Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Virtumonde, Winhealer Lsp, Coolwebsearch, Vundo & More


  • Please log in to reply
35 replies to this topic

#1 Auntie Am

Auntie Am

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Over the Rainbow
  • Local time:05:24 AM

Posted 12 November 2007 - 01:37 AM

I have pop-ups, pop-unders, IE is wacko, System Restore isn't working. :thumbsup:

I've deleted temp files, used Spybot, Ad-Aware, Norton Internet Security & Stopzilla.


Stopzilla found the following problems but wants $20 to fix them:
Media-Codec
CoolWebSearch
VirtuMonde
Winhealer Lsp
Generic Downloader
Vundo
Sogou
MediaTickets CDT
Ultimate Defender
Winshow
CoolWebSearch.HomeSearch.Delta
SearchSquire
ShopAtHome
PSHope FullContext
CouponBar
SRC
Poolsv Promotion

----------------------------------------------------------------------
Here's my log:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:36:51 AM, on 11/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\nvraidservice.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
C:\Program Files\Lexmark 2400 Series\ezprint.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Norton Ghost\Agent\GhostTray.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Sonic\Product\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\lxcrcoms.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?rs=1
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=6061004
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O3 - Toolbar: STOPzilla - {98828DED-A591-462F-83BA-D2F62A68B8B8} - C:\Program Files\STOPzilla!\SZSG.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NVRaidService] C:\WINDOWS\system32\nvraidservice.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Norton Ghost 10.0] "C:\Program Files\Norton Ghost\Agent\GhostTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [DMXLauncher] "C:\Program Files\Sonic\Product\Media Experience\DMXLauncher.exe"
O4 - HKLM\..\Run: [runner1] C:\WINDOWS\mrofinu77.exe 61A847B5BBF72815358B2B27128065E9C084320161C4661227A755E9C2933154389A
O4 - HKLM\..\Run: [64c47303] rundll32.exe "C:\WINDOWS\system32\tjgbjrcd.dll",b
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/200612...ex/qtplugin.cab
O16 - DPF: {02CA9974-B6AC-497E-A371-73580432B0F6} (Eyeball Video Message Control) - http://wildmatch.com/ChatSource/hVideoContol.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {4CCA4E6B-9259-11D9-AC6E-444553544200} (FixController Control) - http://h30155.www3.hp.com/ediags/dd/instal...tallMgr_v01.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by135fd.bay135.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) - http://static.slide.com/uploader/SlideImageUploader.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1160597811609
O16 - DPF: {74E4A24D-5224-4F05-8A41-99445E0FC22B} (GameHouse Games Player) - http://www.gamehouse.com/games/gamehouse/ghplayer.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nick.com/common/groove/gx/GrooveAX27.cab
O16 - DPF: {7CCAD6DD-DD0B-440B-91FF-7670F5AADC21} (SpinTop Games Launcher) - http://www.bigfishgames.com/online/mystery...mesLauncher.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://www.bigfishgames.com/online/luxor2/mjolauncher.cab
O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} (CBSTIEPrint Class) - http://offers.e-centives.com/cif/download/bin/actxcab.cab
O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) - https://media.pineconeresearch.com/ActiveX/...loadcontrol.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/...ro.cab56649.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://www.gamehouse.com/games/delish/zylomplayer.cab
O16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} (Dell PC Checkup Installer Control) - http://pccheckup.dellfix.com/rel/41/install/gtdownde.cab
O16 - DPF: {EF148DBB-5B6D-4130-B2A1-661571E86260} (Playtime Games Launcher) - http://www.gamehouse.com/games/mjescape/PTLauncher.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUpnpService9.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe

--
End of file - 11366 bytes

BC AdBot (Login to Remove)

 


#2 MoNsTeReNeRgY22

MoNsTeReNeRgY22

    1337 Malware Destroyer


  • Members
  • 611 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:24 AM

Posted 12 November 2007 - 11:23 PM

Hello and Welcome to Bleeping Computer.

I am MoNsTeReNeRgY22 and I will be assisting you with your malware problem today.

Please give me some time to analyze your log, and I will post back with instructions ASAP.


Posted Image


#3 Auntie Am

Auntie Am
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Over the Rainbow
  • Local time:05:24 AM

Posted 13 November 2007 - 08:25 AM

Thank you so much! You can't understand how much I appreciate this!

#4 Yourhighness

Yourhighness

    The BSG Malware Fighter


  • Malware Response Team
  • 7,943 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Hamburg
  • Local time:11:24 AM

Posted 14 November 2007 - 02:53 PM

Hey Auntie Am,

Monsterenergy has asked me to take over, as he s going to be away for a bit. I hope you do not mind :thumbsup: .

Please download ComboFix from here.
  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results". (Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.)
  • Close any open browsers
  • Double click ComboFix.exe and follow the prompts.
  • When finished, it shall produce a log for you, combofix.txt. Post that log in your next reply together with a new HijackThis log
Note: Do not mouseclick ComboFix's window whilst it's running. That may cause it to stall

"How did I get infected?" - "Safe-hex" - Member of UNITE -
Posted Image


#5 Auntie Am

Auntie Am
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Over the Rainbow
  • Local time:05:24 AM

Posted 14 November 2007 - 07:34 PM

Here's the ComboFix log:

ComboFix 07-11-08.1 - Amber 2007-11-14 18:14:18.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.98 [GMT -6:00]
Running from: C:\Downloads\ComboFix.exe
* Created a new restore point
.

