Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hijackthis Log


  • Please log in to reply
15 replies to this topic

#1 h_i_mcdonnough

h_i_mcdonnough

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 21 January 2008 - 09:46 PM

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:44:38 PM, on 1/21/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
F3 - REG:win.ini: load=C:\WINDOWS\system32\awtsp.exe
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [tgcmd] C:\Program Files\Support.com\bin\tgcmd.exe /server /startmonitor /deaf
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {01118400-3E00-11D2-8470-0060089874ED} (SdcNetCheckCtl Class) - http://activex.microsoft.com/objects/ocget.dll
O16 - DPF: {25B82430-A083-4C36-9D72-A4868E744CE2} (MGCSpellCheckAM.MDictionaryAM) - http://magic/magictsd/wspellAM.cab
O16 - DPF: {26700CD9-6157-4B72-B46F-EC93C952F19C} (SWToolSet.Engine) - http://solarwinds/SWToolset.exe
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/testAc...OnlineGames.cab
O16 - DPF: {47CEF84E-92D8-4C4A-86D7-CB982889DCC0} (Oberon Media Network Optimizer) - http://mp1.mplay.oberon-media.com/client/flashnet.cab
O16 - DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} (CPlayFirstDinerDash2Control Object) - http://aolsvc.aol.com/onlinegames/trydiner...h2.1.0.0.48.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownlo.../sysreqlab2.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://atv.disney.go.com/global/download/otoy/OTOYAX29b.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game04.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D1548A26-B8F6-4E86-AE74-E7062CCC2E2A} (igLoader Content on Demand) - http://www.miniclip.com/igloader/igloader.CAB
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/vir...l/installer.exe
O16 - DPF: {DC75FEF6-165D-4D25-A518-C8C4BDA7BAA6} (CPlayFirstDinerDashControl Object) - http://aolsvc.aol.com/onlinegames/dinerdas...sh.1.0.0.72.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/popcaploader_v10.cab
O18 - Filter hijack: text/html - {07851C6A-1C43-41d9-8319-BC89154A8C00} - C:\Program Files\RcvSystem\httpdchk.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Trend Micro Protection Against Spyware (PcScnSrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe

--
End of file - 6826 bytes

BC AdBot (Login to Remove)

 


#2 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 24 January 2008 - 08:55 PM

h i mcdonnough

Please download Combofix and save to your desktop:Note: It is important that it is saved directly to your desktop
Close any open browsers.
Double click on combofix.exe and follow the prompts.
When it's finished it will produce a log.
Post the contents of the C:\ComboFix.txt into your next reply.
Note: Do not mouseclick combofix's window whilst it's running.
That may cause the program to freeze/hang.

Posted Image
Microsoft MVP - Windows Security

#3 h_i_mcdonnough

h_i_mcdonnough
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 26 January 2008 - 06:19 PM

