Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Need Help With Spyware


  • Please log in to reply
6 replies to this topic

#1 jerick

jerick

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:40 AM

Posted 20 April 2008 - 02:17 PM

Hi,

I have a Dell laptop running Windows XP. I have loaded enterprise Network Associates anti-virus software and downloaded Adaware and both cleaned up somethings but the malware continues with popups such as bestrevenue.net, reditty etc. Can you help? I am not significantly computer savy, just enough to be dangerous.

Regards,

Jay

BC AdBot (Login to Remove)

 


m

#2 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:40 AM

Posted 20 April 2008 - 04:06 PM

http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

I would look over at this preparation guide
Chewy

No. Try not. Do... or do not. There is no try.

#3 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:08:40 AM

Posted 20 April 2008 - 05:22 PM

OR , to help you clean up without the necessity to post an HJT log as that section is a tad busy at present try some of the scans on this section

http://www.bleepingcomputer.com/forums/topic3616.html
try in the spyware removal section for some suggested basic scans to run and if you manage to obtain any scan reports post them back for examination :thumbsup:

#4 jerick

jerick
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:40 AM

Posted 20 April 2008 - 05:59 PM

I followed the instructions from from the forum post "So now I have spyware on my PC" answered by quietman7. I downloaded ATF Cleaner and SUPERAntiSpyware. Ran them in Safe Mode. This is the log from SUPERAntispyware that was run in the safe mode following the directions on that post.

Thanks!


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 04/20/2008 at 03:54 PM

Application Version : 4.0.1154

Core Rules Database Version : 3442
Trace Rules Database Version: 1434

Scan type : Complete Scan
Total Scan Time : 00:55:53

Memory items scanned : 200
Memory threats detected : 0
Registry items scanned : 5624
Registry threats detected : 0
File items scanned : 16405
File threats detected : 21

Adware.ClickSpring/Yazzle
C:\PROGRAM FILES\COMMON FILES\YAZZLE1281OINUNINSTALLER.EXE

Rogue.AntiSpywareMaster
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP724\A0074921.EXE

Adware.ZenoSearch-NVON
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP725\A0075021.EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP725\A0075036.EXE

Trojan.NetMon/DNSChange
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP725\A0075022.EXE

Trojan.Unknown Origin
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP725\A0075033.VBS
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP725\A0075038.VBS
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP731\A0078266.EXE

Trojan.Unclassified/Dropper
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP725\A0075041.EXE

Unclassified.Unknown Origin
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP728\A0075175.EXE

Adware.Adservs
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP728\A0075176.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP728\A0075194.DLL

Adware.Vundo-Variant/Small-A
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP731\A0085273.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP733\A0086318.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP733\A0086319.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP733\A0086320.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP733\A0086321.DLL

Adware.DeeWoo/ThinkAdz
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP733\A0086323.EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP733\A0086324.EXE

Trojan.Unclassified/TestCPV
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP733\A0086326.DLL

Adware.AdRotate/System
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP733\A0086328.DLL

#5 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:40 AM

Posted 20 April 2008 - 06:03 PM

those unknow and unclassified ones are what I was afraid of when I googled


bestrevenue.net

anything brand new can be hard to get rid of, that's why it's best left to an expert

of course anything in a restore is not active any more? but maybe a sign of something that got missed

Edited by DaChew, 20 April 2008 - 06:09 PM.

Chewy

No. Try not. Do... or do not. There is no try.

#6 jerick

jerick
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:40 AM

Posted 20 April 2008 - 07:30 PM

I just ran SDFix since it was recommended in a previous forum and this is the log-not sure what to make of it?