Unable to gain System Privileges

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Start Menu\Live Safety Center.lnk
C:\Documents and Settings\All Users\Start Menu\Online Security Guide.lnk
C:\Documents and Settings\Amber\Favorites\Online Security Guide.lnk
C:\WINDOWS\cookies.ini
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_boton_big.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_boton_big.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_boton_small.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_boton_small.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_explosion1.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_explosion1.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_highlight.alpha.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_highlight.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_hrzarrows.alpha.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_hrzarrows.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_magiclights.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_magiclights.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_cat.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_cat.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_cbb.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_cbb.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_cbg.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_cbk.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_cbr.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_cbv.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_cbw.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_cby.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_chain.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_fireball.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_fireball.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_misc.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_misc.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_misc2.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_misc2.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_reverse.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_slow.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_speedshot.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_stop.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_pw_wild.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_questionmark.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_questionmark.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_rays.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_rays.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_smallballs.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\_smallballs.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\aol_logo.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_down_disabled.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_down_disabled.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_down_highlight.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_down_highlight.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_down_normal.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_down_normal.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_down_pushed.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_down_pushed.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_left_highlight.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_left_highlight.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_left_normal.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_left_normal.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_right_highlight.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_right_highlight.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_right_normal.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_right_normal.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_up_disabled.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_up_disabled.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_up_highlight.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_up_highlight.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_up_normal.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_up_normal.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_up_pushed.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\arrow_up_pushed.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_1.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_1.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_2.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_3.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_4.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_5.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_6.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_7.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_fireball.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_fireball.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_highlight.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_pusher.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_ray.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_ray.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_shadow.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_supercannonbal15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_wild.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ball_wild.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\barril_top.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\barril_top.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\barril_top_l.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\barril_top_l.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\bigflare.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\bigflare.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\blast.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\blast.emitter
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\blast.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\bomb.emitter
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\boton_big_disabled.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\boton_big_highlight.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\boton_big_normal.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\boton_big_pushed.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\boton_small_disabled.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\boton_small_highlight.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\boton_small_normal.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\boton_small_pushed.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\bright.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\bright.emitter
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\bright.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\brillito01.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\brillito01.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cannonball.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cannonball.emitter
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0000.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0000.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0001.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0001.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0002.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0002.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0003.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0003.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0004.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0004.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0005.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0005.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0006.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0006.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0007.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0007.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0008.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0008.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0009.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0009.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0010.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0010.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0011.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0011.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0012.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0012.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0013.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0013.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0014.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0014.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0015.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0015.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0016.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0016.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0017.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0017.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0018.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0018.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0019.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0019.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0020.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0020.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0021.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0021.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0022.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0022.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0023.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0023.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0024.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0024.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0025.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0025.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0026.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0026.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0027.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0027.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0028.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0028.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0029.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0029.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0030.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0030.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0031.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cat0031.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\categories.ui
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black00.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black01.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black02.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black03.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black04.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black05.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black06.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black07.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black08.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black09.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black10.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black11.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black12.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black13.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black14.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black15.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black16.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black16.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black17.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black17.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black18.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black18.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black19.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black19.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black20.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black20.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black21.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black21.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black22.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black22.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black23.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black23.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black24.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black24.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black25.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black25.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black26.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black26.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black27.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black27.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black28.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black28.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black29.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black29.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black30.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black30.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black31.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_black31.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue00.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue01.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue02.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue03.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue04.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue05.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue06.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue07.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue08.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue09.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue10.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue11.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue12.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue13.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue14.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue15.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue16.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue16.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue17.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue17.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue18.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue18.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue19.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue19.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue20.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue20.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue21.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue21.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue22.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue22.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue23.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue23.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue24.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue24.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue25.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue25.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue26.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue26.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue27.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue27.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue28.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue28.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue29.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue29.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue30.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue30.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue31.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_blue31.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green00.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green01.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green02.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green03.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green04.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green05.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green06.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green07.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green08.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green09.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green10.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green11.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green12.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green13.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green14.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green15.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green16.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green16.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green17.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green17.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green18.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green18.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green19.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green19.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green20.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green20.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green21.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green21.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green22.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green22.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green23.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green23.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green24.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green24.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green25.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green25.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green26.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green26.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green27.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green27.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green28.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green28.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green29.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green29.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green30.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green30.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green31.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_green31.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red00.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red01.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red02.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red03.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red04.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red05.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red06.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red07.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red08.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red09.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red10.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red11.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red12.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red13.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red14.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red15.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red16.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red16.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red17.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red17.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red18.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red18.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red19.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red19.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red20.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red20.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red21.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red21.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red22.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red22.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red23.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red23.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red24.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red24.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red25.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red25.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red26.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red26.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red27.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red27.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red28.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red28.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red29.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red29.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red30.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red30.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red31.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_red31.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet00.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet01.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet02.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet03.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet04.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet05.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet06.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet07.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet08.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet09.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet10.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet11.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet12.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet13.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet14.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet15.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet16.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet16.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet17.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet17.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet18.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet18.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet19.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet19.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet20.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet20.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet21.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet21.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet22.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet22.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet23.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet23.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet24.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet24.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet25.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet25.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet26.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet26.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet27.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet27.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet28.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet28.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet29.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet29.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet30.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet30.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet31.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_violet31.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white00.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white01.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white02.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white03.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white04.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white05.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white06.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white07.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white08.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white09.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white10.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white11.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white12.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white13.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white14.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white15.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white16.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white16.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white17.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white17.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white18.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white18.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white19.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white19.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white20.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white20.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white21.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white21.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white22.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white22.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white23.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white23.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white24.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white24.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white25.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white25.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white26.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white26.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white27.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white27.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white28.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white28.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white29.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white29.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white30.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white30.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white31.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_white31.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow00.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow01.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow02.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow03.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow04.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow05.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow06.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow07.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow08.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow09.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow10.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow11.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow12.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow13.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow14.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow15.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow16.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow16.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow17.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow17.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow18.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow18.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow19.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow19.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow20.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow20.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow21.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow21.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow22.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow22.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow23.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow23.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow24.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow24.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow25.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow25.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow26.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow26.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow27.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow27.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow28.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow28.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow29.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow29.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow30.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow30.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow31.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cbomb_yellow31.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0000.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0000.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0001.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0001.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0002.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0002.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0003.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0003.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0004.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0004.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0005.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0005.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0006.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0006.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0007.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0007.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0008.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0008.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0009.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0009.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0010.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0010.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0011.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0011.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0012.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0012.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0013.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0013.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0014.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0014.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0015.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0015.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0016.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0016.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0017.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0017.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0018.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0018.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0019.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0019.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0020.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0020.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0021.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0021.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0022.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0022.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0023.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0023.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0024.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0024.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0025.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0025.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0026.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0026.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0027.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0027.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0028.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0028.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0029.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0029.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0030.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0030.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0031.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\chain_break0031.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\checkbox_base.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\checkbox_base.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\checkbox_fill.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\checkbox_fill.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\commonfont.mvec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cursor_default.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cursor_default.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cursor_ingame.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\cursor_ingame.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\editbox_back.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\editbox_frame.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_00.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_01.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_02.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_03.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_04.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_05.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_06.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_07.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_08.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_09.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_10.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_11.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_12.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_13.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_14.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_15.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\expl_1_15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\explosion1.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball00.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball01.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball02.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball03.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball04.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball05.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball06.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball07.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball08.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball09.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball10.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball11.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball12.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball13.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball14.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball15.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball16.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball16.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball17.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball17.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball18.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball18.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball19.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball19.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball20.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball20.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball21.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball21.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball22.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball22.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball23.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball23.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball24.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball24.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball25.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball25.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball26.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball26.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball27.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball27.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball28.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball28.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball29.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball29.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball30.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball30.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball31.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\fireball31.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\firetrail_smoke.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\firetrail2.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\flare.emitter