ComboFix 08-01-23.1C - Russ 2008-01-26 14:04:14.7 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.529 [GMT -6:00]
Running from: C:\Documents and Settings\Russ\Desktop\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft\Network\Downloader\qmgr0.dat
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft\Network\Downloader\qmgr1.dat
C:\DOCUME~1\Russ\MYDOCU~1\pos206.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos207.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos208.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos209.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos20A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos20B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos20C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos20D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos20E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos20F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos210.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos211.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos212.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos213.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos214.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos215.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos216.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos217.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos218.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos219.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos21A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos21B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos21C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos21D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos21E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos21F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos220.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos221.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos222.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos223.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos224.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos225.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos226.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos227.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos228.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos229.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos22A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos22B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos22C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos22D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos22E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos22F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos230.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos231.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos232.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos233.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos234.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos235.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos236.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos237.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos238.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos239.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos23A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos23B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos23C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos23D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos23E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos23F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos240.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos241.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos242.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos243.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos244.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos245.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos246.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos247.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos248.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos249.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos24A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos24B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos24C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos24D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos24E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos24F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos250.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos251.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos252.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos253.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos254.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos255.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos256.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos257.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos258.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos259.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos25A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos25B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos25C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos25D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos25E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos25F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos260.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos261.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos262.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos263.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos264.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos265.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos266.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos267.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos268.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos269.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos26A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos26B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos26C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos26D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos26E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos26F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos270.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos271.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos272.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos273.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos274.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos275.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos276.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos277.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos278.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos279.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos27A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos27B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos27C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos27D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos27E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos27F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos280.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos281.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos282.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos283.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos284.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos285.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos286.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos287.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos288.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos289.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos28A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos28B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos28C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos28D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos28E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos28F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos290.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos291.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos292.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos293.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos294.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos295.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos296.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos297.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos298.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos299.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos29A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos29B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos29C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos29D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos29E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos29F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2A0.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2A1.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2A2.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2A3.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2A4.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2A5.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2A6.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2A7.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2A8.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2A9.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2AA.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2AB.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2AC.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2AD.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2AE.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2AF.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2B0.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2B1.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2B2.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2B3.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2B4.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2B5.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2B6.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2B7.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2B8.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2B9.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2BA.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2BB.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2BC.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2BD.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2BE.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2BF.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2C0.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2C1.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2C2.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2C3.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2C4.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2C5.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2C6.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2C7.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2C8.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2C9.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2CA.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2CB.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2CC.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2CD.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2CE.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2CF.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2D0.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2D1.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2D2.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2D3.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2D4.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2D5.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2D6.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2D7.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2D8.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2D9.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2DA.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2DB.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2DC.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2DD.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2DE.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2DF.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2E0.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2E1.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2E2.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2E3.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2E4.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2E5.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2E6.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2E7.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2E8.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2E9.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2EA.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2EB.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2EC.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2ED.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2EE.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2EF.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2F0.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2F1.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2F2.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2F3.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2F4.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2F5.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2F6.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2F7.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2F8.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2F9.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2FA.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2FB.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2FC.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2FD.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2FE.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos2FF.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos300.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos301.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos302.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos303.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos304.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos305.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos306.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos307.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos308.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos309.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos30A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos30B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos30C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos30D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos30E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos30F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos310.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos311.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos312.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos313.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos314.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos315.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos316.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos317.