Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Storage Protector - This One's A Bugger.


  • Please log in to reply
2 replies to this topic

#1 Gen Nephlite

Gen Nephlite

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:08 AM

Posted 21 January 2008 - 09:29 PM

Alright, well i've looked through some other help topics and files about this, but they haven't worked.

I've been infected with an unknown (to me) virus of some sort, which is pestering and devouring hard disk space trying to get me to install a program called "Storage Protector". It creates two links on the desktop in the disguise of "Windows Update" and "Help and Support Center"

Both links point to storageprotector.com

One of the reasons the other guides have failed me is because the files it produces are randomly generated.
It creates a randomly generated name (or it could be from a very large list) for processes being run. The one running this time is "gjegsees.exe"
On other instances it runs two at a time, and under differant gibberish names, and there is an .ini file that my virus scanner keeps picking up (but not as a virus)
That one is C:\WINDOWS\System32\uvvwa.ini
I noticed this name is the same, its been that same ini file name even after deleting and fixing, and there are a couple of others which i think were uvvwa2.ini.

It also produces 500 files ranging from 4mb to 300mb into My Documents and C:\ drive.. all of them .tmp files.

As i'm typing this it has run a process that is just "windows" with no extension, using about 99% of my processing.. I dont know what its doing or if its just a decoy, but after unsuccessfully killing it several times, it stopped by itself and then produced a fake warning message in the system trade saying

"A Critical error could occur
***STOP: 0x000007B (0xF20184, 0x00000, 0xCC0034)***
Inaccessible handler or device.
Click this balloon to fix the problem."

Clicking it results in sending you to the Storage Protector website trying to get you to download the program (sigh..)

Another generated message it produces when it firsts starts showing up is:

"Your system could become unstable

A potential problem has been detected and Windows has been shutdown buggy application to prevent damage to your computer.
****WXYZ.SYS - Address F73120AE base at C00000, DateStamp 36b072A3
Kernel Debugger Using: COM2 (Port 0x28f, Baud rate 192000)"

All of it is complete nonsense..
Anyway, these have also destroyed my Zonealarm, creating a duplicate "zlclient .exe" (notice the space) which runs when Zonealarm runs, and kills the program whenever either process is killed. A couple other programs have sadly met their demise like this as well.

Anyway, i'm ready to start hunting this bugger down if one of you would kindly assist me, the other threads i've visited never really came through and finished the job, I guess the guy ignored the topic once he thought his problem was fixed, leaving the assistee high and dry. I'll post logs, files, or some of the infected files themselves (in .rars of course) if you guys need be. I just want this bugger fixed so I can enjoy some peace and security.

Im quite computer literate, so don't worry about having to hold my hand through any explanations.

Also on a side note, why does ComboFix pop up with the warning of a trojan TR/Drop.L.hx.20.E.1? I'm just ignoring it right now, have it on the exceptions list so it wont cause problems trying to delete combofix.

Edited by Gen Nephlite, 21 January 2008 - 09:31 PM.


BC AdBot (Login to Remove)

 


#2 Gen Nephlite

Gen Nephlite
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:08 AM

Posted 21 January 2008 - 11:59 PM

And heres the ComboFix log.