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\frame_back.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\frame_int_back.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\frame_int_bottom.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\frame_int_left.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\frame_int_ll.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\frame_int_lr.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\frame_int_right.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\frame_int_top.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\frame_int_ul.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\frame_int_ur.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\goldcoin.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\goldcoin.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_1.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_1.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_10.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_11.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_12.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_13.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_14.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_15.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_16.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_16.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_2.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_2.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_3.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_3.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_4.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_4.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_5.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_5.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_6.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_6.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_7.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_7.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_8.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_8.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_9.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highlight_9.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highscore_back.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highscore_entry.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highscore_entry.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highscore_entry_highlight.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\highscore_entry_highlight.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\hotfire.emitter
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\hotfire2.emitter
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\howtoplay_back.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\howtoplay_pathback.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\howtoplay_pathback.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\htp_ballfade.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\htp_ballfade.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\loadingscreen.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\login.ui
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\magiclight.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\magiclight.emitter
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\magiclights1.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\magiclights2.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\magiclights3.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\magiclights4.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\magiclights5.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\mainmenu.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_a.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_b.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_c.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_d.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_doble1.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_doble2.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_doble3.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_doble4.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_doble5.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_e.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_e.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_e_ovl1.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_e_ovl1.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_e_ovl2.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_e_ovl2.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_g.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_h.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_h.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_h_ovl1.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_h_ovl1.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_i.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_i.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_j.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_k.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_k.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_k_ovl1.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_k_ovl1.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_k_ovl2.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_k_ovl2.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_k_ovl3.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_k_ovl3.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_l.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_m.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_m.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_n.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_n.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_o.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_o.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_p.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_p.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_q.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_sea1.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_sea2.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_sea2.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_sea2_ovl1.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_sea2_ovl1.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_sea3.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_skull1.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_totem1.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_volcan1.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_volcan2.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_whirlwind1.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_whirlwind1.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_whirlwind1_ovl1.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_whirlwind1_ovl1.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_whirlwind1_ovl2.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_whirlwind1_ovl2.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\map_whirlwind2.map
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\messages.xml
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\moreinfo.ui
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\mouse.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\mouse_left.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\mouse_move.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\mouse_right.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\p1icon.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pearls.theme
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\powerup.emitter
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\powerup_new.template
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pp_button_click.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\preload-anims.txt
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\preload-emitter.txt
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\preload-images.txt
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\preload-music.txt
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\preload-sounds.txt
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\prescaled.txt
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\progress_done.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\progress_full.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\progressbar_ball.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\progressbar_ball.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_back.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_chains.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_colorbomb_1.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_colorbomb_2.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_colorbomb_3.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_colorbomb_4.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_colorbomb_5.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_colorbomb_6.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_colorbomb_7.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_fireball.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_ray.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_sight.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_slow.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_stop.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\pu_wildball.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\puzzleballs.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\puzzleballs.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0000.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0000.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0001.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0001.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0002.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0002.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0003.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0003.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0004.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0004.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0005.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0005.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0006.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0006.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0007.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0007.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0008.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0008.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0009.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0009.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0010.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0010.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0011.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0011.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0012.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0012.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0013.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0013.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0014.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0014.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0015.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0015.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0016.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0016.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0017.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0017.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0018.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0018.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0019.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\question0019.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\questionmark.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rayos15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\resource-alias.txt
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0000.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0000.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0001.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0001.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0002.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0002.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0003.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0003.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0004.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0004.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0005.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0005.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0006.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0006.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0007.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0007.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0008.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0008.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0009.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0009.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0010.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0010.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0011.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0011.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0012.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0012.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0013.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0013.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0014.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0014.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0015.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0015.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0016.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0016.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0017.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0017.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0018.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0018.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0019.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0019.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0020.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0020.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0021.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0021.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0022.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0022.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0023.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0023.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0024.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0024.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0025.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0025.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0026.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0026.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0027.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0027.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0028.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0028.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0029.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0029.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0030.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0030.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0031.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\reverse0031.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ribbon.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\ribbon.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rieles.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\rieles.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\schwrzw.mvec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\screen1.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\screen2.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\screen3.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\screen4.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\screen5.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\screen6.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\screen7.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\separator.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_break_pusher.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_explosion.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_goalreached.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_insert.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_launch_ball.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_launch_bomb.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_launcher_reload.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_lose.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_match_1.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_match_2.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_merge.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_powerup.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_roll.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_spawn_chain.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_spawn_powerup.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_startlevel.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_swap_ball.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sfx_win_level.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\shooter.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\shooter.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\shooter_top.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\shooter_top.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sight.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\sight.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\silvercoin.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\silvercoin.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slider_empty.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slider_empty.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slider_fill.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slider_fill.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slider_thumb.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slider_thumb.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow00.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow01.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow02.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow03.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow04.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow05.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow06.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow07.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow08.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow09.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow10.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow11.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow12.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow13.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow14.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow15.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow16.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow16.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow17.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow17.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow18.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow18.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow19.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow19.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow20.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow20.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow21.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow21.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow22.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow22.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow23.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow23.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow24.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow24.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow25.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow25.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow26.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow26.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow27.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow27.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow28.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow28.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow29.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow29.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow30.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow30.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow31.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\slow31.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smallball_black.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smallball_blue.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smallball_cannon.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smallball_empty.png
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smallball_fireball.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smallball_green.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smallball_red.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smallball_violet.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smallball_white2.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smallball_wildcard.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smallball_yellow.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smallflare.emitter
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke_1.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke_1.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke_2.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke_2.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke_3.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke_3.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke_w_1.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke_w_1.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke_w_2.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke_w_2.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke_w_3.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoke_w_3.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoketrail.emitter
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\smoketrail2.emitter
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0000.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0000.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0001.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0001.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0002.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0002.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0003.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0003.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0004.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0004.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0005.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0005.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0006.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0006.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0007.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0007.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0008.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0008.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0009.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0009.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0010.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0010.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0011.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0011.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0012.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0012.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0013.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0013.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0014.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0014.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0015.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0015.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0016.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0016.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0017.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0017.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0018.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0018.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0019.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0019.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0020.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0020.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0021.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0021.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0022.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0022.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0023.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0023.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0024.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0024.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0025.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0025.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0026.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0026.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0027.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0027.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0028.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0028.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0029.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0029.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0030.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0030.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0031.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\speed0031.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\splash_marino.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\splash_mystery.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\splash_playfirst.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\st_game_short.ogg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\statusbar_arcade.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\statusbar_arcade.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\statusbar_puzzle.alpha.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\statusbar_puzzle.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop00.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop00.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop01.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop01.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop02.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop02.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop03.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop03.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop04.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop04.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop05.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop05.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop06.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop06.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop07.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop07.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop08.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop08.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop09.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop09.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop10.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop10.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop11.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop11.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop12.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop12.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop13.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop13.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop14.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop14.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop15.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop15.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop16.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop16.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop17.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop17.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop18.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop18.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop19.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop19.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop20.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop20.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop21.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop21.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop22.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop22.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop23.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop23.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop24.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop24.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop25.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop25.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop26.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop26.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop27.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop27.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop28.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop28.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop29.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop29.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop30.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop30.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop31.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\stop31.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\submit.ui
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\upsell.jpg
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\webmessages.xml
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\whitesmoke.anim
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0000.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0000.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0001.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0001.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0002.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0002.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0003.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0003.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0004.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0004.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0005.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0005.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0006.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0006.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0007.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0007.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0008.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0008.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0009.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0009.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0010.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0010.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0011.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0011.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0012.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0012.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0013.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0013.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0014.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0014.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0015.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0015.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0016.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0016.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0017.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0017.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0018.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0018.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0019.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0019.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0020.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0020.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0021.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0021.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0022.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0022.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0023.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0023.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0024.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0024.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0025.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0025.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0026.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0026.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0027.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0027.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0028.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0028.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0029.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0029.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0030.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0030.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0031.spec
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\assets\wildcard0031.subimage
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.24\piratepoppers.exe
C:\WINDOWS\system32\jkklm.dll
C:\WINDOWS\system32\mlkkj.bak1
C:\WINDOWS\system32\mlkkj.bak2
C:\WINDOWS\system32\mlkkj.ini
C:\WINDOWS\system32\xkguwkbk.dllbox

