13/08/2004 07:05 PM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [22/02/2008 04:25 AM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [25/09/2004 10:50 PM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [18/10/2005 11:58 AM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [11/12/2005 03:35 PM]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [04/08/2004 01:31 PM]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [28/08/2002 09:39 PM]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [28/08/2002 09:39 PM]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [28/08/2002 09:39 PM]
"MaxtorOneTouch"="C:\Program Files\Maxtor\ManagerApp\Onetouch.exe" [11/08/2006 08:45 AM]
"mxomssmenu"="C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe" [11/08/2006 11:15 AM]
"CTHelper"="CTHELPER.EXE" [12/12/2006 10:46 AM C:\WINDOWS\system32\CtHelper.exe]
"CTxfiHlp"="CTXFIHLP.EXE" [24/05/2006 12:20 PM C:\WINDOWS\system32\CTXFIHLP.EXE]
"lxcrmon.exe"="C:\Program Files\Lexmark 2400 Series\lxcrmon.exe" [23/01/2006 01:45 AM]
"EzPrint"="C:\Program Files\Lexmark 2400 Series\ezprint.exe" [07/02/2006 01:10 PM]
"FaxCenterServer"="C:\Program Files\Lexmark Fax Solutions\fm3032.exe" [02/02/2006 04:11 PM]
"LXCRCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll" [02/12/2005 02:38 AM]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [11/04/2007 03:32 PM C:\WINDOWS\KHALMNPR.Exe]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [28/06/2008 01:21 AM]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [05/12/2007 01:41 AM]
"nwiz"="nwiz.exe" [05/12/2007 01:41 AM C:\WINDOWS\system32\nwiz.exe]
"RTHDCPL"="RTHDCPL.EXE" [21/03/2007 02:49 PM C:\WINDOWS\RTHDCPL.exe]
"Alcmtr"="ALCMTR.EXE" [03/05/2005 06:43 PM C:\WINDOWS\Alcmtr.exe]
"PC Suite for Smartphones"="C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" [28/05/2007 10:14 AM]
"VMSnap3"="C:\WINDOWS\VMSnap3.EXE" [30/08/2006 10:58 AM]
"Domino"="C:\WINDOWS\Domino.EXE" [28/06/2006 05:54 PM]
"1cc423ab"="C:\WINDOWS\system32\ykdehyan.dll" []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [18/10/2007 11:34 AM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [04/08/2004 03:56 PM]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [14/02/2007 09:31 PM]
"mRouterConfig"="C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe" [02/03/2006 11:54 AM]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [28/01/2008 11:43 AM]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [20/10/2007 5:58:47 PM]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"NoDispBackgroundPage"=0 (0x0)
"NoDispScrSavPage"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\efcAQjKe]
efcAQjKe.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 C:\WINDOWS\system32\wvUNFYRH

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoa dGroup]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5 B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Acrobat Assistant.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk
backup=C:\WINDOWS\pss\Acrobat Assistant.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ATI CATALYST System Tray.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ATI CATALYST System Tray.lnk
backup=C:\WINDOWS\pss\ATI CATALYST System Tray.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ABIT uGuru]
C:\Program Files\ABIT\ABIT uGuru\uGuru.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtiTrayTools]
"C:\Program Files\ATI Tray Tools\atitray.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent]
rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\kdx]
C:\WINDOWS\kdx\KHost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs BthServ


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountp oints2\{0def32f8-dd1c-11dc-84c8-001e8c172468}]
Auto\command- H:\Ghost.pif
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Ghost.pif




-- End of Deckard's System Scanner: finished at 2008-07-09 00:31:14 ------------
ah_lim's Avatar
Junior Member with 6 posts.
  
Join Date: Jul 2008
08-Jul-2008, 12:47 PM #3
Catchme log returns:

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-09 00:34:52
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Key s\0009dd100a1c]
"000eed2118be"=hex:dd,12,56,57,e9,db,9f,65,a1,50,38,32,39,79,46,a9
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf40]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\00 09dd100a1c]
"000eed2118be"=hex:dd,12,56,57,e9,db,9f,65,a1,50,38,32,39,79,46,a9

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher]
"TracesProcessed"=dword:000001fb
"TracesSuccessful"=dword:00000032
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{63A57B07-DF78-F882-07AF-4AFE57F49122}]
"dbfafbgafapmppooadgakbcfbnakbjplmbpabmpn"=hex:6b,61,6c,6c,65,6b,68,68,62,6 9,6e,70,65,62,64,63,6a,67,63,62,65,..

scanning hidden files ...


scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 145

file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\01\10-{E07D1935-B6EA-5DD6-081A-E41F18EE8084}-v1-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS ( 8 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\52\13-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v252-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 ( 12198 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\52\13-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v252-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.1 ( 1360 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\53\17-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v253-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v17-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.1 ( 12252 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\53\17-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v253-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v17-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.2 ( 1360 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\54\19-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v254-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v19-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.2 ( 11604 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\54\19-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v254-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v19-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.3 ( 1360 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\55\21-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v255-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.3 ( 12468 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\55\21-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v255-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.4 ( 1376 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\55\355-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v355-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v355-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.5 ( 5496 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\56\23-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v256-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v23-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.4 ( 12396 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\56\23-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v256-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v23-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.6 ( 1376 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\56\356-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v356-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v356-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.7 ( 2384 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\57\25-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v257-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.5 ( 11658 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\57\25-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v257-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.8 ( 1312 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\58\29-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v258-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v29-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.6 ( 12252 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\58\29-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v258-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v29-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.9 ( 1328 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\59\32-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v259-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.7 ( 11874 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\59\32-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v259-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.10 ( 1328 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\59\68-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v559-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v68-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.8 ( 8976 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\59\68-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v559-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v68-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.11 ( 984 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\60\34-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v260-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v34-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.9 ( 12306 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\60\34-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v260-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v34-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.12 ( 1360 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\60\69-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v560-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v69-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.10 ( 8832 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\60\69-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v560-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v69-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.13 ( 976 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\61\36-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v261-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v36-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.11 ( 12342 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\61\36-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v261-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v36-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.14 ( 1352 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\61\70-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v561-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v70-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.12 ( 8796 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\61\70-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v561-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v70-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.15 ( 968 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\62\38-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v262-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v38-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.13 ( 5322 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\62\38-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v262-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v38-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.16 ( 584 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\62\76-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v562-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v76-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.14 ( 12252 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\62\76-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v562-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v76-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.17 ( 1344 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\63\263-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v263-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v263-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.18 ( 2120 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\63\77-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v563-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v77-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.15 ( 12414 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\63\77-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v563-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v77-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.19 ( 1344 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\64\264-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v264-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v264-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.20 ( 1880 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\64\78-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v564-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v78-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.16 ( 11820 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\64\78-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v564-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v78-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.21 ( 1344 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\65\265-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v265-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v265-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.22 ( 1560 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\65\75-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v565-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v75-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.17 ( 12018 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\65\75-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v565-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v75-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.23 ( 1352 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\66\266-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v266-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v266-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.24 ( 2120 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\66\79-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v566-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v79-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.18 ( 12378 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\66\79-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v566-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v79-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.25 ( 1360 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\67\267-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v267-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v267-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.19 ( 13944 bytes )
ah_lim's Avatar
Junior Member with 6 posts.
  
Join Date: Jul 2008
08-Jul-2008, 12:48 PM #4
2nd part of Catchme log

file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\67\267-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v267-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v267-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.26 ( 1576 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\67\80-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v567-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v80-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.20 ( 8976 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\67\80-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v567-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v80-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.27 ( 1024 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\68\268-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v268-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v268-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.28 ( 1928 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\68\85-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v568-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v85-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.21 ( 13098 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\68\85-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v568-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v85-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.29 ( 1464 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\69\269-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v269-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v269-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.30 ( 4056 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\69\86-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v569-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v86-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.22 ( 9318 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\69\86-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v569-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v86-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.31 ( 1032 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\70\270-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v270-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v270-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.23 ( 449292 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\70\270-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v270-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v270-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 ( 31188 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\70\270-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v270-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v270-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.32 ( 49696 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\70\87-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v570-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v87-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.24 ( 9732 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\70\87-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v570-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v87-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.33 ( 1096 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\71\271-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v271-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v271-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.34 ( 1000 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\71\88-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v571-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v88-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.25 ( 14196 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\71\88-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v571-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v88-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.35 ( 1536 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\72\272-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v272-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v272-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.36 ( 4328 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\72\89-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v572-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v89-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.26 ( 12270 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\72\89-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v572-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v89-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.37 ( 1360 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\73\273-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v273-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v273-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.38 ( 4040 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\73\90-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v573-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v90-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.27 ( 11946 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\73\90-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v573-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v90-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.39 ( 1320 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\74\274-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v274-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v274-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.40 ( 4936 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\74\91-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v574-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v91-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.28 ( 11190 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\74\91-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v574-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v91-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.41 ( 1216 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\75\275-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v275-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v275-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.29 ( 179796 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\75\275-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v275-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v275-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.42 ( 20048 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\75\92-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v575-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v92-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.30 ( 11316 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\75\92-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v575-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v92-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.43 ( 1232 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\76\93-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v576-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v93-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.31 ( 11334 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\76\93-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v576-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v93-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.44 ( 1272 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\77\95-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v577-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v95-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.32 ( 10074 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\77\95-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v577-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v95-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.45 ( 1080 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\78\96-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v578-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v96-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.33 ( 11100 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\78\96-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v578-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v96-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.46 ( 1240 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\79\97-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v579-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v97-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.34 ( 9894 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\79\97-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v579-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v97-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.47 ( 1104 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\80\102-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v580-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v102-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.35 ( 11082 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\80\102-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v580-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v102-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.48 ( 1216 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\81\107-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v581-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v107-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.36 ( 11028 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\81\107-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v581-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v107-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.49 ( 1272 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\82\109-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v582-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v109-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.37 ( 12252 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\82\109-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v582-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v109-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.50 ( 1328 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\83\114-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v583-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v114-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.38 ( 12054 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\83\114-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v583-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v114-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.51 ( 1320 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\83\383-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v383-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v383-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.52 ( 952 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\84\115-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v584-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v115-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.39 ( 7788 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\84\115-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v584-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v115-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.53 ( 848 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\84\384-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v384-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v384-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.54 ( 4632 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\85\116-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v585-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v116-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.40 ( 11982 bytes )
ah_lim's Avatar
Junior Member with 6 posts.
  
