BleepingComputer.com: "Trojan horse generic22.BEWG" and "Trojan horse BackDoor.Generic13.BKVZ

I went away for a couple days, came back and found these. AVG can't remove them, says they're whitelisted. Symptom is, every time I try to google the file names I get redirected, and I keep getting a windows security asking if I want to unblock stuff.

Thanks,

Tom

Looks like you have a redirected infection. Have you try running Malwarebytes yet?

I'm running it now, but my experience is that this type of thing is more insidious than MWB can handle. It will seem to be fixed, then reappear. Confidence in MWB is not high.

Malwarebites removed "trojan BankerBot.gen". Now, whenever I open a program I get "..... is not a valid windows image. Please check against your installation diskette." And I'm still getting the browser redirects when I try to google the phrase "is not a valid windows image".

Mosca, on 24 May 2011 - 01:19 PM, said:

EXE file association needs to be fix

Open NotePad from Start Menu and paste the following code in your notepad program.

Quote

Save it as xp_exe_fix.reg
Right Click it and Merge it

Try the programs now

Once everything is working download and run drweb cureit http://www.freedrweb.com/download+cureit/

This post has been edited by invision: 24 May 2011 - 01:37 PM

Thank you, invision. I got rid of the redirects by removing AVG and downloading, installing, and running Microsoft Security Essentials; I felt safe with the Microsoft product, I reached it by directly typing in the address bar. Now all that is left is the "not a valid Windows image" message. I tried the registry merge you suggested; no joy. I tried the Microsoft suggestion of renaming the winspool.drv file and rebooting; no joy there, either.

Thank you,

Tom

Try this

Try to run this other tool

Download this file RogueKiller.exe

Click start > Run and type http://tigzy.geekstogo.com/Tools/RogueKiller.exe then hit enter

If you are able to download it

1. Quit all running programs.
2. Simply run RogueKiller.exe.
3. When prompted, type 1 and validate.
4. The RKreport.txt shall be generated next to the executable.
5. If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to iexplorer.exe.


Please post the contents of the RKreport.txt in your next Reply.

Contents of RKreport:

RogueKiller V5.1.6 [05/21/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: John Baloga [Admin rights]
Mode: Scan -- Date : 05/24/2011 17:10:23

Bad processes: 0

Registry Entries: 3
[SUSP PATH] setup_9.0.0.722_24.05.2011_22-14.lnk : C:\Documents and Settings\John Baloga\Desktop\Virus Removal Tool\setup_9.0.0.722_24.05.2011_22-14\startup.exe -> FOUND
[DNS] HKLM\[...]\ControlSet001\Parameters\Interfaces\{17FCD56B-19F3-4FD9-A1E6-E2DDDFDF8542} : NameServer (204.186.0.201,204.186.0.203) -> FOUND
[DNS] HKLM\[...]\ControlSet002\Parameters\Interfaces\{17FCD56B-19F3-4FD9-A1E6-E2DDDFDF8542} : NameServer (204.186.0.201,204.186.0.203) -> FOUND

HOSTS File:
127.0.0.1 localhost
207.186.27.145 smartagent.ds.adp.com


Finished : << RKreport[1].txt >>
RKreport[1].txt

Hi Mosca!

I'm going to ask that this thread be moved to the Malware forum, so I can run some more powerful tools, and see if we can get to the bottom of the issues you're currently experiencing.

____________________________________________________

My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you.

I would be glad to take a look at your log and help you with solving any malware problems.

If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed.

If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:

• Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
  
  
• Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
  
  
• If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  
  
• If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.
  
  
• Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that you should always do, is to make sure sure that your anti-virus definitions are up-to-date!
  
  
• Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
  
  
• I am going to stick with you until ALL malware is gone from your system. I would appreciate it if you would do the same. From this point, we're in this together ;)
  Because of this, you must reply within three days failure to reply will result in the topic being closed!
  
  
• Please do not PM me directly for help. If you have any questions, post them in this topic.
  
  
• Lastly, I am no magician. I will try very hard to fix your issues, but no promises can be made. Also be aware that some infections are so severe that you might need to resort to reformatting and reinstalling your operating system.
  Don't worry, this only happens in severe cases, but it sadly does happen. Be prepared to back up your data. Have means of backing up your data available.

____________________________________________________


Rootkit UnHooker (RkU)
Please download Rootkit Unhooker from one of the following links and save it to your desktop.

Link 1 (.exe file)
Link 2 (zipped file)
Link 3 (.rar file)

In order to use this tool if you downloaded from either of the second two links, you will need to extract the RKUnhookerLE.exe file using a program capable of extracing ZIP and RAR compressed files. If you don't have an extraction program, you can downlaod, install and use the free 7-zip utility.

• Double-click on RKUnhookerLE.exe to start the program.
  Vista/Windows 7 users right-click and select Run As Administrator.
  
• Click the Report tab, then click Scan.
  
• Check Drivers, Stealth Code, and uncheck the rest.
  
• Click OK.
  
• Wait until it's finished and then go to File > Save Report.
  
• Save the report to your Desktop.
  
• Copy and paste the contents of the report into your next reply.

-- Note: You may get this warning...just ignore it, click OK and continue: "Rootkit Unhooker has detected a parasite inside itself! It is recommended to remove parasite, okay?".



NEXT:



Running OTL

We need to create an OTL Report

• Please download OTL from one of the following mirrors:
  • This is THE Mirror
  
  
• Save it to your desktop.
  
• Double click on the icon on your desktop.
  
• Click the "Scan All Users" checkbox.
  
• Push the button.
  
• Two reports will open, copy and paste them in a reply here:
  • OTL.txt <-- Will be opened
    
  • Extras.txt <-- Will be minimized

This post has been edited by SweetTech: 24 May 2011 - 05:01 PM

Thank you, ST! I won't be able to access that computer until tomorrow, I'm with the laptop tonight. I promise boundless respect!

RootKit Unhooker report:

RkU Version: 3.8.388.590, Type LE (SR2)
==============================================
OS Name: Windows XP
Version 5.1.2600 (Service Pack 3)
Number of processors #1
==============================================
>Drivers
==============================================
0xA9134000 C:\WINDOWS\system32\DRIVERS\79834011.sys 5373952 bytes (Kaspersky Lab, Kaspersky Unified Driver)
0x804D7000 C:\WINDOWS\system32\ntkrnlpa.exe 2069376 bytes (Microsoft Corporation, NT Kernel & System)
0x804D7000 PnpManager 2069376 bytes
0x804D7000 RAW 2069376 bytes
0x804D7000 WMIxWDM 2069376 bytes
0xBF800000 Win32k 1859584 bytes
0xBF800000 C:\WINDOWS\System32\win32k.sys 1859584 bytes (Microsoft Corporation, Multi-User Win32 Driver)
0xA9929000 C:\WINDOWS\system32\drivers\sthda.sys 991232 bytes (SigmaTel, Inc., NDRC)
0xBF070000 C:\WINDOWS\System32\ialmdd5.DLL 901120 bytes (Intel Corporation, DirectDraw® Driver for Intel® Graphics Technology)
0xB9CCA000 C:\WINDOWS\system32\DRIVERS\ialmnt5.sys 831488 bytes (Intel Corporation, Intel Graphics Miniport Driver)
0xB9E35000 Ntfs.sys 577536 bytes (Microsoft Corporation, NT File System Driver)
0xA9654000 C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 458752 bytes (Microsoft Corporation, Windows NT SMB Minirdr)
0xB9B2F000 C:\WINDOWS\system32\DRIVERS\update.sys 385024 bytes (Microsoft Corporation, Update Driver)
0xA9761000 C:\WINDOWS\system32\DRIVERS\tcpip.sys 364544 bytes (Microsoft Corporation, TCP/IP Protocol Driver)
0xA8794000 C:\WINDOWS\system32\DRIVERS\srv.sys 360448 bytes (Microsoft Corporation, Server driver)
0xA97ED000 C:\WINDOWS\system32\DRIVERS\7983401.sys 331776 bytes (Kaspersky Lab, Klif Mini-Filter [fre_wnet_x86])
0xBF14C000 C:\WINDOWS\System32\ATMFD.DLL 290816 bytes (Adobe Systems Incorporated, Windows NT OpenType/Type 1 Font Driver)
0xA804B000 C:\WINDOWS\System32\Drivers\HTTP.sys 266240 bytes (Microsoft Corporation, HTTP Protocol Stack)
0xBF040000 C:\WINDOWS\System32\ialmdev5.DLL 196608 bytes (Intel Corporation, Component GHAL Driver)
0xB9BB5000 C:\WINDOWS\system32\DRIVERS\rdpdr.sys 196608 bytes (Microsoft Corporation, Microsoft RDP Device redirector)
0xB9F79000 ACPI.sys 188416 bytes (Microsoft Corporation, ACPI Driver for NT)
0xA89F4000 C:\WINDOWS\system32\DRIVERS\mrxdav.sys 184320 bytes (Microsoft Corporation, Windows NT WebDav Minirdr)
0xB9E08000 NDIS.sys 184320 bytes (Microsoft Corporation, NDIS 5.1 wrapper driver)
0xA7D29000 C:\WINDOWS\system32\drivers\kmixer.sys 176128 bytes (Microsoft Corporation, Kernel Mode Audio Mixer)
0xA96EC000 C:\WINDOWS\system32\DRIVERS\rdbss.sys 176128 bytes (Microsoft Corporation, Redirected Drive Buffering SubSystem Driver)
0xB9C8E000 C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 163840 bytes (Windows ® Server 2003 DDK provider, High Definition Audio Bus Driver v1.0a)
0xA9739000 C:\WINDOWS\system32\DRIVERS\netbt.sys 163840 bytes (Microsoft Corporation, MBT Transport driver)
0xA983E000 C:\WINDOWS\system32\DRIVERS\MpFilter.sys 159744 bytes (Microsoft Corporation, Microsoft antimalware file system filter driver)
0xB9F23000 dmio.sys 155648 bytes (Microsoft Corp., Veritas Software, NT Disk Manager I/O Driver)
0xB9C44000 C:\WINDOWS\system32\DRIVERS\e100b325.sys 155648 bytes (Intel Corporation, Intel® PRO/100 Adapter NDIS 5.1 driver)
0xA7EBF000 C:\WINDOWS\System32\Drivers\Fastfat.SYS 147456 bytes (Microsoft Corporation, Fast FAT File System Driver)
0xA9905000 C:\WINDOWS\system32\drivers\portcls.sys 147456 bytes (Microsoft Corporation, Port Class (Class Driver for Port/Miniport Devices))
0xB9C6A000 C:\WINDOWS\system32\DRIVERS\USBPORT.SYS 147456 bytes (Microsoft Corporation, USB 1.1 & 2.0 Port Driver)
0xB9C0D000 C:\WINDOWS\system32\DRIVERS\ks.sys 143360 bytes (Microsoft Corporation, Kernel CSA Library)
0xA9717000 C:\WINDOWS\System32\drivers\afd.sys 139264 bytes (Microsoft Corporation, Ancillary Function Driver for WinSock)
0x806D1000 ACPI_HAL 131840 bytes
0x806D1000 C:\WINDOWS\system32\hal.dll 131840 bytes (Microsoft Corporation, Hardware Abstraction Layer DLL)
0xB9EEB000 fltmgr.sys 131072 bytes (Microsoft Corporation, Microsoft Filesystem Filter Manager)
0xBF020000 C:\WINDOWS\System32\ialmdnt5.dll 131072 bytes (Intel Corporation, Controller Hub for Intel Graphics Driver)
0xB9F49000 ftdisk.sys 126976 bytes (Microsoft Corporation, FT Disk Driver)
0xB9DEE000 Mup.sys 106496 bytes (Microsoft Corporation, Multiple UNC Provider driver)
0xB9F0B000 atapi.sys 98304 bytes (Microsoft Corporation, IDE/ATAPI Port Driver)
0xA90F4000 C:\WINDOWS\System32\Drivers\dump_atapi.sys 98304 bytes
0xB9EC2000 KSecDD.sys 94208 bytes (Microsoft Corporation, Kernel Security Support Provider Interface)
0xB9BF6000 C:\WINDOWS\system32\DRIVERS\ndiswan.sys 94208 bytes (Microsoft Corporation, MS PPP Framing Driver (Strong Encryption))
0xA8C7F000 C:\WINDOWS\system32\drivers\wdmaud.sys 86016 bytes (Microsoft Corporation, MMSYSTEM Wave/Midi API mapper)
0xB9C30000 C:\WINDOWS\system32\DRIVERS\parport.sys 81920 bytes (Microsoft Corporation, Parallel Port Driver)
0xB9CB6000 C:\WINDOWS\system32\DRIVERS\VIDEOPRT.SYS 81920 bytes (Microsoft Corporation, Video Port Driver)
0xA97BA000 C:\WINDOWS\system32\DRIVERS\ipsec.sys 77824 bytes (Microsoft Corporation, IPSec Driver)
0xBF000000 C:\WINDOWS\System32\drivers\dxg.sys 73728 bytes (Microsoft Corporation, DirectX Graphics Driver)
0xB9ED9000 sr.sys 73728 bytes (Microsoft Corporation, System Restore Filesystem Filter Driver)
0xB9F68000 pci.sys 69632 bytes (Microsoft Corporation, NT Plug and Play PCI Enumerator)
0xB9BE5000 C:\WINDOWS\system32\DRIVERS\psched.sys 69632 bytes (Microsoft Corporation, MS QoS Packet Scheduler)
0xBA248000 C:\WINDOWS\System32\Drivers\Cdfs.SYS 65536 bytes (Microsoft Corporation, CD-ROM File System Driver)
0xBA318000 C:\WINDOWS\system32\DRIVERS\cdrom.sys 65536 bytes (Microsoft Corporation, SCSI CD-ROM Driver)
0xBA2F8000 C:\WINDOWS\system32\DRIVERS\serial.sys 65536 bytes (Microsoft Corporation, Serial Device Driver)
0xBA198000 C:\WINDOWS\system32\drivers\drmk.sys 61440 bytes (Microsoft Corporation, Microsoft Kernel DRM Descrambler Filter)
0xBA118000 C:\WINDOWS\system32\DRIVERS\redbook.sys 61440 bytes (Microsoft Corporation, Redbook Audio Filter Driver)
0xA8E44000 C:\WINDOWS\system32\drivers\sysaudio.sys 61440 bytes (Microsoft Corporation, System Audio WDM Filter)
0xBA1A8000 C:\WINDOWS\system32\DRIVERS\usbhub.sys 61440 bytes (Microsoft Corporation, Default Hub Driver for USB)
0xBF012000 C:\WINDOWS\System32\ialmrnt5.dll 57344 bytes (Intel Corporation, Controller Hub for Intel Graphics Driver)
0xBA0F8000 79834012.sys 53248 bytes (Kaspersky Lab, Kaspersky Lab Boot Guard Driver)
0xBA0E8000 C:\WINDOWS\system32\DRIVERS\CLASSPNP.SYS 53248 bytes (Microsoft Corporation, SCSI Class System Dll)
0xBA128000 C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 53248 bytes (Microsoft Corporation, RAS L2TP mini-port/call-manager driver)
0xBA0C8000 VolSnap.sys 53248 bytes (Microsoft Corporation, Volume Shadow Copy Driver)
0xBA148000 C:\WINDOWS\system32\DRIVERS\raspptp.sys 49152 bytes (Microsoft Corporation, Peer-to-Peer Tunneling Protocol)
0xBA208000 C:\WINDOWS\System32\Drivers\Fips.SYS 45056 bytes (Microsoft Corporation, FIPS Crypto Driver)
0xBA308000 C:\WINDOWS\system32\DRIVERS\imapi.sys 45056 bytes (Microsoft Corporation, IMAPI Kernel Driver)
0xBA0B8000 MountMgr.sys 45056 bytes (Microsoft Corporation, Mount Manager)
0xBA138000 C:\WINDOWS\system32\DRIVERS\raspppoe.sys 45056 bytes (Microsoft Corporation, RAS PPPoE mini-port/call-manager driver)
0xBA0A8000 isapnp.sys 40960 bytes (Microsoft Corporation, PNP ISA Bus Driver)
0xBA188000 C:\WINDOWS\System32\Drivers\NDProxy.SYS 40960 bytes (Microsoft Corporation, NDIS Proxy)
0xBA168000 C:\WINDOWS\system32\DRIVERS\termdd.sys 40960 bytes (Microsoft Corporation, Terminal Server Driver)
0xBA0D8000 disk.sys 36864 bytes (Microsoft Corporation, PnP Disk Driver)
0xBA1D8000 C:\WINDOWS\system32\DRIVERS\HIDCLASS.SYS 36864 bytes (Microsoft Corporation, Hid Class Library)
0xBA2E8000 C:\WINDOWS\system32\DRIVERS\intelppm.sys 36864 bytes (Microsoft Corporation, Processor Device Driver)
0xBA158000 C:\WINDOWS\system32\DRIVERS\msgpc.sys 36864 bytes (Microsoft Corporation, MS General Packet Classifier)
0xBA1F8000 C:\WINDOWS\system32\DRIVERS\netbios.sys 36864 bytes (Microsoft Corporation, NetBIOS interface driver)
0xA9865000 C:\WINDOWS\System32\Drivers\Normandy.SYS 36864 bytes (RKU Driver)
0xBA218000 C:\WINDOWS\system32\DRIVERS\wanarp.sys 36864 bytes (Microsoft Corporation, MS Remote Access and Routing ARP Driver)
0xBA480000 C:\WINDOWS\System32\Drivers\Npfs.SYS 32768 bytes (Microsoft Corporation, NPFS Driver)
0xBA3F0000 C:\WINDOWS\system32\DRIVERS\usbehci.sys 32768 bytes (Microsoft Corporation, EHCI eUSB Miniport Driver)
0xBA3F8000 C:\WINDOWS\system32\DRIVERS\fdc.sys 28672 bytes (Microsoft Corporation, Floppy Disk Controller Driver)
0xBA460000 C:\WINDOWS\system32\DRIVERS\HIDPARSE.SYS 28672 bytes (Microsoft Corporation, Hid Parsing Library)
0xBA328000 C:\WINDOWS\system32\DRIVERS\PCIIDEX.SYS 28672 bytes (Microsoft Corporation, PCI IDE Bus Driver Extension)
0xBA400000 C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys 24576 bytes (GEAR Software Inc., CD DVD Filter)
0xBA420000 C:\WINDOWS\system32\DRIVERS\kbdclass.sys 24576 bytes (Microsoft Corporation, Keyboard Class Driver)
0xBA428000 C:\WINDOWS\system32\DRIVERS\mouclass.sys 24576 bytes (Microsoft Corporation, Mouse Class Driver)
0xBA3D8000 c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{5D713840-E7D1-4987-8448-11EED78CA15A}\MpKsl32f1b2fa.sys 24576 bytes (Microsoft Corporation, KSLDriver)
0xBA3E8000 C:\WINDOWS\system32\DRIVERS\usbuhci.sys 24576 bytes (Microsoft Corporation, UHCI USB Miniport Driver)
0xBA470000 C:\WINDOWS\System32\drivers\vga.sys 24576 bytes (Microsoft Corporation, VGA/Super VGA Video Driver)
0xBA438000 C:\WINDOWS\system32\DRIVERS\flpydisk.sys 20480 bytes (Microsoft Corporation, Floppy Driver)
0xBA478000 C:\WINDOWS\System32\Drivers\Msfs.SYS 20480 bytes (Microsoft Corporation, Mailslot driver)
0xBA430000 C:\WINDOWS\system32\DRIVERS\omci.sys 20480 bytes (Dell Inc, OMCI Device Driver)
0xBA330000 PartMgr.sys 20480 bytes (Microsoft Corporation, Partition Manager)
0xBA410000 C:\WINDOWS\system32\DRIVERS\ptilink.sys 20480 bytes (Parallel Technologies, Inc., Parallel Technologies DirectParallel IO Library)
0xBA418000 C:\WINDOWS\system32\DRIVERS\raspti.sys 20480 bytes (Microsoft Corporation, PTI DirectParallel® mini-port/call-manager driver)
0xBA408000 C:\WINDOWS\system32\DRIVERS\TDI.SYS 20480 bytes (Microsoft Corporation, TDI Wrapper)
0xBA490000 C:\WINDOWS\System32\watchdog.sys 20480 bytes (Microsoft Corporation, Watchdog Driver)
0xB9BA1000 C:\WINDOWS\system32\DRIVERS\kbdhid.sys 16384 bytes (Microsoft Corporation, HID Mouse Filter Driver)
0xBA5A4000 C:\WINDOWS\system32\DRIVERS\mssmbios.sys 16384 bytes (Microsoft Corporation, System Management BIOS Driver)
0xA8FF0000 C:\WINDOWS\system32\DRIVERS\ndisuio.sys 16384 bytes (Microsoft Corporation, NDIS User mode I/O Driver)
0xBA57C000 C:\WINDOWS\system32\DRIVERS\serenum.sys 16384 bytes (Microsoft Corporation, Serial Port Enumerator)
0xBA4B8000 C:\WINDOWS\system32\BOOTVID.dll 12288 bytes (Microsoft Corporation, VGA Boot Driver)
0xA9A2B000 C:\WINDOWS\System32\drivers\Dxapi.sys 12288 bytes (Microsoft Corporation, DirectX API Driver)
0xBA55C000 C:\WINDOWS\system32\DRIVERS\hidusb.sys 12288 bytes (Microsoft Corporation, USB Miniport Driver for Input Devices)
0xBA54C000 C:\WINDOWS\System32\Drivers\i2omgmt.SYS 12288 bytes (Microsoft Corporation, I2O Utility Filter)
0xB9BA9000 C:\WINDOWS\system32\DRIVERS\mouhid.sys 12288 bytes (Microsoft Corporation, HID Mouse Filter Driver)
0xBA584000 C:\WINDOWS\system32\DRIVERS\ndistapi.sys 12288 bytes (Microsoft Corporation, NDIS 3.0 connection wrapper driver)
0xA89CC000 C:\WINDOWS\system32\drivers\pdihwctl.sys 12288 bytes (Portrait Displays, Inc., PdiHwCtl NT kernel-mode driver)
0xBA564000 C:\WINDOWS\system32\DRIVERS\rasacd.sys 12288 bytes (Microsoft Corporation, RAS Automatic Connection Driver)
0xBA5F4000 C:\WINDOWS\System32\Drivers\Beep.SYS 8192 bytes (Microsoft Corporation, BEEP Driver)
0xBA5AE000 dmload.sys 8192 bytes (Microsoft Corp., Veritas Software., NT Disk Manager Startup Driver)
0xBA5FC000 C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS 8192 bytes
0xBA5F2000 C:\WINDOWS\System32\Drivers\Fs_Rec.SYS 8192 bytes (Microsoft Corporation, File System Recognizer Driver)
0xBA5AC000 intelide.sys 8192 bytes (Microsoft Corporation, Intel PCI IDE Driver)
0xBA5A8000 C:\WINDOWS\system32\KDCOM.DLL 8192 bytes (Microsoft Corporation, Kernel Debugger HW Extension DLL)
0xBA5F6000 C:\WINDOWS\System32\Drivers\mnmdd.SYS 8192 bytes (Microsoft Corporation, Frame buffer simulator)
0xBA5F8000 C:\WINDOWS\System32\DRIVERS\RDPCDD.sys 8192 bytes (Microsoft Corporation, RDP Miniport)
0xBA5CC000 C:\WINDOWS\system32\DRIVERS\swenum.sys 8192 bytes (Microsoft Corporation, Plug and Play Software Device Enumerator)
0xBA5D0000 C:\WINDOWS\system32\DRIVERS\USBD.SYS 8192 bytes (Microsoft Corporation, Universal Serial Bus Driver)
0xBA5AA000 C:\WINDOWS\system32\DRIVERS\WMILIB.SYS 8192 bytes (Microsoft Corporation, WMILIB WMI support library Dll)
0xBA718000 C:\WINDOWS\system32\DRIVERS\audstub.sys 4096 bytes (Microsoft Corporation, AudStub Driver)
0xBA7EA000 C:\WINDOWS\System32\drivers\dxgthk.sys 4096 bytes (Microsoft Corporation, DirectX Graphics Driver Thunk)
0xBA7A7000 C:\WINDOWS\System32\Drivers\Null.SYS 4096 bytes (Microsoft Corporation, NULL Driver)
0xBA670000 pciide.sys 4096 bytes (Microsoft Corporation, Generic PCI IDE Bus Driver)
==============================================
>Stealth
==============================================
0x15B20000 Hidden Image-->ICSharpCode.SharpZipLib.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 135168 bytes
0x03F40000 Hidden Image-->SHDocVw.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 143360 bytes
0x012A0000 Hidden Image-->wsResources.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 151552 bytes
0x13770000 Hidden Image-->wsResources.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 151552 bytes
0x144F0000 Hidden Image-->System.XML.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 2060288 bytes
0x14BC0000 Hidden Image-->System.Messaging.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 266240 bytes
0x00D60000 Hidden Image-->RDEC_Error.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 28672 bytes
0x0F730000 Hidden Image-->IIEHost.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 28672 bytes
0x0F6F0000 Hidden Image-->AdpStyleManager.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 28672 bytes
0x10A80000 Hidden Image-->Accessibility.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 28672 bytes
0x14320000 Hidden Image-->RDEC_Error.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 28672 bytes
0x10260000 Hidden Image-->System.Data.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 2961408 bytes
0x10C10000 Hidden Image-->System.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 3190784 bytes
0x0F620000 Hidden Image-->AdpDNUtil.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 36864 bytes
0x14B60000 Hidden Image-->AdpDNUtil.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 36864 bytes
0x15AC0000 Hidden Image-->System.Management.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 380928 bytes
0x14C80000 Hidden Image-->System.DirectoryServices.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 413696 bytes
0x143A0000 Hidden Image-->System.configuration.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 438272 bytes
0x0F300000 Hidden Image-->EOAPI_http.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 45056 bytes
0x10BF0000 Hidden Image-->EOAPI_http.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 45056 bytes
0x117F0000 Hidden Image-->System.Windows.Forms.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 5033984 bytes
0x121D0000 Hidden Image-->System.Web.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 5255168 bytes
0x10980000 Hidden Image-->wsMenu.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 53248 bytes
0x142C0000 Hidden Image-->wsLauncher.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 53248 bytes
0x14D80000 Hidden Image-->ApplicationMessaging.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 53248 bytes
0x109D0000 Hidden Image-->System.Drawing.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 634880 bytes
0x15F90000 Hidden Image-->jabber-net.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 675840 bytes
0x03680000 Hidden Image-->Infragistics2.Win.UltraWinDock.v6.2.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 708608 bytes
0x12F90000 Hidden Image-->Microsoft.mshtml.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 8015872 bytes
0x0FFE0000 Hidden Image-->IEHost.dll [ EPROCESS 0x89E159F0 ] PID: 1020, 86016 bytes



OTL Report:


OTL logfile created on: 5/25/2011 9:26:08 AM - Run 1
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Documents and Settings\John Baloga\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.99 Gb Total Physical Memory | 1.27 Gb Available Physical Memory | 63.78% Memory free
2.58 Gb Paging File | 2.00 Gb Available in Paging File | 77.54% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.46 Gb Total Space | 46.27 Gb Free Space | 62.14% Space Free | Partition Type: NTFS

