Solved: Alcra

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.
E

Englishem

Thread Starter
Joined
Nov 10, 2005
Messages
46
Hi! I think I have gotten the Alcra worm, as LimeWire keeps popping up and won't stay closed. My Spy Sweeper just expired so of course something like this happens the next day. What should I do??
Thanks.....


Logfile of HijackThis v1.99.1
Scan saved at 8:29:34 PM, on 7/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\WINDOWS\Sonysys\VAIO Recovery\reminder.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\Comcast\COMCAS~1\data\Xtras\mssysmgr.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\jre1.5.0_11\bin\jucheck.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\Program Files\outlook\outlook.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/comcast.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.sony.com/vaiopeople
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [CreateCD_Reminder] "C:\WINDOWS\Sonysys\VAIO Recovery\reminder.exe"
O4 - HKLM\..\Run: [VAIO Recovery] "C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe"
O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\Corel\WordPerfect Office 2002\Programs\QFSCHD100.EXE"
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [McAgentexe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [McUpdateexe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [SAClient] "C:\Program Files\Comcast\BBClient\Programs\RegCon.exe" /admincheck
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [Microsoft Works Update Detection] "C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe"
O4 - HKLM\..\Run: [SetDefPrt] "C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe"
O4 - HKLM\..\Run: [ControlCenter2.0] "C:\Program Files\Brother\ControlCenter2\brctrcen.exe" /autorun
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [REGSHAVE] "C:\Program Files\REGSHAVE\REGSHAVE.EXE" /AUTORUN
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [outlook] C:\Program Files\outlook\outlook.exe /auto
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Comcast\COMCAS~1\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Billminder.lnk = C:\Program Files\Quicken\billmind.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Quicken Startup.lnk = C:\Program Files\Quicken\QWDLLS.EXE
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O4 - Global Startup: ymetray.lnk = C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemyfios.verizon.net/sdcCommon/download/tgctlcm.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/kws/kavwebscan_unicode.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {2DFF31F9-7893-4922-AF66-C9A1EB4EBB31} (Rhapsody Player Engine) - http://forms.real.com/real/player/d.../mrkt/rhapx/RhapsodyPlayerEngine_Inst_Win.cab
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} (CPlayFirstTriJinxControl Object) - http://zone.msn.com/bingame/trix/default/TriJinx.1.0.0.67.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab
O16 - DPF: {596AF4AC-40A0-474A-9F86-33F0A90F0FD6} (PictureItLauncher Class) - http://photos.msn.com/resources/neutral/controls/DigWebX2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1148136023750
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/1452/ftp.coupons.com/r3302/cpbrkpie.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - c:\program files\yahoo!\installs\ymmapi.dll
O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.microsoft.com/search/lobby/searchsettings.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: VAIO Media Music Server (Application) (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (Application) (file missing)
O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing)
O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
 
M

MFDnNC

Joined
Sep 7, 2004
Messages
49,014
NOTE: If you have downloaded ComboFix previously please delete that version and download it again!

Download this file :

http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe
or
http://download.bleepingcomputer.com/sUBs/Beta/ComboFix.exe

Double click combofix.exe & follow the prompts.
When finished, it shall produce a log for you. Post that log and a HiJack log in your next reply

Note:
Do not mouseclick combofix's window while its running. That may cause it to stall
===========

Download Superantispyware (SAS) free home version

http://www.superantispyware.com/superantispywarefreevspro.html

Install it and double-click the icon on your desktop to run it.
· It will ask if you want to update the program definitions, click Yes.
· Under Configuration and Preferences, click the Preferences button.
· Click the Scanning Control tab.
· Under Scanner Options make sure the following are checked:
o Close browsers before scanning
o Scan for tracking cookies
o Terminate memory threats before quarantining.
o Please leave the others unchecked.
o Click the Close button to leave the control center screen.
· On the main screen, under Scan for Harmful Software click Scan your computer.
· On the left check C:\Fixed Drive.
· On the right, under Complete Scan, choose Perform Complete Scan.
· Click Next to start the scan. Please be patient while it scans your computer.
· After the scan is complete a summary box will appear. Click OK.
· Make sure everything in the white box has a check next to it, then click Next.
· It will quarantine what it found and if it asks if you want to reboot, click Yes.
· To retrieve the removal information for me please do the following:
o After reboot, double-click the SUPERAntispyware icon on your desktop.
o Click Preferences. Click the Statistics/Logs tab.
o Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
o It will open in your default text editor (such as Notepad/Wordpad).
o Please highlight everything in the notepad, then right-click and choose copy.
· Click close and close again to exit the program.
· Please paste that information here for me with a new HijackThis log.