Jay




SDFix: Version 1.173
Run by Administrator on Sun 04/20/2008 at 06:02 PM

Microsoft Windows XP [Version 5.1.2600]
Running From: C:\SDFix

Checking Services :


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting


Checking Files :

Trojan Files Found:

C:\Program Files\Twain\Twain.exe - Deleted
C:\WINDOWS\b138.exe - Deleted
C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\TA_Start.lnk - Deleted
C:\WINDOWS\system32\pac.txt - Deleted
C:\WINDOWS\system32\zxdnt3d.cfg - Deleted



Folder C:\Program Files\Twain - Removed
Folder C:\Temp\fse - Removed
Folder C:\WINDOWS\system32\f02WtR - Removed


Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1353.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-20 18:14:14
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\Yahoo!\\Messenger\\YPager.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YPager.exe:*:Enabled:Yahoo! Messenger"
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\\Program Files\\TurboTax\\Home & Business 2006\\32bit\\ttax.exe"="C:\\Program Files\\TurboTax\\Home & Business 2006\\32bit\\ttax.exe:LocalSubNet:Enabled:TurboTax"
"C:\\Program Files\\TurboTax\\Home & Business 2006\\32bit\\updatemgr.exe"="C:\\Program Files\\TurboTax\\Home & Business 2006\\32bit\\updatemgr.exe:LocalSubNet:Enabled:TurboTax Update Manager"
"C:\\Program Files\\InfoPOEMs\\InfoRetriever Updater\\IRUpdater.exe"="C:\\Program Files\\InfoPOEMs\\InfoRetriever Updater\\IRUpdater.exe:*:Enabled:IRUpdater Module"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\Program Files\\TurboTax\\Home & Business 2007\\32bit\\ttax.exe"="C:\\Program Files\\TurboTax\\Home & Business 2007\\32bit\\ttax.exe:LocalSubNet:Enabled:TurboTax"
"C:\\Program Files\\TurboTax\\Home & Business 2007\\32bit\\updatemgr.exe"="C:\\Program Files\\TurboTax\\Home & Business 2007\\32bit\\updatemgr.exe:LocalSubNet:Enabled:TurboTax Update Manager"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype. Take a deep breath "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

Remaining Files :


File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes :

Sun 20 Apr 2008 1,541,082 ..SH. --- "C:\WINDOWS\system32\fxufrxqq.tmp"
Wed 22 Feb 2006 37,888 ...H. --- "C:\Documents and Settings\Administrator\My Documents\~WRL0001.tmp"
Sun 25 Mar 2007 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\~WRL0014.tmp"
Thu 8 Mar 2007 27,136 ...H. --- "C:\Documents and Settings\Administrator\My Documents\~WRL1744.tmp"
Thu 26 Oct 2006 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Thu 22 Sep 2005 27,136 A..H. --- "C:\Documents and Settings\Administrator\My Documents\Admissions\~WRL3883.tmp"
Thu 22 Dec 2005 27,648 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Contacts\~WRL2424.tmp"
Wed 29 Nov 2006 24,064 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Jay's stuff\~WRL0549.tmp"
Sun 13 May 2007 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Jay's stuff\~WRL0983.tmp"
Tue 3 Jul 2007 22,016 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Jay's stuff\~WRL1587.tmp"
Wed 4 Jul 2007 26,624 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Jay's stuff\~WRL1892.tmp"
Sun 13 May 2007 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Jay's stuff\~WRL2015.tmp"
Sun 13 May 2007 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Jay's stuff\~WRL2803.tmp"
Wed 29 Nov 2006 19,968 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Jay's stuff\~WRL3498.tmp"
Sat 17 Mar 2007 25,600 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Legislative\~WRL0841.tmp"
Sat 17 Mar 2007 27,648 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Legislative\~WRL1288.tmp"
Sat 17 Mar 2007 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Legislative\~WRL2017.tmp"
Fri 18 Aug 2006 26,112 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Letters\~WRL0003.tmp"
Fri 18 Aug 2006 26,112 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Letters\~WRL0005.tmp"
Fri 5 Jan 2007 25,088 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Letters\~WRL0230.tmp"
Fri 5 Jan 2007 25,600 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Letters\~WRL0286.tmp"
Wed 7 Nov 2007 27,136 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Letters\~WRL2980.tmp"
Thu 3 May 2007 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Letters\~WRL3889.tmp"
Thu 3 May 2007 27,648 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Letters\~WRL3912.tmp"
Wed 11 Jul 2007 26,112 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Montana WWAMI office\~WRL0210.tmp"
Fri 20 Oct 2006 492,544 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Montana WWAMI office\~WRL0520.tmp"
Wed 11 Jul 2007 28,160 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Montana WWAMI office\~WRL1196.tmp"
Wed 11 Jul 2007 25,600 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Montana WWAMI office\~WRL3302.tmp"
Tue 30 Jan 2007 29,184 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL0173.tmp"
Tue 30 Jan 2007 29,184 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL0460.tmp"
Tue 30 Jan 2007 25,088 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL0523.tmp"
Tue 30 Jan 2007 32,768 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL0584.tmp"
Tue 30 Jan 2007 29,184 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL0716.tmp"
Tue 1 May 2007 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL1108.tmp"
Tue 30 Jan 2007 35,328 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL1240.tmp"
Tue 30 Jan 2007 28,160 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL1353.tmp"
Tue 30 Jan 2007 26,112 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL1382.tmp"
Tue 30 Jan 2007 29,184 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL1850.tmp"
Tue 30 Jan 2007 33,280 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL2099.tmp"
Sun 29 Apr 2007 24,064 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL2125.tmp"
Tue 30 Jan 2007 28,160 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL2295.tmp"
Thu 28 Dec 2006 27,136 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL2641.tmp"
Tue 30 Jan 2007 29,184 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL3093.tmp"
Sat 11 Nov 2006 27,648 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL3487.tmp"
Tue 1 May 2007 24,064 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL3782.tmp"
Tue 30 Jan 2007 34,816 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL3836.tmp"
Wed 25 Jul 2007 42,496 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Regional program\~WRL4068.tmp"
Mon 19 Nov 2007 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\RUOP\~WRL0296.tmp"
Mon 19 Nov 2007 24,064 ...H. --- "C:\Documents and Settings\Administrator\My Documents\RUOP\~WRL0752.tmp"
Mon 19 Nov 2007 28,160 ...H. --- "C:\Documents and Settings\Administrator\My Documents\RUOP\~WRL2386.tmp"
