| | |
| Thread Tools |
|
08-Jul-2008, 12:59 PM
#1 |
| I have a trojan horse BHO infection. Pls help... Hi I recently got infected with the above virus with a few various extensions like BHO.EOV and BHO.EPJ. Other than the BHO "series" there are also a few other infections such as trojan horse Generic10.AXXH, Downloader.Zlob.YXR, Downloader.Zlob and BackDoor.Generic9.AYAI. These are gotten from my AVG vault. I ran Spybot S&D a couple of times trying to remove these but to no avail. Pls help...thanks!\ My Trend Micro HijackThis log is as follows: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:51:15 PM, on 8/7/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Sygate\SPF\smc.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\Program Files\NUS-VPN\cvpnd.exe C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Maxtor\Utils\SyncServices.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Maxtor\ManagerApp\Onetouch.exe C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe C:\WINDOWS\system32\CTHELPER.EXE C:\WINDOWS\system32\CTXFIHLP.EXE C:\Program Files\Lexmark 2400 Series\lxcrmon.exe C:\Program Files\Lexmark 2400 Series\ezprint.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\WINDOWS\SYSTEM32\CTXFISPI.EXE C:\WINDOWS\system32\lxcrcoms.exe C:\WINDOWS\VMSnap3.EXE C:\WINDOWS\Domino.EXE C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\WINDOWS\notepad.exe C:\WINDOWS\notepad.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.standardchartered.com.sg/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = O1 - Hosts: 127.0.0.41 active-max.com O1 - Hosts: 127.0.0.238 www.active-max.com O1 - Hosts: 127.0.0.84 allaboutsearching.com O1 - Hosts: 127.0.0.230 amazingautossearch.com O1 - Hosts: 127.0.0.48 www.amazingautossearch.com O1 - Hosts: 127.0.0.38 www.contexualsearch.com O1 - Hosts: 127.0.0.80 crap2.com O1 - Hosts: 127.0.0.205 www.dialup2.com O1 - Hosts: 127.0.0.63 www.ecpm.com O1 - Hosts: 127.0.0.55 find-quick.com O1 - Hosts: 127.0.0.237 www.find-quick.com O1 - Hosts: 127.0.0.201 lop.com O1 - Hosts: 127.0.0.4 ao.lop.com O1 - Hosts: 127.0.0.92 srch.lop.com O1 - Hosts: 127.0.0.38 www.lop2.com O1 - Hosts: 127.0.0.83 search200.com O1 - Hosts: 127.0.0.91 www.netsearchsoft.com O1 - Hosts: 127.0.0.242 www.rub.to O1 - Hosts: 127.0.0.80 searchexe.com O1 - Hosts: 127.0.0.92 www.searchweb2.com O1 - Hosts: 127.0.0.91 www.spawnet.com O1 - Hosts: 127.0.0.59 tdmy.com O1 - Hosts: 127.0.0.212 www.tfil.com O1 - Hosts: 127.0.0.245 www.tdko.com O1 - Hosts: 127.0.0.225 wrn.net O1 - Hosts: 127.0.0.87 www.wrn.net O1 - Hosts: 127.0.0.89 www.mp3search.com O1 - Hosts: 127.0.0.97 www.lyricsdomain.com O1 - Hosts: 127.0.0.72 trinityacquisitions.com O1 - Hosts: 127.0.0.36 www.trinityacquisitions.com O1 - Hosts: 127.0.0.253 wethere.com O1 - Hosts: 127.0.0.88 asearchforyou.org O1 - Hosts: 127.0.0.37 www.asearchforyou.org O1 - Hosts: 127.0.0.24 intelesearch.com O1 - Hosts: 127.0.0.205 www.intelesearch.com O1 - Hosts: 127.0.0.83 www.isearchhere.com O1 - Hosts: 127.0.0.80 www.iwantosearch.com O1 - Hosts: 127.0.0.236 opensearch.org O1 - Hosts: 127.0.0.7 searchbee.net O1 - Hosts: 127.0.0.227 searchhotsex.com O1 - Hosts: 127.0.0.50 www.searchhotsex.com O1 - Hosts: 127.0.0.221 ifsearch.com O1 - Hosts: 127.0.0.35 www.ifsearch.com O1 - Hosts: 127.0.0.203 mastersearcher.com O1 - Hosts: 127.0.0.40 look-today.com O1 - Hosts: 127.0.0.250 aavc.com O1 - Hosts: 127.0.0.247 www.aavc.com O1 - Hosts: 127.0.0.56 acjp.com O1 - Hosts: 127.0.0.86 www.acjp.com O1 - Hosts: 127.0.0.225 www.ecmh.com O1 - Hosts: 127.0.0.34 wabu.com O1 - Hosts: 127.0.0.59 wabq.com O1 - Hosts: 127.0.0.97 maximumexperience.com O1 - Hosts: 127.0.0.27 www.maximumexperience.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll O2 - BHO: (no name) - {11C3BA09-3770-4C61-80E1-30589BCC2529} - (no file) O2 - BHO: (no name) - {30AA1511-5129-41F3-AE22-F13FC9470116} - (no file) O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [MaxtorOneTouch] C:\Program Files\Maxtor\ManagerApp\Onetouch.exe O4 - HKLM\..\Run: [mxomssmenu] "C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe" O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe" O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe" O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [PC Suite for Smartphones] "C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.EXE O4 - HKLM\..\Run: [1cc423ab] rundll32.exe "C:\WINDOWS\system32\ykdehyan.dll",b O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe" O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user') O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab30149.cab O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/25087fbb...p/RdxIE601.cab O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.can.com.sg/mwf/mgaxctrl.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1095845994671 O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1134570027093 O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab30149.cab O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{ED210F10-D235-485D-B3C7-1BF75FE9BD48}: NameServer = 202.156.1.68,202.156.1.48,218.186.1.58 O20 - Winlogon Notify: efcAQjKe - efcAQjKe.dll (file missing) O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\NUS-VPN\cvpnd.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe O23 - Service: MaxBackServiceInt - Unknown owner - C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe O23 - Service: MaxSyncService (NTService1) - - C:\Program Files\Maxtor\Utils\SyncServices.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe -- End of file - 14761 bytes |
| |
|
08-Jul-2008, 01:32 PM
#2 |
| VundoFix did not find any infected files. Deskard's System Scanner returns the following log: Deckard's System Scanner v20071014.68 Run by Kelvin Lim on 2008-07-09 00:30:44 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- HijackThis (run as Kelvin Lim.exe) ------------------------------------------ Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:30:51 AM, on 9/7/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Sygate\SPF\smc.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\Program Files\NUS-VPN\cvpnd.exe C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Maxtor\Utils\SyncServices.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Maxtor\ManagerApp\Onetouch.exe C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe C:\WINDOWS\system32\CTHELPER.EXE C:\WINDOWS\system32\CTXFIHLP.EXE C:\Program Files\Lexmark 2400 Series\lxcrmon.exe C:\Program Files\Lexmark 2400 Series\ezprint.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\WINDOWS\SYSTEM32\CTXFISPI.EXE C:\WINDOWS\system32\lxcrcoms.exe C:\WINDOWS\VMSnap3.EXE C:\WINDOWS\Domino.EXE C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Documents and Settings\Kelvin Lim\desktop\dss.exe C:\PROGRA~1\TRENDM~1\HIJACK~1\KELVIN~1.