This will take some time!!!!!!!!
 
E

Englishem

Thread Starter
Joined
Nov 10, 2005
Messages
46
While ComboFix was running, a message popped up saying, "C:\windows\system32\cmd.com is not a valid Win32 application." It would not let me close the message window and nothing else ever happened, except that all the desktop icons vanished. I tried it twice and had to restart the computer.
 
M

MFDnNC

Joined
Sep 7, 2004
Messages
49,014
Download pocket killbox from http://www.thespykiller.co.uk/files/killbox.exe & put it on the desktop where you can find it easily

now Start killbox paste the first file listed below into the full pathname and file to delete box

The file name will appear in the window and if the file exists it will appear in blue under that window then select standard file kill, press the red X button, say yes to the prompt and once the file deleted message comes up then repeat for each file in turn

C:\WINDOWS\system32\CMD.COM
C:\WINDOWS\system32\netstat.com
C:\WINDOWS\system32\ping.com
C:\WINDOWS\system32\regedit.com
C:\WINDOWS\system32\tasklist.com
C:\WINDOWS\system32\taskkill.com
C:\WINDOWS\system32\tracert.com
 
E

Englishem

Thread Starter
Joined
Nov 10, 2005
Messages
46
Here is the ComboFix log:

"Valued Customer" - 2007-07-07 2:31:20 - ComboFix 07-07-07.3 - Service Pack 2


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\DOCUME~1\ALLUSE~1\APPLIC~1.\TEMP
C:\onoes.exe
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\music\mainmenumusic.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\areabomb.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\beetlezap.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\bonusrow.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\bonustimer.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\bucketfilled.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\clearpyramid.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\cleartriangle1a.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\cleartriangle1b.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\cleartriangle1c.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\cleartriangle2a.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\cleartriangle2b.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\cleartriangle2c.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\colorchain.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\dialogbox.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\drumbeat.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\fillrow.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\gateopen.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\helptip.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\powerup.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\rotateboardleft.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\timerup.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\warning.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\audio\sfx\warning2.ogg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\artifacts-bb.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\bar.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\chamber0.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\chamber1.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\circledoor.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\full_screen_dialog.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\global-hs-bb_large.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\global-hs-bb_small.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\help-bb_large.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\help-bb_small.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\hexfield.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\hidden-artifact_icon.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\large_dialog.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\local-hs-bb.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\mainmenu.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\small_dialog.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\textfield.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\backgrounds\trifield.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\beetlehover1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\beetlehover2.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\beetlehover3.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\beetlehover4.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\beetleshock1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\beetleshock2.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\beetleshock3.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\beetleshock4.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\beetletatoo.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\dirt.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\scarabpost.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\scarabpostovr.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\beetles\tritop.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\arrowdown_down.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\arrowdown_over.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\arrowdown_up.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\arrowleft_down.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\arrowleft_over.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\arrowleft_up.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\arrowright_down.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\arrowright_over.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\arrowright_up.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\arrowup_down.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\arrowup_over.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\arrowup_up.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\bluearrowleft_down.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\bluearrowleft_over.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\bluearrowleft_up.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\bluearrowright_down.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\bluearrowright_over.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\bluearrowright_up.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\checkdown.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\checkup.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\long_button_down.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\long_button_over.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\long_button_up.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\orange-button_down.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\orange-button_over.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\orange-button_up.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\rotleft_down.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\rotleft_over.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\rotleft_up.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\rotright_down.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\rotright_over.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\rotright_up.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\simplebutton_down.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\simplebutton_over.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\simplebutton_up.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\sliderknob.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\sliderknobover.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\buttons\sliderrail.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\characters\anwar\look\pl0001.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\characters\bast\look\bl0001.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\characters\kristine\look\kl0001.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\crackedstopper.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\cursor.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\doorlights.txt
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\fonts\jackarmstrong.mvec
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\fonts\lithos.mvec
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\greybomb.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\helptips\arrowkeys.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\helptips\helptip.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\levels\levels.dat
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\models\disk.mesh
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\models\equilateraltriangle.mesh
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\models\flattri.mesh
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\models\pyramid.mesh
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\models\quad.mesh
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\models\rotatingpyramid.mesh