Computer Name: D82V2V91 | User Name: John Baloga | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/05/25 09:25:02 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\John Baloga\Desktop\OTL.exe
PRC - [2011/04/29 16:12:28 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/11/30 13:20:36 | 000,997,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2010/11/11 12:26:40 | 000,011,736 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
PRC - [2010/03/01 09:28:14 | 000,282,624 | ---- | M] (ADP) -- C:\Program Files\Adp\ws2000\ws2000.exe
PRC - [2009/08/21 14:37:50 | 000,206,120 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\smartagent\bin\sprtsvc.exe
PRC - [2009/08/21 14:37:42 | 000,185,640 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\smartagent\bin\tgsrvc.exe
PRC - [2008/06/23 13:13:14 | 001,619,256 | ---- | M] (Seagull Software Systems, Inc.) -- C:\Program Files\Adp\webSuite TE\bzvt.exe
PRC - [2008/04/23 15:27:56 | 000,132,680 | ---- | M] () -- C:\Program Files\Adp\webSuite TE\BZVBA.EXE
PRC - [2008/04/13 20:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004/02/13 11:47:02 | 000,155,648 | ---- | M] (Dell Inc) -- C:\Program Files\Dell\OpenManage\Client\Iap.exe
PRC - [2003/05/15 02:19:50 | 000,217,193 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe


========== Modules (SafeList) ==========

MOD - [2011/05/25 09:25:02 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\John Baloga\Desktop\OTL.exe
MOD - [2010/08/23 12:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (GoToMyPC)
SRV - [2010/11/11 12:26:40 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
SRV - [2009/08/21 14:37:54 | 000,386,424 | ---- | M] (SupportSoft, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\supportsoft\bin\ssrc.exe -- (SupportSoft RemoteAssist)
SRV - [2009/08/21 14:37:50 | 000,206,120 | ---- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\smartagent\bin\sprtsvc.exe -- (sprtsvc_smartagent) SupportSoft Sprocket Service (smartagent)
SRV - [2009/08/21 14:37:42 | 000,185,640 | ---- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\smartagent\bin\tgsrvc.exe -- (tgsrvc_smartagent) SupportSoft Repair Service (smartagent)
SRV - [2004/02/13 11:47:02 | 000,155,648 | ---- | M] (Dell Inc) [Auto | Running] -- C:\Program Files\Dell\OpenManage\Client\Iap.exe -- (Iap)


========== Driver Services (SafeList) ==========

DRV - [2011/05/25 01:51:44 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{5D713840-E7D1-4987-8448-11EED78CA15A}\MpKsl32f1b2fa.sys -- (MpKsl32f1b2fa)
DRV - [2010/12/15 00:06:04 | 000,128,512 | ---- | M] (HTC Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\htcusbnet.sys -- (htcusbnet)
DRV - [2009/10/22 13:54:18 | 000,037,392 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\79834012.sys -- (79834012)
DRV - [2009/10/09 23:31:10 | 000,315,408 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\7983401.sys -- (setup_9.0.0.722_24.05.2011_22-14drv)
DRV - [2009/09/25 17:59:42 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\79834011.sys -- (79834011)
DRV - [2008/02/29 03:13:24 | 000,036,880 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2008/02/29 03:13:16 | 000,035,344 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2006/05/11 17:14:40 | 000,014,416 | ---- | M] (Portrait Displays, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\pdihwctl.sys -- (PDIHWCTL)
DRV - [2005/08/17 07:41:08 | 001,022,040 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2004/02/13 11:46:00 | 000,017,153 | ---- | M] (Dell Inc) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\omci.sys -- (omci)
DRV - [2003/11/27 08:49:46 | 000,044,344 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EyeOneDp.sys -- (eyeonedp)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Wikipedia (Eng)"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official"
FF - prefs.js..extensions.enabledItems: exif_viewer@mozilla.doslash.org:1.60
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/04/29 16:12:39 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/29 16:12:39 | 000,000,000 | ---D | M]

[2008/09/05 13:05:04 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\John Baloga\Application Data\Mozilla\Extensions
[2011/05/24 09:38:43 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\John Baloga\Application Data\Mozilla\Firefox\Profiles\qfwn3oc9.default\extensions
[2010/04/27 11:29:26 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\John Baloga\Application Data\Mozilla\Firefox\Profiles\qfwn3oc9.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/02/18 18:46:25 | 000,000,000 | ---D | M] ("Exif Viewer") -- C:\Documents and Settings\John Baloga\Application Data\Mozilla\Firefox\Profiles\qfwn3oc9.default\extensions\exif_viewer@mozilla.doslash.org
[2008/05/28 09:29:24 | 000,001,032 | ---- | M] () -- C:\Documents and Settings\John Baloga\Application Data\Mozilla\Firefox\Profiles\qfwn3oc9.default\searchplugins\wikipedia-eng.xml
[2011/05/24 09:38:43 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010/09/22 16:22:17 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/09/22 16:22:01 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2010/09/22 16:21:59 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2003/01/15 20:39:16 | 000,036,864 | ---- | M] (WildTangent) -- C:\Program Files\Mozilla Firefox\plugins\npWTHost.dll

O1 HOSTS File: ([2009/02/07 16:00:23 | 000,000,776 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 207.186.27.145 smartagent.ds.adp.com
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (AcroIEToolbarHelper Class) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O3 - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..\Toolbar\ShellBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O3 - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [MP10_EnsureFileVer] C:\WINDOWS\inf\unregmp2.exe (Microsoft Corporation)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\WINDOWS\System32\cmd.exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe (Adobe Systems Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk = File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logo Calibration Loader.lnk = C:\Program Files\GretagMacbeth\i1\Eye-One Match 3\CalibrationLoader\CalibrationLoader.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ProfileReminder.lnk = C:\Program Files\GretagMacbeth\i1\Eye-One Match 3\ProfileReminder.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG)
O4 - Startup: C:\Documents and Settings\John Baloga\Start Menu\Programs\Startup\setup_9.0.0.722_24.05.2011_22-14.lnk = C:\Documents and Settings\John Baloga\Desktop\Virus Removal Tool\setup_9.0.0.722_24.05.2011_22-14\startup.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - File not found
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - File not found
O15 - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..Trusted Domains: adp.com ([*.ds] http in Trusted sites)
O15 - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..Trusted Domains: adp.com ([*.ds] https in Trusted sites)
O15 - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..Trusted Domains: adpcrm.net ([kenpollock] https in Trusted sites)
O15 - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..Trusted Domains: adpremotesupport.com ([]http in Trusted sites)
O15 - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..Trusted Domains: adpremotesupport.com ([]https in Trusted sites)
O15 - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..Trusted Domains: jmagroup.com ([www] http in Trusted sites)
O15 - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..Trusted Ranges: Range72 ([*] in Trusted sites)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://www.apple.com/qtactivex/qtplugin.cab (QuickTime Object)
O16 - DPF: {4E8AEBE0-31A6-43B0-A429-748DB14A70A0} file://D:\autorun\PC-CONFIG-CHECK.CAB (SysEngW2k Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553635000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.)
O16 - DPF: Launcher http://dealer.jmagroup.com/jmfsdpweb/content/cabs/launcher.cab (Reg Error: Key error.)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL) - C:\Program Files\Google\GOOGLE~4\GOEC62~1.DLL ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\GoToMyPC: DllName - C:\Program Files\Citrix\GoToMyPC\G2WinLogon.dll - File not found
O24 - Desktop WallPaper: C:\Documents and Settings\John Baloga\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\John Baloga\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/11 18:15:00 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{1b84c070-2859-11e0-95af-00167600585f}\Shell\AutoRun\command - "" = E:\Setup_FlipShare.exe
O33 - MountPoints2\{1b84c070-2859-11e0-95af-00167600585f}\Shell\Setup FlipShare\command - "" = E:\Setup_FlipShare.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/05/25 09:24:56 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\John Baloga\Desktop\OTL.exe
[2011/05/24 16:53:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\John Baloga\Application Data\ElevatedDiagnostics
[2011/05/24 16:52:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows PowerShell 1.0
[2011/05/24 16:52:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\windowspowershell
[2011/05/24 15:21:14 | 000,315,408 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\7983401.sys
[2011/05/24 15:21:14 | 000,128,016 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\79834011.sys
[2011/05/24 15:21:14 | 000,037,392 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\79834012.sys
[2011/05/24 15:21:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\John Baloga\Desktop\Virus Removal Tool
[2011/05/24 15:19:14 | 120,291,784 | ---- | C] ( ) -- C:\Documents and Settings\John Baloga\Desktop\setup_9.0.0.722_24.05.2011_22-14.exe
[2011/05/24 14:34:09 | 000,222,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2011/05/24 14:30:55 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2011/05/24 13:14:55 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\John Baloga\Recent
[2011/05/16 09:14:14 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011/05/04 14:32:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\John Baloga\Application Data\vlc
[2011/05/04 14:31:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Verizon
[2011/05/04 14:31:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\John Baloga\Local Settings\Application Data\V CAST Media Manager
[2011/05/04 14:30:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\ffdshow
[2011/05/04 14:30:47 | 000,060,273 | ---- | C] (Open Source Software community project) -- C:\WINDOWS\System32\pthreadGC2.dll
[2011/05/04 14:30:46 | 000,000,000 | ---D | C] -- C:\Program Files\ffdshow
[2011/05/04 14:03:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\John Baloga\Desktop\Music
[2011/05/04 13:54:19 | 000,128,512 | ---- | C] (HTC Corporation) -- C:\WINDOWS\System32\drivers\htcusbnet.sys
[2011/05/04 13:53:28 | 000,000,000 | ---D | C] -- C:\Program Files\HTC
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/05/25 09:28:15 | 000,000,944 | ---- | M] () -- C:\WINDOWS\entpack.ini
[2011/05/25 09:25:02 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\John Baloga\Desktop\OTL.exe
[2011/05/25 09:17:00 | 000,133,632 | ---- | M] () -- C:\Documents and Settings\John Baloga\Desktop\RKUnhookerLE.EXE
[2011/05/25 01:50:42 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2011/05/24 17:19:42 | 000,002,245 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\w.e.b.Suite.lnk
[2011/05/24 16:57:30 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/05/24 16:57:19 | 000,000,868 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2011/05/24 16:57:06 | 000,000,236 | ---- | M] () -- C:\WINDOWS\tasks\OGALogon.job
[2011/05/24 16:56:44 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/05/24 16:56:24 | 2137,149,440 | -HS- | M] () -- C:\hiberfil.sys
[2011/05/24 16:21:14 | 000,001,295 | ---- | M] () -- C:\Documents and Settings\John Baloga\My Documents\xp_exe_fix.reg
[2011/05/24 15:24:08 | 000,002,260 | ---- | M] () -- C:\Documents and Settings\John Baloga\Start Menu\Programs\Startup\setup_9.0.0.722_24.05.2011_22-14.lnk
[2011/05/24 15:18:06 | 120,291,784 | ---- | M] ( ) -- C:\Documents and Settings\John Baloga\Desktop\setup_9.0.0.722_24.05.2011_22-14.exe
[2011/05/24 14:31:32 | 000,001,945 | ---- | M] () -- C:\WINDOWS\epplauncher.mif
[2011/05/24 14:30:41 | 000,789,542 | ---- | M] () -- C:\Documents and Settings\John Baloga\Desktop\AVGInstLog.cab
[2011/05/24 14:05:00 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winspool.drv
[2011/05/24 13:54:20 | 000,038,508 | ---- | M] () -- C:\Documents and Settings\John Baloga\My Documents\cc_20110524_1353.reg
[2011/05/24 13:20:14 | 001,318,856 | ---- | M] () -- C:\Documents and Settings\John Baloga\My Documents\cc_20110524_1319.reg
[2011/05/24 11:45:08 | 000,054,016 | ---- | M] () -- C:\WINDOWS\System32\drivers\cjutyxg.sys
[2011/05/21 16:24:08 | 000,000,520 | ---- | M] () -- C:\Documents and Settings\John Baloga\My Documents\spider.sav
[2011/05/21 13:39:13 | 000,870,128 | ---- | M] () -- C:\Documents and Settings\John Baloga\Application Data\mcs.rma
[2011/05/21 13:39:13 | 000,000,004 | ---- | M] () -- C:\Documents and Settings\John Baloga\Application Data\C03878
[2011/05/21 13:38:55 | 000,000,648 | ---- | M] () -- C:\Documents and Settings\John Baloga\Application Data\Microsoft\Internet Explorer\Quick Launch\Rhapsody.lnk
[2011/05/21 13:38:55 | 000,000,630 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Rhapsody.lnk
[2011/05/18 13:12:54 | 000,445,836 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/05/18 13:12:54 | 000,073,042 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/05/16 09:14:14 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/05/25 09:16:58 | 000,133,632 | ---- | C] () -- C:\Documents and Settings\John Baloga\Desktop\RKUnhookerLE.EXE
[2011/05/24 16:21:14 | 000,001,295 | ---- | C] () -- C:\Documents and Settings\John Baloga\My Documents\xp_exe_fix.reg
[2011/05/24 16:03:05 | 2137,149,440 | -HS- | C] () -- C:\hiberfil.sys
[2011/05/24 15:24:08 | 000,002,260 | ---- | C] () -- C:\Documents and Settings\John Baloga\Start Menu\Programs\Startup\setup_9.0.0.722_24.05.2011_22-14.lnk
[2011/05/24 14:36:24 | 000,000,424 | -H-- | C] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2011/05/24 14:31:32 | 000,001,945 | ---- | C] () -- C:\WINDOWS\epplauncher.mif
[2011/05/24 14:31:13 | 000,001,680 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Security Essentials.lnk
[2011/05/24 14:30:41 | 000,789,542 | ---- | C] () -- C:\Documents and Settings\John Baloga\Desktop\AVGInstLog.cab
[2011/05/24 13:54:00 | 000,038,508 | ---- | C] () -- C:\Documents and Settings\John Baloga\My Documents\cc_20110524_1353.reg
[2011/05/24 13:20:03 | 001,318,856 | ---- | C] () -- C:\Documents and Settings\John Baloga\My Documents\cc_20110524_1319.reg
[2011/05/24 11:45:08 | 000,054,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\cjutyxg.sys
[2011/05/21 13:38:55 | 000,000,630 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Rhapsody.lnk
[2011/05/04 14:30:48 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011/03/30 11:02:09 | 000,000,426 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2011/03/30 11:02:00 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brmx2001.ini
[2011/03/30 11:01:54 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\BRTCPCON.DLL
[2011/03/30 11:01:54 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\BRLMW03A.INI
[2011/03/30 11:01:53 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\BRADM08A.DAT
[2011/03/30 11:00:35 | 000,000,074 | ---- | C] () -- C:\WINDOWS\Brownie.ini
[2010/11/30 13:43:24 | 000,000,014 | ---- | C] () -- C:\WINDOWS\hpmssnpjt.ini
[2009/09/01 11:12:10 | 000,000,197 | ---- | C] () -- C:\WINDOWS\i1Share.ini
[2009/09/01 11:10:48 | 000,044,344 | ---- | C] () -- C:\WINDOWS\System32\drivers\EyeOneDp.sys
[2009/09/01 11:09:56 | 000,000,030 | ---- | C] () -- C:\WINDOWS\AutoRun.ini
[2009/08/03 16:07:42 | 000,403,816 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll
[2009/08/03 16:07:42 | 000,230,768 | ---- | C] () -- C:\WINDOWS\System32\OGAEXEC.exe
[2009/03/31 17:38:57 | 000,000,025 | -H-- | C] () -- C:\WINDOWS\vbmgsext.ini
[2009/03/31 17:38:57 | 000,000,025 | -H-- | C] () -- C:\WINDOWS\vbmgsent.ini
[2009/03/16 12:10:33 | 000,000,685 | ---- | C] () -- C:\WINDOWS\System32\hppapr07.dat
[2008/12/12 18:23:51 | 000,870,128 | ---- | C] () -- C:\Documents and Settings\John Baloga\Application Data\mcs.rma
[2008/12/12 18:23:51 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\John Baloga\Application Data\C03878
[2008/12/11 18:33:29 | 000,004,047 | ---- | C] () -- C:\WINDOWS\SigPlus.ini
[2008/05/27 11:59:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2008/04/30 10:41:31 | 000,003,584 | ---- | C] () -- C:\Documents and Settings\John Baloga\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/10/06 16:56:45 | 000,000,445 | ---- | C] () -- C:\WINDOWS\EntPack.dat
[2007/10/03 15:50:13 | 000,000,000 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2007/09/10 17:50:51 | 000,000,944 | ---- | C] () -- C:\WINDOWS\entpack.ini
[2007/09/07 15:19:00 | 000,271,264 | ---- | C] () -- C:\WINDOWS\VBRUN100.DLL
[2007/09/07 15:19:00 | 000,019,200 | ---- | C] () -- C:\WINDOWS\WEPUTIL.DLL
[2007/01/13 12:22:19 | 000,001,392 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2006/05/08 11:52:43 | 000,000,134 | ---- | C] () -- C:\Documents and Settings\John Baloga\Local Settings\Application Data\fusioncache.dat
[2006/04/20 12:27:25 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006/04/20 12:24:26 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/04/20 12:01:48 | 000,049,152 | ---- | C] () -- C:\WINDOWS\setpwrcg.exe
[2006/04/20 12:01:36 | 000,000,390 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2005/01/06 19:54:08 | 000,081,981 | ---- | C] () -- C:\WINDOWS\s9sil.exe
[2004/08/11 18:24:19 | 000,000,791 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/08/11 18:19:30 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2004/08/11 18:12:14 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2004/08/11 18:11:31 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2004/08/11 18:07:24 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2004/08/11 18:06:43 | 000,178,648 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2004/08/11 18:00:30 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/11 18:00:28 | 000,445,836 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/11 18:00:28 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/11 18:00:28 | 000,073,042 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/11 18:00:28 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/11 18:00:27 | 000,004,627 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/11 18:00:26 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/08/11 18:00:24 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2004/08/11 18:00:19 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/11 18:00:19 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/11 18:00:12 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/11 18:00:04 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2003/01/07 16:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI

========== Alternate Data Streams ==========

@Alternate Data Stream - 88 bytes -> C:\WINDOWS\System32\winspool.drv.old2.drv:SummaryInformation

< End of report >



Extras:

OTL Extras logfile created on: 5/25/2011 9:26:08 AM - Run 1
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Documents and Settings\John Baloga\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.99 Gb Total Physical Memory | 1.27 Gb Available Physical Memory | 63.78% Memory free
2.58 Gb Paging File | 2.00 Gb Available in Paging File | 77.54% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.46 Gb Total Space | 46.27 Gb Free Space | 62.14% Space Free | Partition Type: NTFS

Computer Name: D82V2V91 | User Name: John Baloga | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\ADP\webSuite View\Client 1.43\SW9C.EXE" = C:\Program Files\ADP\webSuite View\Client 1.43\SW9C.EXE:*:Enabled:WinJa Windows Client -- (Seagull Business Software b.v.)
"" =
"C:\Program Files\Common Files\supportsoft\bin\sprtlisten.exe" = C:\Program Files\Common Files\supportsoft\bin\sprtlisten.exe:*:Enabled:sprtlisten.exe -- (SupportSoft, Inc.)
"C:\Program Files\Common Files\supportsoft\bin\ssrc.exe" = C:\Program Files\Common Files\supportsoft\bin\ssrc.exe:*:Enabled:ssrc.exe -- (SupportSoft, Inc.)
"C:\Program Files\smartagent\agent\bin\bcont.exe" = C:\Program Files\smartagent\agent\bin\bcont.exe:*:Enabled:bcont.exe -- (SupportSoft, Inc.)
"C:\Program Files\smartagent\agent\bin\bcont_nm.exe" = C:\Program Files\smartagent\agent\bin\bcont_nm.exe:*:Enabled:bcont_nm.exe -- (SupportSoft, Inc.)
"C:\Program Files\smartagent\bin\sprtcmd.exe" = C:\Program Files\smartagent\bin\sprtcmd.exe:*:Enabled:sprtcmd.exe -- (SupportSoft, Inc.)
"C:\Program Files\smartagent\bin\sprtsvc.exe" = C:\Program Files\smartagent\bin\sprtsvc.exe:*:Enabled:sprtsvc.exe -- (SupportSoft, Inc.)
"C:\Program Files\smartagent\bin\tgshell.exe" = C:\Program Files\smartagent\bin\tgshell.exe:*:Enabled:tgshell.exe -- (SupportSoft, Inc.)
"C:\Program Files\smartagent\bin\tgsrvc.exe" = C:\Program Files\smartagent\bin\tgsrvc.exe:*:Enabled:tgsrvc.exe -- (SupportSoft, Inc.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Grisoft\AVG7\avginet.exe" = C:\Program Files\Grisoft\AVG7\avginet.exe:*:Enabled:avginet.exe
"C:\Program Files\Grisoft\AVG7\avgamsvr.exe" = C:\Program Files\Grisoft\AVG7\avgamsvr.exe:*:Enabled:avgamsvr.exe
"C:\Program Files\Grisoft\AVG7\avgcc.exe" = C:\Program Files\Grisoft\AVG7\avgcc.exe:*:Enabled:avgcc.exe
"C:\Program Files\PokerTH\pokerth.exe" = C:\Program Files\PokerTH\pokerth.exe:*:Disabled:pokerth
"C:\Program Files\Yahoo! Games\Tradewinds\tradewinds.exe" = C:\Program Files\Yahoo! Games\Tradewinds\tradewinds.exe:*:Enabled:tradewinds
"C:\Program Files\Adp\webSuite View\Client 4.5.193.0\SW9C.EXE" = C:\Program Files\Adp\webSuite View\Client 4.5.193.0\SW9C.EXE:*:Enabled:w.e.b.Suite View Client 4.5.193.0 -- (Seagull Software)
"C:\Program Files\Adp\webSuite View\Client 4.5.222.0\SW9C.EXE" = C:\Program Files\Adp\webSuite View\Client 4.5.222.0\SW9C.EXE:*:Enabled:w.e.b.Suite View Client -- (ADP)
"C:\Program Files\Java\jre1.6.0_07\bin\javaw.exe" = C:\Program Files\Java\jre1.6.0_07\bin\javaw.exe:*:Enabled:Java™ Platform SE binary -- (Sun Microsystems, Inc.)
"C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Disabled:Firefox -- (Mozilla Corporation)
"C:\Program Files\AVG\AVG8\avgupd.exe" = C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe
"C:\Program Files\AVG\AVG8\avgnsx.exe" = C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe
"C:\Documents and Settings\John Baloga\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe" = C:\Documents and Settings\John Baloga\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe:*:Enabled:Octoshape add-in for Adobe Flash Player
"" =
"C:\Program Files\Common Files\supportsoft\bin\sprtlisten.exe" = C:\Program Files\Common Files\supportsoft\bin\sprtlisten.exe:*:Enabled:sprtlisten.exe -- (SupportSoft, Inc.)
"C:\Program Files\Common Files\supportsoft\bin\ssrc.exe" = C:\Program Files\Common Files\supportsoft\bin\ssrc.exe:*:Enabled:ssrc.exe -- (SupportSoft, Inc.)
"C:\Program Files\smartagent\agent\bin\bcont.exe" = C:\Program Files\smartagent\agent\bin\bcont.exe:*:Enabled:bcont.exe -- (SupportSoft, Inc.)
"C:\Program Files\smartagent\agent\bin\bcont_nm.exe" = C:\Program Files\smartagent\agent\bin\bcont_nm.exe:*:Enabled:bcont_nm.exe -- (SupportSoft, Inc.)
"C:\Program Files\smartagent\bin\sprtcmd.exe" = C:\Program Files\smartagent\bin\sprtcmd.exe:*:Enabled:sprtcmd.exe -- (SupportSoft, Inc.)
"C:\Program Files\smartagent\bin\sprtsvc.exe" = C:\Program Files\smartagent\bin\sprtsvc.exe:*:Enabled:sprtsvc.exe -- (SupportSoft, Inc.)
"C:\Program Files\smartagent\bin\tgshell.exe" = C:\Program Files\smartagent\bin\tgshell.exe:*:Enabled:tgshell.exe -- (SupportSoft, Inc.)
"C:\Program Files\smartagent\bin\tgsrvc.exe" = C:\Program Files\smartagent\bin\tgsrvc.exe:*:Enabled:tgsrvc.exe -- (SupportSoft, Inc.)
"C:\Program Files\AVG\AVG10\avgmfapx.exe" = C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:AVG Installer
"C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" = C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe:*:Enabled:Malwarebytes' Anti-Malware -- (Malwarebytes Corporation)
"C:\Program Files\AVG\AVG10\avgdiagex.exe" = C:\Program Files\AVG\AVG10\avgdiagex.exe:*:Enabled:AVG Diagnostics 2011
"C:\Program Files\AVG\AVG10\avgnsx.exe" = C:\Program Files\AVG\AVG10\avgnsx.exe:*:Enabled:Online Shield
"C:\Program Files\AVG\AVG10\avgemcx.exe" = C:\Program Files\AVG\AVG10\avgemcx.exe:*:Enabled:Personal E-mail Scanner


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00C0CC6D-9FCA-4FB5-9AA2-B84C3F92D1E3}" = w.e.b.Suite Terminal Emulator 3.6.676.0
"{019FC27F-D968-4854-9B20-431BD169BDF1}" = ApproveIt Web Server - Client Software
"{02816956-413B-4B28-AE98-42DFB8F14E7C}" = w.e.b.Suite View Client 4.5.222.0
"{0DEBB31B-6BD6-4A7F-AAA6-8E8837883513}" = w.e.b.Suite Terminal Emulator 4.1.3.967
"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
"{12345678-1234-1234-1234-123456789013}" = w.e.b.Suite 4.5 Managed Assemblies
"{1A4DA68B-3F53-49D6-8C96-B29F88206DB0}" = PR Parts Update 45
"{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}" = Google Earth
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 20
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{2B1197AC-B30A-4CE3-93D2-3DFE0E5875EE}" = PR Truck Update 45
"{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}" = Rhapsody Player Engine
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{3248F0A8-6813-11D6-A77B-00B0D0150090}" = J2SE Runtime Environment 5.0 Update 9
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java™ 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java™ 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3CF75B37-2164-4693-B125-AFE69F028762}" = w.e.b.Suite Terminal Emulator VBA 4.1.3.952
"{425625E5-EA6B-4C2A-9BCA-28087D3293BB}" = FC_PR_Service_Update_452
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D9888BB-4737-498C-BB5B-81CE48E32B90}" = PR CarInk Update 45
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{591003CF-8EBB-40D7-91EE-DBE1A80BFF5F}" = PR Sales Update 45
"{6061E918-18B4-4CFF-9D68-5E571BE2AFF7}" = ADPSecProfile
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6FFDFB77-F3A6-4A40-B7A8-0BC829738820}" = webSuite PC CONFIG CONTROL
"{7148F0A8-6813-11D6-A77B-00B0D0142030}" = Java 2 Runtime Environment, SE v1.4.2_03
"{73F1BDB7-11E1-11D5-9DC6-00C04F2FC33B}" = OMCI
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{774088D4-0777-4D78-904D-E435B318F5D2}" = Microsoft Antimalware
"{77A776C4-D10F-416D-88F0-53F2D9DCD9B3}" = Microsoft Security Client
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83F793B5-8BBF-42FD-A8A6-868CB3E2AAEA}" = Intel® PROSet for Wired Connections
"{84F1DE76-C48C-4281-87A0-CC9548D1E7F9}" = Rhapsody Player Engine
"{869D3AB4-7133-4FF7-97E9-D409250461DB}" = Brother MFC-8480DN
"{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Graphics Media Accelerator Driver
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{91130409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Basic Edition 2003
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9DD341CB-9263-4C29-885E-9DC83AF149D0}" = PR Parts Update 45
"{9DE3F260-B88E-42CE-90E7-73C78C37D95E}" = 32 Bit HP BiDi Channel Components Installer
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-0000-0000-0000-6028747ADE01}" = Adobe Acrobat - Reader 6.0.2 Update
"{AC76BA86-1033-0000-BA7E-000000000001}" = Adobe Acrobat 6.0 Standard
"{AC76BA86-7AD7-1033-7B44-A00000000001}" = Adobe Reader 6.0.1
"{AC76BA86-7AD7-1033-7B44-A70000000000}" = Adobe Reader 7.0.8
"{AC76BA86-7AD7-1033-7B44-A70900000002}" = Adobe Reader 7.0.9
"{AC76BA86-7AD7-1033-7B44-A81000000003}" = Adobe Reader 8.1.1
"{AC76BA86-7AD7-1033-7B44-A81200000003}" = Adobe Reader 8.1.2
"{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.7
"{AC76BA86-7AD7-1033-7B44-A82000000003}" = Adobe Reader 8.2.1
"{AFB85149-A6A9-4DE7-B9C3-5A1481E3156A}" = FC_PR_Service_Update_452
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{BBC5F17B-CDFE-48FC-AFD8-2D9D348394C8}" = PR Service Update 45
"{BBEADF53-1202-46AE-A2C3-E7F3223F9A35}" = ADP Software Install Agent
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C38157B0-790E-4B60-A4F0-48775526C85D}" = w.e.b.Suite2007 Preview
"{C5928069-1719-4DF3-AF60-45F6C2DAB55D}" = Atalasoft Components
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D4AE73BB-ABD7-4600-AEC0-107B5A3AD10B}" = PR Service Update 45
"{D56C89D8-5DA2-4281-B8E1-D805EE13400E}" = PR Accounting Update 45
"{D5DCC4B8-EC8B-46B0-ABB0-0EFE994EAF65}" = PR Sales Update 45
"{E47E0DE9-B8BA-424A-A715-8C559A5C89BD}" = FC_PR_Acct_Update_45
"{E4F3626E-1356-4315-BB58-6FE00B24009B}" = w.e.b.Suite Launch Application
"{EDAF13BC-2ADA-4491-BCA2-972522907138}" = w.e.b.Suite Terminal Emulator VBA Support
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{EED24D05-9227-43E5-A667-5CD9BB50347E}" = w.e.b.Suite View Client 1.43
"{F5EA972A-C0D7-4588-A5ED-965FB3EB740F}" = w.e.b.Suite View Client 4.5.193.0
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Amazon Kindle For PC" = Amazon Kindle For PC
"CCleaner" = CCleaner (remove only)
"Eye-One Diagnostics_is1" = Eye-One Diagnostics
"Eye-One Match_is1" = Eye-One Match 3.6.1
"Eye-One Share" = Eye-One Share
"ffdshow_is1" = ffdshow [rev 2527] [2008-12-19]
"Google Updater" = Google Updater
"HTC_WModemDriver" = WModem Driver Installer
"i1ColorPoint 1.0" = i1ColorPoint 1.0
"ie8" = Windows Internet Explorer 8
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox (3.6.17)" = Mozilla Firefox (3.6.17)
"Photodex Presenter" = Photodex Presenter
"PROSet" = Intel® PRO Network Connections Drivers
"Rhapsody" = Rhapsody
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wtwebdriver" = WildTangent Web Driver
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"YInstHelper" = Yahoo! Install Manager