ComboFix 08-01-21.3 - Owner 2008-01-21 22:42:26.5 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.86 [GMT -8:00]
Running from: C:\Documents and Settings\Owner\Desktop\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Owner\My Documents\pos203.tmp
C:\Documents and Settings\Owner\My Documents\pos204.tmp
C:\Documents and Settings\Owner\My Documents\pos205.tmp
C:\Documents and Settings\Owner\My Documents\pos206.tmp
C:\Documents and Settings\Owner\My Documents\pos207.tmp
C:\Documents and Settings\Owner\My Documents\pos208.tmp
C:\Documents and Settings\Owner\My Documents\pos209.tmp
C:\Documents and Settings\Owner\My Documents\pos20A.tmp
C:\Documents and Settings\Owner\My Documents\pos20B.tmp
C:\Documents and Settings\Owner\My Documents\pos20C.tmp
C:\Documents and Settings\Owner\My Documents\pos20D.tmp
C:\Documents and Settings\Owner\My Documents\pos20E.tmp
C:\Documents and Settings\Owner\My Documents\pos20F.tmp
C:\Documents and Settings\Owner\My Documents\pos210.tmp
C:\Documents and Settings\Owner\My Documents\pos211.tmp
C:\Documents and Settings\Owner\My Documents\pos212.tmp
C:\Documents and Settings\Owner\My Documents\pos213.tmp
C:\Documents and Settings\Owner\My Documents\pos214.tmp
C:\Documents and Settings\Owner\My Documents\pos215.tmp
C:\Documents and Settings\Owner\My Documents\pos216.tmp
C:\Documents and Settings\Owner\My Documents\pos217.tmp
C:\Documents and Settings\Owner\My Documents\pos218.tmp
C:\Documents and Settings\Owner\My Documents\pos219.tmp
C:\Documents and Settings\Owner\My Documents\pos21A.tmp
C:\Documents and Settings\Owner\My Documents\pos21B.tmp
C:\Documents and Settings\Owner\My Documents\pos21C.tmp
C:\Documents and Settings\Owner\My Documents\pos21D.tmp
C:\Documents and Settings\Owner\My Documents\pos21E.tmp
C:\Documents and Settings\Owner\My Documents\pos21F.tmp
C:\Documents and Settings\Owner\My Documents\pos220.tmp
C:\Documents and Settings\Owner\My Documents\pos221.tmp
C:\Documents and Settings\Owner\My Documents\pos222.tmp
C:\Documents and Settings\Owner\My Documents\pos223.tmp
C:\Documents and Settings\Owner\My Documents\pos224.tmp
C:\Documents and Settings\Owner\My Documents\pos225.tmp
C:\Documents and Settings\Owner\My Documents\pos226.tmp
C:\Documents and Settings\Owner\My Documents\pos227.tmp
C:\Documents and Settings\Owner\My Documents\pos228.tmp
C:\Documents and Settings\Owner\My Documents\pos229.tmp
C:\Documents and Settings\Owner\My Documents\pos22A.tmp
C:\Documents and Settings\Owner\My Documents\pos22B.tmp
C:\Documents and Settings\Owner\My Documents\pos22C.tmp
C:\Documents and Settings\Owner\My Documents\pos22D.tmp
C:\Documents and Settings\Owner\My Documents\pos22E.tmp
C:\Documents and Settings\Owner\My Documents\pos22F.tmp
C:\Documents and Settings\Owner\My Documents\pos230.tmp
C:\Documents and Settings\Owner\My Documents\pos231.tmp
C:\Documents and Settings\Owner\My Documents\pos232.tmp
C:\Documents and Settings\Owner\My Documents\pos233.tmp
C:\Documents and Settings\Owner\My Documents\pos234.tmp
C:\Documents and Settings\Owner\My Documents\pos235.tmp
C:\Documents and Settings\Owner\My Documents\pos236.tmp
C:\Documents and Settings\Owner\My Documents\pos237.tmp
C:\Documents and Settings\Owner\My Documents\pos238.tmp
C:\Documents and Settings\Owner\My Documents\pos239.tmp
C:\Documents and Settings\Owner\My Documents\pos23A.tmp
C:\Documents and Settings\Owner\My Documents\pos23B.tmp
C:\Documents and Settings\Owner\My Documents\pos23C.tmp
C:\Documents and Settings\Owner\My Documents\pos23D.tmp
C:\Documents and Settings\Owner\My Documents\pos23E.tmp
C:\Documents and Settings\Owner\My Documents\pos23F.tmp
C:\Documents and Settings\Owner\My Documents\pos240.tmp
C:\Documents and Settings\Owner\My Documents\pos241.tmp
C:\Documents and Settings\Owner\My Documents\pos242.tmp
C:\Documents and Settings\Owner\My Documents\pos243.tmp
C:\Documents and Settings\Owner\My Documents\pos244.tmp
C:\Documents and Settings\Owner\My Documents\pos245.tmp
C:\Documents and Settings\Owner\My Documents\pos246.tmp
C:\Documents and Settings\Owner\My Documents\pos247.tmp
C:\Documents and Settings\Owner\My Documents\pos248.tmp
C:\Documents and Settings\Owner\My Documents\pos249.tmp
C:\Documents and Settings\Owner\My Documents\pos24A.tmp
C:\Documents and Settings\Owner\My Documents\pos24B.tmp
C:\Documents and Settings\Owner\My Documents\pos24C.tmp
C:\Documents and Settings\Owner\My Documents\pos24D.tmp
C:\Documents and Settings\Owner\My Documents\pos24E.tmp
C:\Documents and Settings\Owner\My Documents\pos24F.tmp
C:\Documents and Settings\Owner\My Documents\pos250.tmp
C:\Documents and Settings\Owner\My Documents\pos251.tmp
C:\Documents and Settings\Owner\My Documents\pos252.tmp
C:\Documents and Settings\Owner\My Documents\pos253.tmp
C:\Documents and Settings\Owner\My Documents\pos254.tmp
C:\Documents and Settings\Owner\My Documents\pos255.tmp
C:\Documents and Settings\Owner\My Documents\pos256.tmp
C:\Documents and Settings\Owner\My Documents\pos257.tmp
C:\Documents and Settings\Owner\My Documents\pos258.tmp
C:\Documents and Settings\Owner\My Documents\pos259.tmp
C:\Documents and Settings\Owner\My Documents\pos25A.tmp
C:\Documents and Settings\Owner\My Documents\pos25B.tmp
C:\Documents and Settings\Owner\My Documents\pos25C.tmp
C:\Documents and Settings\Owner\My Documents\pos25D.tmp
C:\Documents and Settings\Owner\My Documents\pos25E.tmp
C:\Documents and Settings\Owner\My Documents\pos25F.tmp
C:\Documents and Settings\Owner\My Documents\pos260.tmp
C:\Documents and Settings\Owner\My Documents\pos261.tmp
C:\Documents and Settings\Owner\My Documents\pos262.tmp
C:\Documents and Settings\Owner\My Documents\pos263.tmp
C:\Documents and Settings\Owner\My Documents\pos264.tmp
C:\Documents and Settings\Owner\My Documents\pos265.tmp
C:\Documents and Settings\Owner\My Documents\pos266.tmp
C:\Documents and Settings\Owner\My Documents\pos267.tmp
C:\Documents and Settings\Owner\My Documents\pos268.tmp
C:\Documents and Settings\Owner\My Documents\pos269.tmp
C:\Documents and Settings\Owner\My Documents\pos26A.tmp
C:\Documents and Settings\Owner\My Documents\pos26B.tmp
C:\Documents and Settings\Owner\My Documents\pos26C.tmp
C:\Documents and Settings\Owner\My Documents\pos26D.tmp
C:\Documents and Settings\Owner\My Documents\pos26E.tmp
C:\Documents and Settings\Owner\My Documents\pos26F.tmp
C:\Documents and Settings\Owner\My Documents\pos270.tmp
C:\Documents and Settings\Owner\My Documents\pos271.tmp
C:\Documents and Settings\Owner\My Documents\pos272.tmp
C:\Documents and Settings\Owner\My Documents\pos273.tmp
C:\Documents and Settings\Owner\My Documents\pos274.tmp
C:\Documents and Settings\Owner\My Documents\pos275.tmp
C:\Documents and Settings\Owner\My Documents\pos276.tmp
C:\Documents and Settings\Owner\My Documents\pos277.tmp
C:\Documents and Settings\Owner\My Documents\pos278.tmp
C:\Documents and Settings\Owner\My Documents\pos279.tmp
C:\Documents and Settings\Owner\My Documents\pos27A.tmp
C:\Documents and Settings\Owner\My Documents\pos27B.tmp
C:\Documents and Settings\Owner\My Documents\pos27C.tmp
C:\Documents and Settings\Owner\My Documents\pos27D.tmp
C:\Documents and Settings\Owner\My Documents\pos27E.tmp
C:\Documents and Settings\Owner\My Documents\pos27F.tmp
C:\Documents and Settings\Owner\My Documents\pos280.tmp
C:\Documents and Settings\Owner\My Documents\pos281.tmp
C:\Documents and Settings\Owner\My Documents\pos282.tmp
C:\Documents and Settings\Owner\My Documents\pos283.tmp
C:\Documents and Settings\Owner\My Documents\pos284.tmp
C:\Documents and Settings\Owner\My Documents\pos285.tmp
C:\Documents and Settings\Owner\My Documents\pos286.tmp
C:\Documents and Settings\Owner\My Documents\pos287.tmp
C:\Documents and Settings\Owner\My Documents\pos288.tmp
C:\Documents and Settings\Owner\My Documents\pos289.tmp
C:\Documents and Settings\Owner\My Documents\pos28A.tmp
C:\Documents and Settings\Owner\My Documents\pos28B.tmp
C:\Documents and Settings\Owner\My Documents\pos28C.tmp
C:\Documents and Settings\Owner\My Documents\pos28D.tmp
C:\Documents and Settings\Owner\My Documents\pos28E.tmp
C:\Documents and Settings\Owner\My Documents\pos28F.tmp
C:\Documents and Settings\Owner\My Documents\pos290.tmp
C:\Documents and Settings\Owner\My Documents\pos291.tmp
C:\Documents and Settings\Owner\My Documents\pos292.tmp
C:\Documents and Settings\Owner\My Documents\pos293.tmp
C:\Documents and Settings\Owner\My Documents\pos294.tmp
C:\Documents and Settings\Owner\My Documents\pos295.tmp
C:\Documents and Settings\Owner\My Documents\pos296.tmp
C:\Documents and Settings\Owner\My Documents\pos297.tmp
C:\Documents and Settings\Owner\My Documents\pos298.tmp
C:\Documents and Settings\Owner\My Documents\pos299.tmp
C:\Documents and Settings\Owner\My Documents\pos29A.tmp
C:\Documents and Settings\Owner\My Documents\pos29B.tmp
C:\Documents and Settings\Owner\My Documents\pos29C.tmp
C:\Documents and Settings\Owner\My Documents\pos29D.tmp
C:\Documents and Settings\Owner\My Documents\pos29E.tmp
C:\Documents and Settings\Owner\My Documents\pos29F.tmp
C:\Documents and Settings\Owner\My Documents\pos2A0.tmp
C:\Documents and Settings\Owner\My Documents\pos2A1.tmp
C:\Documents and Settings\Owner\My Documents\pos2A2.tmp
C:\Documents and Settings\Owner\My Documents\pos2A3.tmp
C:\Documents and Settings\Owner\My Documents\pos2A4.tmp
C:\Documents and Settings\Owner\My Documents\pos2A5.tmp
C:\Documents and Settings\Owner\My Documents\pos2A6.tmp
C:\Documents and Settings\Owner\My Documents\pos2A7.tmp
C:\Documents and Settings\Owner\My Documents\pos2A8.tmp
C:\Documents and Settings\Owner\My Documents\pos2A9.tmp
C:\Documents and Settings\Owner\My Documents\pos2AA.tmp
C:\Documents and Settings\Owner\My Documents\pos2AB.tmp
C:\Documents and Settings\Owner\My Documents\pos2AC.tmp
C:\Documents and Settings\Owner\My Documents\pos2AD.tmp
C:\Documents and Settings\Owner\My Documents\pos2AE.tmp
C:\Documents and Settings\Owner\My Documents\pos2AF.tmp
C:\Documents and Settings\Owner\My Documents\pos2B0.tmp
C:\Documents and Settings\Owner\My Documents\pos2B1.tmp
C:\Documents and Settings\Owner\My Documents\pos2B2.tmp
C:\Documents and Settings\Owner\My Documents\pos2B3.tmp
C:\Documents and Settings\Owner\My Documents\pos2B4.tmp
C:\Documents and Settings\Owner\My Documents\pos2B5.tmp
C:\Documents and Settings\Owner\My Documents\pos2B6.tmp
C:\Documents and Settings\Owner\My Documents\pos2B7.tmp
C:\Documents and Settings\Owner\My Documents\pos2B8.tmp
C:\Documents and Settings\Owner\My Documents\pos2B9.tmp
C:\Documents and Settings\Owner\My Documents\pos2BA.tmp
C:\Documents and Settings\Owner\My Documents\pos2BB.tmp
C:\Documents and Settings\Owner\My Documents\pos2BC.tmp
C:\Documents and Settings\Owner\My Documents\pos2BD.tmp
C:\Documents and Settings\Owner\My Documents\pos2BE.tmp
C:\Documents and Settings\Owner\My Documents\pos2BF.tmp
C:\Documents and Settings\Owner\My Documents\pos2C0.tmp
C:\Documents and Settings\Owner\My Documents\pos2C1.tmp
C:\Documents and Settings\Owner\My Documents\pos2C2.tmp
C:\Documents and Settings\Owner\My Documents\pos2C3.tmp
C:\Documents and Settings\Owner\My Documents\pos2C4.tmp
C:\Documents and Settings\Owner\My Documents\pos2C5.tmp
C:\Documents and Settings\Owner\My Documents\pos2C6.tmp
C:\Documents and Settings\Owner\My Documents\pos2C7.tmp
C:\Documents and Settings\Owner\My Documents\pos2C8.tmp
C:\Documents and Settings\Owner\My Documents\pos2C9.tmp
C:\Documents and Settings\Owner\My Documents\pos2CA.tmp
C:\Documents and Settings\Owner\My Documents\pos2CB.tmp
C:\Documents and Settings\Owner\My Documents\pos2CC.tmp
C:\Documents and Settings\Owner\My Documents\pos2CD.tmp
C:\Documents and Settings\Owner\My Documents\pos2CE.tmp
C:\Documents and Settings\Owner\My Documents\pos2CF.tmp
C:\Documents and Settings\Owner\My Documents\pos2D0.tmp
C:\Documents and Settings\Owner\My Documents\pos2D1.tmp
C:\Documents and Settings\Owner\My Documents\pos2D2.tmp
C:\Documents and Settings\Owner\My Documents\pos2D3.tmp
C:\Documents and Settings\Owner\My Documents\pos2D4.tmp
C:\Documents and Settings\Owner\My Documents\pos2D5.tmp
C:\Documents and Settings\Owner\My Documents\pos2D6.tmp
C:\Documents and Settings\Owner\My Documents\pos2D7.tmp
C:\Documents and Settings\Owner\My Documents\pos2D8.tmp
C:\Documents and Settings\Owner\My Documents\pos2D9.tmp
C:\Documents and Settings\Owner\My Documents\pos2DA.tmp
C:\Documents and Settings\Owner\My Documents\pos2DB.tmp
C:\Documents and Settings\Owner\My Documents\pos2DC.tmp
C:\Documents and Settings\Owner\My Documents\pos2DD.tmp
C:\Documents and Settings\Owner\My Documents\pos2DE.tmp
C:\Documents and Settings\Owner\My Documents\pos2DF.tmp
C:\Documents and Settings\Owner\My Documents\pos2E0.tmp
C:\Documents and Settings\Owner\My Documents\pos2E1.tmp
C:\Documents and Settings\Owner\My Documents\pos2E2.tmp
C:\Documents and Settings\Owner\My Documents\pos2E3.tmp
C:\Documents and Settings\Owner\My Documents\pos2E4.tmp
C:\Documents and Settings\Owner\My Documents\pos2E5.tmp
C:\Documents and Settings\Owner\My Documents\pos2E6.tmp