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\models\scarabpanel.mesh
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\p1icon.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\scenes\page1-0.xml
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\scenes\page1-1.xml
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\scenes\panel1-0-1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\scenes\panel1-1-1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\scorecloud.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\setup.xml
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\sfx\areashockwave.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\sfx\bolt_1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\sfx\bolt_2.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\sfx\bolt_3.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\sfx\bolt_4.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\sfx\bolt_starter.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\sfx\bolt_tail.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\sfx\flash.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\sfx\rubble.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\sfx\smoke.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\sfx\smoke2.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\sfx\smoke3.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\splash\aol_logo.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\splash\playfirst_logo.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\statues\statue0\snake_dirty.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\statues\statue1\arm01_dirty.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\statues\statue1\mask01_1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\statues\statue1\statue01_dirty.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\stopper.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\timer.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\timerglow.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\timericon.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\tm.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\trails\mouseblue1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\trails\mouseblue2.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\trails\mouseblue3.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\trails\mousegreen1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\trails\mousegreen2.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\trails\mousegreen3.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\trails\mousered1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\trails\mousered2.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\trails\mousered3.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\trails\mouseyellow1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\trails\mouseyellow2.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\trails\mouseyellow3.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\areabomb.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\areabombrollover.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\blue.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\bluerollover.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\boardfill.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\brick.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\brick1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\brick2.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\brick3.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\bricktip.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\clearanim\cleared1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\clearanim\cleared2.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\clearanim\cleared3.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\clearanim\cleared4.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\clearanim\cleared5.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\clearanim\cleared6.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\eye1.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\eye2.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\eye3.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\eye4.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\green.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\greenrollover.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\plain_tri-blue.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\plain_tri-bluerollover.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\plain_tri-green.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\plain_tri-greenrollover.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\plain_tri-red.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\plain_tri-redrollover.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\plain_tri-yellow.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\plain_tri-yellowrollover.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\red.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\redrollover.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\wild.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\wildrollover.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\yellow.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\triangles\yellowrollover.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\upsell\image0.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\upsell\image1.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\upsell\image2.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\upsell\image3.jpg
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\bluebucket.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\buckettriangle.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\chainlink.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\chaintip.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\genericbucket.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\greenbucket.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\redbucket.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\smallblue.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\smallgreen.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\smallred.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\smallyellow.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\urnglow.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\urnplatform.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\urns\yellowbucket.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\assets\warning.png
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\error.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\game.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\gameover.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\hiscore.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\hiscoreinfo.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\hiscoresubmit.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\instructions.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\leveldesign.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\levelover.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\mainarcade.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\mainconfirm.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\maincontinue.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\maingames.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\mainpuzzle.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\maphelptip.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\options.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\pause.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\quitconfirm.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\start.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\storyplayer.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\style.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\screens\upsell.lua
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\strings.xml
C:\WINDOWS\DOWNLO~1.\TriJinx.1.0.0.67\TriJinx.exe
C:\WINDOWS\DOWNLO~1\UDC6_0001_D18M1108NetInstaller.exe
C:\WINDOWS\install.exe
C:\WINDOWS\system32\bszip.dll
C:\WINDOWS\system32\mc-110-12-0000121.exe
C:\WINDOWS\system32\zxdnt3d.cfg
C:\WINDOWS\yoinsi.exe


((((((((((((((((((((((((( Files Created from 2007-06-07 to 2007-07-07 )))))))))))))))))))))))))))))))


2007-07-06 21:04 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-07-04 22:23 <DIR> d--hs---- C:\Program Files\outlook
2007-07-04 22:23 <DIR> d--hs---- C:\DOCUME~1\VALUED~1\Complete
2007-06-27 02:28 28,672 --a------ C:\WINDOWS\system32\f3PSSavr.scr
2007-06-27 02:28 <DIR> d-------- C:\Program Files\MyWebSearch
2007-06-10 22:16 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecretsOfOlympus
2007-06-08 22:40 <DIR> d-------- C:\Program Files\Ballistik
2007-06-08 21:04 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\TERMINAL Studio