Mon 19 Nov 2007 25,088 ...H. --- "C:\Documents and Settings\Administrator\My Documents\RUOP\~WRL2805.tmp"
Mon 19 Nov 2007 26,112 ...H. --- "C:\Documents and Settings\Administrator\My Documents\RUOP\~WRL2987.tmp"
Mon 19 Nov 2007 24,064 ...H. --- "C:\Documents and Settings\Administrator\My Documents\RUOP\~WRL3608.tmp"
Fri 11 Jan 2008 36,864 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Rural and Urban Underserved\~WRL0053.tmp"
Fri 11 Jan 2008 39,936 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Rural and Urban Underserved\~WRL0864.tmp"
Fri 11 Jan 2008 39,936 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Rural and Urban Underserved\~WRL1112.tmp"
Sun 9 Mar 2008 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Talks\~WRL3807.tmp"
Sun 9 Mar 2008 25,088 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Talks\~WRL3900.tmp"
Tue 2 Oct 2007 27,136 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Talks\~WRL4067.tmp"
Tue 1 May 2007 38,400 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\~WRL0123.tmp"
Tue 1 May 2007 39,424 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\~WRL1057.tmp"
Tue 1 May 2007 33,792 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\~WRL1586.tmp"
Tue 1 May 2007 39,424 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\~WRL2743.tmp"
Tue 1 May 2007 37,376 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\~WRL3238.tmp"
Wed 13 Sep 2006 26,112 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\~WRL3551.tmp"
Tue 1 May 2007 37,888 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\~WRL3935.tmp"
Thu 22 Sep 2005 27,136 ...H. --- "C:\Documents and Settings\juwsom\My Documents\Admissions\~WRL3883.tmp"
Sat 15 Dec 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\b04031f0b83ee952189dd8beb4ee929a\BIT11.tmp"
Wed 19 Sep 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\cf7ced0e70c80a1e476f1abf49afecb1\BIT4.tmp"
Wed 13 Sep 2006 36,864 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Templates\~WRL1966.tmp"
Sat 12 May 2007 112,640 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Templates\~WRL3945.tmp"
Wed 29 Nov 2006 60,416 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL0148.tmp"
Sat 14 Apr 2007 98,304 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL0337.tmp"
Fri 2 Feb 2007 75,776 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL0456.tmp"
Thu 1 Feb 2007 74,752 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL0569.tmp"
Fri 17 Aug 2007 167,936 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL0571.tmp"
Mon 12 Nov 2007 220,672 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL0746.tmp"
Tue 19 Sep 2006 38,400 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL0754.tmp"
Mon 19 Nov 2007 221,696 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL0839.tmp"
Mon 8 Oct 2007 202,240 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL1173.tmp"
Fri 5 Jan 2007 70,144 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL1226.tmp"
Mon 29 Jan 2007 74,752 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL1232.tmp"
Fri 5 Jan 2007 69,632 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL1247.tmp"
Wed 5 Mar 2008 291,328 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL1248.tmp"
Sun 11 Mar 2007 82,944 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL1758.tmp"
Sat 28 Jul 2007 159,232 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL1882.tmp"
Tue 9 Oct 2007 203,264 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL1995.tmp"
Mon 8 Jan 2007 71,680 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL2045.tmp"
Sun 7 Jan 2007 71,168 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL2095.tmp"
Thu 8 Mar 2007 82,432 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL2213.tmp"
Sun 25 Mar 2007 96,768 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL2534.tmp"
Thu 15 Feb 2007 76,288 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL2548.tmp"
Fri 10 Nov 2006 58,880 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL2707.tmp"
Sat 30 Dec 2006 96,256 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL2825.tmp"
Wed 12 Sep 2007 24,576 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL3327.tmp"
Sun 15 Jul 2007 29,696 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL3339.tmp"
Tue 27 Mar 2007 97,792 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL3373.tmp"
Tue 30 Oct 2007 208,384 ...H. --- "C:\Documents and Settings\Administrator\Application Data\Microsoft\Word\~WRL4061.tmp"
Wed 15 Aug 2007 34,816 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Articles\Passion\~WRL1230.tmp"