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.standardchartered.com.sg/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = O1 - Hosts: 127.0.0.41 active-max.com O1 - Hosts: 127.0.0.238 www.active-max.com O1 - Hosts: 127.0.0.84 allaboutsearching.com O1 - Hosts: 127.0.0.230 amazingautossearch.com O1 - Hosts: 127.0.0.48 www.amazingautossearch.com O1 - Hosts: 127.0.0.38 www.contexualsearch.com O1 - Hosts: 127.0.0.80 crap2.com O1 - Hosts: 127.0.0.205 www.dialup2.com O1 - Hosts: 127.0.0.63 www.ecpm.com O1 - Hosts: 127.0.0.55 find-quick.com O1 - Hosts: 127.0.0.237 www.find-quick.com O1 - Hosts: 127.0.0.201 lop.com O1 - Hosts: 127.0.0.4 ao.lop.com O1 - Hosts: 127.0.0.92 srch.lop.com O1 - Hosts: 127.0.0.38 www.lop2.com O1 - Hosts: 127.0.0.83 search200.com O1 - Hosts: 127.0.0.91 www.netsearchsoft.com O1 - Hosts: 127.0.0.242 www.rub.to O1 - Hosts: 127.0.0.80 searchexe.com O1 - Hosts: 127.0.0.92 www.searchweb2.com O1 - Hosts: 127.0.0.91 www.spawnet.com O1 - Hosts: 127.0.0.59 tdmy.com O1 - Hosts: 127.0.0.212 www.tfil.com O1 - Hosts: 127.0.0.245 www.tdko.com O1 - Hosts: 127.0.0.225 wrn.net O1 - Hosts: 127.0.0.87 www.wrn.net O1 - Hosts: 127.0.0.89 www.mp3search.com O1 - Hosts: 127.0.0.97 www.lyricsdomain.com O1 - Hosts: 127.0.0.72 trinityacquisitions.com O1 - Hosts: 127.0.0.36 www.trinityacquisitions.com O1 - Hosts: 127.0.0.253 wethere.com O1 - Hosts: 127.0.0.88 asearchforyou.org O1 - Hosts: 127.0.0.37 www.asearchforyou.org O1 - Hosts: 127.0.0.24 intelesearch.com O1 - Hosts: 127.0.0.205 www.intelesearch.com O1 - Hosts: 127.0.0.83 www.isearchhere.com O1 - Hosts: 127.0.0.80 www.iwantosearch.com O1 - Hosts: 127.0.0.236 opensearch.org O1 - Hosts: 127.0.0.7 searchbee.net O1 - Hosts: 127.0.0.227 searchhotsex.com O1 - Hosts: 127.0.0.50 www.searchhotsex.com O1 - Hosts: 127.0.0.221 ifsearch.com O1 - Hosts: 127.0.0.35 www.ifsearch.com O1 - Hosts: 127.0.0.203 mastersearcher.com O1 - Hosts: 127.0.0.40 look-today.com O1 - Hosts: 127.0.0.250 aavc.com O1 - Hosts: 127.0.0.247 www.aavc.com O1 - Hosts: 127.0.0.56 acjp.com O1 - Hosts: 127.0.0.86 www.acjp.com O1 - Hosts: 127.0.0.225 www.ecmh.com O1 - Hosts: 127.0.0.34 wabu.com O1 - Hosts: 127.0.0.59 wabq.com O1 - Hosts: 127.0.0.97 maximumexperience.com O1 - Hosts: 127.0.0.27 www.maximumexperience.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll O2 - BHO: (no name) - {11C3BA09-3770-4C61-80E1-30589BCC2529} - (no file) O2 - BHO: (no name) - {30AA1511-5129-41F3-AE22-F13FC9470116} - (no file) O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [MaxtorOneTouch] C:\Program Files\Maxtor\ManagerApp\Onetouch.exe O4 - HKLM\..\Run: [mxomssmenu] "C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe" O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe" O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe" O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [PC Suite for Smartphones] "C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.EXE O4 - HKLM\..\Run: [1cc423ab] rundll32.exe "C:\WINDOWS\system32\ykdehyan.dll",b O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe" O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user') O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab30149.cab O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/25087fbb...p/RdxIE601.cab O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.can.com.sg/mwf/mgaxctrl.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1095845994671 O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1134570027093 O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab30149.cab O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{ED210F10-D235-485D-B3C7-1BF75FE9BD48}: NameServer = 202.156.1.68,202.156.1.48,218.186.1.58 O20 - Winlogon Notify: efcAQjKe - efcAQjKe.dll (file missing) O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\NUS-VPN\cvpnd.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe O23 - Service: MaxBackServiceInt - Unknown owner - C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe O23 - Service: MaxSyncService (NTService1) - - C:\Program Files\Maxtor\Utils\SyncServices.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe -- End of file - 14850 bytes -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R0 Teefer (Teefer for NT) - c:\windows\system32\drivers\teefer.sys <Not Verified; Sygate Technologies, Inc.; Sygate Teefer Driver> R0 uGuru - c:\windows\system32\drivers\uguru.sys <Not Verified; ABIT Computer Corporation; uGuru V2.0 device driver> R1 NPPTNT2 - c:\windows\system32\npptnt2.sys <Not Verified; INCA Internet Co., Ltd.; nProtect NPSC Kernel Mode Driver for NT> R1 wpsdrvnt - c:\windows\system32\drivers\wpsdrvnt.sys <Not Verified; Sygate Technologies, Inc.; wpsdrvnt> R2 ProcObsrv - c:\windows\system32\drivers\procobsrv.sys <Not Verified; ABIT Computer Corp.; ProcObsrv> S3 atitray - c:\program files\ati tray tools\atitray.sys (file missing) S3 EagleNT - c:\windows\system32\drivers\eaglent.sys (file missing) S3 Epiusb (USB Flash) - c:\windows\system32\drivers\epiusb.sys <Not Verified; Ericsson Mobile Communications AB; Ericsson Programming Interface USB Driver> S3 Memctl - c:\program files\abit\abit uguru\memctl.sys S3 Ndisusb (GeneLink Network Driver) - c:\windows\system32\drivers\genelan.sys (file missing) S3 PavSRK.sys - c:\windows\system32\pavsrk.sys (file missing) S3 PavTPK.sys - c:\windows\system32\pavtpk.sys (file missing) S3 SE27bus (Sony Ericsson Device 039 Driver driver (WDM)) - c:\windows\system32\drivers\se27bus.sys <Not Verified; MCCI; Sony Ericsson Device 039 Driver> S3 USBHSB (GeneLink USB Driver) - c:\windows\system32\drivers\glkusb.sys <Not Verified; Genesys Logic; GeneLink> S3 Usblink (Usblink Driver) - c:\windows\system32\drivers\ulink.sys (file missing) S3 VNic (ULan Network Driver Module) - c:\windows\system32\drivers\vnic.sys <Not Verified; Provider; ALi VNic> S3 w800obex (Sony Ericsson W800 USB WMC OBEX Interface Drivers) - c:\windows\system32\drivers\w800obex.sys <Not Verified; MCCI; Sony Ericsson W800 USB WMC OBEX Interface> S3 Winflash - c:\program files\abit\abit uguru\winflash.sys -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- R2 MaxBackServiceInt - "c:\program files\maxtor\maxtor backup\maxbackserviceint.exe" <Not Verified; ; MaxBackServiceInt Module> R2 NTService1 (MaxSyncService) - "c:\program files\maxtor\utils\syncservices.exe" <Not Verified; ; SyncServices> S2 CCALib8 (Canon Camera Access Library 8) - c:\program files\canon\cal\calmain.exe <Not Verified; Canon Inc.; > S3 TUWinStylerThemeSvc (TuneUp WinStyler Theme Service) - c:\program files\tuneup utilities 2004\winstylerthemesvc.exe <Not Verified; TuneUp Software GmbH; TuneUp Utilities> -- Files created between 2008-06-09 and 2008-07-09 ----------------------------- 2008-07-08 23:09:08 0 d-------- C:\VundoFix Backups 2008-07-08 22:57:51 0 d-------- C:\Program Files\Trend Micro 2008-07-08 22:53:58 4632 --a------ C:\WINDOWS\system32\tmp.reg 2008-07-04 20:12:13 89891 --ahs---- C:\WINDOWS\system32\HRYFNUvw.ini2 