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-07 02:24:57 -------- d-----w C:\Program Files\FunWebProducts
2007-07-06 02:23:22 -------- d-----w C:\DOCUME~1\VALUED~1\APPLIC~1\Comcast
2007-07-06 01:59:55 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-07-05 15:24:02 -------- d-----w C:\Program Files\LimeWire
2007-06-27 07:28:29 -------- d-----w C:\Program Files\MSN Messenger
2007-06-11 02:58:11 -------- d-----w C:\Program Files\bfgclient
2007-05-20 20:05:36 -------- d-----w C:\Program Files\Oberon Media
2007-05-16 15:12:02 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-05-09 08:03:53 -------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-04-25 14:21:15 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
2007-04-18 16:12:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-17 03:47:36 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2007-04-17 03:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-17 03:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-04-17 03:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-04-17 03:45:36 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-04-17 03:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-04-17 03:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-04-17 03:45:20 43,352 ----a-w C:\WINDOWS\system32\wups2.dll
2007-04-17 03:44:20 271,224 ----a-w C:\WINDOWS\system32\mucltui.dll
2007-04-17 03:44:18 208,248 ----a-w C:\WINDOWS\system32\muweb.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
2006-04-17 19:37 438848 --a------ C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}]
2006-01-06 12:52 181752 --a------ C:\Program Files\Yahoo!\Common\yiesrvc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AGRSMMSG"="AGRSMMSG.exe" [2002-10-18 14:07 C:\WINDOWS\AGRSMMSG.exe]
"@"="" []
"QuickFinder Scheduler"="C:\Program Files\Corel\WordPerfect Office 2002\Programs\QFSCHD100.EXE" [2002-08-15 07:54]
"StorageGuard"="C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" [2002-06-18 04:01]
"McAgentexe"="c:\PROGRA~1\mcafee.com\agent\mcagent.exe" [2005-09-22 19:29]
"McUpdateexe"="c:\PROGRA~1\mcafee.com\agent\mcupdate.exe" [2006-01-11 13:05]
"VirusScan Online"="c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe" [2003-08-17 22:50]
"SAClient"="C:\Program Files\Comcast\BBClient\Programs\RegCon.exe" [2002-12-20 16:43]
"VSOCheckTask"="c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" [2003-08-08 19:02]
"Microsoft Works Update Detection"="C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe" [2003-09-13 21:36]
"SetDefPrt"="C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe" [2004-05-25 09:16]
"ControlCenter2.0"="C:\Program Files\Brother\ControlCenter2\brctrcen.exe" [2004-07-20 09:34]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2005-09-19 16:13]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-04-03 18:12]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" [2006-12-15 04:23]
"REGSHAVE"="C:\Program Files\REGSHAVE\REGSHAVE.exe" [2002-02-04 23:32]
"SpySweeper"="C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" [2007-03-01 20:55]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 11:24]
"PhotoShow Deluxe Media Manager"="C:\PROGRA~1\Comcast\COMCAS~1\data\Xtras\mssysmgr.exe" [2005-05-09 18:16]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 02:56]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{54D9498B-CF93-414F-8984-8CE7FDE0D391}"="C:\Program Files\ewido\security suite\shellhook.dll" [2005-12-04 15:56]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\WebrootSpySweeperService]


Contents of the 'Scheduled Tasks' folder
2007-07-05 06:38:04 C:\WINDOWS\tasks\MP Scheduled Scan.job
2007-07-07 05:00:06 C:\WINDOWS\tasks\User_Feed_Synchronization-{619EF4B0-C52B-4CFE-B755-1EFF20C56A18}.job
2007-06-30 08:00:02 C:\WINDOWS\tasks\wrSpySweeper20060707223425.job

**************************************************************************

catchme 0.3.915 W2K/XP/Vista - rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-07 02:35:16
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-07-07 2:36:06
C:\ComboFix-quarantined-files.txt ... 2007-07-07 02:35

--- E O F ---
 
E

Englishem

Thread Starter
Joined
Nov 10, 2005
Messages
46
And here is the Hijack log:

Logfile of HijackThis v1.99.1
Scan saved at 2:38:48 AM, on 7/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\WINDOWS\Sonysys\VAIO Recovery\reminder.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\Comcast\COMCAS~1\data\Xtras\mssysmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Java\jre1.5.0_11\bin\jucheck.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/comcast.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.sony.com/vaiopeople
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\Corel\WordPerfect Office 2002\Programs\QFSCHD100.EXE"
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [McAgentexe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [McUpdateexe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [SAClient] "C:\Program Files\Comcast\BBClient\Programs\RegCon.exe" /admincheck
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [Microsoft Works Update Detection] "C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe"
O4 - HKLM\..\Run: [SetDefPrt] "C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe"
O4 - HKLM\..\Run: [ControlCenter2.0] "C:\Program Files\Brother\ControlCenter2\brctrcen.exe" /autorun
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [REGSHAVE] "C:\Program Files\REGSHAVE\REGSHAVE.EXE" /AUTORUN
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Comcast\COMCAS~1\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Billminder.lnk = C:\Program Files\Quicken\billmind.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Quicken Startup.lnk = C:\Program Files\Quicken\QWDLLS.EXE
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O4 - Global Startup: ymetray.lnk = C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemyfios.verizon.net/sdcCommon/download/tgctlcm.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/kws/kavwebscan_unicode.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {2DFF31F9-7893-4922-AF66-C9A1EB4EBB31} (Rhapsody Player Engine) - http://forms.real.com/real/player/d.../mrkt/rhapx/RhapsodyPlayerEngine_Inst_Win.cab
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} (CPlayFirstTriJinxControl Object) - http://zone.msn.com/bingame/trix/default/TriJinx.1.0.0.67.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab
O16 - DPF: {596AF4AC-40A0-474A-9F86-33F0A90F0FD6} (PictureItLauncher Class) - http://photos.msn.com/resources/neutral/controls/DigWebX2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1148136023750
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/1452/ftp.coupons.com/r3302/cpbrkpie.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - c:\program files\yahoo!\installs\ymmapi.dll
O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.microsoft.com/search/lobby/searchsettings.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: VAIO Media Music Server (Application) (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (Application) (file missing)
O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing)
O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
 
E

Englishem

Thread Starter
Joined
Nov 10, 2005
Messages
46
Here is half of the SAS log:

SUPERAntiSpyware Scan Log
Application Version : 3.9.1008

Core Rules Database Version : 3266
Trace Rules Database Version: 1277

Scan type : Complete Scan
Total Scan Time : 01:21:45

Memory items scanned : 422
Memory threats detected : 0
Registry items scanned : 5648
Registry threats detected : 33
File items scanned : 87935
File threats detected : 645

Browser Hijacker.Internet Explorer Zone Hijack
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\getmirar.com
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\getmirar.com\click
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\getmirar.com\click#https
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mirarsearch.com
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mirarsearch.com\click
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mirarsearch.com\click#https
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mirarsearch.com\redirect
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mirarsearch.com\redirect#https

Adware.Tracking Cookie
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][4].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued_cust[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][4].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][7].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected]www.onetwoporn[1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][6].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued customer[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][5].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][10].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
 
E

Englishem

Thread Starter
Joined
Nov 10, 2005
Messages
46
and the rest of it:

C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected]8291[2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected]****s[1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected]_doll_loves_john[2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected]ure[1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][4].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
 
E

Englishem

Thread Starter
Joined
Nov 10, 2005
Messages
46
and the last part that wouldn't fit....

C:\Documents and Settings\Valued Customer\Cookies\[email protected]****teens[2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][6].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][5].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][8].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][5].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][4].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][6].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][9].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\valued_cu[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][3].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][4].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][5].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected]t[1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected]
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][1].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][11].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][7].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\[email protected][2].txt
C:\Documents and Settings\Valued Customer\Cookies\valued [email protected][1].txt

Adware.180solutions/Search Assistant
HKCR\Interface\{2B0ECEAC-F597-4858-A542-D966B49055B9}
HKCR\Interface\{2B0ECEAC-F597-4858-A542-D966B49055B9}\ProxyStubClsid
HKCR\Interface\{2B0ECEAC-F597-4858-A542-D966B49055B9}\ProxyStubClsid32
HKCR\Interface\{2B0ECEAC-F597-4858-A542-D966B49055B9}\TypeLib
HKCR\Interface\{2B0ECEAC-F597-4858-A542-D966B49055B9}\TypeLib#Version
HKCR\Interface\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}
HKCR\Interface\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\ProxyStubClsid
HKCR\Interface\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\ProxyStubClsid32
HKCR\Interface\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\TypeLib
HKCR\Interface\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\TypeLib#Version
HKCR\Interface\{F1F1E775-1B21-454D-8D38-7C16519969E5}
HKCR\Interface\{F1F1E775-1B21-454D-8D38-7C16519969E5}\ProxyStubClsid
HKCR\Interface\{F1F1E775-1B21-454D-8D38-7C16519969E5}\ProxyStubClsid32
HKCR\Interface\{F1F1E775-1B21-454D-8D38-7C16519969E5}\TypeLib
HKCR\Interface\{F1F1E775-1B21-454D-8D38-7C16519969E5}\TypeLib#Version