.
((((((((((((((((((((((((( Files Created from 2007-10-15 to 2007-11-15 )))))))))))))))))))))))))))))))
.

2007-11-14 18:13 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-11-14 18:03 79,424 --a------ C:\WINDOWS\system32\pokmvqpu.dll
2007-11-14 17:57 85,056 --a------ C:\WINDOWS\system32\mxjliyuk.dll
2007-11-14 17:52 142,100 --a------ C:\WINDOWS\system32\njuhsbkg.dll
2007-11-13 06:57 80,448 --a------ C:\WINDOWS\system32\qjbesjqq.dll
2007-11-13 06:51 143,522 --a------ C:\WINDOWS\system32\yfgwaeiu.dll
2007-11-12 07:01 81,472 --a------ C:\WINDOWS\system32\vnsxdjed.dll
2007-11-12 06:52 143,522 --a------ C:\WINDOWS\system32\qiloguwb.dll
2007-11-11 22:41 <DIR> d-------- C:\Program Files\STOPzilla!
2007-11-11 22:41 <DIR> d-------- C:\Program Files\Common Files\iS3
2007-11-11 22:41 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\STOPzilla!
2007-11-11 20:29 102,664 --a------ C:\WINDOWS\system32\drivers\tmcomm.sys
2007-11-11 20:26 <DIR> d-------- C:\Documents and Settings\Amber\.housecall6.6
2007-11-11 19:25 <DIR> d-------- C:\Program Files\Trend Micro
2007-11-11 11:39 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-11 10:29 <DIR> d-------- C:\Program Files\Windows Sidebar
2007-11-11 10:28 <DIR> d-------- C:\Program Files\Norton Internet Security
2007-11-11 10:27 123,952 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2007-11-11 10:27 60,800 --a------ C:\WINDOWS\system32\S32EVNT1.DLL
2007-11-11 10:12 <DIR> d-------- C:\Documents and Settings\All Users\Symantec Temporary Files
2007-11-11 09:05 <DIR> d-------- C:\Program Files\Lavasoft
2007-11-11 09:05 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-11-11 09:03 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-11-10 18:42 36,352 --a------ C:\WINDOWS\system32\qomjjih.dll
2007-10-28 16:03 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\GameHouse
2007-10-27 10:17 <DIR> d-------- C:\Program Files\Norton AntiVirus
2007-10-21 12:25 <DIR> d-------- C:\WINDOWS\SOFTDISK
2007-10-21 12:13 <DIR> d-------- C:\Documents and Settings\Amber\Application Data\GetRightToGo
2007-10-21 12:13 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Softdisk LLC
2007-10-21 12:10 <DIR> d-------- C:\Program Files\Halloween Dance 3D Screensaver
2007-10-21 12:10 <DIR> d-------- C:\Documents and Settings\Amber\Application Data\TERMINAL Studio
2007-10-21 12:10 92,216 --a------ C:\WINDOWS\system32\bass.dll
2007-10-21 11:25 18,432 --a------ C:\WINDOWS\ss3unstl.exe
2007-10-21 11:23 <DIR> d-------- C:\Documents and Settings\Amber\Application Data\elefundesktops
2007-10-20 21:21 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\HipSoft

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-15 00:27 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-11-15 00:10 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2007-11-14 23:56 --------- d-----w C:\Program Files\lx_cats
2007-11-14 01:24 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF
2007-11-14 01:24 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2007-11-14 01:24 --------- d-----w C:\Program Files\Symantec
2007-11-14 00:20 17,154 ----a-w C:\Documents and Settings\Amber\Application Data\wklnhst.dat
2007-11-12 04:44 1,024 ----a-w C:\WINDOWS\system32\drivers\EFB6A81F-56DE-4154-AA6C-8B34E4B36FF6.cxv
2007-11-11 16:31 --------- d-----w C:\Documents and Settings\Amber\Application Data\Symantec
2007-10-28 23:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Zylom
2007-10-27 15:04 --------- d-----w C:\Program Files\Winamp
2007-10-21 18:25 --------- d-----w C:\Program Files\Java
2007-10-21 15:42 --------- d-----w C:\Program Files\MySpace
2007-10-07 06:05 --------- d-----w C:\Program Files\Common Files\Sonic Shared
2007-10-07 06:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sonic
2007-10-07 06:04 --------- d-----w C:\Program Files\Sonic
2007-10-07 06:03 --------- d-----w C:\Program Files\Dell
2007-10-06 19:08 --------- d-----w C:\Program Files\TaxCut06
2007-10-06 19:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\WinZip
2007-10-06 19:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\pdf995
2007-10-06 18:50 --------- d-----w C:\Program Files\JustZIPit
2007-09-18 20:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspx.cat
2007-09-18 20:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspl.cat
2007-09-18 20:44 10,658 ----a-w C:\WINDOWS\system32\drivers\srtsp.cat
2007-09-18 20:44 1,430 ----a-w C:\WINDOWS\system32\drivers\srtspl.inf
2007-09-18 20:44 1,421 ----a-w C:\WINDOWS\system32\drivers\srtspx.inf
2007-09-18 20:44 1,415 ----a-w C:\WINDOWS\system32\drivers\srtsp.inf
2007-09-18 20:43 43,696 ----a-w C:\WINDOWS\system32\drivers\srtspx.sys
2007-09-18 20:43 317,616 ----a-w C:\WINDOWS\system32\drivers\srtspl.sys
2007-09-18 20:43 278,576 ----a-w C:\WINDOWS\system32\drivers\srtsp.sys
2007-06-20 01:24 90,648 -c--a-w C:\Documents and Settings\Amber\Application Data\GDIPFONTCACHEV1.DAT
2006-11-10 20:42 251 -c--a-w C:\Program Files\wt3d.ini
2007-04-17 23:08:50 88 -csh--r C:\WINDOWS\system32\15BB5C4568.sys
2007-04-17 23:08:52 3,766 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{01CD0B31-9154-45F2-9414-F5D64B74EAF6}]
2007-11-10 18:42 36352 --a------ C:\WINDOWS\system32\qomjjih.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
2007-08-24 21:51 316784 --a------ C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
2007-11-11 10:29 116088 --a------ C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{952d15b9-787a-4f37-b461-18aa91db6d83}]
2007-11-14 18:03 79424 --a------ C:\WINDOWS\system32\pokmvqpu.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"= C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll [2007-08-24 21:51 316784]