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos318.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos319.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos31A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos31B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos31C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos31D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos31E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos31F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos320.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos321.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos322.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos323.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos324.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos325.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos326.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos327.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos328.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos329.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos32A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos32B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos32C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos32D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos32E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos32F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos330.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos331.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos332.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos333.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos334.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos335.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos336.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos337.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos338.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos339.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos33A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos33B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos33C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos33D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos33E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos33F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos340.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos341.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos342.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos343.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos344.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos345.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos346.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos347.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos348.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos349.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos34A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos34B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos34C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos34D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos34E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos34F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos350.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos351.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos352.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos353.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos354.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos355.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos356.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos357.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos358.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos359.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos35A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos35B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos35C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos35D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos35E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos35F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos360.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos361.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos362.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos363.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos364.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos365.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos366.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos367.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos368.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos369.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos36A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos36B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos36C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos36D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos36E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos36F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos370.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos371.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos372.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos373.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos374.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos375.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos376.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos377.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos378.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos379.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos37A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos37B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos37C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos37D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos37E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos37F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos380.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos381.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos382.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos383.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos384.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos385.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos386.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos387.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos388.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos389.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos38A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos38B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos38C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos38D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos38E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos38F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos390.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos391.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos392.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos393.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos394.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos395.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos396.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos397.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos398.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos399.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos39A.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos39B.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos39C.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos39D.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos39E.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos39F.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3A0.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3A1.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3A2.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3A3.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3A4.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3A5.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3A6.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3A7.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3A8.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3A9.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3AA.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3AB.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3AC.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3AD.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3AE.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3AF.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3B0.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3B1.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3B2.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3B3.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3B4.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3B5.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3B6.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3B7.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3B8.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3B9.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3BA.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3BB.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3BC.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3BD.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3BE.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3BF.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3C0.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3C1.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3C2.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3C3.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3C4.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3C5.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3C6.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3C7.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3C8.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3C9.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3CA.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3CB.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3CC.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3CD.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3CE.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3CF.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3D0.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3D1.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3D2.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3D3.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3D4.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3D5.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3D6.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3D7.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3D8.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3D9.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3DA.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3DB.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3DC.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3DD.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3DE.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3DF.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3E0.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3E1.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3E2.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3E3.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3E4.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3E5.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3E6.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3E7.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3E8.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3E9.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3EA.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3EB.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3EC.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3ED.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3EE.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3EF.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3F0.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3F1.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3F2.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3F3.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3F4.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3F5.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3F6.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3F7.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3F8.tmp
C:\DOCUME~1\Russ\MYDOCU~1\pos3F9.tmp
C:\Documents and Settings\Adam\Start Menu\Programs\Internet Speed Monitor
C:\Documents and Settings\Adam\Start Menu\Programs\Internet Speed Monitor\Check Now.lnk
C:\Documents and Settings\Adam\Start Menu\Programs\Internet Speed Monitor\Uninstall.lnk
C:\Documents and Settings\Russ\My Documents\pos206.tmp
C:\Documents and Settings\Russ\My Documents\pos207.tmp
C:\Documents and Settings\Russ\My Documents\pos208.tmp
C:\Documents and Settings\Russ\My Documents\pos209.tmp
C:\Documents and Settings\Russ\My Documents\pos20A.tmp
C:\Documents and Settings\Russ\My Documents\pos20B.tmp
C:\Documents and Settings\Russ\My Documents\pos20C.tmp
C:\Documents and Settings\Russ\My Documents\pos20D.tmp
C:\Documents and Settings\Russ\My Documents\pos20E.tmp
C:\Documents and Settings\Russ\My Documents\pos20F.tmp
C:\Documents and Settings\Russ\My Documents\pos210.tmp
C:\Documents and Settings\Russ\My Documents\pos211.tmp
C:\Documents and Settings\Russ\My Documents\pos212.tmp
C:\Documents and Settings\Russ\My Documents\pos213.tmp
C:\Documents and Settings\Russ\My Documents\pos214.tmp
C:\Documents and Settings\Russ\My Documents\pos215.tmp
C:\Documents and Settings\Russ\My Documents\pos216.tmp
C:\Documents and Settings\Russ\My Documents\pos217.tmp
C:\Documents and Settings\Russ\My Documents\pos218.tmp
C:\Documents and Settings\Russ\My Documents\pos219.tmp
C:\Documents and Settings\Russ\My Documents\pos21A.tmp
C:\Documents and Settings\Russ\My Documents\pos21B.tmp
C:\Documents and Settings\Russ\My Documents\pos21C.tmp
C:\Documents and Settings\Russ\My Documents\pos21D.tmp
C:\Documents and Settings\Russ\My Documents\pos21E.tmp
C:\Documents and Settings\Russ\My Documents\pos21F.tmp
C:\Documents and Settings\Russ\My Documents\pos220.tmp
C:\Documents and Settings\Russ\My Documents\pos221.tmp
C:\Documents and Settings\Russ\My Documents\pos222.tmp
C:\Documents and Settings\Russ\My Documents\pos223.tmp
C:\Documents and Settings\Russ\My Documents\pos224.tmp
C:\Documents and Settings\Russ\My Documents\pos225.tmp
C:\Documents and Settings\Russ\My Documents\pos226.tmp
C:\Documents and Settings\Russ\My Documents\pos227.tmp
C:\Documents and Settings\Russ\My Documents\pos228.tmp
C:\Documents and Settings\Russ\My Documents\pos229.tmp
C:\Documents and Settings\Russ\My Documents\pos22A.tmp
C:\Documents and Settings\Russ\My Documents\pos22B.tmp
C:\Documents and Settings\Russ\My Documents\pos22C.tmp
C:\Documents and Settings\Russ\My Documents\pos22D.tmp
C:\Documents and Settings\Russ\My Documents\pos22E.tmp
C:\Documents and Settings\Russ\My Documents\pos22F.tmp
C:\Documents and Settings\Russ\My Documents\pos230.tmp
C:\Documents and Settings\Russ\My Documents\pos231.tmp
C:\Documents and Settings\Russ\My Documents\pos232.tmp
C:\Documents and Settings\Russ\My Documents\pos233.tmp
C:\Documents and Settings\Russ\My Documents\pos234.tmp
C:\Documents and Settings\Russ\My Documents\pos235.tmp
C:\Documents and Settings\Russ\My Documents\pos236.tmp
C:\Documents and Settings\Russ\My Documents\pos237.tmp
C:\Documents and Settings\Russ\My Documents\pos238.tmp
C:\Documents and Settings\Russ\My Documents\pos239.tmp