2008-07-04 20:01:33 60928 --a------ C:\WINDOWS\system32\blphcaghj0e9ce.scr <Not Verified; Sysinternals; Sysinternals Blue Screen> 2008-07-04 20:01:29 109056 --a------ C:\WINDOWS\system32\lphcaghj0e9ce.exe 2008-07-04 19:48:19 0 d-------- C:\WINDOWS\SxsCaPendDel 2008-07-04 19:28:40 61266 --a------ C:\WINDOWS\War3Unin.dat 2008-07-04 19:28:39 2829 --a------ C:\WINDOWS\War3Unin.pif 2008-07-04 19:28:39 139264 --a------ C:\WINDOWS\War3Unin.exe <Not Verified; Blizzard Entertainment; Warcraft III Uninstaller> 2008-06-23 22:14:24 0 d-------- C:\Program Files\SpywareBlaster -- Find3M Report --------------------------------------------------------------- 2008-07-08 23:07:50 0 d-------- C:\Program Files\lx_cats 2008-07-08 22:26:26 0 d-------- C:\Documents and Settings\Kelvin Lim\Application Data\AVG7 2008-07-06 00:25:12 0 d-------- C:\Program Files\mIRC 2008-07-05 10:37:17 0 d-------- C:\Program Files\CPU_Z_124 2008-07-05 10:35:41 0 d-------- C:\Documents and Settings\Kelvin Lim\Application Data\MegauploadToolbar 2008-07-04 21:07:29 8535 --a----c- C:\WINDOWS\mozver.dat 2008-07-04 19:19:50 0 d-------- C:\Program Files\Azureus 2008-06-07 16:55:26 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-06-01 17:39:32 0 d-------- C:\Program Files\RealPlayer 2008-05-31 20:39:10 0 d-------- C:\Program Files\Lavasoft 2008-05-31 20:32:46 0 d-------- C:\Documents and Settings\Kelvin Lim\Application Data\Lavasoft 2008-05-31 20:31:01 0 d-------- C:\Program Files\ICQLite 2008-05-31 12:10:48 0 d--h----- C:\Program Files\InstallShield Installation Information 2008-05-23 17:20:12 0 d-------- C:\Program Files\Google 2008-05-17 03:06:10 0 d-------- C:\Program Files\Windows Live 2008-05-17 03:05:43 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller 2008-05-17 03:05:25 0 d-------- C:\Program Files\Common Files 2008-05-17 02:41:46 0 d-------- C:\Program Files\Sun 2008-05-17 02:41:28 0 d-------- C:\Program Files\Java -- Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{11C3BA09-3770-4C61-80E1-30589BCC2529}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30AA1511-5129-41F3-AE22-F13FC9470116}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SmcService"="C:\PROGRA~1\Sygate\SPF\smc.exe" [13/08/2004 07:05 PM] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [22/02/2008 04:25 AM] "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [25/09/2004 10:50 PM] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [18/10/2005 11:58 AM] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [11/12/2005 03:35 PM] "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [04/08/2004 01:31 PM] "MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [28/08/2002 09:39 PM] "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [28/08/2002 09:39 PM] "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [28/08/2002 09:39 PM] "MaxtorOneTouch"="C:\Program Files\Maxtor\ManagerApp\Onetouch.exe" [11/08/2006 08:45 AM] "mxomssmenu"="C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe" [11/08/2006 11:15 AM] "CTHelper"="CTHELPER.EXE" [12/12/2006 10:46 AM C:\WINDOWS\system32\CtHelper.exe] "CTxfiHlp"="CTXFIHLP.EXE" [24/05/2006 12:20 PM C:\WINDOWS\system32\CTXFIHLP.EXE] "lxcrmon.exe"="C:\Program Files\Lexmark 2400 Series\lxcrmon.exe" [23/01/2006 01:45 AM] "EzPrint"="C:\Program Files\Lexmark 2400 Series\ezprint.exe" [07/02/2006 01:10 PM] "FaxCenterServer"="C:\Program Files\Lexmark Fax Solutions\fm3032.exe" [02/02/2006 04:11 PM] "LXCRCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll" [02/12/2005 02:38 AM] "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [11/04/2007 03:32 PM C:\WINDOWS\KHALMNPR.Exe] "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [28/06/2008 01:21 AM] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [05/12/2007 01:41 AM] "nwiz"="nwiz.exe" [05/12/2007 01:41 AM C:\WINDOWS\system32\nwiz.exe] "RTHDCPL"="RTHDCPL.EXE" [21/03/2007 02:49 PM C:\WINDOWS\RTHDCPL.exe] "Alcmtr"="ALCMTR.EXE" [03/05/2005 06:43 PM C:\WINDOWS\Alcmtr.exe] "PC Suite for Smartphones"="C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" [28/05/2007 10:14 AM] "VMSnap3"="C:\WINDOWS\VMSnap3.EXE" [30/08/2006 10:58 AM] "Domino"="C:\WINDOWS\Domino.EXE" [28/06/2006 05:54 PM] "1cc423ab"="C:\WINDOWS\system32\ykdehyan.dll" [] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [18/10/2007 11:34 AM] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [04/08/2004 03:56 PM] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [14/02/2007 09:31 PM] "mRouterConfig"="C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe" [02/03/2006 11:54 AM] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [28/01/2008 11:43 AM] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [20/10/2007 5:58:47 PM] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "NoDispBackgroundPage"=0 (0x0) "NoDispScrSavPage"=0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\efcAQjKe] efcAQjKe.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] "Authentication Packages"= msv1_0 C:\WINDOWS\system32\wvUNFYRH [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoa dGroup] @="" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5 B84-EC70-11D2-9505-00C04F79DEAF}] @="Volume shadow copy" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Acrobat Assistant.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk backup=C:\WINDOWS\pss\Acrobat Assistant.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ATI CATALYST System Tray.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ATI CATALYST System Tray.lnk backup=C:\WINDOWS\pss\ATI CATALYST System Tray.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ABIT uGuru] C:\Program Files\ABIT\ABIT uGuru\uGuru.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtiTrayTools] "C:\Program Files\ATI Tray Tools\atitray.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\kdx] C:\WINDOWS\kdx\KHost.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bthsvcs BthServ [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountp oints2\{0def32f8-dd1c-11dc-84c8-001e8c172468}] Auto\command- H:\Ghost.pif AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Ghost.pif -- End of Deckard's System Scanner: finished at 2008-07-09 00:31:14 ------------ |
|
08-Jul-2008, 01:47 PM
#3 |