C:\Documents and Settings\Owner\My Documents\pos2E7.tmp
C:\Documents and Settings\Owner\My Documents\pos2E8.tmp
C:\Documents and Settings\Owner\My Documents\pos2E9.tmp
C:\Documents and Settings\Owner\My Documents\pos2EA.tmp
C:\Documents and Settings\Owner\My Documents\pos2EB.tmp
C:\Documents and Settings\Owner\My Documents\pos2EC.tmp
C:\Documents and Settings\Owner\My Documents\pos2ED.tmp
C:\Documents and Settings\Owner\My Documents\pos2EE.tmp
C:\Documents and Settings\Owner\My Documents\pos2EF.tmp
C:\Documents and Settings\Owner\My Documents\pos2F0.tmp
C:\Documents and Settings\Owner\My Documents\pos2F1.tmp
C:\Documents and Settings\Owner\My Documents\pos2F2.tmp
C:\Documents and Settings\Owner\My Documents\pos2F3.tmp
C:\Documents and Settings\Owner\My Documents\pos2F4.tmp
C:\Documents and Settings\Owner\My Documents\pos2F5.tmp
C:\Documents and Settings\Owner\My Documents\pos2F6.tmp
C:\Documents and Settings\Owner\My Documents\pos2F7.tmp
C:\Documents and Settings\Owner\My Documents\pos2F8.tmp
C:\Documents and Settings\Owner\My Documents\pos2F9.tmp
C:\Documents and Settings\Owner\My Documents\pos2FA.tmp
C:\Documents and Settings\Owner\My Documents\pos2FB.tmp
C:\Documents and Settings\Owner\My Documents\pos2FC.tmp
C:\Documents and Settings\Owner\My Documents\pos2FD.tmp
C:\Documents and Settings\Owner\My Documents\pos2FE.tmp
C:\Documents and Settings\Owner\My Documents\pos2FF.tmp
C:\Documents and Settings\Owner\My Documents\pos300.tmp
C:\Documents and Settings\Owner\My Documents\pos301.tmp
C:\Documents and Settings\Owner\My Documents\pos302.tmp
C:\Documents and Settings\Owner\My Documents\pos303.tmp
C:\Documents and Settings\Owner\My Documents\pos304.tmp
C:\Documents and Settings\Owner\My Documents\pos305.tmp
C:\Documents and Settings\Owner\My Documents\pos306.tmp
C:\Documents and Settings\Owner\My Documents\pos307.tmp
C:\Documents and Settings\Owner\My Documents\pos308.tmp
C:\Documents and Settings\Owner\My Documents\pos309.tmp
C:\Documents and Settings\Owner\My Documents\pos30A.tmp
C:\Documents and Settings\Owner\My Documents\pos30B.tmp
C:\Documents and Settings\Owner\My Documents\pos30C.tmp
C:\Documents and Settings\Owner\My Documents\pos30D.tmp
C:\Documents and Settings\Owner\My Documents\pos30E.tmp
C:\Documents and Settings\Owner\My Documents\pos30F.tmp
C:\Documents and Settings\Owner\My Documents\pos310.tmp
C:\Documents and Settings\Owner\My Documents\pos311.tmp
C:\Documents and Settings\Owner\My Documents\pos312.tmp
C:\Documents and Settings\Owner\My Documents\pos313.tmp
C:\Documents and Settings\Owner\My Documents\pos314.tmp
C:\Documents and Settings\Owner\My Documents\pos315.tmp
C:\Documents and Settings\Owner\My Documents\pos316.tmp
C:\Documents and Settings\Owner\My Documents\pos317.tmp
C:\Documents and Settings\Owner\My Documents\pos318.tmp
C:\Documents and Settings\Owner\My Documents\pos319.tmp
C:\Documents and Settings\Owner\My Documents\pos31A.tmp
C:\Documents and Settings\Owner\My Documents\pos31B.tmp
C:\Documents and Settings\Owner\My Documents\pos31C.tmp
C:\Documents and Settings\Owner\My Documents\pos31D.tmp
C:\Documents and Settings\Owner\My Documents\pos31E.tmp
C:\Documents and Settings\Owner\My Documents\pos31F.tmp
C:\Documents and Settings\Owner\My Documents\pos320.tmp
C:\Documents and Settings\Owner\My Documents\pos321.tmp
C:\Documents and Settings\Owner\My Documents\pos322.tmp
C:\Documents and Settings\Owner\My Documents\pos323.tmp
C:\Documents and Settings\Owner\My Documents\pos324.tmp
C:\Documents and Settings\Owner\My Documents\pos325.tmp
C:\Documents and Settings\Owner\My Documents\pos326.tmp
C:\Documents and Settings\Owner\My Documents\pos327.tmp
C:\Documents and Settings\Owner\My Documents\pos328.tmp
C:\Documents and Settings\Owner\My Documents\pos329.tmp
C:\Documents and Settings\Owner\My Documents\pos32A.tmp
C:\Documents and Settings\Owner\My Documents\pos32B.tmp
C:\Documents and Settings\Owner\My Documents\pos32C.tmp
C:\Documents and Settings\Owner\My Documents\pos32D.tmp
C:\Documents and Settings\Owner\My Documents\pos32E.tmp
C:\Documents and Settings\Owner\My Documents\pos32F.tmp
C:\Documents and Settings\Owner\My Documents\pos330.tmp
C:\Documents and Settings\Owner\My Documents\pos331.tmp
C:\Documents and Settings\Owner\My Documents\pos332.tmp
C:\Documents and Settings\Owner\My Documents\pos333.tmp
C:\Documents and Settings\Owner\My Documents\pos334.tmp
C:\Documents and Settings\Owner\My Documents\pos335.tmp
C:\Documents and Settings\Owner\My Documents\pos336.tmp
C:\Documents and Settings\Owner\My Documents\pos337.tmp
C:\Documents and Settings\Owner\My Documents\pos338.tmp
C:\Documents and Settings\Owner\My Documents\pos339.tmp
C:\Documents and Settings\Owner\My Documents\pos33A.tmp
C:\Documents and Settings\Owner\My Documents\pos33B.tmp
C:\Documents and Settings\Owner\My Documents\pos33C.tmp
C:\Documents and Settings\Owner\My Documents\pos33D.tmp
C:\Documents and Settings\Owner\My Documents\pos33E.tmp
C:\Documents and Settings\Owner\My Documents\pos33F.tmp
C:\Documents and Settings\Owner\My Documents\pos340.tmp
C:\Documents and Settings\Owner\My Documents\pos341.tmp
C:\Documents and Settings\Owner\My Documents\pos342.tmp
C:\Documents and Settings\Owner\My Documents\pos343.tmp
C:\Documents and Settings\Owner\My Documents\pos344.tmp
C:\Documents and Settings\Owner\My Documents\pos345.tmp
C:\Documents and Settings\Owner\My Documents\pos346.tmp
C:\Documents and Settings\Owner\My Documents\pos347.tmp
C:\Documents and Settings\Owner\My Documents\pos348.tmp
C:\Documents and Settings\Owner\My Documents\pos349.tmp
C:\Documents and Settings\Owner\My Documents\pos34A.tmp
C:\Documents and Settings\Owner\My Documents\pos34B.tmp
C:\Documents and Settings\Owner\My Documents\pos34C.tmp
C:\Documents and Settings\Owner\My Documents\pos34D.tmp
C:\Documents and Settings\Owner\My Documents\pos34E.tmp
C:\Documents and Settings\Owner\My Documents\pos34F.tmp
C:\Documents and Settings\Owner\My Documents\pos350.tmp
C:\Documents and Settings\Owner\My Documents\pos351.tmp
C:\Documents and Settings\Owner\My Documents\pos352.tmp
C:\Documents and Settings\Owner\My Documents\pos353.tmp
C:\Documents and Settings\Owner\My Documents\pos354.tmp
C:\Documents and Settings\Owner\My Documents\pos355.tmp
C:\Documents and Settings\Owner\My Documents\pos356.tmp
C:\Documents and Settings\Owner\My Documents\pos357.tmp
C:\Documents and Settings\Owner\My Documents\pos358.tmp
C:\Documents and Settings\Owner\My Documents\pos359.tmp
C:\Documents and Settings\Owner\My Documents\pos35A.tmp
C:\Documents and Settings\Owner\My Documents\pos35B.tmp
C:\Documents and Settings\Owner\My Documents\pos35C.tmp
C:\Documents and Settings\Owner\My Documents\pos35D.tmp
C:\Documents and Settings\Owner\My Documents\pos35E.tmp
C:\Documents and Settings\Owner\My Documents\pos35F.tmp
C:\Documents and Settings\Owner\My Documents\pos360.tmp
C:\Documents and Settings\Owner\My Documents\pos361.tmp
C:\Documents and Settings\Owner\My Documents\pos362.tmp
C:\Documents and Settings\Owner\My Documents\pos363.tmp
C:\Documents and Settings\Owner\My Documents\pos364.tmp
C:\Documents and Settings\Owner\My Documents\pos365.tmp
C:\Documents and Settings\Owner\My Documents\pos366.tmp
C:\Documents and Settings\Owner\My Documents\pos367.tmp
C:\Documents and Settings\Owner\My Documents\pos368.tmp
C:\Documents and Settings\Owner\My Documents\pos369.tmp
C:\Documents and Settings\Owner\My Documents\pos36A.tmp
C:\Documents and Settings\Owner\My Documents\pos36B.tmp
C:\Documents and Settings\Owner\My Documents\pos36C.tmp
C:\Documents and Settings\Owner\My Documents\pos36D.tmp
C:\Documents and Settings\Owner\My Documents\pos36E.tmp
C:\Documents and Settings\Owner\My Documents\pos36F.tmp
C:\Documents and Settings\Owner\My Documents\pos370.tmp
C:\Documents and Settings\Owner\My Documents\pos371.tmp
C:\Documents and Settings\Owner\My Documents\pos372.tmp
C:\Documents and Settings\Owner\My Documents\pos373.tmp
C:\Documents and Settings\Owner\My Documents\pos374.tmp
C:\Documents and Settings\Owner\My Documents\pos375.tmp
C:\Documents and Settings\Owner\My Documents\pos376.tmp
C:\Documents and Settings\Owner\My Documents\pos377.tmp
C:\Documents and Settings\Owner\My Documents\pos378.tmp
C:\Documents and Settings\Owner\My Documents\pos379.tmp
C:\Documents and Settings\Owner\My Documents\pos37A.tmp
C:\Documents and Settings\Owner\My Documents\pos37B.tmp
C:\Documents and Settings\Owner\My Documents\pos37C.tmp
C:\Documents and Settings\Owner\My Documents\pos37D.tmp
C:\Documents and Settings\Owner\My Documents\pos37E.tmp
C:\Documents and Settings\Owner\My Documents\pos37F.tmp
C:\Documents and Settings\Owner\My Documents\pos380.tmp
C:\Documents and Settings\Owner\My Documents\pos381.tmp
C:\Documents and Settings\Owner\My Documents\pos382.tmp
C:\Documents and Settings\Owner\My Documents\pos383.tmp
C:\Documents and Settings\Owner\My Documents\pos384.tmp
C:\Documents and Settings\Owner\My Documents\pos385.tmp
C:\Documents and Settings\Owner\My Documents\pos386.tmp
C:\Documents and Settings\Owner\My Documents\pos387.tmp
C:\Documents and Settings\Owner\My Documents\pos388.tmp
C:\Documents and Settings\Owner\My Documents\pos389.tmp
C:\Documents and Settings\Owner\My Documents\pos38A.tmp
C:\Documents and Settings\Owner\My Documents\pos38B.tmp
C:\Documents and Settings\Owner\My Documents\pos38C.tmp
C:\Documents and Settings\Owner\My Documents\pos38D.tmp
C:\Documents and Settings\Owner\My Documents\pos38E.tmp
C:\Documents and Settings\Owner\My Documents\pos38F.tmp
C:\Documents and Settings\Owner\My Documents\pos390.tmp
C:\Documents and Settings\Owner\My Documents\pos391.tmp
C:\Documents and Settings\Owner\My Documents\pos392.tmp
C:\Documents and Settings\Owner\My Documents\pos393.tmp
C:\Documents and Settings\Owner\My Documents\pos394.tmp
C:\Documents and Settings\Owner\My Documents\pos395.tmp
C:\Documents and Settings\Owner\My Documents\pos396.tmp
C:\Documents and Settings\Owner\My Documents\pos397.tmp
C:\Documents and Settings\Owner\My Documents\pos398.tmp
C:\Documents and Settings\Owner\My Documents\pos399.tmp
C:\Documents and Settings\Owner\My Documents\pos39A.tmp
C:\Documents and Settings\Owner\My Documents\pos39B.tmp
C:\Documents and Settings\Owner\My Documents\pos39C.tmp
C:\Documents and Settings\Owner\My Documents\pos39D.tmp
C:\Documents and Settings\Owner\My Documents\pos39E.tmp
C:\Documents and Settings\Owner\My Documents\pos39F.tmp
C:\Documents and Settings\Owner\My Documents\pos3A0.tmp
C:\Documents and Settings\Owner\My Documents\pos3A1.tmp
C:\Documents and Settings\Owner\My Documents\pos3A2.tmp
C:\Documents and Settings\Owner\My Documents\pos3A3.tmp
C:\Documents and Settings\Owner\My Documents\pos3A4.tmp
C:\Documents and Settings\Owner\My Documents\pos3A5.tmp
C:\Documents and Settings\Owner\My Documents\pos3A6.tmp
C:\Documents and Settings\Owner\My Documents\pos3A7.tmp
C:\Documents and Settings\Owner\My Documents\pos3A8.tmp
C:\Documents and Settings\Owner\My Documents\pos3A9.tmp
C:\Documents and Settings\Owner\My Documents\pos3AA.tmp
C:\Documents and Settings\Owner\My Documents\pos3AB.tmp
C:\Documents and Settings\Owner\My Documents\pos3AC.tmp
C:\Documents and Settings\Owner\My Documents\pos3AD.tmp
C:\Documents and Settings\Owner\My Documents\pos3AE.tmp
C:\Documents and Settings\Owner\My Documents\pos3AF.tmp
C:\Documents and Settings\Owner\My Documents\pos3B0.tmp
C:\Documents and Settings\Owner\My Documents\pos3B1.tmp
C:\Documents and Settings\Owner\My Documents\pos3B2.tmp
C:\Documents and Settings\Owner\My Documents\pos3B3.tmp
C:\Documents and Settings\Owner\My Documents\pos3B4.tmp
C:\Documents and Settings\Owner\My Documents\pos3B5.tmp
C:\Documents and Settings\Owner\My Documents\pos3B6.tmp
C:\Documents and Settings\Owner\My Documents\pos3B7.tmp
C:\Documents and Settings\Owner\My Documents\pos3B8.tmp
C:\Documents and Settings\Owner\My Documents\pos3B9.tmp
C:\Documents and Settings\Owner\My Documents\pos3BA.tmp
C:\Documents and Settings\Owner\My Documents\pos3BB.tmp
C:\Documents and Settings\Owner\My Documents\pos3BC.tmp
C:\Documents and Settings\Owner\My Documents\pos3BD.tmp
C:\Documents and Settings\Owner\My Documents\pos3BE.tmp
C:\Documents and Settings\Owner\My Documents\pos3BF.tmp
C:\Documents and Settings\Owner\My Documents\pos3C0.tmp
C:\Documents and Settings\Owner\My Documents\pos3C1.tmp
C:\Documents and Settings\Owner\My Documents\pos3C2.tmp
C:\Documents and Settings\Owner\My Documents\pos3C3.tmp
C:\Documents and Settings\Owner\My Documents\pos3C4.tmp
C:\Documents and Settings\Owner\My Documents\pos3C5.tmp
C:\Documents and Settings\Owner\My Documents\pos3C6.tmp
C:\Documents and Settings\Owner\My Documents\pos3C7.tmp
C:\Documents and Settings\Owner\My Documents\pos3C8.tmp
C:\Documents and Settings\Owner\My Documents\pos3C9.tmp
C:\Documents and Settings\Owner\My Documents\pos3CA.tmp
C:\Documents and Settings\Owner\My Documents\pos3CB.tmp
C:\Documents and Settings\Owner\My Documents\pos3CC.tmp
C:\Documents and Settings\Owner\My Documents\pos3CD.tmp
C:\Documents and Settings\Owner\My Documents\pos3CE.tmp