C:\Documents and Settings\Russ\My Documents\pos23A.tmp
C:\Documents and Settings\Russ\My Documents\pos23B.tmp
C:\Documents and Settings\Russ\My Documents\pos23C.tmp
C:\Documents and Settings\Russ\My Documents\pos23D.tmp
C:\Documents and Settings\Russ\My Documents\pos23E.tmp
C:\Documents and Settings\Russ\My Documents\pos23F.tmp
C:\Documents and Settings\Russ\My Documents\pos240.tmp
C:\Documents and Settings\Russ\My Documents\pos241.tmp
C:\Documents and Settings\Russ\My Documents\pos242.tmp
C:\Documents and Settings\Russ\My Documents\pos243.tmp
C:\Documents and Settings\Russ\My Documents\pos244.tmp
C:\Documents and Settings\Russ\My Documents\pos245.tmp
C:\Documents and Settings\Russ\My Documents\pos246.tmp
C:\Documents and Settings\Russ\My Documents\pos247.tmp
C:\Documents and Settings\Russ\My Documents\pos248.tmp
C:\Documents and Settings\Russ\My Documents\pos249.tmp
C:\Documents and Settings\Russ\My Documents\pos24A.tmp
C:\Documents and Settings\Russ\My Documents\pos24B.tmp
C:\Documents and Settings\Russ\My Documents\pos24C.tmp
C:\Documents and Settings\Russ\My Documents\pos24D.tmp
C:\Documents and Settings\Russ\My Documents\pos24E.tmp
C:\Documents and Settings\Russ\My Documents\pos24F.tmp
C:\Documents and Settings\Russ\My Documents\pos250.tmp
C:\Documents and Settings\Russ\My Documents\pos251.tmp
C:\Documents and Settings\Russ\My Documents\pos252.tmp
C:\Documents and Settings\Russ\My Documents\pos253.tmp
C:\Documents and Settings\Russ\My Documents\pos254.tmp
C:\Documents and Settings\Russ\My Documents\pos255.tmp
C:\Documents and Settings\Russ\My Documents\pos256.tmp
C:\Documents and Settings\Russ\My Documents\pos257.tmp
C:\Documents and Settings\Russ\My Documents\pos258.tmp
C:\Documents and Settings\Russ\My Documents\pos259.tmp
C:\Documents and Settings\Russ\My Documents\pos25A.tmp
C:\Documents and Settings\Russ\My Documents\pos25B.tmp
C:\Documents and Settings\Russ\My Documents\pos25C.tmp
C:\Documents and Settings\Russ\My Documents\pos25D.tmp
C:\Documents and Settings\Russ\My Documents\pos25E.tmp
C:\Documents and Settings\Russ\My Documents\pos25F.tmp
C:\Documents and Settings\Russ\My Documents\pos260.tmp
C:\Documents and Settings\Russ\My Documents\pos261.tmp
C:\Documents and Settings\Russ\My Documents\pos262.tmp
C:\Documents and Settings\Russ\My Documents\pos263.tmp
C:\Documents and Settings\Russ\My Documents\pos264.tmp
C:\Documents and Settings\Russ\My Documents\pos265.tmp
C:\Documents and Settings\Russ\My Documents\pos266.tmp
C:\Documents and Settings\Russ\My Documents\pos267.tmp
C:\Documents and Settings\Russ\My Documents\pos268.tmp
C:\Documents and Settings\Russ\My Documents\pos269.tmp
C:\Documents and Settings\Russ\My Documents\pos26A.tmp
C:\Documents and Settings\Russ\My Documents\pos26B.tmp
C:\Documents and Settings\Russ\My Documents\pos26C.tmp
C:\Documents and Settings\Russ\My Documents\pos26D.tmp
C:\Documents and Settings\Russ\My Documents\pos26E.tmp
C:\Documents and Settings\Russ\My Documents\pos26F.tmp
C:\Documents and Settings\Russ\My Documents\pos270.tmp
C:\Documents and Settings\Russ\My Documents\pos271.tmp
C:\Documents and Settings\Russ\My Documents\pos272.tmp
C:\Documents and Settings\Russ\My Documents\pos273.tmp
C:\Documents and Settings\Russ\My Documents\pos274.tmp
C:\Documents and Settings\Russ\My Documents\pos275.tmp
C:\Documents and Settings\Russ\My Documents\pos276.tmp
C:\Documents and Settings\Russ\My Documents\pos277.tmp
C:\Documents and Settings\Russ\My Documents\pos278.tmp
C:\Documents and Settings\Russ\My Documents\pos279.tmp
C:\Documents and Settings\Russ\My Documents\pos27A.tmp
C:\Documents and Settings\Russ\My Documents\pos27B.tmp
C:\Documents and Settings\Russ\My Documents\pos27C.tmp
C:\Documents and Settings\Russ\My Documents\pos27D.tmp
C:\Documents and Settings\Russ\My Documents\pos27E.tmp
C:\Documents and Settings\Russ\My Documents\pos27F.tmp
C:\Documents and Settings\Russ\My Documents\pos280.tmp
C:\Documents and Settings\Russ\My Documents\pos281.tmp
C:\Documents and Settings\Russ\My Documents\pos282.tmp
C:\Documents and Settings\Russ\My Documents\pos283.tmp
C:\Documents and Settings\Russ\My Documents\pos284.tmp
C:\Documents and Settings\Russ\My Documents\pos285.tmp
C:\Documents and Settings\Russ\My Documents\pos286.tmp
C:\Documents and Settings\Russ\My Documents\pos287.tmp
C:\Documents and Settings\Russ\My Documents\pos288.tmp
C:\Documents and Settings\Russ\My Documents\pos289.tmp
C:\Documents and Settings\Russ\My Documents\pos28A.tmp
C:\Documents and Settings\Russ\My Documents\pos28B.tmp
C:\Documents and Settings\Russ\My Documents\pos28C.tmp
C:\Documents and Settings\Russ\My Documents\pos28D.tmp
C:\Documents and Settings\Russ\My Documents\pos28E.tmp
C:\Documents and Settings\Russ\My Documents\pos28F.tmp
C:\Documents and Settings\Russ\My Documents\pos290.tmp
C:\Documents and Settings\Russ\My Documents\pos291.tmp
C:\Documents and Settings\Russ\My Documents\pos292.tmp
C:\Documents and Settings\Russ\My Documents\pos293.tmp
C:\Documents and Settings\Russ\My Documents\pos294.tmp
C:\Documents and Settings\Russ\My Documents\pos295.tmp
C:\Documents and Settings\Russ\My Documents\pos296.tmp
C:\Documents and Settings\Russ\My Documents\pos297.tmp
C:\Documents and Settings\Russ\My Documents\pos298.tmp
C:\Documents and Settings\Russ\My Documents\pos299.tmp
C:\Documents and Settings\Russ\My Documents\pos29A.tmp
C:\Documents and Settings\Russ\My Documents\pos29B.tmp
C:\Documents and Settings\Russ\My Documents\pos29C.tmp
C:\Documents and Settings\Russ\My Documents\pos29D.tmp
C:\Documents and Settings\Russ\My Documents\pos29E.tmp
C:\Documents and Settings\Russ\My Documents\pos29F.tmp
C:\Documents and Settings\Russ\My Documents\pos2A0.tmp
C:\Documents and Settings\Russ\My Documents\pos2A1.tmp
C:\Documents and Settings\Russ\My Documents\pos2A2.tmp
C:\Documents and Settings\Russ\My Documents\pos2A3.tmp
C:\Documents and Settings\Russ\My Documents\pos2A4.tmp
C:\Documents and Settings\Russ\My Documents\pos2A5.tmp
C:\Documents and Settings\Russ\My Documents\pos2A6.tmp
C:\Documents and Settings\Russ\My Documents\pos2A7.tmp
C:\Documents and Settings\Russ\My Documents\pos2A8.tmp
C:\Documents and Settings\Russ\My Documents\pos2A9.tmp
C:\Documents and Settings\Russ\My Documents\pos2AA.tmp
C:\Documents and Settings\Russ\My Documents\pos2AB.tmp
C:\Documents and Settings\Russ\My Documents\pos2AC.tmp
C:\Documents and Settings\Russ\My Documents\pos2AD.tmp
C:\Documents and Settings\Russ\My Documents\pos2AE.tmp
C:\Documents and Settings\Russ\My Documents\pos2AF.tmp
C:\Documents and Settings\Russ\My Documents\pos2B0.tmp
C:\Documents and Settings\Russ\My Documents\pos2B1.tmp
C:\Documents and Settings\Russ\My Documents\pos2B2.tmp
C:\Documents and Settings\Russ\My Documents\pos2B3.tmp
C:\Documents and Settings\Russ\My Documents\pos2B4.tmp
C:\Documents and Settings\Russ\My Documents\pos2B5.tmp
C:\Documents and Settings\Russ\My Documents\pos2B6.tmp
C:\Documents and Settings\Russ\My Documents\pos2B7.tmp
C:\Documents and Settings\Russ\My Documents\pos2B8.tmp
C:\Documents and Settings\Russ\My Documents\pos2B9.tmp
C:\Documents and Settings\Russ\My Documents\pos2BA.tmp
C:\Documents and Settings\Russ\My Documents\pos2BB.tmp
C:\Documents and Settings\Russ\My Documents\pos2BC.tmp
C:\Documents and Settings\Russ\My Documents\pos2BD.tmp
C:\Documents and Settings\Russ\My Documents\pos2BE.tmp
C:\Documents and Settings\Russ\My Documents\pos2BF.tmp
C:\Documents and Settings\Russ\My Documents\pos2C0.tmp
C:\Documents and Settings\Russ\My Documents\pos2C1.tmp
C:\Documents and Settings\Russ\My Documents\pos2C2.tmp
C:\Documents and Settings\Russ\My Documents\pos2C3.tmp
C:\Documents and Settings\Russ\My Documents\pos2C4.tmp
C:\Documents and Settings\Russ\My Documents\pos2C5.tmp
C:\Documents and Settings\Russ\My Documents\pos2C6.tmp
C:\Documents and Settings\Russ\My Documents\pos2C7.tmp
C:\Documents and Settings\Russ\My Documents\pos2C8.tmp
C:\Documents and Settings\Russ\My Documents\pos2C9.tmp
C:\Documents and Settings\Russ\My Documents\pos2CA.tmp
C:\Documents and Settings\Russ\My Documents\pos2CB.tmp
C:\Documents and Settings\Russ\My Documents\pos2CC.tmp
C:\Documents and Settings\Russ\My Documents\pos2CD.tmp
C:\Documents and Settings\Russ\My Documents\pos2CE.tmp
C:\Documents and Settings\Russ\My Documents\pos2CF.tmp
C:\Documents and Settings\Russ\My Documents\pos2D0.tmp
C:\Documents and Settings\Russ\My Documents\pos2D1.tmp
C:\Documents and Settings\Russ\My Documents\pos2D2.tmp
C:\Documents and Settings\Russ\My Documents\pos2D3.tmp
C:\Documents and Settings\Russ\My Documents\pos2D4.tmp
C:\Documents and Settings\Russ\My Documents\pos2D5.tmp
C:\Documents and Settings\Russ\My Documents\pos2D6.tmp
C:\Documents and Settings\Russ\My Documents\pos2D7.tmp
C:\Documents and Settings\Russ\My Documents\pos2D8.tmp
C:\Documents and Settings\Russ\My Documents\pos2D9.tmp
C:\Documents and Settings\Russ\My Documents\pos2DA.tmp
C:\Documents and Settings\Russ\My Documents\pos2DB.tmp
C:\Documents and Settings\Russ\My Documents\pos2DC.tmp
C:\Documents and Settings\Russ\My Documents\pos2DD.tmp
C:\Documents and Settings\Russ\My Documents\pos2DE.tmp
C:\Documents and Settings\Russ\My Documents\pos2DF.tmp
C:\Documents and Settings\Russ\My Documents\pos2E0.tmp
C:\Documents and Settings\Russ\My Documents\pos2E1.tmp
C:\Documents and Settings\Russ\My Documents\pos2E2.tmp
C:\Documents and Settings\Russ\My Documents\pos2E3.tmp
C:\Documents and Settings\Russ\My Documents\pos2E4.tmp
C:\Documents and Settings\Russ\My Documents\pos2E5.tmp
C:\Documents and Settings\Russ\My Documents\pos2E6.tmp
C:\Documents and Settings\Russ\My Documents\pos2E7.tmp
C:\Documents and Settings\Russ\My Documents\pos2E8.tmp
C:\Documents and Settings\Russ\My Documents\pos2E9.tmp
C:\Documents and Settings\Russ\My Documents\pos2EA.tmp
C:\Documents and Settings\Russ\My Documents\pos2EB.tmp
C:\Documents and Settings\Russ\My Documents\pos2EC.tmp
C:\Documents and Settings\Russ\My Documents\pos2ED.tmp
C:\Documents and Settings\Russ\My Documents\pos2EE.tmp
C:\Documents and Settings\Russ\My Documents\pos2EF.tmp
C:\Documents and Settings\Russ\My Documents\pos2F0.tmp
C:\Documents and Settings\Russ\My Documents\pos2F1.tmp
C:\Documents and Settings\Russ\My Documents\pos2F2.tmp
C:\Documents and Settings\Russ\My Documents\pos2F3.tmp
C:\Documents and Settings\Russ\My Documents\pos2F4.tmp
C:\Documents and Settings\Russ\My Documents\pos2F5.tmp
C:\Documents and Settings\Russ\My Documents\pos2F6.tmp
C:\Documents and Settings\Russ\My Documents\pos2F7.tmp
C:\Documents and Settings\Russ\My Documents\pos2F8.tmp
C:\Documents and Settings\Russ\My Documents\pos2F9.tmp
C:\Documents and Settings\Russ\My Documents\pos2FA.tmp
C:\Documents and Settings\Russ\My Documents\pos2FB.tmp
C:\Documents and Settings\Russ\My Documents\pos2FC.tmp
C:\Documents and Settings\Russ\My Documents\pos2FD.tmp
C:\Documents and Settings\Russ\My Documents\pos2FE.tmp
C:\Documents and Settings\Russ\My Documents\pos2FF.tmp
C:\Documents and Settings\Russ\My Documents\pos300.tmp
C:\Documents and Settings\Russ\My Documents\pos301.tmp
C:\Documents and Settings\Russ\My Documents\pos302.tmp
C:\Documents and Settings\Russ\My Documents\pos303.tmp
C:\Documents and Settings\Russ\My Documents\pos304.tmp
C:\Documents and Settings\Russ\My Documents\pos305.tmp
C:\Documents and Settings\Russ\My Documents\pos306.tmp
C:\Documents and Settings\Russ\My Documents\pos307.tmp
C:\Documents and Settings\Russ\My Documents\pos308.tmp
C:\Documents and Settings\Russ\My Documents\pos309.tmp
C:\Documents and Settings\Russ\My Documents\pos30A.tmp
C:\Documents and Settings\Russ\My Documents\pos30B.tmp
C:\Documents and Settings\Russ\My Documents\pos30C.tmp
C:\Documents and Settings\Russ\My Documents\pos30D.tmp
C:\Documents and Settings\Russ\My Documents\pos30E.tmp
C:\Documents and Settings\Russ\My Documents\pos30F.tmp
C:\Documents and Settings\Russ\My Documents\pos310.tmp
C:\Documents and Settings\Russ\My Documents\pos311.tmp
C:\Documents and Settings\Russ\My Documents\pos312.tmp
C:\Documents and Settings\Russ\My Documents\pos313.tmp
C:\Documents and Settings\Russ\My Documents\pos314.tmp
C:\Documents and Settings\Russ\My Documents\pos315.tmp
C:\Documents and Settings\Russ\My Documents\pos316.tmp
C:\Documents and Settings\Russ\My Documents\pos317.tmp
C:\Documents and Settings\Russ\My Documents\pos318.tmp
C:\Documents and Settings\Russ\My Documents\pos319.tmp
C:\Documents and Settings\Russ\My Documents\pos31A.tmp
C:\Documents and Settings\Russ\My Documents\pos31B.tmp
C:\Documents and Settings\Russ\My Documents\pos31C.tmp
C:\Documents and Settings\Russ\My Documents\pos31D.tmp
C:\Documents and Settings\Russ\My Documents\pos31E.tmp
C:\Documents and Settings\Russ\My Documents\pos31F.tmp
C:\Documents and Settings\Russ\My Documents\pos320.tmp
C:\Documents and Settings\Russ\My Documents\pos321.tmp
C:\Documents and Settings\Russ\My Documents\pos322.tmp
C:\Documents and Settings\Russ\My Documents\pos323.tmp
C:\Documents and Settings\Russ\My Documents\pos324.tmp
C:\Documents and Settings\Russ\My Documents\pos325.tmp
C:\Documents and Settings\Russ\My Documents\pos326.tmp
C:\Documents and Settings\Russ\My Documents\pos327.tmp
C:\Documents and Settings\Russ\My Documents\pos328.tmp
C:\Documents and Settings\Russ\My Documents\pos329.tmp
C:\Documents and Settings\Russ\My Documents\pos32A.tmp
C:\Documents and Settings\Russ\My Documents\pos32B.tmp
C:\Documents and Settings\Russ\My Documents\pos32C.tmp
C:\Documents and Settings\Russ\My Documents\pos32D.tmp
C:\Documents and Settings\Russ\My Documents\pos32E.tmp
C:\Documents and Settings\Russ\My Documents\pos32F.tmp
C:\Documents and Settings\Russ\My Documents\pos330.tmp
C:\Documents and Settings\Russ\My Documents\pos331.tmp
C:\Documents and Settings\Russ\My Documents\pos332.tmp
C:\Documents and Settings\Russ\My Documents\pos333.tmp
C:\Documents and Settings\Russ\My Documents\pos334.tmp
C:\Documents and Settings\Russ\My Documents\pos335.tmp
C:\Documents and Settings\Russ\My Documents\pos336.tmp
C:\Documents and Settings\Russ\My Documents\pos337.tmp
C:\Documents and Settings\Russ\My Documents\pos338.tmp
C:\Documents and Settings\Russ\My Documents\pos339.tmp
C:\Documents and Settings\Russ\My Documents\pos33A.tmp
C:\Documents and Settings\Russ\My Documents\pos33B.tmp
C:\Documents and Settings\Russ\My Documents\pos33C.tmp
C:\Documents and Settings\Russ\My Documents\pos33D.tmp
C:\Documents and Settings\Russ\My Documents\pos33E.tmp
C:\Documents and Settings\Russ\My Documents\pos33F.tmp
C:\Documents and Settings\Russ\My Documents\pos340.tmp
C:\Documents and Settings\Russ\My Documents\pos341.tmp
C:\Documents and Settings\Russ\My Documents\pos342.tmp
C:\Documents and Settings\Russ\My Documents\pos343.tmp
C:\Documents and Settings\Russ\My Documents\pos344.tmp
C:\Documents and Settings\Russ\My Documents\pos345.tmp
C:\Documents and Settings\Russ\My Documents\pos346.tmp
C:\Documents and Settings\Russ\My Documents\pos347.tmp
C:\Documents and Settings\Russ\My Documents\pos348.tmp
C:\Documents and Settings\Russ\My Documents\pos349.tmp
C:\Documents and Settings\Russ\My Documents\pos34A.tmp
C:\Documents and Settings\Russ\My Documents\pos34B.tmp
C:\Documents and Settings\Russ\My Documents\pos34C.tmp
C:\Documents and Settings\Russ\My Documents\pos34D.tmp
C:\Documents and Settings\Russ\My Documents\pos34E.tmp
C:\Documents and Settings\Russ\My Documents\pos34F.tmp
C:\Documents and Settings\Russ\My Documents\pos350.tmp
C:\Documents and Settings\Russ\My Documents\pos351.tmp
C:\Documents and Settings\Russ\My Documents\pos352.tmp
C:\Documents and Settings\Russ\My Documents\pos353.tmp
C:\Documents and Settings\Russ\My Documents\pos354.tmp
C:\Documents and Settings\Russ\My Documents\pos355.tmp
C:\Documents and Settings\Russ\My Documents\pos356.tmp
C:\Documents and Settings\Russ\My Documents\pos357.tmp
C:\Documents and Settings\Russ\My Documents\pos358.tmp
C:\Documents and Settings\Russ\My Documents\pos359.tmp
C:\Documents and Settings\Russ\My Documents\pos35A.tmp
C:\Documents and Settings\Russ\My Documents\pos35B.tmp
C:\Documents and Settings\Russ\My Documents\pos35C.tmp
C:\Documents and Settings\Russ\My Documents\pos35D.tmp
C:\Documents and Settings\Russ\My Documents\pos35E.tmp
C:\Documents and Settings\Russ\My Documents\pos35F.tmp