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3668133107-3932268239-1591690752-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"GoToMeeting" = GoToMeeting/GoToWebinar 3.0.0.189
"Octoshape add-in for Adobe Flash Player" = Octoshape add-in for Adobe Flash Player

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 1/22/2011 7:17:10 PM | Computer Name = D82V2V91 | Source = Application Error | ID = 1000
Description = Faulting application , version 0.0.0.0, faulting module unknown, version
0.0.0.0, fault address 0x00000000.

Error - 3/25/2011 4:53:00 PM | Computer Name = D82V2V91 | Source = MsiInstaller | ID = 11706
Description = Product: Adobe Acrobat 6.0.1 Standard -- Error 1706.No valid source
could be found for product Adobe Acrobat 6.0.1 Standard. The Windows Installer
cannot continue.

Error - 3/25/2011 4:53:04 PM | Computer Name = D82V2V91 | Source = MsiInstaller | ID = 1024
Description = Product: Adobe Acrobat 6.0.1 Standard - Update '{B6F867E8-F092-4C5E-ACA0-F30547DC3874}'
could not be installed. Error code 1603. Windows Installer can create logs to help
troubleshoot issues with installing software packages. Use the following link for
instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127

Error - 3/31/2011 7:53:15 PM | Computer Name = D82V2V91 | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.2.4095, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 5/24/2011 2:26:28 PM | Computer Name = D82V2V91 | Source = MsiInstaller | ID = 11306
Description = SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2011 -- Error
1306. SA_Error1306: StandardAction(0xC007051A): Another application has exclusive
access to the file 'C:\Documents and Settings\All Users\Application Data\AVG10\Temp\file9514.tmp'.
Please shut down all other applications, then click Retry.

Error - 5/24/2011 2:30:07 PM | Computer Name = D82V2V91 | Source = MsiInstaller | ID = 10005
Description = SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2011 -- Error
27046. CA_Error27046: DriverInstallationFun(0x00000000): Driver installation failed

Error - 5/24/2011 2:31:22 PM | Computer Name = D82V2V91 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 0x80070003, P2 moac, P3 cachereset, P4 3.0.8107.0,
P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10 NIL.

Error - 5/24/2011 2:51:25 PM | Computer Name = D82V2V91 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 0, P2 moaccapability, P3 3.0.8107.0, P4
0, P5 0, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10 NIL.

Error - 5/24/2011 3:54:43 PM | Computer Name = D82V2V91 | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.2.4127, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 5/24/2011 5:09:34 PM | Computer Name = D82V2V91 | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.2.4127, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

[ System Events ]
Error - 5/24/2011 4:03:45 PM | Computer Name = D82V2V91 | Source = Service Control Manager | ID = 7023
Description = The Windows Firewall/Internet Connection Sharing (ICS) service terminated
with the following error: %%2

Error - 5/24/2011 4:24:36 PM | Computer Name = D82V2V91 | Source = Service Control Manager | ID = 7000
Description = The GoToMyPC service failed to start due to the following error: %%3

Error - 5/24/2011 4:24:36 PM | Computer Name = D82V2V91 | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2

Error - 5/24/2011 4:24:36 PM | Computer Name = D82V2V91 | Source = Service Control Manager | ID = 7023
Description = The Windows Firewall/Internet Connection Sharing (ICS) service terminated
with the following error: %%2

Error - 5/24/2011 4:34:31 PM | Computer Name = D82V2V91 | Source = Service Control Manager | ID = 7000
Description = The GoToMyPC service failed to start due to the following error: %%3

Error - 5/24/2011 4:34:31 PM | Computer Name = D82V2V91 | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2

Error - 5/24/2011 4:34:31 PM | Computer Name = D82V2V91 | Source = Service Control Manager | ID = 7023
Description = The Windows Firewall/Internet Connection Sharing (ICS) service terminated
with the following error: %%2

Error - 5/24/2011 4:57:21 PM | Computer Name = D82V2V91 | Source = Service Control Manager | ID = 7000
Description = The GoToMyPC service failed to start due to the following error: %%3

Error - 5/24/2011 4:57:21 PM | Computer Name = D82V2V91 | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2

Error - 5/24/2011 4:57:21 PM | Computer Name = D82V2V91 | Source = Service Control Manager | ID = 7023
Description = The Windows Firewall/Internet Connection Sharing (ICS) service terminated
with the following error: %%2


< End of report >

Hi!

OTL Fix

We need to run an OTL Fix

• Please reopen on your desktop.
  
• Copy and Paste the following code into the textbox.
  

  :Services
  :OTL
  SRV - File not found [Auto | Stopped] -- -- (GoToMyPC)
  IE - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
  O3 - HKU\S-1-5-21-3668133107-3932268239-1591690752-1006\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
  O4 - HKLM..\Run: [KernelFaultCheck] File not found
  O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - File not found
  O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - File not found
  O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab (Reg Error: Key error.)
  O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab (Reg Error: Key error.)
  O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.)
  O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
  O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
  O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553635000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.)
  O16 - DPF: Launcher http://dealer.jmagroup.com/jmfsdpweb/content/cabs/launcher.cab (Reg Error: Key error.)
  O20 - Winlogon\Notify\GoToMyPC: DllName - C:\Program Files\Citrix\GoToMyPC\G2WinLogon.dll - File not found
  O33 - MountPoints2\{1b84c070-2859-11e0-95af-00167600585f}\Shell\AutoRun\command - "" = E:\Setup_FlipShare.exe
  O33 - MountPoints2\{1b84c070-2859-11e0-95af-00167600585f}\Shell\Setup FlipShare\command - "" = E:\Setup_FlipShare.exe
  [2011/05/24 11:45:08 | 000,054,016 | ---- | M] () -- C:\WINDOWS\System32\drivers\cjutyxg.sys
  [2011/05/24 11:45:08 | 000,054,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\cjutyxg.sys
  
  :Reg
  
  :Files
  ipconfig /flushdns /c
  :Commands
  [purity]
  [resethosts]
  [CreateRestorePoint]
  [emptytemp]
  [EMPTYFLASH]
  

  
  
• Push
  
• OTL may ask to reboot the machine. Please do so if asked.
  
• Click the OK button.
  
• A report will open. Copy and Paste that report in your next reply.
  
• If the machine reboots, the log will be located at C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log, where mmddyyyy_hhmmss is the date of the tool run.

NEXT:



Malwarebytes' Anti-Malware

I see that you have Malwarebytes' Anti-Malware installed on your computer could you please do a scan using these settings:

• Open Malwarebytes' Anti-Malware
  
• Select the Update tab
  
• Click Check for Updates
  
• After the update have been completed, Select the Scanner tab.
  
• Select Perform quick scan, then click on Scan
  
• Leave the default options as it is and click on Start Scan
  
• When done, you will be prompted. Click OK, then click on Show Results
  
• Checked (ticked) all items and click on Remove Selected
  
• After it has removed the items, Notepad will open. Please post this log in your next reply. You can also find the log in the Logs tab. The bottom most log is the latest

Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.



NEXT:



What issues are you currently experiencing with your computer?

thank you, ST. The symptom is, whenever I open a new application I get an error message. I will take a moment and get a screen capture...



Here is the OTL log:

All processes killed
========== SERVICES/DRIVERS ==========
========== OTL ==========
Service GoToMyPC stopped successfully!
Service GoToMyPC deleted successfully!
Registry value HKEY_USERS\S-1-5-21-3668133107-3932268239-1591690752-1006\Software\Microsoft\Internet Explorer\URLSearchHooks\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3668133107-3932268239-1591690752-1006\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {D27CDB6E-AE6D-11CF-96B8-444553635000}
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\swflash.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553635000}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553635000}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D27CDB6E-AE6D-11CF-96B8-444553635000}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553635000}\ not found.
Starting removal of ActiveX control Launcher
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Launcher\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Launcher\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Launcher\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\GoToMyPC\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1b84c070-2859-11e0-95af-00167600585f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1b84c070-2859-11e0-95af-00167600585f}\ not found.
File E:\Setup_FlipShare.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1b84c070-2859-11e0-95af-00167600585f}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1b84c070-2859-11e0-95af-00167600585f}\ not found.
File E:\Setup_FlipShare.exe not found.
C:\WINDOWS\system32\drivers\cjutyxg.sys moved successfully.
File C:\WINDOWS\System32\drivers\cjutyxg.sys not found.
========== REGISTRY ==========
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Documents and Settings\John Baloga\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\John Baloga\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore point Set: OTL Restore Point (0)

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: All Users.WINDOWS

User: All Users.WINNT

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->Flash cache emptied: 82 bytes

User: John Baloga
->Temp folder emptied: 1336957602 bytes
->Temporary Internet Files folder emptied: 812669 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 96674701 bytes
->Flash cache emptied: 3521 bytes

User: LocalService
->Temp folder emptied: 3596 bytes
->Temporary Internet Files folder emptied: 205317 bytes

User: NetworkService
->Temp folder emptied: 37870 bytes
->Temporary Internet Files folder emptied: 194079 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 2577 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 328865649 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 104143630 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1,781.00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: All Users.WINDOWS

User: All Users.WINNT

User: Default User
->Flash cache emptied: 0 bytes

User: John Baloga
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.23.0 log created on 05252011_125158