Join Date: Jul 2008
08-Jul-2008, 12:49 PM #5
last part of Catchme log

file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\85\116-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v585-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v116-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.55 ( 1336 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\85\385-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v385-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v385-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.56 ( 2976 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\86\117-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v586-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v117-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.41 ( 12000 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\86\117-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v586-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v117-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.57 ( 1344 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\86\386-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v386-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v386-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.58 ( 4296 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\87\118-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v587-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v118-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.42 ( 12360 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\87\118-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v587-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v118-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.59 ( 1352 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\87\387-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v387-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v387-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.60 ( 4552 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\88\119-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v588-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v119-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.43 ( 12252 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\88\119-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v588-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v119-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.61 ( 1352 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\88\388-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v388-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v388-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.62 ( 3136 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\89\120-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v589-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v120-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.44 ( 12360 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\89\120-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v589-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v120-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.63 ( 1368 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\89\389-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v389-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v389-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.64 ( 3936 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\90\126-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v590-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v126-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.45 ( 11514 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\90\126-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v590-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v126-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.65 ( 1304 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\90\390-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v390-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v390-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.66 ( 3520 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\91\125-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v591-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v125-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.46 ( 12126 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\91\125-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v591-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v125-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.67 ( 1320 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\91\391-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v391-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v391-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.68 ( 4592 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\92\392-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v392-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v392-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.69 ( 3912 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\93\393-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v393-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v393-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.70 ( 3736 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\94\394-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v394-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v394-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.71 ( 912 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\01\39-{470E6878-7197-864C-A0CD-FC53A9186697}-v1-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.72 ( 8 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\12\40-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v12-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.47 ( 31116 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\12\40-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v12-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.73 ( 3456 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\13\19-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v13-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v19-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.74 ( 6264 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\14\21-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v14-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.75 ( 5800 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\15\15-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v15-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.76 ( 6768 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\17\41-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v17-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.48 ( 45102 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\17\41-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v17-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.77 ( 5040 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\18\35-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v18-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v35-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.78 ( 7408 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\20\39-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v20-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.49 ( 48540 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\20\39-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v20-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2.1 ( 3414 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\20\39-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v20-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.79 ( 5464 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\22\43-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v22-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v43-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.80 ( 6752 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\24\24-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v24-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v24-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.81 ( 4896 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\26\34-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v26-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v34-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.82 ( 4736 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\28\48-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v28-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v48-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.83 ( 6088 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\30\40-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v30-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.84 ( 5176 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\31\41-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v31-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.85 ( 6144 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\33\33-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v33-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v33-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.86 ( 6088 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\36\46-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v36-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v46-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.87 ( 5232 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\37\47-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v37-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v47-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.88 ( 5672 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\42\52-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v42-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v52-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.89 ( 6208 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\44\50-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v44-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v50-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.50 ( 61230 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\44\50-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v44-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v50-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.90 ( 6744 bytes )
file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\45\53-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v45-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v53-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.91 ( 7920 bytes )
ah_lim's Avatar
Junior Member with 6 posts.
  
Join Date: Jul 2008
09-Jul-2008, 03:02 AM #6
bump
Closed Thread Bookmark and Share

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Smart Search

Find your solution!


« Previous Thread | Malware Removal & HijackThis Logs | Next Thread »

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.

Thread Tools


Twitter Twitter! | Podcast | Mobile | Advertise
Contact Us - HelpOnThe.Net - Archive - Terms of Service - Top
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -5. The time now is 07:19 AM.
Copyright © 1996 - 2009 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2009, Jelsoft Enterprises Ltd.
 Powered by Cermak Technologies, Inc.