C:\Documents and Settings\Russ\My Documents\pos360.tmp
C:\Documents and Settings\Russ\My Documents\pos361.tmp
C:\Documents and Settings\Russ\My Documents\pos362.tmp
C:\Documents and Settings\Russ\My Documents\pos363.tmp
C:\Documents and Settings\Russ\My Documents\pos364.tmp
C:\Documents and Settings\Russ\My Documents\pos365.tmp
C:\Documents and Settings\Russ\My Documents\pos366.tmp
C:\Documents and Settings\Russ\My Documents\pos367.tmp
C:\Documents and Settings\Russ\My Documents\pos368.tmp
C:\Documents and Settings\Russ\My Documents\pos369.tmp
C:\Documents and Settings\Russ\My Documents\pos36A.tmp
C:\Documents and Settings\Russ\My Documents\pos36B.tmp
C:\Documents and Settings\Russ\My Documents\pos36C.tmp
C:\Documents and Settings\Russ\My Documents\pos36D.tmp
C:\Documents and Settings\Russ\My Documents\pos36E.tmp
C:\Documents and Settings\Russ\My Documents\pos36F.tmp
C:\Documents and Settings\Russ\My Documents\pos370.tmp
C:\Documents and Settings\Russ\My Documents\pos371.tmp
C:\Documents and Settings\Russ\My Documents\pos372.tmp
C:\Documents and Settings\Russ\My Documents\pos373.tmp
C:\Documents and Settings\Russ\My Documents\pos374.tmp
C:\Documents and Settings\Russ\My Documents\pos375.tmp
C:\Documents and Settings\Russ\My Documents\pos376.tmp
C:\Documents and Settings\Russ\My Documents\pos377.tmp
C:\Documents and Settings\Russ\My Documents\pos378.tmp
C:\Documents and Settings\Russ\My Documents\pos379.tmp
C:\Documents and Settings\Russ\My Documents\pos37A.tmp
C:\Documents and Settings\Russ\My Documents\pos37B.tmp
C:\Documents and Settings\Russ\My Documents\pos37C.tmp
C:\Documents and Settings\Russ\My Documents\pos37D.tmp
C:\Documents and Settings\Russ\My Documents\pos37E.tmp
C:\Documents and Settings\Russ\My Documents\pos37F.tmp
C:\Documents and Settings\Russ\My Documents\pos380.tmp
C:\Documents and Settings\Russ\My Documents\pos381.tmp
C:\Documents and Settings\Russ\My Documents\pos382.tmp
C:\Documents and Settings\Russ\My Documents\pos383.tmp
C:\Documents and Settings\Russ\My Documents\pos384.tmp
C:\Documents and Settings\Russ\My Documents\pos385.tmp
C:\Documents and Settings\Russ\My Documents\pos386.tmp
C:\Documents and Settings\Russ\My Documents\pos387.tmp
C:\Documents and Settings\Russ\My Documents\pos388.tmp
C:\Documents and Settings\Russ\My Documents\pos389.tmp
C:\Documents and Settings\Russ\My Documents\pos38A.tmp
C:\Documents and Settings\Russ\My Documents\pos38B.tmp
C:\Documents and Settings\Russ\My Documents\pos38C.tmp
C:\Documents and Settings\Russ\My Documents\pos38D.tmp
C:\Documents and Settings\Russ\My Documents\pos38E.tmp
C:\Documents and Settings\Russ\My Documents\pos38F.tmp
C:\Documents and Settings\Russ\My Documents\pos390.tmp
C:\Documents and Settings\Russ\My Documents\pos391.tmp
C:\Documents and Settings\Russ\My Documents\pos392.tmp
C:\Documents and Settings\Russ\My Documents\pos393.tmp
C:\Documents and Settings\Russ\My Documents\pos394.tmp
C:\Documents and Settings\Russ\My Documents\pos395.tmp
C:\Documents and Settings\Russ\My Documents\pos396.tmp
C:\Documents and Settings\Russ\My Documents\pos397.tmp
C:\Documents and Settings\Russ\My Documents\pos398.tmp
C:\Documents and Settings\Russ\My Documents\pos399.tmp
C:\Documents and Settings\Russ\My Documents\pos39A.tmp
C:\Documents and Settings\Russ\My Documents\pos39B.tmp
C:\Documents and Settings\Russ\My Documents\pos39C.tmp
C:\Documents and Settings\Russ\My Documents\pos39D.tmp
C:\Documents and Settings\Russ\My Documents\pos39E.tmp
C:\Documents and Settings\Russ\My Documents\pos39F.tmp
C:\Documents and Settings\Russ\My Documents\pos3A0.tmp
C:\Documents and Settings\Russ\My Documents\pos3A1.tmp
C:\Documents and Settings\Russ\My Documents\pos3A2.tmp
C:\Documents and Settings\Russ\My Documents\pos3A3.tmp
C:\Documents and Settings\Russ\My Documents\pos3A4.tmp
C:\Documents and Settings\Russ\My Documents\pos3A5.tmp
C:\Documents and Settings\Russ\My Documents\pos3A6.tmp
C:\Documents and Settings\Russ\My Documents\pos3A7.tmp
C:\Documents and Settings\Russ\My Documents\pos3A8.tmp
C:\Documents and Settings\Russ\My Documents\pos3A9.tmp
C:\Documents and Settings\Russ\My Documents\pos3AA.tmp
C:\Documents and Settings\Russ\My Documents\pos3AB.tmp
C:\Documents and Settings\Russ\My Documents\pos3AC.tmp
C:\Documents and Settings\Russ\My Documents\pos3AD.tmp
C:\Documents and Settings\Russ\My Documents\pos3AE.tmp
C:\Documents and Settings\Russ\My Documents\pos3AF.tmp
C:\Documents and Settings\Russ\My Documents\pos3B0.tmp
C:\Documents and Settings\Russ\My Documents\pos3B1.tmp
C:\Documents and Settings\Russ\My Documents\pos3B2.tmp
C:\Documents and Settings\Russ\My Documents\pos3B3.tmp
C:\Documents and Settings\Russ\My Documents\pos3B4.tmp
C:\Documents and Settings\Russ\My Documents\pos3B5.tmp
C:\Documents and Settings\Russ\My Documents\pos3B6.tmp
C:\Documents and Settings\Russ\My Documents\pos3B7.tmp
C:\Documents and Settings\Russ\My Documents\pos3B8.tmp
C:\Documents and Settings\Russ\My Documents\pos3B9.tmp
C:\Documents and Settings\Russ\My Documents\pos3BA.tmp
C:\Documents and Settings\Russ\My Documents\pos3BB.tmp
C:\Documents and Settings\Russ\My Documents\pos3BC.tmp
C:\Documents and Settings\Russ\My Documents\pos3BD.tmp
C:\Documents and Settings\Russ\My Documents\pos3BE.tmp
C:\Documents and Settings\Russ\My Documents\pos3BF.tmp
C:\Documents and Settings\Russ\My Documents\pos3C0.tmp
C:\Documents and Settings\Russ\My Documents\pos3C1.tmp
C:\Documents and Settings\Russ\My Documents\pos3C2.tmp
C:\Documents and Settings\Russ\My Documents\pos3C3.tmp
C:\Documents and Settings\Russ\My Documents\pos3C4.tmp
C:\Documents and Settings\Russ\My Documents\pos3C5.tmp
C:\Documents and Settings\Russ\My Documents\pos3C6.tmp
C:\Documents and Settings\Russ\My Documents\pos3C7.tmp
C:\Documents and Settings\Russ\My Documents\pos3C8.tmp
C:\Documents and Settings\Russ\My Documents\pos3C9.tmp
C:\Documents and Settings\Russ\My Documents\pos3CA.tmp
C:\Documents and Settings\Russ\My Documents\pos3CB.tmp
C:\Documents and Settings\Russ\My Documents\pos3CC.tmp
C:\Documents and Settings\Russ\My Documents\pos3CD.tmp
C:\Documents and Settings\Russ\My Documents\pos3CE.tmp
C:\Documents and Settings\Russ\My Documents\pos3CF.tmp
C:\Documents and Settings\Russ\My Documents\pos3D0.tmp
C:\Documents and Settings\Russ\My Documents\pos3D1.tmp
C:\Documents and Settings\Russ\My Documents\pos3D2.tmp
C:\Documents and Settings\Russ\My Documents\pos3D3.tmp
C:\Documents and Settings\Russ\My Documents\pos3D4.tmp
C:\Documents and Settings\Russ\My Documents\pos3D5.tmp
C:\Documents and Settings\Russ\My Documents\pos3D6.tmp
C:\Documents and Settings\Russ\My Documents\pos3D7.tmp
C:\Documents and Settings\Russ\My Documents\pos3D8.tmp
C:\Documents and Settings\Russ\My Documents\pos3D9.tmp
C:\Documents and Settings\Russ\My Documents\pos3DA.tmp
C:\Documents and Settings\Russ\My Documents\pos3DB.tmp
C:\Documents and Settings\Russ\My Documents\pos3DC.tmp
C:\Documents and Settings\Russ\My Documents\pos3DD.tmp
C:\Documents and Settings\Russ\My Documents\pos3DE.tmp
C:\Documents and Settings\Russ\My Documents\pos3DF.tmp
C:\Documents and Settings\Russ\My Documents\pos3E0.tmp
C:\Documents and Settings\Russ\My Documents\pos3E1.tmp
C:\Documents and Settings\Russ\My Documents\pos3E2.tmp
C:\Documents and Settings\Russ\My Documents\pos3E3.tmp
C:\Documents and Settings\Russ\My Documents\pos3E4.tmp
C:\Documents and Settings\Russ\My Documents\pos3E5.tmp
C:\Documents and Settings\Russ\My Documents\pos3E6.tmp
C:\Documents and Settings\Russ\My Documents\pos3E7.tmp
C:\Documents and Settings\Russ\My Documents\pos3E8.tmp
C:\Documents and Settings\Russ\My Documents\pos3E9.tmp
C:\Documents and Settings\Russ\My Documents\pos3EA.tmp
C:\Documents and Settings\Russ\My Documents\pos3EB.tmp
C:\Documents and Settings\Russ\My Documents\pos3EC.tmp
C:\Documents and Settings\Russ\My Documents\pos3ED.tmp
C:\Documents and Settings\Russ\My Documents\pos3EE.tmp
C:\Documents and Settings\Russ\My Documents\pos3EF.tmp
C:\Documents and Settings\Russ\My Documents\pos3F0.tmp
C:\Documents and Settings\Russ\My Documents\pos3F1.tmp
C:\Documents and Settings\Russ\My Documents\pos3F2.tmp
C:\Documents and Settings\Russ\My Documents\pos3F3.tmp
C:\Documents and Settings\Russ\My Documents\pos3F4.tmp
C:\Documents and Settings\Russ\My Documents\pos3F5.tmp
C:\Documents and Settings\Russ\My Documents\pos3F6.tmp
C:\Documents and Settings\Russ\My Documents\pos3F7.tmp
C:\Documents and Settings\Russ\My Documents\pos3F8.tmp
C:\Documents and Settings\Russ\My Documents\pos3F9.tmp
C:\pos100.tmp
C:\pos101.tmp
C:\pos102.tmp
C:\pos103.tmp
C:\pos104.tmp
C:\pos105.tmp
C:\pos106.tmp
C:\pos107.tmp
C:\pos108.tmp
C:\pos109.tmp
C:\pos10A.tmp
C:\pos10B.tmp
C:\pos10C.tmp
C:\pos10D.tmp
C:\pos10E.tmp
C:\pos10F.tmp
C:\pos110.tmp
C:\pos111.tmp
C:\pos112.tmp
C:\pos113.tmp
C:\pos114.tmp
C:\pos115.tmp
C:\pos116.tmp
C:\pos117.tmp
C:\pos118.tmp
C:\pos119.tmp
C:\pos11A.tmp
C:\pos11B.tmp
C:\pos11C.tmp
C:\pos11D.tmp
C:\pos11E.tmp
C:\pos11F.tmp
C:\pos12.tmp
C:\pos120.tmp
C:\pos121.tmp
C:\pos122.tmp
C:\pos123.tmp
C:\pos124.tmp
C:\pos125.tmp
C:\pos126.tmp
C:\pos127.tmp
C:\pos128.tmp
C:\pos129.tmp
C:\pos12A.tmp
C:\pos12B.tmp
C:\pos12C.tmp
C:\pos12D.tmp
C:\pos12E.tmp
C:\pos12F.tmp
C:\pos13.tmp
C:\pos130.tmp
C:\pos131.tmp
C:\pos132.tmp
C:\pos133.tmp
C:\pos134.tmp
C:\pos135.tmp
C:\pos136.tmp
C:\pos137.tmp
C:\pos138.tmp
C:\pos139.tmp
C:\pos13A.tmp
C:\pos13B.tmp
C:\pos13C.tmp
C:\pos13D.tmp
C:\pos13E.tmp
C:\pos13F.tmp
C:\pos14.tmp
C:\pos140.tmp
C:\pos141.tmp
C:\pos142.tmp
C:\pos143.tmp
C:\pos144.tmp
C:\pos145.tmp
C:\pos146.tmp
C:\pos147.tmp
C:\pos148.tmp
C:\pos149.tmp
C:\pos14A.tmp
C:\pos14B.tmp
C:\pos14C.tmp
C:\pos14D.tmp
C:\pos14E.tmp
C:\pos14F.tmp
C:\pos15.tmp
C:\pos150.tmp
C:\pos151.tmp
C:\pos152.tmp
C:\pos153.tmp
C:\pos154.tmp
C:\pos155.tmp
C:\pos156.tmp
C:\pos157.tmp
C:\pos158.tmp
C:\pos159.tmp
C:\pos15A.tmp
C:\pos15B.tmp
C:\pos15C.tmp
C:\pos15D.tmp
C:\pos15E.tmp
C:\pos15F.tmp
C:\pos16.tmp
C:\pos160.tmp
C:\pos161.tmp
C:\pos162.tmp
C:\pos163.tmp
C:\pos164.tmp
C:\pos165.tmp
C:\pos166.tmp
C:\pos167.tmp
C:\pos168.tmp
C:\pos169.tmp
C:\pos16A.tmp
C:\pos16B.tmp
C:\pos16C.tmp
C:\pos16D.tmp
C:\pos16E.tmp
C:\pos16F.tmp
C:\pos17.tmp
C:\pos170.tmp
C:\pos171.tmp
C:\pos172.tmp
C:\pos173.tmp
C:\pos174.tmp
C:\pos175.tmp
C:\pos176.tmp
C:\pos177.tmp
C:\pos178.tmp
C:\pos179.tmp
C:\pos17A.tmp
C:\pos17B.tmp
C:\pos17C.tmp
C:\pos17D.tmp
C:\pos17E.tmp
C:\pos17F.tmp
C:\pos18.tmp
C:\pos180.tmp
C:\pos181.tmp
C:\pos182.tmp
C:\pos183.tmp
C:\pos184.tmp
C:\pos185.tmp
C:\pos186.tmp
C:\pos187.tmp
C:\pos188.tmp
C:\pos189.tmp
C:\pos18A.tmp
C:\pos18B.tmp
C:\pos18C.tmp
C:\pos18D.tmp
C:\pos18E.tmp
C:\pos18F.tmp
C:\pos19.tmp
C:\pos190.tmp
C:\pos191.tmp
C:\pos192.tmp
C:\pos193.tmp
C:\pos194.tmp
C:\pos195.tmp
C:\pos196.tmp
C:\pos197.tmp
C:\pos198.tmp
C:\pos199.tmp
C:\pos19A.tmp
C:\pos19B.tmp
C:\pos19C.tmp
C:\pos19D.tmp
C:\pos19E.tmp
C:\pos19F.tmp
C:\pos1A.tmp
C:\pos1A0.tmp
C:\pos1A1.tmp
C:\pos1A2.tmp
C:\pos1A3.tmp
C:\pos1A4.tmp
C:\pos1A5.tmp
C:\pos1A6.tmp
C:\pos1A7.tmp
C:\pos1A8.tmp
C:\pos1A9.tmp
C:\pos1AA.tmp
C:\pos1AB.tmp
C:\pos1AC.tmp
C:\pos1AD.tmp
C:\pos1AE.tmp
C:\pos1AF.tmp
C:\pos1B.tmp
C:\pos1B0.tmp
C:\pos1B1.tmp
C:\pos1B2.tmp
C:\pos1B3.tmp
C:\pos1B4.tmp
C:\pos1B5.tmp
C:\pos1B6.tmp
C:\pos1B7.tmp
C:\pos1B8.tmp
C:\pos1B9.tmp
C:\pos1BA.tmp
C:\pos1BB.tmp
C:\pos1BC.tmp
C:\pos1BD.tmp
C:\pos1BE.tmp
C:\pos1BF.tmp
C:\pos1C.tmp
C:\pos1C0.tmp
C:\pos1C1.tmp
C:\pos1C2.tmp
C:\pos1C3.tmp
C:\pos1C4.tmp
C:\pos1C5.tmp
C:\pos1C6.tmp
C:\pos1C7.tmp
C:\pos1C8.tmp
C:\pos1C9.tmp
C:\pos1CA.tmp
C:\pos1CB.tmp
C:\pos1CC.tmp
C:\pos1CD.tmp
C:\pos1CE.tmp
C:\pos1CF.tmp
C:\pos1D.tmp
C:\pos1D0.tmp
C:\pos1D1.tmp
C:\pos1D2.tmp
C:\pos1D3.tmp
C:\pos1D4.tmp
C:\pos1D5.tmp
C:\pos1D6.tmp
C:\pos1D7.tmp
C:\pos1D8.tmp
C:\pos1D9.tmp
C:\pos1DA.tmp
C:\pos1DB.tmp
C:\pos1DC.tmp
C:\pos1DD.tmp
C:\pos1DE.tmp
C:\pos1DF.tmp
C:\pos1E.tmp
C:\pos1E0.tmp
C:\pos1E1.tmp
C:\pos1E2.tmp
C:\pos1E3.tmp
C:\pos1E4.tmp
C:\pos1E5.tmp
C:\pos1E6.tmp
C:\pos1E7.tmp
C:\pos1E8.tmp
C:\pos1E9.tmp
C:\pos1EA.tmp
C:\pos1EB.tmp
C:\pos1EC.tmp
C:\pos1ED.tmp
C:\pos1EE.tmp
C:\pos1EF.tmp
C:\pos1F.tmp
C:\pos1F0.tmp
C:\pos1F1.tmp
C:\pos1F2.tmp
C:\pos1F3.tmp
C:\pos1F4.tmp
C:\pos1F5.tmp
C:\pos1F6.tmp
C:\pos1F7.tmp
C:\pos1F8.tmp
C:\pos1F9.tmp
C:\pos1FA.tmp
C:\pos1FB.tmp
C:\pos1FC.tmp
C:\pos1FD.tmp
C:\pos1FE.tmp
C:\pos1FF.tmp
C:\pos20.tmp
C:\pos200.tmp
C:\pos201.tmp
C:\pos202.tmp
C:\pos203.tmp
C:\pos204.tmp
C:\pos205.tmp
C:\pos21.tmp
C:\pos22.tmp
C:\pos23.tmp
C:\pos24.tmp
C:\pos25.tmp
C:\pos26.tmp
C:\pos27.tmp
C:\pos28.tmp
C:\pos29.tmp
C:\pos2A.tmp
C:\pos2B.tmp
C:\pos2C.tmp
C:\pos2D.tmp
C:\pos2E.tmp
C:\pos2F.tmp
C:\pos30.tmp
C:\pos31.tmp
C:\pos32.tmp
C:\pos33.tmp
C:\pos34.tmp
C:\pos35.tmp
C:\pos36.tmp
C:\pos37.tmp
C:\pos38.tmp
C:\pos39.tmp
C:\pos3A.tmp
C:\pos3B.tmp
C:\pos3C.tmp
C:\pos3D.tmp
C:\pos3E.tmp
C:\pos3F.tmp
C:\pos40.tmp
C:\pos41.tmp
C:\pos42.tmp
C:\pos43.tmp
C:\pos44.tmp
C:\pos45.tmp
C:\pos46.tmp
C:\pos47.tmp
C:\pos48.tmp
C:\pos49.tmp
C:\pos4A.tmp
C:\pos4B.tmp
C:\pos4C.tmp
C:\pos4D.tmp
C:\pos4E.tmp
C:\pos4F.tmp
C:\pos50.tmp
C:\pos51.tmp
C:\pos52.tmp
C:\pos53.tmp
C:\pos54.tmp
C:\pos55.tmp
C:\pos56.tmp
C:\pos57.tmp
C:\pos58.tmp
C:\pos59.tmp
C:\pos5A.tmp
C:\pos5B.tmp
C:\pos5C.tmp
C:\pos5D.tmp
C:\pos5E.tmp
C:\pos5F.tmp
C:\pos60.tmp
C:\pos61.tmp
C:\pos62.tmp
C:\pos63.tmp
C:\pos64.tmp
C:\pos65.tmp
C:\pos66.tmp
C:\pos67.tmp
C:\pos68.tmp
C:\pos69.tmp
C:\pos6A.tmp
C:\pos6B.tmp
C:\pos6C.tmp
C:\pos6D.tmp
C:\pos6E.tmp
C:\pos6F.tmp
C:\pos70.tmp
C:\pos71.tmp
C:\pos72.tmp
C:\pos73.tmp
C:\pos74.tmp
C:\pos75.tmp
C:\pos76.tmp
C:\pos77.tmp
C:\pos78.tmp
C:\pos79.tmp
C:\pos7A.tmp
C:\pos7B.tmp
C:\pos7C.tmp
C:\pos7D.tmp
C:\pos7E.tmp
C:\pos7F.tmp
C:\pos80.tmp
C:\pos81.tmp
C:\pos82.tmp
C:\pos83.tmp
C:\pos84.tmp
C:\pos85.tmp
C:\pos86.tmp
C:\pos87.tmp
C:\pos88.tmp
C:\pos89.tmp
C:\pos8A.tmp
C:\pos8B.tmp
C:\pos8C.tmp
C:\pos8D.tmp
C:\pos8E.tmp
C:\pos8F.tmp
C:\pos90.tmp
C:\pos91.tmp
C:\pos92.tmp
C:\pos93.tmp
C:\pos94.tmp
C:\pos95.tmp
C:\pos96.tmp
C:\pos97.tmp
C:\pos98.tmp
C:\pos99.tmp
C:\pos9A.tmp
C:\pos9B.tmp
C:\pos9C.tmp
C:\pos9D.tmp
C:\pos9E.tmp
C:\pos9F.tmp
C:\posA0.tmp
C:\posA1.tmp
C:\posA2.tmp
C:\posA3.tmp
C:\posA4.tmp
C:\posA5.tmp
C:\posA6.tmp
C:\posA7.tmp
C:\posA8.tmp
C:\posA9.tmp
C:\posAA.tmp
C:\posAB.tmp
C:\posAC.tmp
C:\posAD.tmp
C:\posAE.tmp
C:\posAF.tmp
C:\posB0.tmp
C:\posB1.tmp
C:\posB2.tmp
C:\posB3.tmp
C:\posB4.tmp
C:\posB5.tmp
C:\posB6.tmp
C:\posB7.tmp
C:\posB8.tmp
C:\posB9.tmp
C:\posBA.tmp
C:\posBB.tmp
C:\posBC.tmp
C:\posBD.tmp
C:\posBE.tmp
C:\posBF.tmp
C:\posC0.tmp
C:\posC1.tmp
C:\posC2.tmp
C:\posC3.tmp
C:\posC4.tmp
C:\posC5.tmp
C:\posC6.tmp
C:\posC7.tmp
C:\posC8.tmp
C:\posC9.tmp
C:\posCA.tmp
C:\posCB.tmp
C:\posCC.tmp
C:\posCD.tmp
C:\posCE.tmp
C:\posCF.tmp
C:\posD0.tmp
C:\posD1.tmp
C:\posD2.tmp
C:\posD3.tmp
C:\posD4.tmp
C:\posD5.tmp
C:\posD6.tmp
C:\posD7.tmp
C:\posD8.tmp
C:\posD9.tmp
C:\posDA.tmp
C:\posDB.tmp
C:\posDC.tmp
C:\posDD.tmp
C:\posDE.tmp
C:\posDF.tmp
C:\posE0.tmp
C:\posE1.tmp
C:\posE2.tmp
C:\posE3.tmp
C:\posE4.tmp
C:\posE5.tmp
C:\posE6.tmp
C:\posE7.tmp
C:\posE8.tmp
C:\posE9.tmp
C:\posEA.tmp
C:\posEB.tmp
C:\posEC.tmp
C:\posED.tmp
C:\posEE.tmp
C:\posEF.tmp
C:\posF0.tmp
C:\posF1.tmp
C:\posF2.tmp
C:\posF3.tmp
C:\posF4.tmp
C:\posF5.tmp
C:\posF6.tmp
C:\posF7.tmp
C:\posF8.tmp
C:\posF9.tmp
C:\posFA.tmp
C:\posFB.tmp
C:\posFC.tmp
C:\posFD.tmp
C:\posFE.tmp
C:\posFF.tmp
C:\Program Files\ISM
C:\Program Files\ISM\ism.exe
C:\Program Files\ISM\Uninstall.exe
C:\Program Files\QdrDrive
C:\Program Files\QdrDrive\QdrDrive9.dll
C:\Program Files\QdrDrive\qdrloader.exe
C:\Program Files\QdrModule
C:\Program Files\QdrModule\dic.gz
C:\Program Files\QdrModule\kwd.gz
C:\Program Files\QdrModule\QdrModule12.exe
C:\Program Files\QdrPack
C:\Program Files\QdrPack\dicts.gz
C:\Program Files\QdrPack\QdrPack11.exe
C:\Program Files\QdrPack\trgts.gz
C:\WINDOWS\system32\000080.exe
C:\WINDOWS\system32\awtsp.dll
C:\WINDOWS\system32\bogcrcnv.ini
C:\WINDOWS\system32\byxwvtq.dll
C:\WINDOWS\system32\kxddpbui.dll
C:\WINDOWS\system32\luuvnokc.ini
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\nxeefutv.dll
C:\WINDOWS\system32\pstwa.ini
C:\WINDOWS\system32\pstwa.ini2
C:\WINDOWS\system32\qdhoppqq.dll
C:\WINDOWS\system32\qdhoppqq.dllbox
C:\WINDOWS\system32\sft.res
C:\WINDOWS\system32\vncrcgob.dll
C:\WINDOWS\system32\xslefnhp.dll
C:\WINDOWS\system32\yrxjtvyx.dll