Files\Folders moved on Reboot...
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WZ9B6Q3X\;spt=;slug=bc;slug=gamblingbust;slug=ap;path=2007;path=more;path=11;path=06;path=bc_gamblingbust_ap;file=index_html;dcove=d;sz=728x90;dcopt=ist;ptile=1;ord=238312183040[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WZ9B6Q3X\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_1_html;dcove=d;sz=222x53;dcopt=ist;ptile=1;ord=4754606[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WZ9B6Q3X\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_4_html;dcove=d;sz=300x250,300x600;ptile=2;ord=32811501[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WZ9B6Q3X\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_9_html;dcove=d;sz=300x250,300x600;ptile=2;ord=59448705[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WZ9B6Q3X\activity;src=1352258;met=1;v=1;pid=24367359;aid=184660956;ko=0;cid=24604371;rid=24622224;rv=2;&timestamp=1204396068171;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WZ9B6Q3X\activity;src=1352258;met=1;v=1;pid=24367372;aid=184660956;ko=0;cid=24604371;rid=24622224;rv=2;&timestamp=1204396162609;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WZ9B6Q3X\activity;src=675026;met=1;v=1;pid=19893477;aid=151871469;ko=0;cid=23233293;rid=23251145;rv=1;&timestamp=1194113951796;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WLAN09AV\;spt=;kw=monday_morning_qb;writ=peter_king_monday_morning_qb;slug=mmqb;path=2007;path=writers;path=peter_king;path=11;path=04;path=mmqb;file=index_html;dcove=d;sz=728x90[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WLAN09AV\;spt=;writ=andy_staples_inside_recruiting;slug=hawaii;slug=recruit;path=2008;path=writers;path=andy_staples;path=02;path=29;path=hawaii_recruit;file=2_html;rsi=10001;rsi[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WLAN09AV\;spt=baseball_mlb;slug=larussa;slug=pitchers;slug=ap;path=2008;path=baseball;path=mlb;path=02;path=26;path=larussa_pitchers_ap;file=index_html;rsi=10001;rsi=10010;dcove=[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WLAN09AV\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_6_html;dcove=d;sz=222x53;dcopt=ist;ptile=1;ord=6108149[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WLAN09AV\activity;src=1279352;met=1;v=1;pid=20586666;aid=139849091;ko=0;cid=22897676;rid=22915559;rv=2;&timestamp=1194103286609;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WLAN09AV\activity;src=1352258;met=1;v=1;pid=24367359;aid=184660956;ko=0;cid=24604371;rid=24622224;rv=2;&timestamp=1204396078171;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WLAN09AV\activity;src=1352258;met=1;v=1;pid=24367372;aid=184660956;ko=0;cid=24604371;rid=24622224;rv=2;&timestamp=1204396192609;eid1=2;ecn1=0;etm1=30;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WLAN09AV\activity;src=1705382;met=1;v=1;pid=24990785;aid=188842924;ko=0;cid=24940814;rid=24958667;rv=1;&timestamp=1204046785468;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WLAN09AV\activity;src=675026;met=1;v=1;pid=19893486;aid=151874364;ko=0;cid=23233301;rid=23251153;rv=1;&timestamp=1194299645218;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\WLAN09AV\Type=click&FlightID=113285&AdID=152312&TargetID=24358&Segments=730,2259,2401,2743,3030,3285,3800,6089,6298,7411,8463,8796,9496,9632,9779,9781,9853,10088,10381,11255,1136[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\;ec=ron;p=0;dr=me;p=1;ec=pl;ec=pls;ec=tl;ec=tls;pec=lv;upec=lv;ec=plv;ec=tlv;;sitetag=jscript;p=0;u=a3a4rnqt02vbv2jl;sz=728x90;tile=1;ord=6141919606458568[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\;ec=ron;p=0;dr=me;p=1;ec=pl;ec=pls;ec=tl;ec=tls;pec=lv;upec=lv;ec=plv;ec=tlv;;sitetag=jscript;p=0;u=a3a4rnqt02x5yhqs;sz=728x90;tile=1;ord=8315099747506143[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\;ec=ron;p=0;dr=me;p=1;ec=pl;ec=pls;ec=tl;ec=tls;pec=lv;upec=lv;ec=plv;ec=tlv;;sitetag=jscript;p=0;u=a3a4rnqt02yy3yus;sz=728x90;tile=1;ord=1365820791197647[2].2 not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\;spt=;writ=andy_staples_inside_recruiting;slug=hawaii;slug=recruit;path=2008;path=writers;path=andy_staples;path=02;path=29;path=hawaii_recruit;file=index_html;rsi=10001[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\;spt=;writ=dr_z_mailbag;slug=mailbag;path=2008;path=writers;path=dr_z;path=02;path=29;path=mailbag;file=index_html;rsi=10001;rsi=10010;dcove=d;sz=160x600;ptile=3;ord=652[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=20;path=gallery_nfldraftbusts;file=index_10_exclude_html;rsi=10001;rsi=10010;dco[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=20;path=gallery_nfldraftbusts;file=index_23_html;rsi=10001;rsi=10010;dcove=d;sz=[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204123325343;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204127798859;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\activity;src=1705382;met=1;v=1;pid=24990974;aid=188843311;ko=0;cid=24904230;rid=24922083;rv=1;&timestamp=1204151528187;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\activity;src=1705382;met=1;v=1;pid=24990981;aid=188843311;ko=0;cid=24904230;rid=24922083;rv=1;&timestamp=1204123391390;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\S40;md=S40_VOLVO;mk=VOLVO;cat=sed;dmk=VOLVO;yr=2007;zip=18702;co=PA079;dma=577;s=10123;s=10165;s=10167;s=10195;s=10199;s=10200;s=10207;s=10208;s=10214;sz=728x90,468x60;p[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\W9MNWLYZ\Type=click&FlightID=100460&AdID=144193&TargetID=16970&Segments=2276,2399,2743,2872,3030,3285,3800,4008,4634,6298,8463,8796,8836,8886,9496,9779,9781,9784,9853,10376,12090[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\;ec=ron;p=0;dr=me;p=1;ec=pl;ec=pls;ec=tl;ec=tls;pec=lv;upec=lv;ec=plv;ec=tlv;;sitetag=jscript;p=0;u=a3mto3td02yy4xfy;sz=728x90;tile=1;ord=4315358864865688[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\;loc=plist;prod=rhapsody;ver=4;verminor=0;env=production;firstinstall=y;devicenew=n;artist=;subplan=;cobrandid=40134;origin=real;pmt=;freeplay=y;userfreeplay=n;login=n;c[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\;spt=;kw=monday_morning_qb;writ=peter_king_monday_morning_qb;slug=mmqb;path=2007;path=writers;path=peter_king;path=11;path=04;path=mmqb;file=2_html;dcove=d;sz=728x90;dco[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\;spt=;kw=monday_morning_qb;writ=peter_king_monday_morning_qb;slug=mmqb;path=2007;path=writers;path=peter_king;path=11;path=04;path=mmqb;file=index_html;dcove=d;sz=300x25[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\;spt=;writ=andy_staples_inside_recruiting;slug=hawaii;slug=recruit;path=2008;path=writers;path=andy_staples;path=02;path=29;path=hawaii_recruit;file=2_html;rsi=10001;rsi[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\;spt=;writ=don_banks_inside_nfl;slug=fa;slug=snaps;path=2008;path=writers;path=don_banks;path=02;path=29;path=fa_snaps;file=1_html;rsi=10001;rsi=10010;dcove=d;sz=728x90;[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\;spt=baseball_mlb;slug=larussa;slug=pitchers;slug=ap;path=2008;path=baseball;path=mlb;path=02;path=26;path=larussa_pitchers_ap;file=index_html;rsi=10001;rsi=10010;dcove=[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_1_html;dcove=d;sz=300x250,300x600;ptile=2;ord=47546067[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_8_html;dcove=d;sz=300x250,300x600;ptile=2;ord=54418887[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\;spt=football_nfl;slug=cope;slug=ap;path=2008;path=football;path=nfl;path=02;path=27;path=cope_ap;file=index_html;rsi=10001;rsi=10010;dcove=d;sz=728x90;dcopt=ist;ptile=1[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\activity;src=1287899;met=1;v=1;pid=20378364;aid=128892296;ko=0;cid=22961319;rid=22979188;rv=1;&timestamp=1194274143218;eid1=2;ecn1=0;etm1=120;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\activity;src=1352258;met=1;v=1;pid=24367359;aid=184660956;ko=0;cid=24604371;rid=24622224;rv=2;&timestamp=1204396108171;eid1=2;ecn1=0;etm1=30;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204127767859;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\activity;src=675026;met=1;v=1;pid=19893477;aid=151871469;ko=0;cid=23233293;rid=23251145;rv=1;&timestamp=1194114061796;eid1=2;ecn1=0;etm1=70;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\activity;src=795274;met=1;v=1;pid=23027955;aid=189773462;ko=0;cid=24977727;rid=24995580;rv=1;&timestamp=1204239423468;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\S40;md=S40_VOLVO;mk=VOLVO;mm=md;tp=non;cat=;dmk=VOLVOmm=md;tp=non;cat=sed;dmk=VOLVO;yr=2007;zip=18702;co=PA079;dma=577;s=10123;s=10165;s=10167;s=10195;s=10199;s=10200;s=[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\S5Y70DUV\_W0QQa10239ZQ2d24QQa10244ZQ2d24QQa18ZQ2d24QQa38v1yZ1959QQa38v2yZ1967QQa39Z1969QQa39705ZQ2d24QQa41Z10651QQalistZa39Q2ca41Q2ca38v1yQ2ca38v2yQ2ca10239Q2ca3801Q2ca85Q2ca1024[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\;ec=ron;p=0;dr=me;p=1;ec=pl;ec=pls;ec=tl;ec=tls;pec=lv;upec=lv;ec=plv;ec=tlv;;sitetag=jscript;p=0;u=a3a4rnqt02vjeos0;sz=728x90;tile=1;ord=1539975704733846[2].2 not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\;spt=;kw=monday_morning_qb;writ=peter_king_monday_morning_qb;slug=mmqb;path=2007;path=writers;path=peter_king;path=11;path=04;path=mmqb;file=7_html;dcove=d;sz=300x250;pt[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\;spt=;writ=dr_z_mailbag;slug=mailbag;path=2008;path=writers;path=dr_z;path=02;path=29;path=mailbag;file=2_html;rsi=10001;rsi=10010;dcove=d;sz=300x250;ptile=2;ord=2376296[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\;spt=;writ=dr_z_mailbag;slug=mailbag;path=2008;path=writers;path=dr_z;path=02;path=29;path=mailbag;file=index_html;rsi=10001;rsi=10010;dcove=d;sz=300x250;ptile=2;ord=652[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_10_html;dcove=d;sz=300x250,300x600;ptile=2;ord=7762933[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=19;path=gallery_draftbargains;file=index_10_exclude_html;rsi=10001;rsi=10010;dco[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=20;path=gallery_nfldraftbusts;file=index_19_exclude_html;rsi=10001;rsi=10010;dco[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\;spt=football_nfl;ptyp=team;path=football;path=nfl;path=teams;path=steelers;file=index_html;rsi=10001;rsi=10010;dcove=d;sz=75x75;dcopt=ist;ptile=1;ord=742347935594[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\;spt=football_nfl;slug=rogers;slug=trade;slug=ap;path=2008;path=football;path=nfl;path=02;path=29;path=rogers_trade_ap;file=index_html;rsi=10001;rsi=10010;dcove=d;sz=728[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\activity;src=1279352;met=1;v=1;pid=20303974;aid=141141947;ko=0;cid=22843685;rid=22861568;rv=1;&timestamp=1194096639109;eid1=9;ecn1=1;etm1=0;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204127736937;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\activity;src=1705382;met=1;v=1;pid=24990974;aid=188843311;ko=0;cid=24904230;rid=24922083;rv=1;&timestamp=1204151758140;eid1=2;ecn1=0;etm1=120;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\activity;src=675026;met=1;v=1;pid=19893478;aid=151871469;ko=0;cid=23233293;rid=23251145;rv=1;&timestamp=1194041194437;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\aDmNnAUArTPTQ5Pc3oQWUO1WbqV6jM4sM0XUYIVm2o56M8R6ZbC3dUm1WnAnt6w3P3Q3sbdUGYaVVFePAFmTWFRWrn13U2oUqMtTanlPqYZcQVJKPFipRd7dUVUT5Fmpmdip0quN2tfAPGZbG2A3Zbm9JprCALTVrUm6phDn[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\S40;md=S40_VOLVO;mk=VOLVO;mm=md;tp=non;cat=;dmk=VOLVOmm=md;tp=non;cat=sed;dmk=VOLVO;yr=2007;zip=18702;co=PA079;dma=577;s=10123;s=10165;s=10167;s=10195;s=10199;s=10200;s=[1] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\Type=click&FlightID=109572&AdID=148574&TargetID=16620&Segments=2274,2607,2690,2743,3030,3285,4008,4898,5217,6298,8463,8796,8836,8886,9496,9779,9781,9784,9853,10376,10956[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\RRPLT996\Type=click&FlightID=97406&AdID=152142&TargetID=16189&Segments=657,2743,3030,3285,4008,6298,8463,8796,8808,8857,9496,9779,9781,9784,9853,10377,12915,13348,13353,13760,139[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\;pg=homepage;sp=hpspot;zip=0;co=;dma=;;env=IRV-TEST2;tile=2;sz=208x189,186x190;u=homepage______0___hpspot__IRV-TEST2_mtfInline=true;ord=5773281872607865[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\;spt=;kw=monday_morning_qb;writ=peter_king_monday_morning_qb;slug=mmqb;path=2007;path=writers;path=peter_king;path=11;path=04;path=mmqb;file=7_html;dcove=d;sz=160x600;pt[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\;spt=;kw=monday_morning_qb;writ=peter_king_monday_morning_qb;slug=week10;path=2007;path=writers;path=peter_king;path=11;path=11;path=week10;file=index_html;dcove=d;sz=30[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\;spt=;writ=reuben_frank_nfl_bynumbers;slug=cap;slug=figures;path=2008;path=writers;path=reuben_frank;path=03;path=01;path=cap_figures;file=index_html;rsi=10001;rsi=10010[1] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=19;path=gallery_draftbargains;file=index_1_exclude_html;rsi=10001;rsi=10010;dcov[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=20;path=gallery_nfldraftbusts;file=index_1_exclude_html;rsi=10001;rsi=10010;dcov[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=20;path=gallery_nfldraftbusts;file=index_4_exclude_html;rsi=10001;rsi=10010;dcov[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