C:\Documents and Settings\Owner\My Documents\pos3CF.tmp
C:\Documents and Settings\Owner\My Documents\pos3D0.tmp
C:\Documents and Settings\Owner\My Documents\pos3D1.tmp
C:\Documents and Settings\Owner\My Documents\pos3D2.tmp
C:\Documents and Settings\Owner\My Documents\pos3D3.tmp
C:\Documents and Settings\Owner\My Documents\pos3D4.tmp
C:\Documents and Settings\Owner\My Documents\pos3D5.tmp
C:\Documents and Settings\Owner\My Documents\pos3D6.tmp
C:\Documents and Settings\Owner\My Documents\pos3D7.tmp
C:\Documents and Settings\Owner\My Documents\pos3D8.tmp
C:\Documents and Settings\Owner\My Documents\pos3D9.tmp
C:\Documents and Settings\Owner\My Documents\pos3DA.tmp
C:\Documents and Settings\Owner\My Documents\pos3DB.tmp
C:\Documents and Settings\Owner\My Documents\pos3DC.tmp
C:\Documents and Settings\Owner\My Documents\pos3DD.tmp
C:\Documents and Settings\Owner\My Documents\pos3DE.tmp
C:\Documents and Settings\Owner\My Documents\pos3DF.tmp
C:\Documents and Settings\Owner\My Documents\pos3E0.tmp
C:\Documents and Settings\Owner\My Documents\pos3E1.tmp
C:\Documents and Settings\Owner\My Documents\pos3E2.tmp
C:\Documents and Settings\Owner\My Documents\pos3E3.tmp
C:\Documents and Settings\Owner\My Documents\pos3E4.tmp
C:\Documents and Settings\Owner\My Documents\pos3E5.tmp
C:\Documents and Settings\Owner\My Documents\pos3E6.tmp
C:\Documents and Settings\Owner\My Documents\pos3E7.tmp
C:\Documents and Settings\Owner\My Documents\pos3E8.tmp
C:\Documents and Settings\Owner\My Documents\pos3E9.tmp
C:\Documents and Settings\Owner\My Documents\pos3EA.tmp
C:\Documents and Settings\Owner\My Documents\pos3EB.tmp
C:\Documents and Settings\Owner\My Documents\pos3EC.tmp
C:\Documents and Settings\Owner\My Documents\pos3ED.tmp
C:\Documents and Settings\Owner\My Documents\pos3EE.tmp
C:\Documents and Settings\Owner\My Documents\pos3EF.tmp
C:\Documents and Settings\Owner\My Documents\pos3F0.tmp
C:\Documents and Settings\Owner\My Documents\pos3F1.tmp
C:\Documents and Settings\Owner\My Documents\pos3F2.tmp
C:\Documents and Settings\Owner\My Documents\pos3F3.tmp
C:\Documents and Settings\Owner\My Documents\pos3F4.tmp
C:\Documents and Settings\Owner\My Documents\pos3F5.tmp
C:\Documents and Settings\Owner\My Documents\pos3F6.tmp
C:\Documents and Settings\Owner\My Documents\pos602.tmp
C:\Documents and Settings\Owner\My Documents\pos603.tmp
C:\Documents and Settings\Owner\My Documents\pos604.tmp
C:\Documents and Settings\Owner\My Documents\pos605.tmp
C:\Documents and Settings\Owner\My Documents\pos606.tmp
C:\Documents and Settings\Owner\My Documents\pos607.tmp
C:\Documents and Settings\Owner\My Documents\pos608.tmp
C:\Documents and Settings\Owner\My Documents\pos609.tmp
C:\Documents and Settings\Owner\My Documents\pos60A.tmp
C:\Documents and Settings\Owner\My Documents\pos60B.tmp
C:\Documents and Settings\Owner\My Documents\pos60C.tmp
C:\Documents and Settings\Owner\My Documents\pos60D.tmp
C:\Documents and Settings\Owner\My Documents\pos60E.tmp
C:\Documents and Settings\Owner\My Documents\pos60F.tmp
C:\Documents and Settings\Owner\My Documents\pos610.tmp
C:\Documents and Settings\Owner\My Documents\pos611.tmp
C:\Documents and Settings\Owner\My Documents\pos612.tmp
C:\Documents and Settings\Owner\My Documents\pos613.tmp
C:\Documents and Settings\Owner\My Documents\pos614.tmp
C:\Documents and Settings\Owner\My Documents\pos615.tmp
C:\Documents and Settings\Owner\My Documents\pos616.tmp
C:\Documents and Settings\Owner\My Documents\pos617.tmp
C:\Documents and Settings\Owner\My Documents\pos618.tmp
C:\Documents and Settings\Owner\My Documents\pos619.tmp
C:\Documents and Settings\Owner\My Documents\pos61A.tmp
C:\Documents and Settings\Owner\My Documents\pos61B.tmp
C:\Documents and Settings\Owner\My Documents\pos61C.tmp
C:\Documents and Settings\Owner\My Documents\pos61D.tmp
C:\Documents and Settings\Owner\My Documents\pos61E.tmp
C:\Documents and Settings\Owner\My Documents\pos61F.tmp
C:\Documents and Settings\Owner\My Documents\pos620.tmp
C:\Documents and Settings\Owner\My Documents\pos621.tmp
C:\Documents and Settings\Owner\My Documents\pos622.tmp
C:\Documents and Settings\Owner\My Documents\pos623.tmp
C:\Documents and Settings\Owner\My Documents\pos624.tmp
C:\Documents and Settings\Owner\My Documents\pos625.tmp
C:\Documents and Settings\Owner\My Documents\pos626.tmp
C:\Documents and Settings\Owner\My Documents\pos627.tmp
C:\Documents and Settings\Owner\My Documents\pos628.tmp
C:\Documents and Settings\Owner\My Documents\pos629.tmp
C:\Documents and Settings\Owner\My Documents\pos62A.tmp
C:\Documents and Settings\Owner\My Documents\pos62B.tmp
C:\Documents and Settings\Owner\My Documents\pos62C.tmp
C:\Documents and Settings\Owner\My Documents\pos62D.tmp
C:\Documents and Settings\Owner\My Documents\pos62E.tmp
C:\Documents and Settings\Owner\My Documents\pos62F.tmp
C:\Documents and Settings\Owner\My Documents\pos630.tmp
C:\Documents and Settings\Owner\My Documents\pos631.tmp
C:\Documents and Settings\Owner\My Documents\pos632.tmp
C:\Documents and Settings\Owner\My Documents\pos633.tmp
C:\Documents and Settings\Owner\My Documents\pos634.tmp
C:\Documents and Settings\Owner\My Documents\pos635.tmp
C:\Documents and Settings\Owner\My Documents\pos636.tmp
C:\Documents and Settings\Owner\My Documents\pos637.tmp
C:\Documents and Settings\Owner\My Documents\pos638.tmp
C:\Documents and Settings\Owner\My Documents\pos639.tmp
C:\Documents and Settings\Owner\My Documents\pos63A.tmp
C:\Documents and Settings\Owner\My Documents\pos63B.tmp
C:\Documents and Settings\Owner\My Documents\pos63C.tmp
C:\Documents and Settings\Owner\My Documents\pos63D.tmp
C:\Documents and Settings\Owner\My Documents\pos63E.tmp
C:\Documents and Settings\Owner\My Documents\pos63F.tmp
C:\Documents and Settings\Owner\My Documents\pos640.tmp
C:\Documents and Settings\Owner\My Documents\pos641.tmp
C:\Documents and Settings\Owner\My Documents\pos642.tmp
C:\Documents and Settings\Owner\My Documents\pos643.tmp
C:\Documents and Settings\Owner\My Documents\pos644.tmp
C:\Documents and Settings\Owner\My Documents\pos645.tmp
C:\Documents and Settings\Owner\My Documents\pos646.tmp
C:\Documents and Settings\Owner\My Documents\pos647.tmp
C:\Documents and Settings\Owner\My Documents\pos648.tmp
C:\Documents and Settings\Owner\My Documents\pos649.tmp
C:\Documents and Settings\Owner\My Documents\pos64A.tmp
C:\Documents and Settings\Owner\My Documents\pos64B.tmp
C:\Documents and Settings\Owner\My Documents\pos64C.tmp
C:\Documents and Settings\Owner\My Documents\pos64D.tmp
C:\Documents and Settings\Owner\My Documents\pos64E.tmp
C:\Documents and Settings\Owner\My Documents\pos64F.tmp
C:\Documents and Settings\Owner\My Documents\pos650.tmp
C:\Documents and Settings\Owner\My Documents\pos651.tmp
C:\Documents and Settings\Owner\My Documents\pos652.tmp
C:\Documents and Settings\Owner\My Documents\pos653.tmp
C:\Documents and Settings\Owner\My Documents\pos654.tmp
C:\Documents and Settings\Owner\My Documents\pos655.tmp
C:\Documents and Settings\Owner\My Documents\pos656.tmp
C:\Documents and Settings\Owner\My Documents\pos657.tmp
C:\Documents and Settings\Owner\My Documents\pos658.tmp
C:\Documents and Settings\Owner\My Documents\pos659.tmp
C:\Documents and Settings\Owner\My Documents\pos65A.tmp
C:\Documents and Settings\Owner\My Documents\pos65B.tmp
C:\Documents and Settings\Owner\My Documents\pos65C.tmp
C:\Documents and Settings\Owner\My Documents\pos65D.tmp
C:\Documents and Settings\Owner\My Documents\pos65E.tmp
C:\Documents and Settings\Owner\My Documents\pos65F.tmp
C:\Documents and Settings\Owner\My Documents\pos660.tmp
C:\Documents and Settings\Owner\My Documents\pos661.tmp
C:\Documents and Settings\Owner\My Documents\pos662.tmp
C:\Documents and Settings\Owner\My Documents\pos663.tmp
C:\Documents and Settings\Owner\My Documents\pos664.tmp
C:\Documents and Settings\Owner\My Documents\pos665.tmp
C:\Documents and Settings\Owner\My Documents\pos666.tmp
C:\Documents and Settings\Owner\My Documents\pos667.tmp
C:\Documents and Settings\Owner\My Documents\pos668.tmp
C:\Documents and Settings\Owner\My Documents\pos669.tmp
C:\Documents and Settings\Owner\My Documents\pos66A.tmp
C:\Documents and Settings\Owner\My Documents\pos66B.tmp
C:\Documents and Settings\Owner\My Documents\pos66C.tmp
C:\Documents and Settings\Owner\My Documents\pos66D.tmp
C:\Documents and Settings\Owner\My Documents\pos66E.tmp
C:\Documents and Settings\Owner\My Documents\pos66F.tmp
C:\Documents and Settings\Owner\My Documents\pos670.tmp
C:\Documents and Settings\Owner\My Documents\pos671.tmp
C:\Documents and Settings\Owner\My Documents\pos672.tmp
C:\Documents and Settings\Owner\My Documents\pos673.tmp
C:\Documents and Settings\Owner\My Documents\pos674.tmp
C:\Documents and Settings\Owner\My Documents\pos675.tmp
C:\Documents and Settings\Owner\My Documents\pos676.tmp
C:\Documents and Settings\Owner\My Documents\pos677.tmp
C:\Documents and Settings\Owner\My Documents\pos678.tmp
C:\Documents and Settings\Owner\My Documents\pos679.tmp
C:\Documents and Settings\Owner\My Documents\pos67A.tmp
C:\Documents and Settings\Owner\My Documents\pos67B.tmp
C:\Documents and Settings\Owner\My Documents\pos67C.tmp
C:\Documents and Settings\Owner\My Documents\pos67D.tmp
C:\Documents and Settings\Owner\My Documents\pos67E.tmp
C:\Documents and Settings\Owner\My Documents\pos67F.tmp
C:\Documents and Settings\Owner\My Documents\pos680.tmp
C:\Documents and Settings\Owner\My Documents\pos681.tmp
C:\Documents and Settings\Owner\My Documents\pos682.tmp
C:\Documents and Settings\Owner\My Documents\pos683.tmp
C:\Documents and Settings\Owner\My Documents\pos684.tmp
C:\Documents and Settings\Owner\My Documents\pos685.tmp
C:\Documents and Settings\Owner\My Documents\pos686.tmp
C:\Documents and Settings\Owner\My Documents\pos687.tmp
C:\Documents and Settings\Owner\My Documents\pos688.tmp
C:\Documents and Settings\Owner\My Documents\pos689.tmp
C:\Documents and Settings\Owner\My Documents\pos68A.tmp
C:\Documents and Settings\Owner\My Documents\pos68B.tmp
C:\Documents and Settings\Owner\My Documents\pos68C.tmp
C:\Documents and Settings\Owner\My Documents\pos68D.tmp
C:\Documents and Settings\Owner\My Documents\pos68E.tmp
C:\Documents and Settings\Owner\My Documents\pos68F.tmp
C:\Documents and Settings\Owner\My Documents\pos690.tmp
C:\Documents and Settings\Owner\My Documents\pos691.tmp
C:\Documents and Settings\Owner\My Documents\pos692.tmp
C:\Documents and Settings\Owner\My Documents\pos693.tmp
C:\Documents and Settings\Owner\My Documents\pos694.tmp
C:\Documents and Settings\Owner\My Documents\pos695.tmp
C:\Documents and Settings\Owner\My Documents\pos696.tmp
C:\Documents and Settings\Owner\My Documents\pos697.tmp
C:\Documents and Settings\Owner\My Documents\pos698.tmp
C:\Documents and Settings\Owner\My Documents\pos699.tmp
C:\Documents and Settings\Owner\My Documents\pos69A.tmp
C:\Documents and Settings\Owner\My Documents\pos69B.tmp
C:\Documents and Settings\Owner\My Documents\pos69C.tmp
C:\Documents and Settings\Owner\My Documents\pos69D.tmp
C:\Documents and Settings\Owner\My Documents\pos69E.tmp
C:\Documents and Settings\Owner\My Documents\pos69F.tmp
C:\Documents and Settings\Owner\My Documents\pos6A0.tmp
C:\Documents and Settings\Owner\My Documents\pos6A1.tmp
C:\Documents and Settings\Owner\My Documents\pos6A2.tmp
C:\Documents and Settings\Owner\My Documents\pos6A3.tmp
C:\Documents and Settings\Owner\My Documents\pos6A4.tmp
C:\Documents and Settings\Owner\My Documents\pos6A5.tmp
C:\Documents and Settings\Owner\My Documents\pos6A6.tmp
C:\Documents and Settings\Owner\My Documents\pos6A7.tmp
C:\Documents and Settings\Owner\My Documents\pos6A8.tmp
C:\Documents and Settings\Owner\My Documents\pos6A9.tmp
C:\Documents and Settings\Owner\My Documents\pos6AA.tmp
C:\Documents and Settings\Owner\My Documents\pos6AB.tmp
C:\Documents and Settings\Owner\My Documents\pos6AC.tmp
C:\Documents and Settings\Owner\My Documents\pos6AD.tmp
C:\Documents and Settings\Owner\My Documents\pos6AE.tmp
C:\Documents and Settings\Owner\My Documents\pos6AF.tmp
C:\Documents and Settings\Owner\My Documents\pos6B0.tmp
C:\Documents and Settings\Owner\My Documents\pos6B1.tmp
C:\Documents and Settings\Owner\My Documents\pos6B2.tmp
C:\Documents and Settings\Owner\My Documents\pos6B3.tmp
C:\Documents and Settings\Owner\My Documents\pos6B4.tmp
C:\Documents and Settings\Owner\My Documents\pos6B5.tmp
C:\Documents and Settings\Owner\My Documents\pos6B6.tmp
C:\Documents and Settings\Owner\My Documents\pos6B7.tmp
C:\Documents and Settings\Owner\My Documents\pos6B8.tmp
C:\Documents and Settings\Owner\My Documents\pos6B9.tmp
C:\Documents and Settings\Owner\My Documents\pos6BA.tmp
C:\Documents and Settings\Owner\My Documents\pos6BB.tmp
C:\Documents and Settings\Owner\My Documents\pos6BC.tmp
C:\Documents and Settings\Owner\My Documents\pos6BD.tmp
C:\Documents and Settings\Owner\My Documents\pos6BE.tmp
C:\Documents and Settings\Owner\My Documents\pos6BF.tmp
C:\Documents and Settings\Owner\My Documents\pos6C0.tmp
C:\Documents and Settings\Owner\My Documents\pos6C1.tmp