----- BITS: Possible infected sites -----

hxxp://80.93.59.108
hxxp://80.93.48.74
.
((((((((((((((((((((((((( Files Created from 2007-12-26 to 2008-01-26 )))))))))))))))))))))))))))))))
.

2008-01-22 13:28 . 2008-01-22 13:28 89,664 --a------ C:\WINDOWS\system32\ckonvuul.dll
2008-01-21 15:15 . 2008-01-21 15:15 <DIR> d-------- C:\Program Files\RcvSystem
2008-01-19 13:02 . 2008-01-19 21:00 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-01-19 13:02 . 2008-01-19 13:02 1,409 --a------ C:\WINDOWS\QTFont.for
2008-01-16 17:37 . 2008-01-16 17:37 <DIR> d-------- C:\Program Files\SystemRequirementsLab
2008-01-16 17:34 . 2008-01-17 07:29 <DIR> d-------- C:\WINDOWS\nview
2008-01-16 17:34 . 2004-08-02 20:03 172,032 --a------ C:\WINDOWS\system32\nvudisp.exe
2008-01-16 17:34 . 2004-08-02 20:03 13,474 --a------ C:\WINDOWS\system32\nvdisp.nvu
2008-01-10 18:29 . 2008-01-10 18:29 54,608 --a------ C:\WINDOWS\system32\xfcodec.dll
2007-12-30 08:54 . 2007-12-30 08:54 <DIR> d-------- C:\Program Files\Disney Interactive
2007-12-30 08:54 . 2007-12-30 08:56 1,334 --a------ C:\WINDOWS\disney.ini
2007-12-27 11:08 . 2007-12-27 11:08 87 --a------ C:\WINDOWS\encore_launcher.ini
2007-12-27 11:07 . 2007-12-27 11:07 <DIR> d-------- C:\Program Files\INVENT
2007-12-27 11:07 . 1998-09-02 12:43 81,920 --a------ C:\WINDOWS\system\LZSCMPRS.DLL
2007-12-27 11:07 . 1996-02-14 14:01 1,966 --a------ C:\WINDOWS\system\DVA.386
2007-12-27 11:06 . 1996-11-05 16:19 247,648 --a------ C:\WINDOWS\UNINST16.EXE
2007-12-27 11:06 . 1995-07-13 18:43 26,768 --a------ C:\WINDOWS\system\CTL3D.DLL
2007-12-27 11:06 . 2007-12-27 11:09 160 --a------ C:\WINDOWS\compedia.ini
2007-12-27 10:50 . 2007-12-27 11:04 49,082 --a------ C:\WINDOWS\Aware40.mch
2007-12-27 10:47 . 2007-12-27 11:02 <DIR> d-------- C:\WINDOWS\A4W_DATA
2007-12-27 10:47 . 2007-12-27 10:50 35 --a------ C:\WINDOWS\A4W.INI
2007-12-27 10:39 . 2007-12-27 10:44 <DIR> d-------- C:\Strek456
2007-12-26 15:43 . 2008-01-05 19:42 116 --a------ C:\WINDOWS\NeroDigital.ini

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-22 02:57 --------- d-----w C:\Program Files\Nick Arcade
2008-01-22 02:56 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-21 21:42 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll
2008-01-19 23:11 --------- d-----w C:\Program Files\SUPERAntiSpyware
2008-01-19 19:12 --------- d-----w C:\Program Files\iTunes
2008-01-19 19:11 --------- d-----w C:\Program Files\QuickTime
2008-01-18 14:20 --------- d-----w C:\Program Files\Xfire
2007-12-31 15:30 --------- d-----w C:\Program Files\Robot Arena
2007-12-27 17:54 --------- d-----w C:\Program Files\Google
2007-12-23 02:58 --------- d-----w C:\Program Files\Virtools
2007-12-12 00:10 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-12-09 22:00 --------- d-----w C:\Program Files\LimeWire
2007-12-09 16:19 --------- d-----w C:\Program Files\MSECache
2007-11-07 09:26 721,920 ----a-w C:\WINDOWS\system32\lsasrv.dll
2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll
2007-10-27 23:40 227,328 ----a-w C:\WINDOWS\system32\wmasf.dll
2007-02-11 02:44 774,144 ----a-w C:\Program Files\RngInterstitial.dll
.
<pre>
----a-w		 3,429,904 2008-01-25 00:32:09  C:\Program Files\Trend Micro\Internet Security 2007\pccguide .exe
</pre>


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe" [ ]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [ ]
"tgcmd"="C:\Program Files\Support.com\bin\tgcmd.exe" [ ]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [ ]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [ ]
"pccguide.exe"="C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe" [2008-01-24 19:03 3429904]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [ ]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [ ]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [ ]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [ ]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-08-02 20:03 4493312]
"nwiz"="nwiz.exe" [2004-08-02 20:03 917504 C:\WINDOWS\system32\nwiz.exe]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

R1 papycpu;papycpu;C:\WINDOWS\system32\drivers\papycpu.sys [1998-10-06 08:36]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-26 17:10:17
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\WINDOWS\system32\CSGina.dll
.
Completion time: 2008-01-26 17:15:45 - machine was rebooted [Russ]
ComboFix-quarantined-files.txt 2008-01-26 23:15:38
ComboFix2.txt 2007-12-11 03:06:11
.
2008-01-25 00:41:02 --- E O F ---

#4 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 27 January 2008 - 08:14 PM

h_i_mcdonnough

Sorry for the delay. I lost a HD on one of my PC's. It happens

1. Open NotePad (not wordpad). Copy and paste the following into Notepad (not the word code)
File::
C:\WINDOWS\system32\ckonvuul.dll

Folder::
C:\Program Files\RcvSystem

RENV::
C:\Program Files\Trend Micro\Internet Security 2007\pccguide .exe
Save the File as CFScript(exactly as shown no spaces) ->> Save it to your Desktop

Using the Image as a reference, drag CFScript into ComboFix.exe
Posted ImageYou will be prompted to run Combofix again, Do so
Following the same rules as indicated in my first post
Then post the contents of the C:\ComboFix.txt log in your reply
Your Combofix log will be substantialy shorter this time.

2. Post a fresh Hijackthis log as well
Posted Image
Microsoft MVP - Windows Security

#5 h_i_mcdonnough

h_i_mcdonnough
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 28 January 2008 - 05:07 PM

Copy and paste the following into Notepad (not the word code)

File:: (REMOVE THIS LINE?)
C:\WINDOWS\system32\ckonvuul.dll

Folder::(REMOVE THIS LINE?)
C:\Program Files\RcvSystem

RENV::(REMOVE THIS LINE?)
C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe

Do I remove the file folder and renv lines?

#6 h_i_mcdonnough

h_i_mcdonnough
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 28 January 2008 - 09:42 PM

ComboFix 08-01-23.1C - Russ 2008-01-28 19:57:23.8 - NTFSx86
Running from: C:\Documents and Settings\Russ\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Russ\Desktop\CFScript_used_2007-10-25@22.37.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2007-12-28 to 2008-01-29 )))))))))))))))))))))))))))))))
.

2008-01-26 23:18 . 2008-01-26 23:18 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-01-26 23:18 . 2008-01-27 17:19 107,832 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2008-01-26 23:18 . 2008-01-26 23:18 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2008-01-26 23:18 . 2008-01-27 17:19 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-01-22 13:28 . 2008-01-22 13:28 89,664 --a------ C:\WINDOWS\system32\ckonvuul.dll
2008-01-21 15:15 . 2008-01-21 15:15 <DIR> d-------- C:\Program Files\RcvSystem
2008-01-19 13:02 . 2008-01-26 18:43 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-01-19 13:02 . 2008-01-19 13:02 1,409 --a------ C:\WINDOWS\QTFont.for
2008-01-16 17:37 . 2008-01-16 17:37 <DIR> d-------- C:\Program Files\SystemRequirementsLab
2008-01-16 17:34 . 2008-01-17 07:29 <DIR> d-------- C:\WINDOWS\nview
2008-01-16 17:34 . 2004-08-02 20:03 172,032 --a------ C:\WINDOWS\system32\nvudisp.exe
2008-01-16 17:34 . 2004-08-02 20:03 13,474 --a------ C:\WINDOWS\system32\nvdisp.nvu
2008-01-10 18:29 . 2008-01-10 18:29 54,608 --a------ C:\WINDOWS\system32\xfcodec.dll
2007-12-30 08:54 . 2007-12-30 08:54 <DIR> d-------- C:\Program Files\Disney Interactive
2007-12-30 08:54 . 2007-12-30 08:56 1,334 --a------ C:\WINDOWS\disney.ini

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-27 01:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-22 02:57 --------- d-----w C:\Program Files\Nick Arcade
2008-01-21 21:42 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll
2008-01-19 23:11 --------- d-----w C:\Program Files\SUPERAntiSpyware
2008-01-19 19:12 --------- d-----w C:\Program Files\iTunes
2008-01-19 19:11 --------- d-----w C:\Program Files\QuickTime
2008-01-18 14:20 --------- d-----w C:\Program Files\Xfire
2007-12-31 15:30 --------- d-----w C:\Program Files\Robot Arena
2007-12-27 17:54 --------- d-----w C:\Program Files\Google
2007-12-27 17:07 --------- d-----w C:\Program Files\INVENT
2007-12-23 02:58 --------- d-----w C:\Program Files\Virtools
2007-12-12 00:10 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-12-09 22:00 --------- d-----w C:\Program Files\LimeWire
2007-12-09 16:19 --------- d-----w C:\Program Files\MSECache
2007-11-07 09:26 721,920 ----a-w C:\WINDOWS\system32\lsasrv.dll
2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll
2007-02-11 02:44 774,144 ----a-w C:\Program Files\RngInterstitial.dll
.
<pre>
----a-w		 3,429,904 2008-01-25 00:32:09  C:\Program Files\Trend Micro\Internet Security 2007\pccguide .exe
</pre>