=20;path=gallery_nfldraftbusts;file=index_7_exclude_html;rsi=10001;rsi=10010;dcov[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=20;path=gallery_nfldraftbusts;file=index_9_exclude_html;rsi=10001;rsi=10010;dcov[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\;spt=football_nfl;ptyp=team;path=football;path=nfl;path=teams;path=steelers;file=index_html;rsi=10001;rsi=10010;dcove=d;sz=300x250;ptile=2;ord=742347935594[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\;spt=football_nfl;slug=rogers;slug=trade;slug=ap;path=2008;path=football;path=nfl;path=02;path=29;path=rogers_trade_ap;file=index_html;rsi=10001;rsi=10010;dcove=d;sz=300[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204127808859;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204145554812;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\activity;src=1705382;met=1;v=1;pid=24990974;aid=188843311;ko=0;cid=24904230;rid=24922083;rv=1;&timestamp=1204151538140;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\activity;src=795274;met=1;v=1;pid=23027955;aid=189773462;ko=0;cid=24977727;rid=24995580;rv=1;&timestamp=1204239433468;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\Dakota;pg=uctcondition;tr=3851;mkmd=Dodge_Dakota;md=Dakota_Dodge;mk=Dodge;dmk=Dodge;mkonly=Dodge;pl=md;cat=pic;rpt=ucti;yr=2002;zip=18702;co=PA079;dma=577;s=10167;s=1014[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\Type=click&FlightID=101537&AdID=139639&TargetID=605&Segments=968,2276,2399,2743,2872,3030,3285,3800,4008,4634,6298,8463,8796,9496,9779,9784,9853,10371,12090,12436,12530,[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\Type=click&FlightID=41291&AdID=123655&TargetID=913&Segments=730,2259,2743,3030,3285,3800,4635,6298,6520,6582,7324,7464,8342,8463,8796,9306,9496,9632,9742,9779,9781,9784,[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXX2RQXO\Type=click&FlightID=88251&AdID=118347&TargetID=6933&Segments=968,2274,2607,2743,3030,3285,4008,4898,5217,6298,6520,8463,8796,9496,9779,9784,9853,9937,10033,10371,10922,1[1] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\;spt=;kw=monday_morning_qb;writ=peter_king_monday_morning_qb;slug=mmqb;path=2007;path=writers;path=peter_king;path=11;path=04;path=mmqb;file=1_html;dcove=d;sz=160x600;pt[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\;spt=;kw=monday_morning_qb;writ=peter_king_monday_morning_qb;slug=mmqb;path=2007;path=writers;path=peter_king;path=11;path=04;path=mmqb;file=3_html;dcove=d;sz=728x90;dco[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\;spt=;writ=andy_staples_inside_recruiting;slug=hawaii;slug=recruit;path=2008;path=writers;path=andy_staples;path=02;path=29;path=hawaii_recruit;file=2_html;rsi=10001;rsi[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\;spt=;writ=andy_staples_inside_recruiting;slug=hawaii;slug=recruit;path=2008;path=writers;path=andy_staples;path=02;path=29;path=hawaii_recruit;file=index_html;rsi=10001[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\;spt=;writ=reuben_frank_nfl_bynumbers;slug=cap;slug=figures;path=2008;path=writers;path=reuben_frank;path=03;path=01;path=cap_figures;file=index_html;rsi=10001;rsi=10010[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\;spt=baseball_mlb;slug=larussa;slug=pitchers;slug=ap;path=2008;path=baseball;path=mlb;path=02;path=26;path=larussa_pitchers_ap;file=index_html;rsi=10001;rsi=10010;dcove=[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_6_html;dcove=d;sz=300x250,300x600;ptile=2;ord=61081494[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\activity;src=1279352;met=1;v=1;pid=20586666;aid=139849091;ko=0;cid=22897676;rid=22915559;rv=2;&timestamp=1194103296609;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\activity;src=1287899;met=1;v=1;pid=20378364;aid=128892296;ko=0;cid=22961319;rid=22979188;rv=1;&timestamp=1194274023218;eid1=2;ecn1=0;etm1=70;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204127757859;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\activity;src=675026;met=1;v=1;pid=19893477;aid=151871469;ko=0;cid=23233293;rid=23251145;rv=1;&timestamp=1194113961796;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\JFttNyLgNp_YXUCrX4_lxYNQAAABL3icjZDPSsQwGMS_dVdYxQVRvO8DlDTpn2wrCIJF8SIiwnrTJF9iS2xaTDU-0z6IV1_FR7B70LPMZRj4wczUxwiLtlN1I9A_vjc6iEk9lQCzjYTJ5kLC_PPMwiHPDDJZ0tToBMVKj1Gps[1].swf not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\S40;md=S40_VOLVO;mk=VOLVO;mm=md;tp=non;cat=sed;yr=2007;zip=18702;co=PA079;dma=577;s=10123;s=10165;s=10167;s=10195;s=10199;s=10200;s=10207;s=10208;s=10214;sz=160x600;ptil[1] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\tile=1204322031&site=cnn&cnn_pagetype=cnn_video&cnn_position=video_336x280_house&cnn_rollup=house&page.allowcompete=yes&params.styles=fs&page.allowcompete=yes&page[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODY7K56Z\Type=click&FlightID=97407&AdID=152143&TargetID=17116&Segments=968,2743,3030,3285,4008,6298,7842,8463,8796,8806,9496,9779,9784,9853,10371,11532,12439,13079,13760,14047&Va[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\KLIN4HYZ\;spt=;writ=andy_staples_inside_recruiting;slug=hawaii;slug=recruit;path=2008;path=writers;path=andy_staples;path=02;path=29;path=hawaii_recruit;file=index_html;rsi=10001[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\KLIN4HYZ\;spt=;writ=don_banks_inside_nfl;slug=fa;slug=snaps;path=2008;path=writers;path=don_banks;path=02;path=29;path=fa_snaps;file=1_html;rsi=10001;rsi=10010;dcove=d;sz=140x60;[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\KLIN4HYZ\;spt=;writ=reuben_frank_nfl_bynumbers;slug=cap;slug=figures;path=2008;path=writers;path=reuben_frank;path=03;path=01;path=cap_figures;file=index_html;rsi=10001;rsi=10010[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\KLIN4HYZ\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=19;path=gallery_draftbargains;file=index_4_exclude_html;rsi=10001;rsi=10010;dcov[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\KLIN4HYZ\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204123315343;eid1=2;ecn1=1;etm1=10;eid2=3;ecn2=1;etm2=1;eid3=4;[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\KLIN4HYZ\activity;src=1705399;met=1;v=1;pid=24992296;aid=189368840;ko=0;cid=24974515;rid=24992368;rv=1;&timestamp=1204151528187;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\KLIN4HYZ\S40;md=S40_VOLVO;mk=VOLVO;mm=md;tp=non;cat=sed;yr=2007;zip=18702;co=PA079;dma=577;s=10123;s=10165;s=10167;s=10195;s=10199;s=10200;s=10207;s=10208;s=10214;sz=160x600;ptil[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\KLIN4HYZ\Type=click&FlightID=41291&AdID=123655&TargetID=913&Segments=730,2259,2743,3030,3285,3800,4635,6298,6520,6582,7324,8463,8796,9306,9496,9632,9742,9779,9781,9784,9853,10031[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\KLIN4HYZ\Type=click&FlightID=69836&AdID=121335&TargetID=14665&Segments=730,2743,3030,3285,6520,6582,8463,8796,8808,9496,9779,9781,9784,9853,10381&Targets=14665,1515,16189&Values=[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\H3R7DH42\;spt=football_ncaa;slug=tennessee;slug=coker;slug=ap;path=2007;path=football;path=ncaa;path=11;path=02;path=tennessee_coker_ap;file=index_html;dcove=d;sz=728x90;dcopt=is[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\H3R7DH42\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_9_html;dcove=d;sz=222x53;dcopt=ist;ptile=1;ord=5944870[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\H3R7DH42\activity;src=1352258;met=1;v=1;pid=24367372;aid=184660956;ko=0;cid=24604371;rid=24622224;rv=2;&timestamp=1204396152671;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\H3R7DH42\Type=click&FlightID=109571&AdID=148573&TargetID=15957&Segments=2276,2399,2743,2872,2960,3030,3285,3800,4008,4634,6298,8463,8796,8836,8886,9496,9779,9781,9784,9853,10376,[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\EQMXLXSY\;spt=;writ=andy_staples_inside_recruiting;slug=hawaii;slug=recruit;path=2008;path=writers;path=andy_staples;path=02;path=29;path=hawaii_recruit;file=1_html;rsi=10001;rsi[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\EQMXLXSY\;spt=;writ=dr_z_mailbag;slug=mailbag;path=2008;path=writers;path=dr_z;path=02;path=29;path=mailbag;file=1_html;rsi=10001;rsi=10010;dcove=d;sz=300x250;ptile=2;ord=5455521[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\EQMXLXSY\;spt=football_ncaa;slug=tennessee;slug=coker;slug=ap;path=2007;path=football;path=ncaa;path=11;path=02;path=tennessee_coker_ap;file=index_html;dcove=d;sz=160x600;ptile=3[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\EQMXLXSY\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=20;path=gallery_nfldraftbusts;file=index_13_exclude_html;rsi=10001;rsi=10010;dco[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\EQMXLXSY\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=20;path=gallery_nfldraftbusts;file=index_23_html;rsi=10001;rsi=10010;dcove=d;sz=[1] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\EQMXLXSY\;spt=football_nfl;slug=cope;slug=ap;path=2008;path=football;path=nfl;path=02;path=27;path=cope_ap;file=index_html;rsi=10001;rsi=10010;dcove=d;sz=160x600;ptile=3;ord=8891[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\EQMXLXSY\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204145508171;eid1=2;ecn1=1;etm1=9;eid2=3;ecn2=1;etm2=1;eid3=4;e[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\EQMXLXSY\activity;src=1705382;met=1;v=1;pid=24990646;aid=188842924;ko=0;cid=24940814;rid=24958667;rv=1;&timestamp=1204130805234;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\EQMXLXSY\activity;src=1705399;met=1;v=1;pid=24992296;aid=189368840;ko=0;cid=24974515;rid=24992368;rv=1;&timestamp=1204151638156;eid1=2;ecn1=0;etm1=70;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\EQMXLXSY\local;kw=news+sky1+14570833+C05503_10013+C05503_10396;comp=119200725;ad=true;dcopt=ist;pgtype=detail;sluser=false;tile=8;sz=160x600,120x300;ord=1194898519140[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\EQMXLXSY\Type=click&FlightID=100881&AdID=143643&TargetID=24187&Segments=968,2619,2743,3030,3285,3800,4008,5380,6298,8463,8796,9496,9632,9779,9784,9853,9956,10371,11361,12035,1209[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\AZSN1URM\1687740599@PageCounter,HeaderSpon,WxSpon,PageSpon,PageSpon2,PageSpon3,PageSpon4,PartList1,PartList2,PartList3,PartList4,PartList5,PartList6,Hidden1,Hidden2[1] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\AZSN1URM\;spt=;writ=don_banks_inside_nfl;slug=fa;slug=snaps;path=2008;path=writers;path=don_banks;path=02;path=29;path=fa_snaps;file=1_html;rsi=10001;rsi=10010;dcove=d;sz=160x600[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\AZSN1URM\;spt=football_ncaa;slug=tennessee;slug=coker;slug=ap;path=2007;path=football;path=ncaa;path=11;path=02;path=tennessee_coker_ap;file=index_html;dcove=d;sz=300x250;ptile=2[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\AZSN1URM\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_2_html;dcove=d;sz=222x53;dcopt=ist;ptile=1;ord=4563265[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\AZSN1URM\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_5_html;dcove=d;sz=222x53;dcopt=ist;ptile=1;ord=7393714[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\AZSN1URM\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=19;path=gallery_draftbargains;file=index_7_exclude_html;rsi=10001;rsi=10010;dcov[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\AZSN1URM\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204309749906;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\AZSN1URM\activity;src=675026;met=1;v=1;pid=19893486;aid=151874364;ko=0;cid=23233301;rid=23251153;rv=1;&timestamp=1194041219156;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\AZSN1URM\Type=click&FlightID=93377&AdID=125158&TargetID=16956&Segments=730,2259,2743,3030,3285,3800,4635,6298,6520,7324,8342,8463,8796,9496,9632,9742,9779,9781,9853,10031,10088,1[1] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\AZSN1URM\Type=click&FlightID=97407&AdID=152143&TargetID=17116&Segments=657,2743,3030,3285,4008,6298,7842,8463,8796,8806,9496,9779,9781,9784,9853,10377,11532,12439,13079,13760,140[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ATXIRYDC\;loc=plist;prod=rhapsody;ver=4;verminor=0;env=production;firstinstall=y;devicenew=n;artist=;subplan=33;cobrandid=40134;origin=real;pmt=y;freeplay=y;userfreeplay=n;login=[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ATXIRYDC\;spt=;kw=nfl_rankings;writ=dr_z_nfl_rankings;slug=rankings;slug=part1;path=2007;path=writers;path=dr_z;path=10;path=31;path=rankings_part1;file=index_html;dcove=d;sz=728[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ATXIRYDC\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_4_html;dcove=d;sz=222x53;dcopt=ist;ptile=1;ord=3281150[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ATXIRYDC\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_8_html;dcove=d;sz=222x53;dcopt=ist;ptile=1;ord=5441888[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ATXIRYDC\;_ylc=X1MDOTc1NDYxNjgEX3IDMgRjYXRlZ29yeQNJREVOVElGSUVSBGV4dGZyb20DBGZiAzAEZnJjb2RlA2NzY195bWFpbGNsBGlzZXh0AzAEaXQDc2hvcnRjdXRzOi91cy9pbnN0YW5jZS9pZGVud[1].adNoOp&fr=csc_ymailcl