| Catchme log returns: catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-07-09 00:34:52 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Key s\0009dd100a1c] "000eed2118be"=hex:dd,12,56,57,e9,db,9f,65,a1,50,38,32,39,79,46,a9 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf40] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\00 09dd100a1c] "000eed2118be"=hex:dd,12,56,57,e9,db,9f,65,a1,50,38,32,39,79,46,a9 scanning hidden registry entries ... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher] "TracesProcessed"=dword:000001fb "TracesSuccessful"=dword:00000032 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{63A57B07-DF78-F882-07AF-4AFE57F49122}] "dbfafbgafapmppooadgakbcfbnakbjplmbpabmpn"=hex:6b,61,6c,6c,65,6b,68,68,62,6 9,6e,70,65,62,64,63,6a,67,63,62,65,.. scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 145 file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\01\10-{E07D1935-B6EA-5DD6-081A-E41F18EE8084}-v1-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS ( 8 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\52\13-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v252-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 ( 12198 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\52\13-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v252-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.1 ( 1360 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\53\17-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v253-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v17-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.1 ( 12252 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\53\17-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v253-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v17-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.2 ( 1360 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\54\19-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v254-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v19-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.2 ( 11604 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\54\19-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v254-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v19-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.3 ( 1360 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\55\21-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v255-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.3 ( 12468 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\55\21-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v255-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.4 ( 1376 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\55\355-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v355-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v355-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.5 ( 5496 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\56\23-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v256-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v23-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.4 ( 12396 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\56\23-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v256-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v23-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.6 ( 1376 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\56\356-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v356-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v356-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.7 ( 2384 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\57\25-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v257-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.5 ( 11658 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\57\25-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v257-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.8 ( 1312 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\58\29-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v258-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v29-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.6 ( 12252 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\58\29-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v258-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v29-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.9 ( 1328 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\59\32-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v259-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.7 ( 11874 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\59\32-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v259-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.10 ( 1328 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\59\68-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v559-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v68-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.8 ( 8976 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\59\68-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v559-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v68-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.11 ( 984 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\60\34-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v260-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v34-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.9 ( 12306 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\60\34-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v260-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v34-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.12 ( 1360 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\60\69-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v560-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v69-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.10 ( 8832 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\60\69-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v560-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v69-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.13 ( 976 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\61\36-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v261-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v36-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.11 ( 12342 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\61\36-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v261-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v36-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.14 ( 1352 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\61\70-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v561-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v70-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.12 ( 8796 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\61\70-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v561-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v70-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.15 ( 968 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\62\38-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v262-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v38-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.13 ( 5322 