C:\Documents and Settings\Owner\My Documents\pos6C2.tmp
C:\Documents and Settings\Owner\My Documents\pos6C3.tmp
C:\Documents and Settings\Owner\My Documents\pos6C4.tmp
C:\Documents and Settings\Owner\My Documents\pos6C5.tmp
C:\Documents and Settings\Owner\My Documents\pos6C6.tmp
C:\Documents and Settings\Owner\My Documents\pos6C7.tmp
C:\Documents and Settings\Owner\My Documents\pos6C8.tmp
C:\Documents and Settings\Owner\My Documents\pos6C9.tmp
C:\Documents and Settings\Owner\My Documents\pos6CA.tmp
C:\Documents and Settings\Owner\My Documents\pos6CB.tmp
C:\Documents and Settings\Owner\My Documents\pos6CC.tmp
C:\Documents and Settings\Owner\My Documents\pos6CD.tmp
C:\Documents and Settings\Owner\My Documents\pos6CE.tmp
C:\Documents and Settings\Owner\My Documents\pos6CF.tmp
C:\Documents and Settings\Owner\My Documents\pos6D0.tmp
C:\Documents and Settings\Owner\My Documents\pos6D1.tmp
C:\Documents and Settings\Owner\My Documents\pos6D2.tmp
C:\Documents and Settings\Owner\My Documents\pos6D3.tmp
C:\Documents and Settings\Owner\My Documents\pos6D4.tmp
C:\Documents and Settings\Owner\My Documents\pos6D5.tmp
C:\Documents and Settings\Owner\My Documents\pos6D6.tmp
C:\Documents and Settings\Owner\My Documents\pos6D7.tmp
C:\Documents and Settings\Owner\My Documents\pos6D8.tmp
C:\Documents and Settings\Owner\My Documents\pos6D9.tmp
C:\Documents and Settings\Owner\My Documents\pos6DA.tmp
C:\Documents and Settings\Owner\My Documents\pos6DB.tmp
C:\Documents and Settings\Owner\My Documents\pos6DC.tmp
C:\Documents and Settings\Owner\My Documents\pos6DD.tmp
C:\Documents and Settings\Owner\My Documents\pos6DE.tmp
C:\Documents and Settings\Owner\My Documents\pos6DF.tmp
C:\Documents and Settings\Owner\My Documents\pos6E0.tmp
C:\Documents and Settings\Owner\My Documents\pos6E1.tmp
C:\Documents and Settings\Owner\My Documents\pos6E2.tmp
C:\Documents and Settings\Owner\My Documents\pos6E3.tmp
C:\Documents and Settings\Owner\My Documents\pos6E4.tmp
C:\Documents and Settings\Owner\My Documents\pos6E5.tmp
C:\Documents and Settings\Owner\My Documents\pos6E6.tmp
C:\Documents and Settings\Owner\My Documents\pos6E7.tmp
C:\Documents and Settings\Owner\My Documents\pos6E8.tmp
C:\Documents and Settings\Owner\My Documents\pos6E9.tmp
C:\Documents and Settings\Owner\My Documents\pos6EA.tmp
C:\Documents and Settings\Owner\My Documents\pos6EB.tmp
C:\Documents and Settings\Owner\My Documents\pos6EC.tmp
C:\Documents and Settings\Owner\My Documents\pos6ED.tmp
C:\Documents and Settings\Owner\My Documents\pos6EE.tmp
C:\Documents and Settings\Owner\My Documents\pos6EF.tmp
C:\Documents and Settings\Owner\My Documents\pos6F0.tmp
C:\Documents and Settings\Owner\My Documents\pos6F1.tmp
C:\Documents and Settings\Owner\My Documents\pos6F2.tmp
C:\Documents and Settings\Owner\My Documents\pos6F3.tmp
C:\Documents and Settings\Owner\My Documents\pos6F4.tmp
C:\Documents and Settings\Owner\My Documents\pos6F5.tmp
C:\Documents and Settings\Owner\My Documents\pos6F6.tmp
C:\Documents and Settings\Owner\My Documents\pos6F7.tmp
C:\Documents and Settings\Owner\My Documents\pos6F8.tmp
C:\Documents and Settings\Owner\My Documents\pos6F9.tmp
C:\Documents and Settings\Owner\My Documents\pos6FA.tmp
C:\Documents and Settings\Owner\My Documents\pos6FB.tmp
C:\Documents and Settings\Owner\My Documents\pos6FC.tmp
C:\Documents and Settings\Owner\My Documents\pos6FD.tmp
C:\Documents and Settings\Owner\My Documents\pos6FE.tmp
C:\Documents and Settings\Owner\My Documents\pos6FF.tmp
C:\Documents and Settings\Owner\My Documents\pos700.tmp
C:\Documents and Settings\Owner\My Documents\pos701.tmp
C:\Documents and Settings\Owner\My Documents\pos702.tmp
C:\Documents and Settings\Owner\My Documents\pos703.tmp
C:\Documents and Settings\Owner\My Documents\pos704.tmp
C:\Documents and Settings\Owner\My Documents\pos705.tmp
C:\Documents and Settings\Owner\My Documents\pos706.tmp
C:\Documents and Settings\Owner\My Documents\pos707.tmp
C:\Documents and Settings\Owner\My Documents\pos708.tmp
C:\Documents and Settings\Owner\My Documents\pos709.tmp
C:\Documents and Settings\Owner\My Documents\pos70A.tmp
C:\Documents and Settings\Owner\My Documents\pos70B.tmp
C:\Documents and Settings\Owner\My Documents\pos70C.tmp
C:\Documents and Settings\Owner\My Documents\pos70D.tmp
C:\Documents and Settings\Owner\My Documents\pos70E.tmp
C:\Documents and Settings\Owner\My Documents\pos70F.tmp
C:\Documents and Settings\Owner\My Documents\pos710.tmp
C:\Documents and Settings\Owner\My Documents\pos711.tmp
C:\Documents and Settings\Owner\My Documents\pos712.tmp
C:\Documents and Settings\Owner\My Documents\pos713.tmp
C:\Documents and Settings\Owner\My Documents\pos714.tmp
C:\Documents and Settings\Owner\My Documents\pos715.tmp
C:\Documents and Settings\Owner\My Documents\pos716.tmp
C:\Documents and Settings\Owner\My Documents\pos717.tmp
C:\Documents and Settings\Owner\My Documents\pos718.tmp
C:\Documents and Settings\Owner\My Documents\pos719.tmp
C:\Documents and Settings\Owner\My Documents\pos71A.tmp
C:\Documents and Settings\Owner\My Documents\pos71B.tmp
C:\Documents and Settings\Owner\My Documents\pos71C.tmp
C:\Documents and Settings\Owner\My Documents\pos71D.tmp
C:\Documents and Settings\Owner\My Documents\pos71E.tmp
C:\Documents and Settings\Owner\My Documents\pos71F.tmp
C:\Documents and Settings\Owner\My Documents\pos720.tmp
C:\Documents and Settings\Owner\My Documents\pos721.tmp
C:\Documents and Settings\Owner\My Documents\pos722.tmp
C:\Documents and Settings\Owner\My Documents\pos723.tmp
C:\Documents and Settings\Owner\My Documents\pos724.tmp
C:\Documents and Settings\Owner\My Documents\pos725.tmp
C:\Documents and Settings\Owner\My Documents\pos726.tmp
C:\Documents and Settings\Owner\My Documents\pos727.tmp
C:\Documents and Settings\Owner\My Documents\pos728.tmp
C:\Documents and Settings\Owner\My Documents\pos729.tmp
C:\Documents and Settings\Owner\My Documents\pos72A.tmp
C:\Documents and Settings\Owner\My Documents\pos72B.tmp
C:\Documents and Settings\Owner\My Documents\pos72C.tmp
C:\Documents and Settings\Owner\My Documents\pos72D.tmp
C:\Documents and Settings\Owner\My Documents\pos72E.tmp
C:\Documents and Settings\Owner\My Documents\pos72F.tmp
C:\Documents and Settings\Owner\My Documents\pos730.tmp
C:\Documents and Settings\Owner\My Documents\pos731.tmp
C:\Documents and Settings\Owner\My Documents\pos732.tmp
C:\Documents and Settings\Owner\My Documents\pos733.tmp
C:\Documents and Settings\Owner\My Documents\pos734.tmp
C:\Documents and Settings\Owner\My Documents\pos735.tmp
C:\Documents and Settings\Owner\My Documents\pos736.tmp
C:\Documents and Settings\Owner\My Documents\pos737.tmp
C:\Documents and Settings\Owner\My Documents\pos738.tmp
C:\Documents and Settings\Owner\My Documents\pos739.tmp
C:\Documents and Settings\Owner\My Documents\pos73A.tmp
C:\Documents and Settings\Owner\My Documents\pos73B.tmp
C:\Documents and Settings\Owner\My Documents\pos73C.tmp
C:\Documents and Settings\Owner\My Documents\pos73D.tmp
C:\Documents and Settings\Owner\My Documents\pos73E.tmp
C:\Documents and Settings\Owner\My Documents\pos73F.tmp
C:\Documents and Settings\Owner\My Documents\pos740.tmp
C:\Documents and Settings\Owner\My Documents\pos741.tmp
C:\Documents and Settings\Owner\My Documents\pos742.tmp
C:\Documents and Settings\Owner\My Documents\pos743.tmp
C:\Documents and Settings\Owner\My Documents\pos744.tmp
C:\Documents and Settings\Owner\My Documents\pos745.tmp
C:\Documents and Settings\Owner\My Documents\pos746.tmp
C:\Documents and Settings\Owner\My Documents\pos747.tmp
C:\Documents and Settings\Owner\My Documents\pos748.tmp
C:\Documents and Settings\Owner\My Documents\pos749.tmp
C:\Documents and Settings\Owner\My Documents\pos74A.tmp
C:\Documents and Settings\Owner\My Documents\pos74B.tmp
C:\Documents and Settings\Owner\My Documents\pos74C.tmp
C:\Documents and Settings\Owner\My Documents\pos74D.tmp
C:\Documents and Settings\Owner\My Documents\pos74E.tmp
C:\Documents and Settings\Owner\My Documents\pos74F.tmp
C:\Documents and Settings\Owner\My Documents\pos750.tmp
C:\Documents and Settings\Owner\My Documents\pos751.tmp
C:\Documents and Settings\Owner\My Documents\pos752.tmp
C:\Documents and Settings\Owner\My Documents\pos753.tmp
C:\Documents and Settings\Owner\My Documents\pos754.tmp
C:\Documents and Settings\Owner\My Documents\pos755.tmp
C:\Documents and Settings\Owner\My Documents\pos756.tmp
C:\Documents and Settings\Owner\My Documents\pos757.tmp
C:\Documents and Settings\Owner\My Documents\pos758.tmp
C:\Documents and Settings\Owner\My Documents\pos759.tmp
C:\Documents and Settings\Owner\My Documents\pos75A.tmp
C:\Documents and Settings\Owner\My Documents\pos75B.tmp
C:\Documents and Settings\Owner\My Documents\pos75C.tmp
C:\Documents and Settings\Owner\My Documents\pos75D.tmp
C:\Documents and Settings\Owner\My Documents\pos75E.tmp
C:\Documents and Settings\Owner\My Documents\pos75F.tmp
C:\Documents and Settings\Owner\My Documents\pos760.tmp
C:\Documents and Settings\Owner\My Documents\pos761.tmp
C:\Documents and Settings\Owner\My Documents\pos762.tmp
C:\Documents and Settings\Owner\My Documents\pos763.tmp
C:\Documents and Settings\Owner\My Documents\pos764.tmp
C:\Documents and Settings\Owner\My Documents\pos765.tmp
C:\Documents and Settings\Owner\My Documents\pos766.tmp
C:\Documents and Settings\Owner\My Documents\pos767.tmp
C:\Documents and Settings\Owner\My Documents\pos768.tmp
C:\Documents and Settings\Owner\My Documents\pos769.tmp
C:\Documents and Settings\Owner\My Documents\pos76A.tmp
C:\Documents and Settings\Owner\My Documents\pos76B.tmp
C:\Documents and Settings\Owner\My Documents\pos76C.tmp
C:\Documents and Settings\Owner\My Documents\pos76D.tmp
C:\Documents and Settings\Owner\My Documents\pos76E.tmp
C:\Documents and Settings\Owner\My Documents\pos76F.tmp
C:\Documents and Settings\Owner\My Documents\pos770.tmp
C:\Documents and Settings\Owner\My Documents\pos771.tmp
C:\Documents and Settings\Owner\My Documents\pos772.tmp
C:\Documents and Settings\Owner\My Documents\pos773.tmp
C:\Documents and Settings\Owner\My Documents\pos774.tmp
C:\Documents and Settings\Owner\My Documents\pos775.tmp
C:\Documents and Settings\Owner\My Documents\pos776.tmp
C:\Documents and Settings\Owner\My Documents\pos777.tmp
C:\Documents and Settings\Owner\My Documents\pos778.tmp
C:\Documents and Settings\Owner\My Documents\pos779.tmp
C:\Documents and Settings\Owner\My Documents\pos77A.tmp
C:\Documents and Settings\Owner\My Documents\pos77B.tmp
C:\Documents and Settings\Owner\My Documents\pos77C.tmp
C:\Documents and Settings\Owner\My Documents\pos77D.tmp
C:\Documents and Settings\Owner\My Documents\pos77E.tmp
C:\Documents and Settings\Owner\My Documents\pos77F.tmp
C:\Documents and Settings\Owner\My Documents\pos780.tmp
C:\Documents and Settings\Owner\My Documents\pos781.tmp
C:\Documents and Settings\Owner\My Documents\pos782.tmp
C:\Documents and Settings\Owner\My Documents\pos783.tmp
C:\Documents and Settings\Owner\My Documents\pos784.tmp
C:\Documents and Settings\Owner\My Documents\pos785.tmp
C:\Documents and Settings\Owner\My Documents\pos786.tmp
C:\Documents and Settings\Owner\My Documents\pos787.tmp
C:\Documents and Settings\Owner\My Documents\pos788.tmp
C:\Documents and Settings\Owner\My Documents\pos789.tmp
C:\Documents and Settings\Owner\My Documents\pos78A.tmp
C:\Documents and Settings\Owner\My Documents\pos78B.tmp
C:\Documents and Settings\Owner\My Documents\pos78C.tmp
C:\Documents and Settings\Owner\My Documents\pos78D.tmp
C:\Documents and Settings\Owner\My Documents\pos78E.tmp
C:\Documents and Settings\Owner\My Documents\pos78F.tmp
C:\Documents and Settings\Owner\My Documents\pos790.tmp
C:\Documents and Settings\Owner\My Documents\pos791.tmp
C:\Documents and Settings\Owner\My Documents\pos792.tmp
C:\Documents and Settings\Owner\My Documents\pos793.tmp
C:\Documents and Settings\Owner\My Documents\pos794.tmp
C:\Documents and Settings\Owner\My Documents\pos795.tmp
C:\Documents and Settings\Owner\My Documents\pos796.tmp
C:\Documents and Settings\Owner\My Documents\pos797.tmp
C:\Documents and Settings\Owner\My Documents\pos798.tmp
C:\Documents and Settings\Owner\My Documents\pos799.tmp
C:\Documents and Settings\Owner\My Documents\pos79A.tmp
C:\Documents and Settings\Owner\My Documents\pos79B.tmp
C:\Documents and Settings\Owner\My Documents\pos79C.tmp
C:\Documents and Settings\Owner\My Documents\pos79D.tmp
C:\Documents and Settings\Owner\My Documents\pos79E.tmp
C:\Documents and Settings\Owner\My Documents\pos79F.tmp
C:\Documents and Settings\Owner\My Documents\pos7A0.tmp
C:\Documents and Settings\Owner\My Documents\pos7A1.tmp
C:\Documents and Settings\Owner\My Documents\pos7A2.tmp
C:\Documents and Settings\Owner\My Documents\pos7A3.tmp
C:\Documents and Settings\Owner\My Documents\pos7A4.tmp
C:\Documents and Settings\Owner\My Documents\pos7A5.tmp
C:\Documents and Settings\Owner\My Documents\pos7A6.tmp
C:\Documents and Settings\Owner\My Documents\pos7A7.tmp
C:\Documents and Settings\Owner\My Documents\pos7A8.tmp
C:\Documents and Settings\Owner\My Documents\pos7A9.tmp