not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ATXIRYDC\activity;src=1277903;met=1;v=1;pid=21280268;aid=152380308;ko=0;cid=23315194;rid=23333047;rv=1;&timestamp=1194097368062;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ATXIRYDC\activity;src=1614596;met=1;v=1;pid=21350687;aid=153190795;ko=0;cid=23300061;rid=23317914;rv=1;&timestamp=1194027413437;eid1=2;ecn1=0;etm1=30;eid2=3;ecn2=1;etm2=1;eid3=4;[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ATXIRYDC\blogs;ptyp=blogs;headline=Top%20five%20riskiest%20free%20agents%20in%202008;unid=483517975;pos=top;dcopt=ist;dcove=d;sz=300x250;tile=1;ord=9703323484911420[1] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ATXIRYDC\Type=click&FlightID=112329&AdID=151030&TargetID=2744&Segments=1824,1832,2629,2729,2743,3285,3906,6298,6520,6585,7038,7043,8463,8598,8796,12260,13315,13319,13325,13357,13[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\ATXIRYDC\Type=click&FlightID=69836&AdID=121335&TargetID=14665&Segments=730,2743,3030,3285,6298,6520,6582,8463,8796,8808,9496,9779,9781,9784,9853,10381,11088&Targets=14665,1515,16[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\8P6R8H2Z\;loc=playlistcentralhome;prod=rhapsody;ver=4;verminor=0;env=production;firstinstall=y;devicenew=n;artist=;subplan=33;cobrandid=40134;origin=real;pmt=y;freeplay=y;userfre[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\8P6R8H2Z\;loc=playlistcentralhome;prod=rhapsody;ver=4;verminor=0;env=production;firstinstall=y;devicenew=n;artist=;subplan=;cobrandid=40134;origin=real;pmt=;freeplay=y;userfreepl[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\8P6R8H2Z\;spt=;kw=monday_morning_qb;writ=peter_king_monday_morning_qb;slug=mmqb;path=2007;path=writers;path=peter_king;path=11;path=04;path=mmqb;file=7_html;dcove=d;sz=728x90;dco[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\8P6R8H2Z\;spt=;writ=andy_staples_inside_recruiting;slug=hawaii;slug=recruit;path=2008;path=writers;path=andy_staples;path=02;path=29;path=hawaii_recruit;file=1_html;rsi=10001;rsi[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\8P6R8H2Z\;spt=;writ=dr_z_mailbag;slug=mailbag;path=2008;path=writers;path=dr_z;path=02;path=29;path=mailbag;file=index_html;rsi=10001;rsi=10010;dcove=d;sz=728x90;dcopt=ist;ptile=[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\8P6R8H2Z\activity;src=1096708;met=1;v=1;pid=20943200;aid=146336319;ko=0;cid=23297362;rid=23315215;rv=1;&timestamp=1194026540875;eid1=2;ecn1=0;etm1=10;eid2=1097;ecn2=0;etm2=10;eid[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\8P6R8H2Z\activity;src=1614596;met=1;v=1;pid=21350687;aid=153190795;ko=0;cid=23300061;rid=23317914;rv=1;&timestamp=1194027373437;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\8P6R8H2Z\activity;src=1614596;met=1;v=1;pid=21350687;aid=153190795;ko=0;cid=23300061;rid=23317914;rv=1;&timestamp=1194027603437;eid1=2;ecn1=0;etm1=120;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\8P6R8H2Z\activity;src=1705399;met=1;v=1;pid=24992296;aid=189368840;ko=0;cid=24974515;rid=24992368;rv=1;&timestamp=1204151758156;eid1=2;ecn1=0;etm1=120;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\8P6R8H2Z\MUSTANG;md=MUSTANG_FORD;mk=FORD;cat=cpe;yr=2006;zip=18702;co=PA079;dma=577;s=10123;s=10165;s=10167;s=10195;s=10199;s=10200;s=10207;s=10208;s=10214;sz=160x600;ptile=2;abr[1] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\8P6R8H2Z\R5fjSph0vcbXH4acx6B8ZoNQAAABMXicjVCxTsMwFHxAEVBRgUDsXdgix04ct2ViyMKCGJDKhhw_m0QmToRDzRd05y8QP8BnsPMVfALuADM66XQ66aS7q08RJm2n6kaiv181OsiteqcCGL1Hev2KdPRh4Vhwg6xa0NzoDOVMR[1].swf not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;ec=ron;p=0;dr=me;p=1;ec=pl;ec=pls;ec=tl;ec=tls;pec=lv;upec=lv;ec=plv;ec=tlv;;sitetag=jscript;p=0;u=a3a4rnqt02yy4h9x;sz=728x90;tile=1;ord=4654474333299244[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;ec=ron;p=0;dr=me;p=1;ec=pl;ec=pls;ec=tl;ec=tls;pec=lv;upec=lv;ec=plv;ec=tlv;;sitetag=jscript;p=0;u=a3bcn85x02yy3wv1;sz=728x90;tile=1;ord=1717512227605905[2].2 not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;spt=;kw=monday_morning_qb;writ=peter_king_monday_morning_qb;slug=mmqb;path=2007;path=writers;path=peter_king;path=11;path=04;path=mmqb;file=6_html;dcove=d;sz=300x250;pt[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;spt=;kw=monday_morning_qb;writ=peter_king_monday_morning_qb;slug=week10;path=2007;path=writers;path=peter_king;path=11;path=11;path=week10;file=4_html;dcove=d;sz=160x60[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;spt=;writ=andy_staples_inside_recruiting;slug=hawaii;slug=recruit;path=2008;path=writers;path=andy_staples;path=02;path=29;path=hawaii_recruit;file=1_html;rsi=10001;rsi[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;spt=;writ=dr_z_mailbag;slug=mailbag;path=2008;path=writers;path=dr_z;path=02;path=29;path=mailbag;file=1_html;rsi=10001;rsi=10010;dcove=d;sz=160x600;ptile=3;ord=5455521[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;spt=;writ=dr_z_mailbag;slug=mailbag;path=2008;path=writers;path=dr_z;path=02;path=29;path=mailbag;file=2_html;rsi=10001;rsi=10010;dcove=d;sz=728x90;dcopt=ist;ptile=1;or[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;spt=;writ=reuben_frank_nfl_bynumbers;slug=cap;slug=figures;path=2008;path=writers;path=reuben_frank;path=03;path=01;path=cap_figures;file=1_html;rsi=10001;rsi=10010;dco[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_10_html;dcove=d;sz=222x53;dcopt=ist;ptile=1;ord=776293[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_2_html;dcove=d;sz=300x250,300x600;ptile=2;ord=45632659[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_5_html;dcove=d;sz=300x250,300x600;ptile=2;ord=73937141[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=19;path=gallery_draftbargains;file=index_1_exclude_html;rsi=10001;rsi=10010;dcov[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\;_ylc=X1MDOTc1NDYxNjgEX3IDMgRjYXRlZ29yeQNJREVOVElGSUVSBGV4dGZyb20DBGZiAzAEZnJjb2RlA2NzY195bWFpbGNsBGlzZXh0AzAEaXQDc2hvcnRjdXRzOi91cy9pbnN0YW5jZS9pZGVud[2].adNoOp&fr=csc_ymailcl not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\activity;src=1361549;met=1;v=1;pid=18019789;aid=123902497;ko=0;cid=23391266;rid=23409119;rv=1;&timestamp=1194721784640;eid1=2;ecn1=0;etm1=30;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\activity;src=1705382;met=1;v=1;pid=24990974;aid=188843311;ko=0;cid=24904230;rid=24922083;rv=1;&timestamp=1204151638140;eid1=2;ecn1=0;etm1=70;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\S40;md=S40_VOLVO;mk=VOLVO;cat=sed;dmk=VOLVO;yr=2007;zip=18702;co=PA079;dma=577;s=10123;s=10165;s=10167;s=10195;s=10199;s=10200;s=10207;s=10208;s=10214;sz=728x90,468x60;p[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\5WHLJTPN\Type=click&FlightID=97406&AdID=152142&TargetID=16189&Segments=657,2743,3030,3285,4008,6298,8463,8796,8808,8857,9496,9779,9781,9784,9853,10377,12915,13348,13353,13760,139[1] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\1VJF1DSQ\;ec=ron;p=0;dr=me;p=1;ec=pl;ec=pls;ec=tl;ec=tls;pec=lv;upec=lv;ec=plv;ec=tlv;;sitetag=jscript;p=0;u=a3mto3td02yy4cs1;sz=728x90;tile=1;ord=7626783785856232[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\1VJF1DSQ\;spt=;writ=don_banks_inside_nfl;slug=fa;slug=snaps;path=2008;path=writers;path=don_banks;path=02;path=29;path=fa_snaps;file=1_html;rsi=10001;rsi=10010;dcove=d;sz=300x250[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\1VJF1DSQ\;spt=;writ=reuben_frank_nfl_bynumbers;slug=cap;slug=figures;path=2008;path=writers;path=reuben_frank;path=03;path=01;path=cap_figures;file=1_html;rsi=10001;rsi=10010;dco[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\1VJF1DSQ\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_3_html;dcove=d;sz=222x53;dcopt=ist;ptile=1;ord=6071222[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\1VJF1DSQ\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_7_html;dcove=d;sz=222x53;dcopt=ist;ptile=1;ord=5227059[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\1VJF1DSQ\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=20;path=gallery_nfldraftbusts;file=index_16_exclude_html;rsi=10001;rsi=10010;dco[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\1VJF1DSQ\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=20;path=gallery_nfldraftbusts;file=index_22_exclude_html;rsi=10001;rsi=10010;dco[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\1VJF1DSQ\;spt=football_nfl;slug=cope;slug=ap;path=2008;path=football;path=nfl;path=02;path=27;path=cope_ap;file=index_html;rsi=10001;rsi=10010;dcove=d;sz=300x250;ptile=2;ord=8891[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\1VJF1DSQ\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204051347671;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\1VJF1DSQ\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204131251312;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\1VJF1DSQ\activity;src=1705382;met=1;v=1;pid=24990646;aid=188842924;ko=0;cid=24940814;rid=24958667;rv=1;&timestamp=1204130815234;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\1VJF1DSQ\activity;src=1705399;met=1;v=1;pid=24992296;aid=189368840;ko=0;cid=24974515;rid=24992368;rv=1;&timestamp=1204151538156;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\;spt=;writ=dr_z_mailbag;slug=mailbag;path=2008;path=writers;path=dr_z;path=02;path=29;path=mailbag;file=1_html;rsi=10001;rsi=10010;dcove=d;sz=728x90;dcopt=ist;ptile=1;or[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\;spt=;writ=dr_z_mailbag;slug=mailbag;path=2008;path=writers;path=dr_z;path=02;path=29;path=mailbag;file=2_html;rsi=10001;rsi=10010;dcove=d;sz=160x600;ptile=3;ord=2376296[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_3_html;dcove=d;sz=300x250,300x600;ptile=2;ord=60712226[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=0611;path=gallery_nfl_qbrivals;file=content_7_html;dcove=d;sz=300x250,300x600;ptile=2;ord=52270592[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\;spt=football_nfl;ptyp=gallery;path=multimedia;path=photo_gallery;path=2006;path=04;path=20;path=gallery_nfldraftbusts;file=index_10_exclude_html;rsi=10001;rsi=10010;dco[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\;spt=football_nfl;slug=rogers;slug=trade;slug=ap;path=2008;path=football;path=nfl;path=02;path=29;path=rogers_trade_ap;file=index_html;rsi=10001;rsi=10010;dcove=d;sz=160[2] not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\;_ylc=X1MDOTc1NDYxNjgEX3IDMgRjYXRlZ29yeQNDT05DRVBUBGV4dGZyb20DBGZiAzAEZnJjb2RlA2NzY19uZXdzBGlzZXh0AzAEaXQDc2hvcnRjdXRzOi9jb25jZXB0BG5fdHlwAzEEc2NsYWJlbANE[1].adNoOp&fr=csc_news not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\;_ylc=X1MDOTc1NDYxNjgEX3IDMgRjYXRlZ29yeQNQTEFDRQRleHRmcm9tAwRmYgMwBGZyY29kZQNjc2NfbmV3cwRpc2V4dAMwBGl0A3Nob3J0Y3V0czovdXMvaW5zdGFuY2UvcGxhY2UvYXR0cmFjdGlv[1].adNoOp&fr=csc_news not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\activity;src=1279352;met=1;v=1;pid=20303974;aid=141141947;ko=0;cid=22843685;rid=22861568;rv=1;&timestamp=1194096506843;eid1=9;ecn1=1;etm1=0;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\activity;src=1506269;met=1;v=1;pid=24769796;aid=188544678;ko=0;cid=24888017;rid=24905870;rv=1;&timestamp=1204324612421;eid1=2;ecn1=1;etm1=10;eid2=12;ecn2=1;etm2=2;&_dc_c[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\activity;src=1570133;met=1;v=1;pid=23709684;aid=176719832;ko=0;cid=24592182;rid=24610035;rv=1;&timestamp=1204145564812;eid1=2;ecn1=0;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\activity;src=1705382;met=1;v=1;pid=24990974;aid=188843311;ko=0;cid=24904230;rid=24922083;rv=1;&timestamp=1204151568140;eid1=2;ecn1=0;etm1=30;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\activity;src=1705399;met=1;v=1;pid=24992296;aid=189368840;ko=0;cid=24974515;rid=24992368;rv=1;&timestamp=1204151568156;eid1=2;ecn1=0;etm1=30;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\activity;src=675026;met=1;v=1;pid=19893486;aid=151874364;ko=0;cid=23233301;rid=23251153;rv=1;&timestamp=1194041209203;eid1=2;ecn1=1;etm1=10;&_dc_ck=try[1].gif not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\Type=click&FlightID=54949&AdID=86779&TargetID=14743&Segments=968,2743,3030,3285,4008,6298,6520,6582,8308,8315,8463,8796,9496,9708,9779,9781,9784,9853,10088,10352,10371,1[1].htm not found!
File\Folder C:\Documents and Settings\John Baloga\Local Settings\Temp\Temporary Internet Files\Content.IE5\0BP3UQBX\Type=click&FlightID=92951&AdID=124497&TargetID=14250&Segments=968,2619,2743,3030,3285,3800,4008,5180,5380,6298,6520,6582,8463,8796,9496,9632,9742,9779,9781,9784,9853,100[2] not found!
C:\Documents and Settings\NetworkService\Local Settings\Temp\MpCmdRun.log moved successfully.

Registry entries deleted on Reboot...



And here is the MBAM log:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6674

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

5/25/2011 1:08:32 PM
mbam-log-2011-05-25 (13-08-32).txt

Scan type: Quick scan
Objects scanned: 169870
Time elapsed: 6 minute(s), 16 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Hi!

Please run this OTL fix below and let me know if that error message has disappeared.

OTL Fix

We need to run an OTL Fix

• Please reopen on your desktop.
  
• Copy and Paste the following code into the textbox.
  

  :Services
  :OTL
  O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL) - C:\Program Files\Google\GOOGLE~4\GOEC62~1.DLL ()
  :Files
  ipconfig /flushdns /c
  :Commands
  [CreateRestorePoint]
  

  
  
• Push
  
• OTL may ask to reboot the machine. Please do so if asked.
  
• Click the OK button.
  
• A report will open. Copy and Paste that report in your next reply.
  
• If the machine reboots, the log will be located at C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log, where mmddyyyy_hhmmss is the date of the tool run.

JOY!

Thank you, ST!