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\62\38-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v262-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v38-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.16 ( 584 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\62\76-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v562-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v76-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.14 ( 12252 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\62\76-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v562-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v76-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.17 ( 1344 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\63\263-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v263-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v263-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.18 ( 2120 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\63\77-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v563-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v77-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.15 ( 12414 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\63\77-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v563-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v77-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.19 ( 1344 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\64\264-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v264-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v264-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.20 ( 1880 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\64\78-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v564-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v78-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.16 ( 11820 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\64\78-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v564-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v78-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.21 ( 1344 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\65\265-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v265-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v265-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.22 ( 1560 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\65\75-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v565-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v75-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.17 ( 12018 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\65\75-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v565-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v75-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.23 ( 1352 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\66\266-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v266-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v266-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.24 ( 2120 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\66\79-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v566-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v79-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.18 ( 12378 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\66\79-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v566-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v79-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.25 ( 1360 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\67\267-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v267-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v267-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.19 ( 13944 bytes ) |
|
08-Jul-2008, 01:48 PM
#4 |
| 2nd part of Catchme log file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\67\267-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v267-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v267-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.26 ( 1576 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\67\80-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v567-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v80-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.20 ( 8976 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\67\80-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v567-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v80-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.27 ( 1024 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\68\268-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v268-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v268-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.28 ( 1928 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\68\85-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v568-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v85-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.21 ( 13098 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\68\85-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v568-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v85-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.29 ( 1464 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\69\269-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v269-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v269-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.30 ( 4056 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\69\86-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v569-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v86-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.22 ( 9318 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\69\86-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v569-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v86-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.31 ( 1032 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\70\270-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v270-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v270-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.23 ( 449292 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\70\270-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v270-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v270-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 ( 31188 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\70\270-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v270-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v270-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.32 ( 49696 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\70\87-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v570-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v87-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.24 ( 9732 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\70\87-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v570-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v87-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.33 ( 1096 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\71\271-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v271-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v271-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.34 ( 1000 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\71\88-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v571-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v88-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.25 ( 14196 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\71\88-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v571-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v88-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.35 ( 1536 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\72\272-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v272-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v272-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.36 ( 4328 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\72\89-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v572-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v89-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.26 ( 12270 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\72\89-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v572-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v89-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.37 ( 1360 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\73\273-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v273-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v273-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.38 ( 4040 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\73\90-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v573-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v90-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.27 ( 11946 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\73\90-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v573-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v90-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.39 ( 1320 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\74\274-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v274-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v274-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.40 ( 4936 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\74\91-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v574-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v91-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.28 ( 11190 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\74\91-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v574-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v91-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.41 ( 1216 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\75\275-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v275-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v275-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.29 ( 179796 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\75\275-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v275-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v275-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.42 ( 20048 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\75\92-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v575-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v92-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.30 ( 11316 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\75\92-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v575-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v92-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.43 ( 1232 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\76\93-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v576-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v93-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.31 ( 11334 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\76\93-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v576-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v93-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.44 ( 1272 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\77\95-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v577-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v95-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.32 ( 10074 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\77\95-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v577-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v95-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.45 ( 1080 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\78\96-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v578-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v96-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.33 ( 11100 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\78\96-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v578-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v96-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.46 ( 1240 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\79\97-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v579-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v97-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.34 ( 9894 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\79\97-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v579-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v97-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.47 ( 1104 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\80\102-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v580-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v102-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.35 ( 11082 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\80\102-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v580-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v102-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.48 ( 1216 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\81\107-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v581-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v107-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.36 ( 11028 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\81\107-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v581-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v107-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.49 ( 1272 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\82\109-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v582-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v109-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.37 ( 12252 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\82\109-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v582-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v109-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.50 ( 1328 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\83\114-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v583-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v114-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.38 ( 12054 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\83\114-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v583-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v114-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.51 ( 1320 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\83\383-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v383-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v383-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.52 ( 952 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\84\115-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v584-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v115-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.39 ( 7788 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\84\115-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v584-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v115-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.53 ( 848 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\84\384-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v384-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v384-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.54 ( 4632 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\85\116-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v585-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v116-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.40 ( 11982 bytes ) |
|
08-Jul-2008, 01:49 PM
#5 |
| last part of Catchme log file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\85\116-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v585-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v116-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.55 ( 1336 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\85\385-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v385-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v385-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.56 ( 2976 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\86\117-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v586-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v117-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.41 ( 12000 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\86\117-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v586-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v117-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.57 ( 1344 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\86\386-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v386-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v386-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.58 ( 4296 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\87\118-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v587-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v118-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.42 ( 12360 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\87\118-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v587-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v118-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.59 ( 1352 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\87\387-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v387-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v387-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.60 ( 4552 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\88\119-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v588-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v119-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.43 ( 12252 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\88\119-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v588-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v119-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.61 ( 1352 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\88\388-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v388-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v388-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.62 ( 3136 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\89\120-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v589-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v120-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.44 ( 12360 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\89\120-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v589-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v120-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.63 ( 1368 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\89\389-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v389-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v389-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.64 ( 3936 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\90\126-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v590-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v126-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.45 ( 11514 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\90\126-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v590-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v126-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.65 ( 1304 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\90\390-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v390-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v390-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.66 ( 3520 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\91\125-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v591-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v125-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.46 ( 12126 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\91\125-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v591-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v125-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.67 ( 1320 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\91\391-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v391-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v391-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.68 ( 4592 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\92\392-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v392-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v392-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.69 ( 3912 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\93\393-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v393-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v393-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.70 ( 3736 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\chankengsian g@hotmail.com\DFSR\Staging\CS{E07D1935-B6EA-5DD6-081A-E41F18EE8084}\94\394-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v394-{5E6396ED-D9E8-41FD-AC22-26BFC3DC6181}-v394-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.71 ( 912 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\01\39-{470E6878-7197-864C-A0CD-FC53A9186697}-v1-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.72 ( 8 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\12\40-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v12-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.47 ( 31116 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\12\40-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v12-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.73 ( 3456 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\13\19-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v13-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v19-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.74 ( 6264 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\14\21-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v14-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.75 ( 5800 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\15\15-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v15-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.76 ( 6768 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\17\41-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v17-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.48 ( 45102 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\17\41-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v17-{B4CB4DA6-FAC5-4370-8E2A-D51316F2A546}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.77 ( 5040 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\18\35-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v18-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v35-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.78 ( 7408 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\20\39-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v20-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.49 ( 48540 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\20\39-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v20-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.2.1 ( 3414 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\20\39-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v20-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.79 ( 5464 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\22\43-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v22-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v43-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.80 ( 6752 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\24\24-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v24-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v24-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.81 ( 4896 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\26\34-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v26-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v34-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.82 ( 4736 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\28\48-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v28-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v48-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.83 ( 6088 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\30\40-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v30-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.84 ( 5176 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\31\41-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v31-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.85 ( 6144 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\33\33-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v33-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v33-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.86 ( 6088 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\36\46-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v36-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v46-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.87 ( 5232 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\37\47-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v37-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v47-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.88 ( 5672 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\42\52-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v42-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v52-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.89 ( 6208 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\44\50-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v44-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v50-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1.50 ( 61230 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\44\50-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v44-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v50-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.90 ( 6744 bytes ) file zipped: C:\Documents and Settings\Kelvin Lim\Local Settings\Application Data\Microsoft\Messenger\lchkelvin@hotmail.com\SharingMetadata\forever_wl_1 8@hotmail.com\DFSR\Staging\CS{470E6878-7197-864C-A0CD-FC53A9186697}\45\53-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v45-{887537D1-4F86-4A2D-BDAC-D9213619DA73}-v53-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS -> catchme.zip -> {59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS.91 ( 7920 bytes ) |

|
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |

| Thread Tools | |
| |
| You Are Using: |
Advertisements do not imply our endorsement of that product or service. All times are GMT -4. The time now is 03:17 PM. Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved. | |