C:\Documents and Settings\Owner\My Documents\pos7AA.tmp
C:\Documents and Settings\Owner\My Documents\pos7AB.tmp
C:\Documents and Settings\Owner\My Documents\pos7AC.tmp
C:\Documents and Settings\Owner\My Documents\pos7AD.tmp
C:\Documents and Settings\Owner\My Documents\pos7AE.tmp
C:\Documents and Settings\Owner\My Documents\pos7AF.tmp
C:\Documents and Settings\Owner\My Documents\pos7B0.tmp
C:\Documents and Settings\Owner\My Documents\pos7B1.tmp
C:\Documents and Settings\Owner\My Documents\pos7B2.tmp
C:\Documents and Settings\Owner\My Documents\pos7B3.tmp
C:\Documents and Settings\Owner\My Documents\pos7B4.tmp
C:\Documents and Settings\Owner\My Documents\pos7B5.tmp
C:\Documents and Settings\Owner\My Documents\pos7B6.tmp
C:\Documents and Settings\Owner\My Documents\pos7B7.tmp
C:\Documents and Settings\Owner\My Documents\pos7B8.tmp
C:\Documents and Settings\Owner\My Documents\pos7B9.tmp
C:\Documents and Settings\Owner\My Documents\pos7BA.tmp
C:\Documents and Settings\Owner\My Documents\pos7BB.tmp
C:\Documents and Settings\Owner\My Documents\pos7BC.tmp
C:\Documents and Settings\Owner\My Documents\pos7BD.tmp
C:\Documents and Settings\Owner\My Documents\pos7BE.tmp
C:\Documents and Settings\Owner\My Documents\pos7BF.tmp
C:\Documents and Settings\Owner\My Documents\pos7C0.tmp
C:\Documents and Settings\Owner\My Documents\pos7C1.tmp
C:\Documents and Settings\Owner\My Documents\pos7C2.tmp
C:\Documents and Settings\Owner\My Documents\pos7C3.tmp
C:\Documents and Settings\Owner\My Documents\pos7C4.tmp
C:\Documents and Settings\Owner\My Documents\pos7C5.tmp
C:\Documents and Settings\Owner\My Documents\pos7C6.tmp
C:\Documents and Settings\Owner\My Documents\pos7C7.tmp
C:\Documents and Settings\Owner\My Documents\pos7C8.tmp
C:\Documents and Settings\Owner\My Documents\pos7C9.tmp
C:\Documents and Settings\Owner\My Documents\pos7CA.tmp
C:\Documents and Settings\Owner\My Documents\pos7CB.tmp
C:\Documents and Settings\Owner\My Documents\pos7CC.tmp
C:\Documents and Settings\Owner\My Documents\pos7CD.tmp
C:\Documents and Settings\Owner\My Documents\pos7CE.tmp
C:\Documents and Settings\Owner\My Documents\pos7CF.tmp
C:\Documents and Settings\Owner\My Documents\pos7D0.tmp
C:\Documents and Settings\Owner\My Documents\pos7D1.tmp
C:\Documents and Settings\Owner\My Documents\pos7D2.tmp
C:\Documents and Settings\Owner\My Documents\pos7D3.tmp
C:\Documents and Settings\Owner\My Documents\pos7D4.tmp
C:\Documents and Settings\Owner\My Documents\pos7D5.tmp
C:\Documents and Settings\Owner\My Documents\pos7D6.tmp
C:\Documents and Settings\Owner\My Documents\pos7D7.tmp
C:\Documents and Settings\Owner\My Documents\pos7D8.tmp
C:\Documents and Settings\Owner\My Documents\pos7D9.tmp
C:\Documents and Settings\Owner\My Documents\pos7DA.tmp
C:\Documents and Settings\Owner\My Documents\pos7DB.tmp
C:\Documents and Settings\Owner\My Documents\pos7DC.tmp
C:\Documents and Settings\Owner\My Documents\pos7DD.tmp
C:\Documents and Settings\Owner\My Documents\pos7DE.tmp
C:\Documents and Settings\Owner\My Documents\pos7DF.tmp
C:\Documents and Settings\Owner\My Documents\pos7E0.tmp
C:\Documents and Settings\Owner\My Documents\pos7E1.tmp
C:\Documents and Settings\Owner\My Documents\pos7E2.tmp
C:\Documents and Settings\Owner\My Documents\pos7E3.tmp
C:\Documents and Settings\Owner\My Documents\pos7E4.tmp
C:\Documents and Settings\Owner\My Documents\pos7E5.tmp
C:\Documents and Settings\Owner\My Documents\pos7E6.tmp
C:\Documents and Settings\Owner\My Documents\pos7E7.tmp
C:\Documents and Settings\Owner\My Documents\pos7E8.tmp
C:\Documents and Settings\Owner\My Documents\pos7E9.tmp
C:\Documents and Settings\Owner\My Documents\pos7EA.tmp
C:\Documents and Settings\Owner\My Documents\pos7EB.tmp
C:\Documents and Settings\Owner\My Documents\pos7EC.tmp
C:\Documents and Settings\Owner\My Documents\pos7ED.tmp
C:\Documents and Settings\Owner\My Documents\pos7EE.tmp
C:\Documents and Settings\Owner\My Documents\pos7EF.tmp
C:\Documents and Settings\Owner\My Documents\pos7F0.tmp
C:\Documents and Settings\Owner\My Documents\pos7F1.tmp
C:\Documents and Settings\Owner\My Documents\pos7F2.tmp
C:\Documents and Settings\Owner\My Documents\pos7F3.tmp
C:\Documents and Settings\Owner\My Documents\pos7F4.tmp
C:\Documents and Settings\Owner\My Documents\pos7F5.tmp
C:\pos10.tmp
C:\pos100.tmp
C:\pos101.tmp
C:\pos102.tmp
C:\pos103.tmp
C:\pos104.tmp
C:\pos105.tmp
C:\pos106.tmp
C:\pos107.tmp
C:\pos108.tmp
C:\pos109.tmp
C:\pos10A.tmp
C:\pos10B.tmp
C:\pos10C.tmp
C:\pos10D.tmp
C:\pos10E.tmp
C:\pos10F.tmp
C:\pos11.tmp
C:\pos110.tmp
C:\pos111.tmp
C:\pos112.tmp
C:\pos113.tmp
C:\pos114.tmp
C:\pos115.tmp
C:\pos116.tmp
C:\pos117.tmp
C:\pos118.tmp
C:\pos119.tmp
C:\pos11A.tmp
C:\pos11B.tmp
C:\pos11C.tmp
C:\pos11D.tmp
C:\pos11E.tmp
C:\pos11F.tmp
C:\pos12.tmp
C:\pos120.tmp
C:\pos121.tmp
C:\pos122.tmp
C:\pos123.tmp
C:\pos124.tmp
C:\pos125.tmp
C:\pos127.tmp
C:\pos128.tmp
C:\pos129.tmp
C:\pos12A.tmp
C:\pos12B.tmp
C:\pos12C.tmp
C:\pos12D.tmp
C:\pos12E.tmp
C:\pos12F.tmp
C:\pos13.tmp
C:\pos130.tmp
C:\pos131.tmp
C:\pos132.tmp
C:\pos133.tmp
C:\pos134.tmp
C:\pos135.tmp
C:\pos136.tmp
C:\pos137.tmp
C:\pos138.tmp
C:\pos139.tmp
C:\pos13A.tmp
C:\pos13B.tmp
C:\pos13C.tmp
C:\pos13D.tmp
C:\pos13E.tmp
C:\pos13F.tmp
C:\pos14.tmp
C:\pos140.tmp
C:\pos141.tmp
C:\pos142.tmp
C:\pos143.tmp
C:\pos144.tmp
C:\pos145.tmp
C:\pos146.tmp
C:\pos147.tmp
C:\pos148.tmp
C:\pos149.tmp
C:\pos14A.tmp
C:\pos14B.tmp
C:\pos14C.tmp
C:\pos14D.tmp
C:\pos14E.tmp
C:\pos14F.tmp
C:\pos15.tmp
C:\pos150.tmp
C:\pos151.tmp
C:\pos152.tmp
C:\pos153.tmp
C:\pos154.tmp
C:\pos155.tmp
C:\pos156.tmp
C:\pos157.tmp
C:\pos158.tmp
C:\pos159.tmp
C:\pos15A.tmp
C:\pos15B.tmp
C:\pos15C.tmp
C:\pos15D.tmp
C:\pos15E.tmp
C:\pos15F.tmp
C:\pos16.tmp
C:\pos160.tmp
C:\pos161.tmp
C:\pos162.tmp
C:\pos163.tmp
C:\pos164.tmp
C:\pos165.tmp
C:\pos166.tmp
C:\pos167.tmp
C:\pos168.tmp
C:\pos169.tmp
C:\pos16A.tmp
C:\pos16B.tmp
C:\pos16C.tmp
C:\pos16D.tmp
C:\pos16E.tmp
C:\pos16F.tmp
C:\pos170.tmp
C:\pos171.tmp
C:\pos172.tmp
C:\pos173.tmp
C:\pos174.tmp
C:\pos175.tmp
C:\pos176.tmp
C:\pos177.tmp
C:\pos178.tmp
C:\pos179.tmp
C:\pos17A.tmp
C:\pos17B.tmp
C:\pos17C.tmp
C:\pos17D.tmp
C:\pos17E.tmp
C:\pos17F.tmp
C:\pos18.tmp
C:\pos180.tmp
C:\pos181.tmp
C:\pos182.tmp
C:\pos183.tmp
C:\pos184.tmp
C:\pos185.tmp
C:\pos186.tmp
C:\pos187.tmp
C:\pos188.tmp
C:\pos189.tmp
C:\pos18A.tmp
C:\pos18B.tmp
C:\pos18C.tmp
C:\pos18D.tmp
C:\pos18E.tmp
C:\pos18F.tmp
C:\pos19.tmp
C:\pos190.tmp
C:\pos191.tmp
C:\pos192.tmp
C:\pos193.tmp
C:\pos194.tmp
C:\pos195.tmp
C:\pos196.tmp
C:\pos197.tmp
C:\pos198.tmp
C:\pos199.tmp
C:\pos19A.tmp
C:\pos19B.tmp
C:\pos19C.tmp
C:\pos19D.tmp
C:\pos19E.tmp
C:\pos19F.tmp
C:\pos1A.tmp
C:\pos1A0.tmp
C:\pos1A1.tmp
C:\pos1A2.tmp
C:\pos1A3.tmp
C:\pos1A4.tmp
C:\pos1A5.tmp
C:\pos1A6.tmp
C:\pos1A7.tmp
C:\pos1A8.tmp
C:\pos1A9.tmp
C:\pos1AA.tmp
C:\pos1AB.tmp
C:\pos1AC.tmp
C:\pos1AD.tmp
C:\pos1AE.tmp
C:\pos1AF.tmp
C:\pos1B.tmp
C:\pos1B0.tmp
C:\pos1B1.tmp
C:\pos1B2.tmp
C:\pos1B3.tmp
C:\pos1B4.tmp
C:\pos1B5.tmp
C:\pos1B6.tmp
C:\pos1B7.tmp
C:\pos1B8.tmp
C:\pos1B9.tmp
C:\pos1BA.tmp
C:\pos1BB.tmp
C:\pos1BC.tmp
C:\pos1BD.tmp
C:\pos1BE.tmp
C:\pos1BF.tmp
C:\pos1C.tmp
C:\pos1C0.tmp
C:\pos1C1.tmp
C:\pos1C2.tmp
C:\pos1C3.tmp
C:\pos1C4.tmp
C:\pos1C5.tmp
C:\pos1C6.tmp
C:\pos1C7.tmp
C:\pos1C8.tmp
C:\pos1C9.tmp
C:\pos1CA.tmp
C:\pos1CB.tmp
C:\pos1CC.tmp
C:\pos1CD.tmp
C:\pos1CE.tmp
C:\pos1CF.tmp
C:\pos1D.tmp
C:\pos1D0.tmp
C:\pos1D1.tmp
C:\pos1D2.tmp
C:\pos1D3.tmp
C:\pos1D4.tmp
C:\pos1D5.tmp
C:\pos1D6.tmp
C:\pos1D7.tmp
C:\pos1D8.tmp
C:\pos1D9.tmp
C:\pos1DA.tmp
C:\pos1DB.tmp
C:\pos1DC.tmp
C:\pos1DD.tmp
C:\pos1DE.tmp
C:\pos1DF.tmp
C:\pos1E.tmp
C:\pos1E0.tmp
C:\pos1E1.tmp
C:\pos1E2.tmp
C:\pos1E3.tmp
C:\pos1E4.tmp
C:\pos1E5.tmp
C:\pos1E6.tmp
C:\pos1E7.tmp
C:\pos1E8.tmp
C:\pos1E9.tmp
C:\pos1EA.tmp
C:\pos1EB.tmp
C:\pos1EC.tmp
C:\pos1ED.tmp
C:\pos1EE.tmp
C:\pos1EF.tmp
C:\pos1F.tmp
C:\pos1F0.tmp
C:\pos1F1.tmp
C:\pos1F2.tmp
C:\pos1F3.tmp
C:\pos1F4.tmp
C:\pos1F5.tmp
C:\pos1F6.tmp
C:\pos1F7.tmp
C:\pos1F8.tmp
C:\pos1F9.tmp
C:\pos1FA.tmp
C:\pos1FB.tmp
C:\pos1FC.tmp
C:\pos1FD.tmp
C:\pos1FE.tmp
C:\pos1FF.tmp
C:\pos20.tmp
C:\pos200.tmp
C:\pos201.tmp
C:\pos202.tmp
C:\pos21.tmp
C:\pos22.tmp
C:\pos23.tmp
C:\pos24.tmp
C:\pos25.tmp
C:\pos26.tmp
C:\pos27.tmp
C:\pos28.tmp
C:\pos29.tmp
C:\pos2A.tmp
C:\pos2B.tmp
C:\pos2C.tmp
C:\pos2D.tmp
C:\pos2E.tmp
C:\pos2F.tmp
C:\pos30.tmp
C:\pos31.tmp
C:\pos32.tmp
C:\pos33.tmp
C:\pos34.tmp
C:\pos35.tmp
C:\pos36.tmp
C:\pos37.tmp
C:\pos38.tmp
C:\pos39.tmp
C:\pos3A.tmp
C:\pos3B.tmp
C:\pos3C.tmp
C:\pos3D.tmp
C:\pos3E.tmp
C:\pos3F.tmp
C:\pos40.tmp
C:\pos40E.tmp
C:\pos40F.tmp
C:\pos41.tmp
C:\pos410.tmp
C:\pos411.tmp
C:\pos412.tmp
C:\pos413.tmp
C:\pos414.tmp
C:\pos415.tmp
C:\pos416.tmp
C:\pos417.tmp
C:\pos418.tmp
C:\pos419.tmp
C:\pos41A.tmp
C:\pos41B.tmp
C:\pos41C.tmp
C:\pos41D.tmp
C:\pos41E.tmp
C:\pos41F.tmp
C:\pos42.tmp
C:\pos420.tmp
C:\pos421.tmp
C:\pos422.tmp
C:\pos423.tmp
C:\pos424.tmp
C:\pos425.tmp
C:\pos426.tmp
C:\pos427.tmp
C:\pos428.tmp
C:\pos429.tmp
C:\pos42A.tmp
C:\pos42B.tmp
C:\pos42C.tmp
C:\pos42D.tmp
C:\pos42E.tmp
C:\pos42F.tmp
C:\pos43.tmp
C:\pos430.tmp
C:\pos431.tmp
C:\pos432.tmp
C:\pos433.tmp
C:\pos434.tmp
C:\pos435.tmp
C:\pos436.tmp
C:\pos437.tmp
C:\pos438.tmp
C:\pos439.tmp
C:\pos43A.tmp
C:\pos43B.tmp
C:\pos43C.tmp
C:\pos43D.tmp
C:\pos43E.tmp
C:\pos43F.tmp
C:\pos44.tmp
C:\pos440.tmp
C:\pos441.tmp
C:\pos442.tmp
C:\pos443.tmp
C:\pos444.tmp
C:\pos445.tmp
C:\pos446.tmp
C:\pos447.tmp
C:\pos448.tmp
C:\pos449.tmp
C:\pos44A.tmp
C:\pos44B.tmp
C:\pos44C.tmp
C:\pos44D.tmp
C:\pos44E.tmp
C:\pos44F.tmp
C:\pos45.tmp
C:\pos450.tmp
C:\pos451.tmp
C:\pos452.tmp
C:\pos453.tmp
C:\pos454.tmp
C:\pos455.tmp
C:\pos456.tmp
C:\pos457.tmp
C:\pos458.tmp
C:\pos459.tmp
C:\pos45A.tmp
C:\pos45B.tmp
C:\pos45C.tmp
C:\pos45D.tmp
C:\pos45E.tmp
C:\pos45F.tmp
C:\pos46.tmp
C:\pos460.tmp
C:\pos461.tmp
C:\pos462.tmp
C:\pos463.tmp
C:\pos464.tmp
C:\pos465.tmp
C:\pos466.tmp
C:\pos467.tmp
C:\pos468.tmp
C:\pos469.tmp
C:\pos46A.tmp
C:\pos46B.tmp
C:\pos46C.tmp
C:\pos46D.tmp
C:\pos46E.tmp
C:\pos46F.tmp
C:\pos47.tmp
C:\pos470.tmp
C:\pos471.tmp
C:\pos472.tmp
C:\pos473.tmp
C:\pos474.tmp
C:\pos475.tmp
C:\pos476.tmp
C:\pos477.tmp
C:\pos478.tmp
C:\pos48.tmp
C:\pos49.tmp
C:\pos4A.tmp
C:\pos4B.tmp
C:\pos4C.tmp
C:\pos4D.tmp
C:\pos4E.tmp
C:\pos4F.tmp
C:\pos50.tmp
C:\pos51.tmp
C:\pos52.tmp
C:\pos53.tmp
C:\pos54.tmp
C:\pos55.tmp
C:\pos56.tmp
C:\pos57.tmp
C:\pos58.tmp
C:\pos59.tmp
C:\pos5A.tmp
C:\pos5B.tmp
C:\pos5C.tmp
C:\pos5D.tmp
C:\pos5E.tmp
C:\pos5F.tmp
C:\pos60.tmp
C:\pos61.tmp
C:\pos62.tmp
C:\pos63.tmp
C:\pos64.tmp
C:\pos65.tmp
C:\pos66.tmp
C:\pos67.tmp
C:\pos68.tmp
C:\pos69.tmp
C:\pos6A.tmp
C:\pos6B.tmp
C:\pos6C.tmp
C:\pos6D.tmp
C:\pos6E.tmp
C:\pos6F.tmp
C:\pos70.tmp
C:\pos71.tmp
C:\pos72.tmp
C:\pos73.tmp
C:\pos74.tmp
C:\pos75.tmp
C:\pos76.tmp
C:\pos77.tmp
C:\pos78.tmp
C:\pos79.tmp
C:\pos7A.tmp
C:\pos7B.tmp
C:\pos7C.tmp
C:\pos7D.tmp
C:\pos7E.tmp
C:\pos7F.tmp
C:\pos80.tmp
C:\pos81.tmp
C:\pos82.tmp
C:\pos83.tmp
C:\pos84.tmp
C:\pos85.tmp
C:\pos86.tmp
C:\pos87.tmp
C:\pos88.tmp
C:\pos89.tmp
C:\pos8A.tmp
C:\pos8B.tmp
C:\pos8C.tmp
C:\pos8D.tmp
C:\pos8E.tmp
C:\pos8F.tmp
C:\pos90.tmp
C:\pos91.tmp
C:\pos92.tmp
C:\pos93.tmp
C:\pos94.tmp
C:\pos95.tmp
C:\pos96.tmp
C:\pos97.tmp
C:\pos98.tmp
C:\pos99.tmp
C:\pos9A.tmp
C:\pos9B.tmp
C:\pos9C.tmp
C:\pos9D.tmp
C:\pos9E.tmp
C:\pos9F.tmp
C:\posA0.tmp
C:\posA1.tmp
C:\posA2.tmp
C:\posA3.tmp
C:\posA4.tmp
C:\posA5.tmp
C:\posA6.tmp
C:\posA7.tmp
C:\posA8.tmp
C:\posA9.tmp
C:\posAA.tmp
C:\posAB.tmp
C:\posAC.tmp
C:\posAD.tmp
C:\posAE.tmp
C:\posAF.tmp
C:\posB0.tmp
C:\posB1.tmp
C:\posB2.tmp
C:\posB3.tmp
C:\posB4.tmp
C:\posB5.tmp
C:\posB6.tmp
C:\posB7.tmp
C:\posB8.tmp
C:\posB9.tmp
C:\posBA.tmp
C:\posBB.tmp
C:\posBC.tmp
C:\posBD.tmp
C:\posBE.tmp
C:\posBF.tmp
C:\posC0.tmp
C:\posC1.tmp
C:\posC2.tmp
C:\posC3.tmp
C:\posC4.tmp
C:\posC5.tmp
C:\posC6.tmp
C:\posC7.tmp
C:\posC8.tmp
C:\posC9.tmp
C:\posCA.tmp
C:\posCB.tmp
C:\posCC.tmp
C:\posCD.tmp
C:\posCE.tmp
C:\posCF.tmp
C:\posD.tmp
C:\posD0.tmp
C:\posD1.tmp
C:\posD2.tmp
C:\posD3.tmp
C:\posD4.tmp
C:\posD5.tmp
C:\posD6.tmp
C:\posD7.tmp
C:\posD8.tmp
C:\posD9.tmp
C:\posDA.tmp
C:\posDB.tmp
C:\posDC.tmp
C:\posDD.tmp
C:\posDE.tmp
C:\posDF.tmp
C:\posE.tmp
C:\posE0.tmp
C:\posE1.tmp
C:\posE2.tmp
C:\posE3.tmp
C:\posE4.tmp
C:\posE5.tmp
C:\posE6.tmp
C:\posE7.tmp
C:\posE8.tmp
C:\posE9.tmp
C:\posEA.tmp
C:\posEB.tmp
C:\posEC.tmp
C:\posED.tmp
C:\posEE.tmp
C:\posEF.tmp
C:\posF.tmp
C:\posF0.tmp
C:\posF1.tmp
C:\posF2.tmp
C:\posF3.tmp
C:\posF4.tmp
C:\posF5.tmp
C:\posF6.tmp
C:\posF7.tmp
C:\posF8.tmp
C:\posF9.tmp
C:\posFA.tmp
C:\posFB.tmp
C:\posFC.tmp
C:\posFD.tmp
C:\posFE.tmp
C:\posFF.tmp
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\awvvu.dll
C:\WINDOWS\system32\awvvu.exe
C:\WINDOWS\system32\bipgmtwd.dll
C:\WINDOWS\system32\dwtmgpib.ini
C:\WINDOWS\system32\fextbtjv.dll
C:\WINDOWS\system32\gjegsees.exe
C:\WINDOWS\system32\ixtjxlvp.dll
C:\WINDOWS\system32\jqkqtiea.dll
C:\WINDOWS\system32\llwevfbm.dll
C:\WINDOWS\system32\llwevfbm.dllbox
C:\WINDOWS\system32\uvvwa.ini
C:\WINDOWS\system32\uvvwa.ini2
C:\WINDOWS\system32\windows