[HKEY_CLASSES_ROOT\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar.1]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"= C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll [2007-08-24 21:51 316784]

[HKEY_CLASSES_ROOT\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar.1]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2006-08-23 18:12 C:\WINDOWS\system32\nwiz.exe]
"NVRaidService"="C:\WINDOWS\system32\nvraidservice.exe" [2006-08-05 08:01]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-08-23 18:12]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-08-23 18:12]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 09:44]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 09:44]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe" [2002-12-09 18:19]
"lxcrmon.exe"="C:\Program Files\Lexmark 2400 Series\lxcrmon.exe" [2006-01-22 11:45]
"EzPrint"="C:\Program Files\Lexmark 2400 Series\ezprint.exe" [2006-02-06 23:10]
"FaxCenterServer"="C:\Program Files\Lexmark Fax Solutions\fm3032.exe" [2006-02-02 02:11]
"LXCRCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll" [2005-12-01 12:38]
"type32"="C:\Program Files\Microsoft IntelliType Pro\type32.exe" [2005-03-15 03:46]
"POINTER"="point32.exe" []
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-02-16 10:54]
"SigmatelSysTrayApp"="stsystra.exe" [2006-07-27 13:19 C:\WINDOWS\stsystra.exe]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-08-24 23:07]
"Norton Ghost 10.0"="C:\Program Files\Norton Ghost\Agent\GhostTray.exe" [2007-04-10 11:01]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 18:51]
"DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2006-09-21 04:20]
"DMXLauncher"="C:\Program Files\Sonic\Product\Media Experience\DMXLauncher.exe" [2007-04-02 04:24]
"osCheck"="C:\Program Files\Norton Internet Security\osCheck.exe" [2007-08-24 22:53]
"64c47303"="C:\WINDOWS\system32\mxjliyuk.dll" [2007-11-14 17:58]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 04:00]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 10:09]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2007-03-01 21:32:27]
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2006-10-04 13:30:15]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 00:01:04]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{01CD0B31-9154-45F2-9414-F5D64B74EAF6}"= C:\WINDOWS\system32\qomjjih.dll [2007-11-10 18:42 36352]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qomjjih]
qomjjih.dll 2007-11-10 18:42 36352 C:\WINDOWS\system32\qomjjih.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 C:\WINDOWS\system32\jkklm.dll


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"tmproxy"=2 (0x2)
"TmPfw"=2 (0x2)
"Tmntsrv"=2 (0x2)
"PcCtlCom"=2 (0x2)
"AOL ACS"=2 (0x2)

R1 V2IMount;V2IMount;C:\WINDOWS\system32\drivers\V2IMount.sys
R2 LiveUpdate Notice;LiveUpdate Notice;"C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
R3 SymIMMP;SymIMMP;C:\WINDOWS\system32\DRIVERS\SymIM.sys
S2 DPPSUSB;DPPSUSB.Sys Sony DPP-SV55 USB Digital Photo Printer Driver;C:\WINDOWS\system32\Drivers\DPPSUSB.sys
S3 COH_Mon;COH_Mon;\??\C:\WINDOWS\system32\Drivers\COH_Mon.sys
S3 SymIM;Symantec Network Security Intermediate Filter Service;C:\WINDOWS\system32\DRIVERS\SymIM.sys

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}]
\Shell\AutoRun\command - E:\setup.exe

*Newly Created Service* - COMHOST
.
Contents of the 'Scheduled Tasks' folder
"2007-11-13 02:36:12 C:\WINDOWS\Tasks\Norton Internet Security - Run Full System Scan - Amber.job"
- C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exe
.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-14 18:27:31
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-11-14 18:30:34 - machine was rebooted
.
--- E O F ---

#6 Auntie Am

Auntie Am
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Over the Rainbow
  • Local time:05:24 AM

Posted 14 November 2007 - 07:35 PM

Here's the HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:34:44 PM, on 11/14/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\nvraidservice.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
C:\Program Files\Lexmark 2400 Series\ezprint.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\lxcrcoms.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Norton Ghost\Agent\GhostTray.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Sonic\Product\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?rs=1
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=6061004
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O3 - Toolbar: STOPzilla - {98828DED-A591-462F-83BA-D2F62A68B8B8} - C:\Program Files\STOPzilla!\SZSG.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NVRaidService] C:\WINDOWS\system32\nvraidservice.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Norton Ghost 10.0] "C:\Program Files\Norton Ghost\Agent\GhostTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [DMXLauncher] "C:\Program Files\Sonic\Product\Media Experience\DMXLauncher.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [64c47303] rundll32.exe "C:\WINDOWS\system32\mxjliyuk.dll",b
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/200612...ex/qtplugin.cab
O16 - DPF: {02CA9974-B6AC-497E-A371-73580432B0F6} (Eyeball Video Message Control) - http://wildmatch.com/ChatSource/hVideoContol.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {4CCA4E6B-9259-11D9-AC6E-444553544200} (FixController Control) - http://h30155.www3.hp.com/ediags/dd/instal...tallMgr_v01.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by135fd.bay135.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) - http://static.slide.com/uploader/SlideImageUploader.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1160597811609
O16 - DPF: {74E4A24D-5224-4F05-8A41-99445E0FC22B} (GameHouse Games Player) - http://www.gamehouse.com/games/gamehouse/ghplayer.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nick.com/common/groove/gx/GrooveAX27.cab
O16 - DPF: {7CCAD6DD-DD0B-440B-91FF-7670F5AADC21} (SpinTop Games Launcher) - http://www.bigfishgames.com/online/mystery...mesLauncher.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://www.bigfishgames.com/online/luxor2/mjolauncher.cab
O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} (CBSTIEPrint Class) - http://offers.e-centives.com/cif/download/bin/actxcab.cab
O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) - https://media.pineconeresearch.com/ActiveX/...loadcontrol.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/...ro.cab56649.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://www.gamehouse.com/games/delish/zylomplayer.cab
O16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} (Dell PC Checkup Installer Control) - http://pccheckup.dellfix.com/rel/41/install/gtdownde.cab
O16 - DPF: {EF148DBB-5B6D-4130-B2A1-661571E86260} (Playtime Games Launcher) - http://www.gamehouse.com/games/mjescape/PTLauncher.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUpnpService9.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe

--
End of file - 11404 bytes

#7 Auntie Am

Auntie Am
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Over the Rainbow
  • Local time:05:24 AM

Posted 14 November 2007 - 07:42 PM

And no, I don't mind you taking over. I'm grateful to anyone who can help me with this junk! I realize how stupid I was in letting my Norton lapse for a couple of weeks before re-newing. But, so far, it hasn't detected any of these nasty little guys so it would not have helped anyways.

Thanks again!

#8 Yourhighness

Yourhighness

    The BSG Malware Fighter


  • Malware Response Team
  • 7,943 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Hamburg
  • Local time:11:24 AM

Posted 15 November 2007 - 04:51 PM

Hi Auntie Am, this is just so you know I got a notification of your post. I ve been out on a business function tonight and its late, so I just want to let you know that my response might take a tiny bit longer. Apologies for the delay and thanks for your understanding.

Johannes

"How did I get infected?" - "Safe-hex" - Member of UNITE -
Posted Image


#9 Yourhighness

Yourhighness

    The BSG Malware Fighter


  • Malware Response Team
  • 7,943 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Hamburg
  • Local time:11:24 AM

Posted 18 November 2007 - 09:12 AM

Hi Auntie Am,

apologies for the delay, but here we go.

Step #1
  • Open notepad and copy/paste the text in the codebox below into it:

    http://www.bleepingcomputer.com/forums/t/116140/virtumonde-winhealer-lsp-coolwebsearch-vundo-more/?p=662129
    
    Registry::
    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{01CD0B31-9154-45F2-9414-F5D64B74EAF6}]
    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{952d15b9-787a-4f37-b461-18aa91db6d83}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "64c47303"=-
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{01CD0B31-9154-45F2-9414-F5D64B74EAF6}"=-
    [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qomjjih]
    [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}]
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    "Authentication Packages"=hex(7):6d,73,76,31,5f,30,00,00
    [-HKEY_CLASSES_ROOT\CLSID\{01CD0B31-9154-45F2-9414-F5D64B74EAF6}]
    [-HKEY_CLASSES_ROOT\CLSID\{952d15b9-787a-4f37-b461-18aa91db6d83}]
    [-HKEY_CLASSES_ROOT\CLSID\{361ac05d-0e0d-11da-9aa9-806d6172696f}]
    
    Collect::
    C:\WINDOWS\system32\pokmvqpu.dll
    C:\WINDOWS\system32\mxjliyuk.dll
    C:\WINDOWS\system32\njuhsbkg.dll
    C:\WINDOWS\system32\qjbesjqq.dll
    C:\WINDOWS\system32\yfgwaeiu.dll
    C:\WINDOWS\system32\vnsxdjed.dll
    C:\WINDOWS\system32\qiloguwb.dll
    C:\WINDOWS\system32\qomjjih.dll
    C:\WINDOWS\system32\15BB5C4568.sys
    C:\WINDOWS\ss3unstl.exe
  • Save this as CFScript.txt

    Posted Image
  • Refering to the picture above, drag CFScript.txt into ComboFix.exe
  • When finished, it shall produce a log for you, C:\ComboFix.txt. Post that log in your next reply.
    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall
  • Additonally, ComboFix will generate a zipped file on your desktop called Submit [Date Time].zip
    Please submit this file to:

    http://www.bleepingcomputer.com/submit-malware.php?channel=4

    Please include a link to this topic in the message.
Step #2

Please post back with a fresh HijackThis log and the ComboFix log. Thanks.

"How did I get infected?" - "Safe-hex" - Member of UNITE -
Posted Image


#10 Auntie Am

Auntie Am
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Over the Rainbow
  • Local time:05:24 AM

Posted 18 November 2007 - 02:45 PM

When I save the text file - do I keep the top 2 lines of "http://www.bleepingcomputer.com/forums/t/116140/virtumonde-winhealer-lsp-coolwebsearch-vundo-more/?p=662129" on there or take it off?

A million thanks!

#11 Yourhighness

Yourhighness

    The BSG Malware Fighter


  • Malware Response Team
  • 7,943 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Hamburg
  • Local time:11:24 AM

Posted 18 November 2007 - 02:56 PM

Hi Auntie Am,

yes. Please save everything in the codebox as described in my previous post.

Thanks.

"How did I get infected?" - "Safe-hex" - Member of UNITE -
Posted Image


#12 Auntie Am

Auntie Am
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Over the Rainbow
  • Local time:05:24 AM

Posted 18 November 2007 - 03:27 PM

It popped up a screen for me which said it will "Submit malware to Bleeping Computer for analysis" and wants me to copy and past the file and press send. Should I do that or go to the address you sent me to do that (http://www.bleepingcomputer.com/submit-malware.php?channel=4) or are they both the same?

#13 Yourhighness

Yourhighness

    The BSG Malware Fighter


  • Malware Response Team
  • 7,943 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Hamburg
  • Local time:11:24 AM

Posted 18 November 2007 - 03:32 PM

Apologies, its both the same. Just use the html file that popped open and disregard the link.

Edited by Yourhighness, 18 November 2007 - 03:33 PM.

"How did I get infected?" - "Safe-hex" - Member of UNITE -
Posted Image


#14 Auntie Am

Auntie Am
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Over the Rainbow
  • Local time:05:24 AM

Posted 18 November 2007 - 03:36 PM

It said to let you know the file was submitted.