((((((((((((((((((((((((((((( snapshot@2008-01-26_17.13.55.21 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-01-25 23:26:59 233,472 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
+ 2008-01-29 01:53:29 233,472 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
- 2008-01-25 23:27:00 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000002\UsrClass.dat
+ 2008-01-29 01:53:29 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000002\UsrClass.dat
- 2008-01-25 23:27:00 237,568 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
+ 2008-01-29 01:53:29 237,568 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
- 2008-01-25 23:27:01 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
+ 2008-01-29 01:53:30 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
- 2008-01-25 23:27:02 4,452,352 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000005\NTUSER.DAT
+ 2008-01-29 01:53:30 4,452,352 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000005\NTUSER.DAT
- 2008-01-25 23:27:02 147,456 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000006\UsrClass.dat
+ 2008-01-29 01:53:30 147,456 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000006\UsrClass.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe" [ ]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [ ]
"tgcmd"="C:\Program Files\Support.com\bin\tgcmd.exe" [ ]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [ ]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [ ]
"pccguide.exe"="C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe" [2008-01-24 19:03 3429904]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [ ]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [ ]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [ ]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [ ]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-08-02 20:03 4493312]
"nwiz"="nwiz.exe" [2004-08-02 20:03 917504 C:\WINDOWS\system32\nwiz.exe]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

R1 papycpu;papycpu;C:\WINDOWS\system32\drivers\papycpu.sys [1998-10-06 08:36]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-28 20:35:59
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\WINDOWS\system32\CSGina.dll
.
Completion time: 2008-01-28 20:41:18
ComboFix-quarantined-files.txt 2008-01-29 02:41:04
ComboFix2.txt 2008-01-26 23:15:45
ComboFix3.txt 2007-12-11 03:06:11
.
2008-01-27 04:21:41 --- E O F ---

#7 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 29 January 2008 - 09:11 AM

h_i_mcdonnough

Copy and paste the following into Notepad (not the word code)

File:: (REMOVE THIS LINE?)
C:\WINDOWS\system32\ckonvuul.dll

Folder::(REMOVE THIS LINE?)
C:\Program Files\RcvSystem

RENV::(REMOVE THIS LINE?)
C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe

Do I remove the file folder and renv lines?

What we want to do is create a txt file named CFScript, save it to your desktop and drag it into Combofix, and let Combofix remove them for you

So per my pervisous post copy aand paaste the information in the code box into Notepad. Then save the notepad file as CFSCript.txt and save it to your Desktop. If you have any questions let me know.
Posted Image
Microsoft MVP - Windows Security

#8 h_i_mcdonnough

h_i_mcdonnough
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 29 January 2008 - 08:02 PM

ComboFix 08-01-23.1C - Russ 2008-01-29 17:36:23.9 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.526 [GMT -6:00]
Running from: C:\Documents and Settings\Russ\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Russ\Desktop\CFScript_used_2007-10-08@18.03.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE
C:\WINDOWS\system32\ckonvuul.dll
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\RcvSystem
C:\Program Files\RcvSystem\httpdchk.dll
C:\WINDOWS\system32\ckonvuul.dll

.
((((((((((((((((((((((((( Files Created from 2007-12-28 to 2008-01-29 )))))))))))))))))))))))))))))))
.

2008-01-26 23:18 . 2008-01-26 23:18 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-01-26 23:18 . 2008-01-27 17:19 107,832 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2008-01-26 23:18 . 2008-01-26 23:18 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2008-01-26 23:18 . 2008-01-27 17:19 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-01-19 13:02 . 2008-01-26 18:43 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-01-19 13:02 . 2008-01-19 13:02 1,409 --a------ C:\WINDOWS\QTFont.for
2008-01-16 17:37 . 2008-01-16 17:37 <DIR> d-------- C:\Program Files\SystemRequirementsLab
2008-01-16 17:34 . 2008-01-17 07:29 <DIR> d-------- C:\WINDOWS\nview
2008-01-16 17:34 . 2004-08-02 20:03 172,032 --a------ C:\WINDOWS\system32\nvudisp.exe
2008-01-16 17:34 . 2004-08-02 20:03 13,474 --a------ C:\WINDOWS\system32\nvdisp.nvu
2008-01-10 18:29 . 2008-01-10 18:29 54,608 --a------ C:\WINDOWS\system32\xfcodec.dll
2007-12-30 08:54 . 2007-12-30 08:54 <DIR> d-------- C:\Program Files\Disney Interactive
2007-12-30 08:54 . 2007-12-30 08:56 1,334 --a------ C:\WINDOWS\disney.ini

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-27 01:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-22 02:57 --------- d-----w C:\Program Files\Nick Arcade
2008-01-21 21:42 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll
2008-01-19 23:11 --------- d-----w C:\Program Files\SUPERAntiSpyware
2008-01-19 19:12 --------- d-----w C:\Program Files\iTunes
2008-01-19 19:11 --------- d-----w C:\Program Files\QuickTime
2008-01-18 14:20 --------- d-----w C:\Program Files\Xfire
2007-12-31 15:30 --------- d-----w C:\Program Files\Robot Arena
2007-12-27 17:54 --------- d-----w C:\Program Files\Google
2007-12-27 17:07 --------- d-----w C:\Program Files\INVENT
2007-12-23 02:58 --------- d-----w C:\Program Files\Virtools
2007-12-12 00:10 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-12-09 22:00 --------- d-----w C:\Program Files\LimeWire
2007-12-09 16:19 --------- d-----w C:\Program Files\MSECache
2007-11-07 09:26 721,920 ----a-w C:\WINDOWS\system32\lsasrv.dll
2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll
2007-02-11 02:44 774,144 ----a-w C:\Program Files\RngInterstitial.dll
.
<pre>
----a-w		 3,429,904 2008-01-25 00:32:09  C:\Program Files\Trend Micro\Internet Security 2007\pccguide .exe
</pre>


((((((((((((((((((((((((((((( snapshot@2008-01-26_17.13.55.21 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-01-25 23:26:59 233,472 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
+ 2008-01-29 23:35:24 233,472 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
- 2008-01-25 23:27:00 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000002\UsrClass.dat
+ 2008-01-29 23:35:24 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000002\UsrClass.dat
- 2008-01-25 23:27:00 237,568 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
+ 2008-01-29 23:35:24 237,568 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
- 2008-01-25 23:27:01 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
+ 2008-01-29 23:35:24 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
- 2008-01-25 23:27:02 4,452,352 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000005\NTUSER.DAT
+ 2008-01-29 23:35:24 4,452,352 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000005\NTUSER.DAT
- 2008-01-25 23:27:02 147,456 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000006\UsrClass.dat
+ 2008-01-29 23:35:24 147,456 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000006\UsrClass.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe" [ ]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [ ]
"tgcmd"="C:\Program Files\Support.com\bin\tgcmd.exe" [ ]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [ ]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [ ]
"pccguide.exe"="C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe" [2008-01-24 19:03 3429904]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [ ]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [ ]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [ ]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [ ]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-08-02 20:03 4493312]
"nwiz"="nwiz.exe" [2004-08-02 20:03 917504 C:\WINDOWS\system32\nwiz.exe]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

R1 papycpu;papycpu;C:\WINDOWS\system32\drivers\papycpu.sys [1998-10-06 08:36]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-29 18:06:41
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\WINDOWS\system32\CSGina.dll
.
Completion time: 2008-01-29 18:11:41
ComboFix-quarantined-files.txt 2008-01-30 00:11:30
ComboFix2.txt 2008-01-29 02:41:19
ComboFix3.txt 2008-01-26 23:15:45
ComboFix4.txt 2007-12-11 03:06:11
.
2008-01-27 04:21:41 --- E O F ---

#9 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 30 January 2008 - 12:52 PM

h i mcdonnough

Nice work

Please perform an Ewido Online Malware Scan
  • When a dialog box appears asking you if you would like to download and install the ewido anti-spyware online scanner please click Yes to allow the download.
  • Click on Start Scan.
  • after the scan completes i twill produce a log for you, copy and paste the results of that scan as a reply to this thread
  • If any infections are found, (After you save the logfile), Click on Remove Infections.

Posted Image
Microsoft MVP - Windows Security

#10 h_i_mcdonnough

h_i_mcdonnough
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 30 January 2008 - 09:38 PM

ran the scan but forgot to save the log file. Looks like it removed all entries.

#11 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 31 January 2008 - 09:40 AM

h i mcdonnough

O.k.

Rerun and post a fresh Combofix log and a fresh Hijackthis log

And an update on how your PC is running now.
Posted Image
Microsoft MVP - Windows Security

#12 h_i_mcdonnough

h_i_mcdonnough
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 01 February 2008 - 11:04 PM

ComboFix 08-01-23.1C - Russ 2008-02-01 21:46:56.10 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.395 [GMT -6:00]
Running from: C:\Documents and Settings\Russ\Desktop\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-01-02 to 2008-02-02 )))))))))))))))))))))))))))))))
.

2008-01-26 23:18 . 2008-01-26 23:18 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-01-26 23:18 . 2008-02-01 20:41 107,832 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2008-01-26 23:18 . 2008-01-26 23:18 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2008-01-26 23:18 . 2008-02-01 20:41 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-01-16 17:37 . 2008-01-16 17:37 <DIR> d-------- C:\Program Files\SystemRequirementsLab
2008-01-16 17:34 . 2008-01-17 07:29 <DIR> d-------- C:\WINDOWS\nview
2008-01-16 17:34 . 2004-08-02 20:03 172,032 --a------ C:\WINDOWS\system32\nvudisp.exe
2008-01-16 17:34 . 2004-08-02 20:03 13,474 --a------ C:\WINDOWS\system32\nvdisp.nvu
2008-01-10 18:29 . 2008-01-10 18:29 54,608 --a------ C:\WINDOWS\system32\xfcodec.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-27 01:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-22 02:57 --------- d-----w C:\Program Files\Nick Arcade
2008-01-21 21:42 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll
2008-01-19 23:11 --------- d-----w C:\Program Files\SUPERAntiSpyware
2008-01-19 19:12 --------- d-----w C:\Program Files\iTunes
2008-01-19 19:11 --------- d-----w C:\Program Files\QuickTime
2008-01-18 14:20 --------- d-----w C:\Program Files\Xfire
2007-12-31 15:30 --------- d-----w C:\Program Files\Robot Arena
2007-12-30 14:54 --------- d-----w C:\Program Files\Disney Interactive
2007-12-27 17:54 --------- d-----w C:\Program Files\Google
2007-12-27 17:07 --------- d-----w C:\Program Files\INVENT
2007-12-23 02:58 --------- d-----w C:\Program Files\Virtools
2007-12-12 00:10 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-12-09 22:00 --------- d-----w C:\Program Files\LimeWire
2007-12-09 16:19 --------- d-----w C:\Program Files\MSECache
2007-11-07 09:26 721,920 ----a-w C:\WINDOWS\system32\lsasrv.dll
2007-02-11 02:44 774,144 ----a-w C:\Program Files\RngInterstitial.dll
.
<pre>
----a-w		 3,429,904 2008-01-25 00:32:09  C:\Program Files\Trend Micro\Internet Security 2007\pccguide .exe
</pre>