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_DOMAINSERVICE
-------\DomainService


((((((((((((((((((((((((( Files Created from 2007-12-22 to 2008-01-22 )))))))))))))))))))))))))))))))
.

2008-01-21 22:43 . 2008-01-21 22:44 14,033 --a------ C:\pos586.tmp
2008-01-21 22:41 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\Nircmd.exe
2008-01-14 21:29 . 2008-01-14 21:29 <DIR> d-------- C:\Program Files\Trend Micro
2008-01-14 21:10 . 2008-01-14 21:10 <DIR> d-------- C:\WINDOWS\ERUNT
2008-01-14 20:59 . 2007-12-14 01:59 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-01-14 04:41 . 2008-01-14 04:42 0 -ra------ C:\WINDOWS\system32\lctvlgcy.ini
2008-01-02 14:19 . 2008-01-14 21:06 182 --a------ C:\WINDOWS\system\hpsysdrv .DAT
2007-12-23 21:16 . 2008-01-01 16:58 181 --a------ C:\WINDOWS\system\hpVIRUSsysdrv .DAT
2007-12-23 21:14 . 2008-01-01 16:58 52,736 --a------ C:\WINDOWS\system\hpVIRUSsysdrv .exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-22 01:17 --------- d-----w C:\Program Files\eMule
2008-01-16 08:20 --------- d-----w C:\Program Files\QuickTime
2008-01-15 04:59 --------- d-----w C:\Program Files\Java
2008-01-13 06:49 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-12 10:19 --------- d-----w C:\Program Files\WinISO
2007-12-12 10:11 --------- d-----w C:\Program Files\GalaNet
2007-12-12 09:46 --------- d-----w C:\Program Files\West Point Bridge Designer 2007
2007-12-11 10:20 --------- d-----w C:\Program Files\Gravity
2001-08-18 12:00 94,784 --sh--w C:\WINDOWS\twain.dll
2001-08-18 12:00 46,592 --sh--w C:\WINDOWS\twain_32.dll
2001-08-18 12:00 50,688 --sh--w C:\WINDOWS\system32\msvcirt.dll
2001-08-18 12:00 9,728 --sh--w C:\WINDOWS\system32\regsvr32.exe
.
<pre>
----a-w		   212,992 2007-12-29 11:44:31  C:\WINDOWS\SMINST\RECGUARD .EXE
----a-w			52,736 2008-01-02 00:58:04  C:\WINDOWS\system\hpVIRUSsysdrv .exe
</pre>