Fri 27 Jul 2007 50,176 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Articles\Passion\~WRL2009.tmp"
Tue 1 Apr 2008 24,064 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\April 2008\~WRL0220.tmp"
Mon 7 Jan 2008 43,008 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Jan 08\~WRL1871.tmp"
Thu 5 Jul 2007 25,600 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL0203.tmp"
Wed 4 Jul 2007 33,792 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL0438.tmp"
Wed 4 Jul 2007 33,792 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL0673.tmp"
Thu 5 Jul 2007 25,600 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL0752.tmp"
Thu 5 Jul 2007 26,112 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL0993.tmp"
Wed 4 Jul 2007 25,600 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL1549.tmp"
Wed 4 Jul 2007 30,720 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL1644.tmp"
Thu 5 Jul 2007 26,624 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL1820.tmp"
Thu 5 Jul 2007 26,624 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL2023.tmp"
Thu 5 Jul 2007 25,600 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL2679.tmp"
Wed 4 Jul 2007 33,792 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL2924.tmp"
Thu 5 Jul 2007 25,088 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL3427.tmp"
Wed 4 Jul 2007 27,136 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL3525.tmp"
Thu 5 Jul 2007 25,088 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL3633.tmp"
Wed 4 Jul 2007 32,256 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\Templates\~WRL3651.tmp"
Fri 4 Jan 2008 26,112 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Jay's stuff\Schedules\~WRL4084.tmp"
Thu 18 Oct 2007 24,064 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Letters\Recommendations\~WRL1726.tmp"
Thu 18 Oct 2007 25,088 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Letters\Recommendations\~WRL3303.tmp"
Thu 18 Oct 2007 25,600 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Letters\Recommendations\~WRL3847.tmp"
Sun 17 Dec 2006 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Organizations\MPQHF\~WRL1087.tmp"
Mon 19 Nov 2007 25,600 ...H. --- "C:\Documents and Settings\Administrator\My Documents\RUOP\2007 letters\~WRL0213.tmp"
Tue 20 Nov 2007 28,672 ...H. --- "C:\Documents and Settings\Administrator\My Documents\RUOP\2007 letters\~WRL1878.tmp"
Wed 21 Nov 2007 53,248 ...H. --- "C:\Documents and Settings\Administrator\My Documents\RUOP\2007 letters\~WRL1922.tmp"
Wed 21 Nov 2007 69,120 ...H. --- "C:\Documents and Settings\Administrator\My Documents\RUOP\2007 letters\~WRL2309.tmp"
Wed 21 Nov 2007 60,928 ...H. --- "C:\Documents and Settings\Administrator\My Documents\RUOP\2007 letters\~WRL3062.tmp"
Tue 20 Nov 2007 41,472 ...H. --- "C:\Documents and Settings\Administrator\My Documents\RUOP\2007 letters\~WRL3811.tmp"
Wed 1 Nov 2006 33,280 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL0143.tmp"
Fri 10 Nov 2006 30,208 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL0818.tmp"
Fri 10 Nov 2006 55,296 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL0969.tmp"
Fri 10 Nov 2006 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL1166.tmp"
Thu 9 Nov 2006 52,736 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL1170.tmp"
Fri 10 Nov 2006 26,624 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL1347.tmp"
Thu 9 Nov 2006 55,296 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL1407.tmp"
Fri 10 Nov 2006 26,624 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL1510.tmp"
Wed 8 Nov 2006 50,688 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL1694.tmp"
Wed 8 Nov 2006 44,544 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL1793.tmp"
Thu 9 Nov 2006 51,200 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL1853.tmp"
Wed 8 Nov 2006 48,128 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL1922.tmp"
Thu 9 Nov 2006 53,760 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL2009.tmp"
Wed 8 Nov 2006 40,448 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL2106.tmp"
Wed 8 Nov 2006 38,912 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL2202.tmp"
Wed 8 Nov 2006 48,128 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL2850.tmp"
Wed 8 Nov 2006 48,128 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL3164.tmp"
Fri 10 Nov 2006 25,600 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL3193.tmp"
Fri 10 Nov 2006 26,624 ...H. --- "C:\Documents and Settings\Administrator\My Documents\TRACK\Missoula Track\~WRL3520.tmp"
Sat 14 Apr 2007 25,088 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Travel\Ecuador\~WRL0142.tmp"