Adware.180solutions/ZangoSearch
HKCR\Interface\{DD469A88-316C-441D-B712-783D9B9A6707}
HKCR\Interface\{DD469A88-316C-441D-B712-783D9B9A6707}\ProxyStubClsid
HKCR\Interface\{DD469A88-316C-441D-B712-783D9B9A6707}\ProxyStubClsid32
HKCR\Interface\{DD469A88-316C-441D-B712-783D9B9A6707}\TypeLib
HKCR\Interface\{DD469A88-316C-441D-B712-783D9B9A6707}\TypeLib#Version

Adware.Elite Media
HKLM\Software\elite
HKLM\Software\elite#check
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs#C:\WINDOWS\Downloaded Program Files\elite.ocx [  ]

Adware.IST/ISTBar (Slotch Bar)
HKU\S-1-5-21-1047054364-3676479340-3288185684-1005\Software\Microsoft\Internet Explorer\Main#BandRest [ Never ]
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main#BandRest [ Never ]

Adware.MovieLand/MediaPipe
C:\PROGRAM FILES\FSUPPORT\NOTIFIER.EXE

Adware.eXact Advertising
C:\PROGRAM FILES\MICROSOFT ANTISPYWARE\QUARANTINE\9B592C75-BFE5-4112-A3BB-A41F8A\BC993CFB-5207-48FA-8236-C417A1

Adware.MyWebSearch
C:\PROGRAM FILES\MYWEBSEARCH\BAR\1.BIN\MWSOEMON.EXE

Malware.DriveCleaner
C:\QOOBOX\QUARANTINE\C\WINDOWS\DOWNLO~1\UDC6_0001_D18M1108NETINSTALLER.EXE.VIR

Trojan.MediaPipe-Variant
C:\WINDOWS\SYSTEM32\ENTRY.DLL

Trojan.Unknown Origin
C:\WINDOWS\TEMPF.TXT
 
E

Englishem

Thread Starter
Joined
Nov 10, 2005
Messages
46
And here is the Hijack log:

Logfile of HijackThis v1.99.1
Scan saved at 5:05:56 AM, on 7/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\AGRSMMSG.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ezSP_Px.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\Comcast\COMCAS~1\data\Xtras\mssysmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Java\jre1.5.0_11\bin\jucheck.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/comcast.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.sony.com/vaiopeople
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\Corel\WordPerfect Office 2002\Programs\QFSCHD100.EXE"
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [McAgentexe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [McUpdateexe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [SAClient] "C:\Program Files\Comcast\BBClient\Programs\RegCon.exe" /admincheck
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [Microsoft Works Update Detection] "C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe"
O4 - HKLM\..\Run: [SetDefPrt] "C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe"
O4 - HKLM\..\Run: [ControlCenter2.0] "C:\Program Files\Brother\ControlCenter2\brctrcen.exe" /autorun
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [REGSHAVE] "C:\Program Files\REGSHAVE\REGSHAVE.EXE" /AUTORUN
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\system32\ezSP_Px.exe
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Comcast\COMCAS~1\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Billminder.lnk = C:\Program Files\Quicken\billmind.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Quicken Startup.lnk = C:\Program Files\Quicken\QWDLLS.EXE
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O4 - Global Startup: ymetray.lnk = C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemyfios.verizon.net/sdcCommon/download/tgctlcm.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/kws/kavwebscan_unicode.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {2DFF31F9-7893-4922-AF66-C9A1EB4EBB31} (Rhapsody Player Engine) - http://forms.real.com/real/player/d.../mrkt/rhapx/RhapsodyPlayerEngine_Inst_Win.cab
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} (CPlayFirstTriJinxControl Object) - http://zone.msn.com/bingame/trix/default/TriJinx.1.0.0.67.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab
O16 - DPF: {596AF4AC-40A0-474A-9F86-33F0A90F0FD6} (PictureItLauncher Class) - http://photos.msn.com/resources/neutral/controls/DigWebX2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1148136023750
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/1452/ftp.coupons.com/r3302/cpbrkpie.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - c:\program files\yahoo!\installs\ymmapi.dll
O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.microsoft.com/search/lobby/searchsettings.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: VAIO Media Music Server (Application) (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (Application) (file missing)
O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing)
O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Members online

Total: 542 (members: 8, guests: 534)
Top