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [ ]
"PS2"="C:\WINDOWS\system32\ps2.exe" [ ]
"PreloadApp"="c:\hp\drivers\printers\photosmart\hphprld.exe" [2008-01-14 21:09 363520]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2006-10-22 12:22 7700480]
"KBD"="C:\HP\KBD\KBD.EXE" [2008-01-14 21:09 389120]
"IgfxTray"="C:\WINDOWS\System32\igfxtray.exe" [2008-01-14 21:09 471040]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [2008-01-14 21:09 380416]
"nwiz"="nwiz.exe" [2006-10-22 12:22 1622016 C:\WINDOWS\system32\nwiz.exe]
"avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2008-01-14 21:09 561152]
"NvMediaCenter"="C:\WINDOWS\System32\NvMcTray.dll" [2006-10-22 12:22 86016]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe" [ ]

[HKLM\~\startupfolder\C:^Documents and Settings^Owner^Start Menu^Programs^Startup^Drempels Desktop.lnk]
path=C:\Documents and Settings\Owner\Start Menu\Programs\Startup\Drempels Desktop.lnk
backup=C:\WINDOWS\pss\Drempels Desktop.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bart Station]
C:\Program Files\ISP50\hta\station.sbrt

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BurnQuick Queue]
--a------ 2004-01-31 14:54 45056 C:\WINDOWS\BQTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ConMgr.exe]
C:\Program Files\EarthLink 5.0\ConMgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla]
--a------ 2002-03-14 09:25 102455 C:\WINDOWS\system32\dla\tfswctrl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HistoryKill]
C:\Program Files\HistoryKill\histkill.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\WINDOWS\System32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMEKRMIG6.1]
--a------ 2001-08-18 04:00 44032 C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]
--a------ 2002-08-28 20:38 208953 C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load]
C:\WINDOWS\System32\awvvu.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LoadWatcher]
d-------- 2008-01-21 22:47 0 C:\ComboFix\test

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MCAgentExe]
C:\Program Files\McAfee.com\Agent\mcagent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MCUpdateExe]
C:\Program Files\McAfee.com\Agent\mcupdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection]
c:\Program Files\Microsoft Works\WkDetect.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MicrosoftWindows]
C:\Windows\system32\directx32.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--ah----- 2002-08-29 02:41 1511453 C:\Program Files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPY2002]
--a------ 2002-08-28 20:39 59392 C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2006-10-22 12:22 1622016 C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]
--a------ 2002-08-28 20:39 455168 C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]
--a------ 2002-08-28 20:39 455168 C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask .exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\S3apphk]
--a------ 2002-03-15 21:51 28672 C:\WINDOWS\system32\S3apphk.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Common Files\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirusScan Online]
c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WZCSVC"=2 (0x2)
"wuauserv"=2 (0x2)
"UPS"=3 (0x3)
"seclogon"=2 (0x2)
"SCardSvr"=3 (0x3)
"SCardDrv"=3 (0x3)
"NtmsSvc"=3 (0x3)
"MSDTC"=3 (0x3)
"mnmsrvc"=3 (0x3)
"Messenger"=2 (0x2)
"MCVSRte"=2 (0x2)
"McShield"=3 (0x3)
"FastUserSwitchingCompatibility"=3 (0x3)
"BITS"=3 (0x3)
"Alerter"=3 (0x3)
"RDSessMgr"=3 (0x3)

R0 avgntmgr;avgntmgr;C:\WINDOWS\System32\drivers\avgntmgr.sys [2005-07-04 11:58]
R1 avgntdd;avgntdd;C:\WINDOWS\System32\DRIVERS\avgntdd.sys [2006-02-23 17:17]
R1 kid_sys;Kensington Input Devices Class filter driver;C:\WINDOWS\System32\drivers\KID_SYS.sys [2001-09-26 13:59]
R1 NPPTNT;NPPTNT;C:\WINDOWS\System32\npptNT.sys [2003-07-21 22:14]
S3 ICAM3NT5;Intel USB Video Camera III;C:\WINDOWS\System32\Drivers\Icam3.sys [2001-08-17 13:05]
S3 MR97310_VGA_DUAL_CAMERA;Dual-Mode Digital Camera;C:\WINDOWS\System32\DRIVERS\mr97310v.sys [2002-11-27 08:18]
S3 trid3d;trid3d;C:\WINDOWS\System32\DRIVERS\trid3dm.sys [2002-03-20 21:35]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{01191913-2c8a-11d7-b6b7-806d6172696f}]
\shell\play\command - C:\Program Files\InterVideo\WinDVD\WinDVD.exe

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-21 22:53:16
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-01-21 22:57:09 - machine was rebooted
ComboFix-quarantined-files.txt 2008-01-22 06:57:05
ComboFix2.txt 2008-01-16 08:27:31

#3 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,542 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:03:08 AM

Posted 05 February 2008 - 04:49 PM

I apologize for the very long delay. We have a huge backlog of HijackThis Logs to handle and it has been taking us greater time than normal to get caught up. If you are still having a problem, and want us to analyze your information, please post a brand new hijackthis log. If we do not hear back from you within a couple of days we will need to close your topic.

When posting your logs please post them directly into the reply. Do not attach them.

Also make sure you have already followed the steps outlined below:

Preparation Guide For Use Before Posting A Hijackthis Log

Thank you for your patience.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users