Sat 14 Apr 2007 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Travel\Ecuador\~WRL0851.tmp"
Thu 25 Jan 2007 26,112 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Travel\Ecuador\~WRL1376.tmp"
Sat 14 Apr 2007 24,064 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Travel\Ecuador\~WRL2819.tmp"
Thu 25 Jan 2007 25,600 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Travel\Ecuador\~WRL3581.tmp"
Thu 25 Jan 2007 26,112 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Travel\Ecuador\~WRL3998.tmp"
Thu 7 Jun 2007 27,648 ...H. --- "C:\Documents and Settings\Administrator\My Documents\WRITE\Eastern WA visits 2007\~WRL0560.tmp"
Thu 7 Jun 2007 24,064 ...H. --- "C:\Documents and Settings\Administrator\My Documents\WRITE\Eastern WA visits 2007\~WRL0872.tmp"
Thu 7 Jun 2007 25,088 ...H. --- "C:\Documents and Settings\Administrator\My Documents\WRITE\Eastern WA visits 2007\~WRL1704.tmp"
Thu 7 Jun 2007 26,112 ...H. --- "C:\Documents and Settings\Administrator\My Documents\WRITE\Eastern WA visits 2007\~WRL2849.tmp"
Thu 7 Jun 2007 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\WRITE\Eastern WA visits 2007\~WRL3310.tmp"
Fri 27 Apr 2007 153,088 ...H. --- "C:\Documents and Settings\Administrator\My Documents\WRITE\Ellensburg\~WRL2379.tmp"
Fri 27 Apr 2007 154,624 ...H. --- "C:\Documents and Settings\Administrator\My Documents\WRITE\Ellensburg\~WRL2491.tmp"
Fri 27 Apr 2007 148,992 ...H. --- "C:\Documents and Settings\Administrator\My Documents\WRITE\Ellensburg\~WRL2883.tmp"
Fri 27 Apr 2007 151,040 ...H. --- "C:\Documents and Settings\Administrator\My Documents\WRITE\Ellensburg\~WRL3328.tmp"
Sat 21 Oct 2006 169,472 ...H. --- "C:\Documents and Settings\Administrator\My Documents\WRITE\WRITE faculty visits\~WRL2983.tmp"
Wed 27 Apr 2005 25,088 A..H. --- "C:\Documents and Settings\Administrator\My Documents\WWAMI-laptop\April\~WRL0341.tmp"
Thu 16 Jun 2005 24,064 A..H. --- "C:\Documents and Settings\Administrator\My Documents\WWAMI-laptop\Letters\~WRL2354.tmp"
Wed 27 Apr 2005 25,088 A..H. --- "C:\Documents and Settings\juwsom\My Documents\WWAMI-laptop\April\~WRL0341.tmp"
Thu 16 Jun 2005 24,064 A..H. --- "C:\Documents and Settings\juwsom\My Documents\WWAMI-laptop\Letters\~WRL2354.tmp"
Mon 10 Dec 2007 68,608 A..H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Dec 07\~WRL2006.tmp"
Tue 11 Dec 2007 24,064 A..H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Dec 07\~WRL3007.tmp"
Mon 26 Nov 2007 42,496 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Nov 07\~WRL0531.tmp"
Mon 26 Nov 2007 24,064 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Nov 07\~WRL2151.tmp"
Mon 26 Nov 2007 25,600 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Nov 07\~WRL3786.tmp"
Mon 22 Oct 2007 28,160 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL0017.tmp"
Thu 1 Nov 2007 78,848 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL0088.tmp"
Thu 1 Nov 2007 77,824 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL0686.tmp"
Thu 1 Nov 2007 77,824 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL0772.tmp"
Wed 31 Oct 2007 19,968 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL1003.tmp"
Wed 10 Oct 2007 76,800 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL1698.tmp"
Mon 22 Oct 2007 24,576 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL1899.tmp"
Thu 1 Nov 2007 65,536 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL2079.tmp"
Wed 10 Oct 2007 24,064 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL2477.tmp"
Wed 10 Oct 2007 41,472 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL2586.tmp"
Wed 10 Oct 2007 30,208 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL2959.tmp"
Wed 10 Oct 2007 79,872 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL3100.tmp"
Wed 10 Oct 2007 47,104 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL3456.tmp"
Wed 10 Oct 2007 26,624 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Oct 07\~WRL3718.tmp"
Sun 15 Jul 2007 29,696 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Dec 07\July 07\~WRL0646.tmp"
Sun 15 Jul 2007 54,784 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Dec 07\July 07\~WRL0862.tmp"
Sun 15 Jul 2007 25,088 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Dec 07\July 07\~WRL2389.tmp"
Sun 15 Jul 2007 49,152 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Dec 07\July 07\~WRL2546.tmp"
Sun 15 Jul 2007 30,208 ...H. --- "C:\Documents and Settings\Administrator\My Documents\Dictation\2007\Dec 07\July 07\~WRL2561.tmp"

Finished!

#7 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:40 AM

Posted 20 April 2008 - 07:50 PM

I would go to step 5 in the preperation guide
Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users