Hijack log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:34:58 PM, on 11/18/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\STOPzilla!\STOPzilla.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\nvraidservice.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
C:\Program Files\Lexmark 2400 Series\ezprint.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Norton Ghost\Agent\GhostTray.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\system32\lxcrcoms.exe
C:\Program Files\Sonic\Product\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?rs=1
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=6061004
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SITEguard BHO - {1827766B-9F49-4854-8034-F6EE26FCB1EC} - C:\Program Files\STOPzilla!\SZSG.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O3 - Toolbar: STOPzilla - {98828DED-A591-462F-83BA-D2F62A68B8B8} - C:\Program Files\STOPzilla!\SZSG.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NVRaidService] C:\WINDOWS\system32\nvraidservice.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Norton Ghost 10.0] "C:\Program Files\Norton Ghost\Agent\GhostTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [DMXLauncher] "C:\Program Files\Sonic\Product\Media Experience\DMXLauncher.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/200612...ex/qtplugin.cab
O16 - DPF: {02CA9974-B6AC-497E-A371-73580432B0F6} (Eyeball Video Message Control) - http://wildmatch.com/ChatSource/hVideoContol.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {4CCA4E6B-9259-11D9-AC6E-444553544200} (FixController Control) - http://h30155.www3.hp.com/ediags/dd/instal...tallMgr_v01.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by135fd.bay135.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) - http://static.slide.com/uploader/SlideImageUploader.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1160597811609
O16 - DPF: {74E4A24D-5224-4F05-8A41-99445E0FC22B} (GameHouse Games Player) - http://www.gamehouse.com/games/gamehouse/ghplayer.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nick.com/common/groove/gx/GrooveAX27.cab
O16 - DPF: {7CCAD6DD-DD0B-440B-91FF-7670F5AADC21} (SpinTop Games Launcher) - http://www.bigfishgames.com/online/mystery...mesLauncher.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://www.bigfishgames.com/online/luxor2/mjolauncher.cab
O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} (CBSTIEPrint Class) - http://offers.e-centives.com/cif/download/bin/actxcab.cab
O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) - https://media.pineconeresearch.com/ActiveX/...loadcontrol.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/...ro.cab56649.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://www.gamehouse.com/games/delish/zylomplayer.cab
O16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} (Dell PC Checkup Installer Control) - http://pccheckup.dellfix.com/rel/41/install/gtdownde.cab
O16 - DPF: {EF148DBB-5B6D-4130-B2A1-661571E86260} (Playtime Games Launcher) - http://www.gamehouse.com/games/mjescape/PTLauncher.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUpnpService9.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe

--
End of file - 12393 bytes





ComboFix log:
ComboFix 07-11-08.1 - Amber 2007-11-18 14:13:23.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.98 [GMT -6:00]
Running from: C:\Downloads\ComboFix.exe
Command switches used :: C:\Downloads\CFScript.txt.txt
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\cookies.ini
C:\WINDOWS\ss3unstl.exe
C:\WINDOWS\system32\15BB5C4568.sys
C:\WINDOWS\system32\njuhsbkg.dll
C:\WINDOWS\system32\pokmvqpu.dll
C:\WINDOWS\system32\qiloguwb.dll
C:\WINDOWS\system32\vnsxdjed.dll
C:\WINDOWS\system32\yfgwaeiu.dll

.
((((((((((((((((((((((((( Files Created from 2007-10-18 to 2007-11-18 )))))))))))))))))))))))))))))))
.

2007-11-16 06:48 81,984 --a------ C:\WINDOWS\system32\bdvntrdb.dll
2007-11-16 06:45 85,056 --a------ C:\WINDOWS\system32\bqcdtkge.dll
2007-11-16 06:39 143,522 --a------ C:\WINDOWS\system32\yoqbnjeq.dll
2007-11-15 06:46 79,936 --a------ C:\WINDOWS\system32\paiqknxm.dll
2007-11-15 06:37 143,552 --a------ C:\WINDOWS\system32\dsiabebq.dll
2007-11-14 18:34 434,107 --ahs---- C:\WINDOWS\system32\fhkmp.ini2
2007-11-14 18:13 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-11-11 22:41 <DIR> d-------- C:\Program Files\STOPzilla!
2007-11-11 22:41 <DIR> d-------- C:\Program Files\Common Files\iS3
2007-11-11 22:41 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\STOPzilla!
2007-11-11 20:29 102,664 --a------ C:\WINDOWS\system32\drivers\tmcomm.sys
2007-11-11 20:26 <DIR> d-------- C:\Documents and Settings\Amber\.housecall6.6
2007-11-11 19:25 <DIR> d-------- C:\Program Files\Trend Micro
2007-11-11 11:39 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-11 10:29 <DIR> d-------- C:\Program Files\Windows Sidebar
2007-11-11 10:28 <DIR> d-------- C:\Program Files\Norton Internet Security
2007-11-11 10:27 123,952 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2007-11-11 10:27 60,800 --a------ C:\WINDOWS\system32\S32EVNT1.DLL
2007-11-11 10:12 <DIR> d-------- C:\Documents and Settings\All Users\Symantec Temporary Files
2007-11-11 09:05 <DIR> d-------- C:\Program Files\Lavasoft
2007-11-11 09:05 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-11-11 09:03 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-10-28 16:03 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\GameHouse
2007-10-27 10:17 <DIR> d-------- C:\Program Files\Norton AntiVirus
2007-10-21 12:25 <DIR> d-------- C:\WINDOWS\SOFTDISK
2007-10-21 12:13 <DIR> d-------- C:\Documents and Settings\Amber\Application Data\GetRightToGo
2007-10-21 12:13 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Softdisk LLC
2007-10-21 12:10 <DIR> d-------- C:\Program Files\Halloween Dance 3D Screensaver
2007-10-21 12:10 <DIR> d-------- C:\Documents and Settings\Amber\Application Data\TERMINAL Studio
2007-10-21 12:10 92,216 --a------ C:\WINDOWS\system32\bass.dll
2007-10-21 11:23 <DIR> d-------- C:\Documents and Settings\Amber\Application Data\elefundesktops
2007-10-20 21:21 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\HipSoft