((((((((((((((((((((((((((((( snapshot@2008-01-26_17.13.55.21 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-07-11 15:41:36 345,656 ----a-w C:\WINDOWS\Downloaded Program Files\ewidoOnlineScan.dll
- 2008-01-25 23:26:59 233,472 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
+ 2008-01-29 23:35:24 233,472 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
- 2008-01-25 23:27:00 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000002\UsrClass.dat
+ 2008-01-29 23:35:24 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000002\UsrClass.dat
- 2008-01-25 23:27:00 237,568 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
+ 2008-01-29 23:35:24 237,568 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
- 2008-01-25 23:27:01 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
+ 2008-01-29 23:35:24 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
- 2008-01-25 23:27:02 4,452,352 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000005\NTUSER.DAT
+ 2008-01-29 23:35:24 4,452,352 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000005\NTUSER.DAT
- 2008-01-25 23:27:02 147,456 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000006\UsrClass.dat
+ 2008-01-29 23:35:24 147,456 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000006\UsrClass.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe" [ ]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [ ]
"tgcmd"="C:\Program Files\Support.com\bin\tgcmd.exe" [ ]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [ ]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [ ]
"pccguide.exe"="C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe" [2008-01-24 19:03 3429904]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [ ]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [ ]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [ ]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [ ]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-08-02 20:03 4493312]
"nwiz"="nwiz.exe" [2004-08-02 20:03 917504 C:\WINDOWS\system32\nwiz.exe]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

R1 papycpu;papycpu;C:\WINDOWS\system32\drivers\papycpu.sys [1998-10-06 08:36]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-01 21:58:00
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\WINDOWS\system32\CSGina.dll
.
Completion time: 2008-02-01 22:04:02
ComboFix-quarantined-files.txt 2008-02-02 04:03:53
ComboFix2.txt 2008-01-30 00:11:43
ComboFix3.txt 2008-01-29 02:41:19
ComboFix4.txt 2008-01-26 23:15:45
ComboFix5.txt 2007-12-11 03:06:11
.
2008-01-27 04:21:41 --- E O F ---

#13 h_i_mcdonnough

h_i_mcdonnough
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 01 February 2008 - 11:06 PM

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:06:02 PM, on 2/1/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [tgcmd] C:\Program Files\Support.com\bin\tgcmd.exe /server /startmonitor /deaf
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {01118400-3E00-11D2-8470-0060089874ED} (SdcNetCheckCtl Class) - http://activex.microsoft.com/objects/ocget.dll
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {25B82430-A083-4C36-9D72-A4868E744CE2} (MGCSpellCheckAM.MDictionaryAM) - http://magic/magictsd/wspellAM.cab
O16 - DPF: {26700CD9-6157-4B72-B46F-EC93C952F19C} (SWToolSet.Engine) - http://solarwinds/SWToolset.exe
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/testAc...OnlineGames.cab
O16 - DPF: {47CEF84E-92D8-4C4A-86D7-CB982889DCC0} (Oberon Media Network Optimizer) - http://mp1.mplay.oberon-media.com/client/flashnet.cab
O16 - DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} (CPlayFirstDinerDash2Control Object) - http://aolsvc.aol.com/onlinegames/trydiner...h2.1.0.0.48.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownlo.../sysreqlab2.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://atv.disney.go.com/global/download/otoy/OTOYAX29b.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game04.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D1548A26-B8F6-4E86-AE74-E7062CCC2E2A} (igLoader Content on Demand) - http://www.miniclip.com/igloader/igloader.CAB
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/vir...l/installer.exe
O16 - DPF: {DC75FEF6-165D-4D25-A518-C8C4BDA7BAA6} (CPlayFirstDinerDashControl Object) - http://aolsvc.aol.com/onlinegames/dinerdas...sh.1.0.0.72.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/popcaploader_v10.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Trend Micro Protection Against Spyware (PcScnSrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe

--
End of file - 7350 bytes

#14 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 04 February 2008 - 10:53 AM

Nihiladrem

Sorry for the delay. I have been under the weather.

Good job, almost there.

Please perform an Ewido Online Malware Scan
  • When a dialog box appears asking you if you would like to download and install the ewido anti-spyware online scanner please click Yes to allow the download.
  • Click on Start Scan.
  • after the scan completes i twill produce a log for you, copy and paste the results of that scan as a reply to this thread
  • If any infections are found, (After you save the logfile), Click on Remove Infections.

Posted Image
Microsoft MVP - Windows Security

#15 h_i_mcdonnough

h_i_mcdonnough
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 04 February 2008 - 10:15 PM

__________________________________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________


Name: TrackingCookie.247realmedia
Path: C:\Documents and Settings\Russ\Cookies\russ@247realmedia[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Russ\Cookies\russ@2o7[2].txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\Russ\Cookies\russ@ad.yieldmanager[2].txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: C:\Documents and Settings\Russ\Cookies\russ@adopt.euroclick[2].txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\Russ\Cookies\russ@adrevolver[1].txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: C:\Documents and Settings\Russ\Cookies\russ@ads.pointroll[2].txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: C:\Documents and Settings\Russ\Cookies\russ@advertising[1].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\Russ\Cookies\russ@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: C:\Documents and Settings\Russ\Cookies\russ@bluestreak[2].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\Russ\Cookies\russ@doubleclick[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Russ\Cookies\russ@ehg-dig.hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: C:\Documents and Settings\Russ\Cookies\russ@fastclick[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Russ\Cookies\russ@hitbox[1].txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\Russ\Cookies\russ@media.adrevolver[2].txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: C:\Documents and Settings\Russ\Cookies\russ@mediaplex[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Russ\Cookies\russ@msnportal.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: C:\Documents and Settings\Russ\Cookies\russ@oasc02.247realmedia[2].txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: C:\Documents and Settings\Russ\Cookies\russ@oasc09.247realmedia[2].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Russ\Cookies\russ@overture[1].txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: C:\Documents and Settings\Russ\Cookies\russ@questionmarket[2].txt
Risk: Medium

Name: TrackingCookie.Netflame
Path: C:\Documents and Settings\Russ\Cookies\russ@ssl-hints.netflame[1].txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: C:\Documents and Settings\Russ\Cookies\russ@tribalfusion[2].txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\Russ\Cookies\russ@yieldmanager[1].txt
Risk: Medium

Name: Trojan.BHO.adv
Path: C:\1215890
Risk: High

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\Adam\Cookies\adam@ad.yieldmanager[1].txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: C:\Documents and Settings\Adam\Cookies\adam@ads.pointroll[2].txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: C:\Documents and Settings\Adam\Cookies\adam@advertising[1].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\Adam\Cookies\adam@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: C:\Documents and Settings\Adam\Cookies\adam@casalemedia[2].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\Adam\Cookies\adam@doubleclick[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Adam\Cookies\adam@ehg-legonewyorkinc.hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: C:\Documents and Settings\Adam\Cookies\adam@fastclick[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Adam\Cookies\adam@hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: C:\Documents and Settings\Adam\Cookies\adam@mediaplex[1].txt
Risk: Medium

Name: TrackingCookie.Revenue
Path: C:\Documents and Settings\Adam\Cookies\adam@revenue[2].txt
Risk: Medium

Name: TrackingCookie.Information
Path: C:\Documents and Settings\Adam\Cookies\adam@searchportal.information[1].txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.6:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: :mozilla.12:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.13:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.14:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.15:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.16:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.17:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.18:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.19:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.20:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.21:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.22:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Bfast
Path: :mozilla.23:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.29:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: :mozilla.33:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.40:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.41:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.42:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.43:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.44:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.45:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.46:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: :mozilla.51:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: :mozilla.55:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.75:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.76:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.77:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.78:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.79:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: :mozilla.80:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: :mozilla.81:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: :mozilla.82:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: :mozilla.83:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.88:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.89:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.90:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: :mozilla.92:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.94:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.103:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.104:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.105:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.106:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.107:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.108:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.109:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.110:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Myaffiliateprogram
Path: :mozilla.127:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: :mozilla.129:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: :mozilla.140:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Imrworldwide
Path: :mozilla.143:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Imrworldwide
Path: :mozilla.144:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: :mozilla.154:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Burstbeacon
Path: :mozilla.168:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Ru4
Path: :mozilla.173:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Ru4
Path: :mozilla.174:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.178:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.179:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.180:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.181:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.182:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.183:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.184:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.185:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.186:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.187:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.188:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.189:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.190:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.191:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.192:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.193:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.194:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.195:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.196:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.198:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.199:C:\Program Files\support.com\backup\co\cookies.txt\20261_5782f145b_/cookies.txt
Risk: Medium

Name: TrackingCookie.Realmedia
Path: :mozilla.16:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Realmedia
Path: :mozilla.18:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Realmedia
Path: :mozilla.19:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Realmedia
Path: :mozilla.20:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Realmedia
Path: :mozilla.21:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: :mozilla.23:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Trafficmp
Path: :mozilla.24:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: :mozilla.25:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.28:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sextracker
Path: :mozilla.29:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sextracker
Path: :mozilla.30:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.31:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.32:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.33:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.34:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.35:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.36:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.37:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.38:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.39:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.40:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.41:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.42:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.43:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.44:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.63:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.65:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.66:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.67:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.68:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.69:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.70:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.75:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.76:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.77:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.78:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.80:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.81:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.82:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.83:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.84:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.85:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.86:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.98:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.99:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.100:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.101:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.102:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Bfast
Path: :mozilla.103:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: :mozilla.132:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: :mozilla.133:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: :mozilla.134:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.144:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.145:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.146:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.147:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.150:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.151:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: :mozilla.154:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: :mozilla.156:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: :mozilla.160:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.166:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.167:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.168:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.169:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.170:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.171:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.172:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.173:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.174:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.175:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: :mozilla.180:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: :mozilla.199:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.209:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.210:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: :mozilla.218:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: :mozilla.224:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: :mozilla.225:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Addynamix
Path: :mozilla.228:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.231:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.232:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.233:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.234:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.235:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: :mozilla.236:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.241:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.242:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.243:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adtech
Path: :mozilla.251:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.252:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adtech
Path: :mozilla.255:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.258:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.259:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.260:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.261:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.262:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.266:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.267:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.268:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexlist
Path: :mozilla.272:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Sexlist
Path: :mozilla.273:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Masterstats
Path: :mozilla.274:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: :mozilla.278:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Ru4
Path: :mozilla.279:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Ru4
Path: :mozilla.280:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Webtrendslive
Path: :mozilla.305:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Imrworldwide
Path: :mozilla.312:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Imrworldwide
Path: :mozilla.313:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: :mozilla.321:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: :mozilla.322:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: :mozilla.323:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.324:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Revenue
Path: :mozilla.325:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.326:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.327:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.328:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.329:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Information
Path: :mozilla.330:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: :mozilla.343:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: :mozilla.344:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Burstbeacon
Path: :mozilla.345:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: :mozilla.350:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: :mozilla.351:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.364:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.378:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.379:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.380:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.381:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.382:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.383:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.384:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.385:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.386:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.387:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Webtrends
Path: :mozilla.390:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.393:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: :mozilla.416:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Pro-market
Path: :mozilla.451:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Pro-market
Path: :mozilla.452:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Pro-market
Path: :mozilla.453:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: :mozilla.462:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Valuead
Path: :mozilla.478:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Valuead
Path: :mozilla.479:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Valuead
Path: :mozilla.480:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Valuead
Path: :mozilla.481:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Valuead
Path: :mozilla.482:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Valuead
Path: :mozilla.483:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: :mozilla.493:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: :mozilla.494:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Yadro
Path: :mozilla.506:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Yadro
Path: :mozilla.507:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Co
Path: :mozilla.525:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.541:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.542:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.543:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.544:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.545:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.548:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.550:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Intelli-direct
Path: :mozilla.552:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.555:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Valueclick
Path: :mozilla.556:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Valueclick
Path: :mozilla.557:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Bridgetrack
Path: :mozilla.561:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Bridgetrack
Path: :mozilla.564:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.579:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.581:C:\Program Files\support.com\backup\co\cookies.txt\66837_596d786ca_/cookies.txt
Risk: Medium




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users