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-18 19:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2007-11-18 16:43 17,448 ----a-w C:\Documents and Settings\Amber\Application Data\wklnhst.dat
2007-11-18 06:00 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-11-17 00:59 --------- d-----w C:\Program Files\lx_cats
2007-11-17 00:49 1,024 ----a-w C:\WINDOWS\system32\drivers\ACFD6E28-5D97-4E1F-96D9-E84B713BD118.cxv
2007-11-16 22:48 3,072 ----a-w C:\WINDOWS\system32\drivers\5ECEDD04-7763-44A6-872B-845BF3812B1A.cxv
2007-11-14 01:24 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF
2007-11-14 01:24 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2007-11-14 01:24 --------- d-----w C:\Program Files\Symantec
2007-11-12 04:44 1,024 ----a-w C:\WINDOWS\system32\drivers\EFB6A81F-56DE-4154-AA6C-8B34E4B36FF6.cxv
2007-11-11 16:31 --------- d-----w C:\Documents and Settings\Amber\Application Data\Symantec
2007-10-28 23:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Zylom
2007-10-27 15:04 --------- d-----w C:\Program Files\Winamp
2007-10-21 18:25 --------- d-----w C:\Program Files\Java
2007-10-21 15:42 --------- d-----w C:\Program Files\MySpace
2007-10-07 06:05 --------- d-----w C:\Program Files\Common Files\Sonic Shared
2007-10-07 06:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sonic
2007-10-07 06:04 --------- d-----w C:\Program Files\Sonic
2007-10-07 06:03 --------- d-----w C:\Program Files\Dell
2007-10-06 19:08 --------- d-----w C:\Program Files\TaxCut06
2007-10-06 19:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\WinZip
2007-10-06 19:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\pdf995
2007-10-06 18:50 --------- d-----w C:\Program Files\JustZIPit
2007-09-18 20:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspx.cat
2007-09-18 20:44 10,662 ----a-w C:\WINDOWS\system32\drivers\srtspl.cat
2007-09-18 20:44 10,658 ----a-w C:\WINDOWS\system32\drivers\srtsp.cat
2007-09-18 20:44 1,430 ----a-w C:\WINDOWS\system32\drivers\srtspl.inf
2007-09-18 20:44 1,421 ----a-w C:\WINDOWS\system32\drivers\srtspx.inf
2007-09-18 20:44 1,415 ----a-w C:\WINDOWS\system32\drivers\srtsp.inf
2007-09-18 20:43 43,696 ----a-w C:\WINDOWS\system32\drivers\srtspx.sys
2007-09-18 20:43 317,616 ----a-w C:\WINDOWS\system32\drivers\srtspl.sys
2007-09-18 20:43 278,576 ----a-w C:\WINDOWS\system32\drivers\srtsp.sys
2007-06-20 01:24 90,648 -c--a-w C:\Documents and Settings\Amber\Application Data\GDIPFONTCACHEV1.DAT
2006-11-10 20:42 251 -c--a-w C:\Program Files\wt3d.ini
2007-04-17 23:08:52 3,766 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
2007-08-24 21:51 316784 --a------ C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
2007-11-11 10:29 116088 --a------ C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"= C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll [2007-08-24 21:51 316784]

[HKEY_CLASSES_ROOT\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar.1]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"= C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll [2007-08-24 21:51 316784]

[HKEY_CLASSES_ROOT\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar.1]
[HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2006-08-23 18:12 C:\WINDOWS\system32\nwiz.exe]
"NVRaidService"="C:\WINDOWS\system32\nvraidservice.exe" [2006-08-05 08:01]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-08-23 18:12]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-08-23 18:12]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 09:44]
"ISUSPM Startup"="c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 09:44]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe" [2002-12-09 18:19]
"lxcrmon.exe"="C:\Program Files\Lexmark 2400 Series\lxcrmon.exe" [2006-01-22 11:45]
"EzPrint"="C:\Program Files\Lexmark 2400 Series\ezprint.exe" [2006-02-06 23:10]
"FaxCenterServer"="C:\Program Files\Lexmark Fax Solutions\fm3032.exe" [2006-02-02 02:11]
"LXCRCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll" [2005-12-01 12:38]
"type32"="C:\Program Files\Microsoft IntelliType Pro\type32.exe" [2005-03-15 03:46]
"POINTER"="point32.exe" []
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-02-16 10:54]
"SigmatelSysTrayApp"="stsystra.exe" [2006-07-27 13:19 C:\WINDOWS\stsystra.exe]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-08-24 23:07]
"Norton Ghost 10.0"="C:\Program Files\Norton Ghost\Agent\GhostTray.exe" [2007-04-10 11:01]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 18:51]
"DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2006-09-21 04:20]
"DMXLauncher"="C:\Program Files\Sonic\Product\Media Experience\DMXLauncher.exe" [2007-04-02 04:24]
"osCheck"="C:\Program Files\Norton Internet Security\osCheck.exe" [2007-08-24 22:53]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 04:00]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 10:09]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2007-03-01 21:32:27]
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2006-10-04 13:30:15]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 00:01:04]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"tmproxy"=2 (0x2)
"TmPfw"=2 (0x2)
"Tmntsrv"=2 (0x2)
"PcCtlCom"=2 (0x2)
"AOL ACS"=2 (0x2)


*Newly Created Service* - COMHOST
.
Contents of the 'Scheduled Tasks' folder
"2007-11-18 09:00:00 C:\WINDOWS\Tasks\Norton Internet Security - Run Full System Scan - Amber.job"
- C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exe
.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-18 14:19:11
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************
.
Completion time: 2007-11-18 14:21:40 - machine was rebooted
C:\ComboFix2.txt ... 2007-11-14 18:30
.
--- E O F ---

#15 Yourhighness

Yourhighness

    The BSG Malware Fighter


  • Malware Response Team
  • 7,943 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Hamburg
  • Local time:11:24 AM

Posted 19 November 2007 - 12:00 AM

Hey Auntie Am,

thanks for posting back. Looking better already :blink: .

Step #1


Like above, please create another CFScript.txt file with the following contents:

http://www.bleepingcomputer.com/forums/t/116140/virtumonde-winhealer-lsp-coolwebsearch-vundo-more/?p=665058

Collect::
C:\WINDOWS\system32\bdvntrdb.dll
C:\WINDOWS\system32\bqcdtkge.dll
C:\WINDOWS\system32\yoqbnjeq.dll
C:\WINDOWS\system32\paiqknxm.dll
C:\WINDOWS\system32\dsiabebq.dll
C:\WINDOWS\system32\fhkmp.ini2

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{02CA9974-B6AC-497E-A371-73580432B0F6}]
[-HKEY_CLASSES_ROOT\CLSID\{02CA9974-B6AC-497E-A371-73580432B0F6}]

When asked, please submit the file again. Thanks.

Step #2

Are you running a programme called "Child Custody Calender" ?

Step #3

Please run the F-Secure Online Scanner
Note: This Scanner is for Internet Explorer Only!
  • Follow the Instruction Here for installation.
  • Accept the License Agreement.
  • Once the ActiveX installs,Click Full System Scan
  • Once the download completes,the scan will begin automatically.
  • The scan will take some time to finish,so please be patient.
  • When the scan completes, click the Automatic cleaning (recommended) button.
  • Click the Show Report button and Copy&Paste the entire report in your next reply.
Step #4

Please post back with a fresh log from ComboFix, the F-Secure Onlinescanner log and a fresh HijackThis log.

Dankeschoen :thumbsup:

"How did I get infected?" - "Safe-hex" - Member of UNITE -
Posted Image





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users