Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

MS Antispyware 2009, Vundo


  • Please log in to reply
8 replies to this topic

#1 Arkhyz

Arkhyz

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Location:Wyoming
  • Local time:05:09 AM

Posted 30 December 2008 - 06:20 PM

It looked like MS Antispyware 2009 because:
Duplicate fake version of Windows defender.
Fake security popups warning me about attacks.

When I would click on links browser would redirect to other pages.
I had to type in web address directly, but only some links would work.
For some sites such as bleepingcomputer, majorgeeks, symantec.com,
I would receive the message "Unable to Connect".
(I even tried a few tracerts and they would go straight to 127.0.0.1)

What I Have Done So Far
I used Add/Remove Programs to uninstall MS Antispyware 2009.
No more fake security popups but still couldn't download removal tools or access bleepingcomputer.

Ran HijackThis and saved a log. (HJTLog1)

Using my cellphone, I found this thread (http://www.bleepingcomputer.com/forums/t/183473/unable-to-downloadrun-antispywaremalware-program-google-redirects-hjt-log-posted/).
The problem described there sounds exactly like my own.

After I disabled TDSSserv.sys device and rebooted I was able to access bleepingcomputer.
I downloaded jumpstart.zip and ran it.
I downloaded Malwarebytes AntiMalware, ran it, and saved a log. (MBAMLog)
Ran Hijack this and saved a log. (HJTLog2)

What should I do now?

Attached Files


Edited by Arkhyz, 30 December 2008 - 06:25 PM.


BC AdBot (Login to Remove)

 


#2 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:06:09 AM

Posted 08 January 2009 - 10:31 AM

Arkhyz

1. Go HERE and download File Lister.Save it to your Desktop
Rt Click ->> Extract all ->> And extract it to your Desktop
Additional help on extracting zip files can be found HERE
Open the File Lister Folder.
Rt Click FileLister.vbe ->>Select Open Then Open to confirm.
As the program runs, it will appear that nothing is happening.
When the program is fnished it will produce a log for you C:\Files.txt
Copy and paste the contents of that log in your reply.

Note: Please post the results as a reply, not as an attachment
Posted Image
Microsoft MVP - Windows Security

#3 Arkhyz

Arkhyz
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Location:Wyoming
  • Local time:05:09 AM

Posted 08 January 2009 - 08:03 PM

+++++++++++++++++++++++++++++++++
+ File Lister Version 1.0.5
+
+ By bamajim / bamajim.com
+++++++++++++++++++++++++++++++++

Report ran on --->>> 1/8/2009 5:55:57 PM


====== Running Processes ======

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Security\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Security\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Security\CA Internet Security Suite\CA Personal Firewall\capfsem.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Xerox\NWWia\XrxFTPLt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW10.exe
C:\Program Files\Weather Watcher\ww.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\WScript.exe

====== BHO's under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects ======

BHO: (NO NAME) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

BHO: (NO NAME) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

BHO: (NO NAME) - {764D2E87-3DF0-4019-8A6B-5A10BC552FE2} - C:\WINDOWS\system32\ddcYrOIa.dll

====== Values under HKLM\~\Run ======

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\\windows\\system\\hpsysdrv.exe"
"Recguard"="C:\\WINDOWS\\SMINST\\RECGUARD.EXE"
"VTTimer"="VTTimer.exe"
"AGRSMMSG"="AGRSMMSG.exe"
"HPDJ Taskbar Utility"="C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\hpztsb10.exe"
"HP Component Manager"="\"C:\\Program Files\\HP\\hpcoretech\\hpcmpmgr.exe\""
"AlcxMonitor"="ALCXMNTR.EXE"
"NI.UWA6P_0001_N68M2301"="\"C:\\Documents and Settings\\Compaq_Owner\\Local Settings\\Temporary Internet Files\\Content.IE5\\0LING1MJ\\WinAntiVirusPro2006ScannerInstall[1].exe\" -nag "
"KBD"="C:\\HP\\KBD\\KBD.EXE"
"Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide"
"UserFaultCheck"="%systemroot%\\system32\\dumprep 0 -u"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\j2re1.4.2_03\\bin\\jusched.exe\""
"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.2\\Apps\\apdproxy.exe\""
"AppleSyncNotifier"="C:\\Program Files\\Common Files\\Apple\\Mobile Device Support\\bin\\AppleSyncNotifier.exe"
"XeroxScannerDaemon"="C:\\Program Files\\Xerox\\NWWia\\XrxFTPLt.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\QTTask.exe\" -atboottime"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"HP Software Update"="C:\\Program Files\\Hewlett-Packard\\HP Software Update\\HPWuSchd2.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"


====== Values under HKCU\~\Run ======

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\1.2.908.5008\\GoogleToolbarNotifier.exe"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"jsf8j34rgfght"="C:\\DOCUME~1\\COMPAQ~1\\LOCALS~1\\Temp\\winloggn.exe"


====== Folders and Files from "%\" and "%\Windows" Created Last 60 Days ======

12/25/2008 10:33:19 PM 524496 C:\Config.Msi
1/8/2009 5:55:58 PM 5190 32 C:\Files.txt
1/6/2009 6:33:09 AM 469291008 38 C:\hiberfil.sys
1/4/2009 2:10:21 PM 536 32 C:\updatedatfix.log
12/15/2008 3:01:03 AM 4114326 C:\WINDOWS\$NtUninstallKB952069_WM9$
12/15/2008 3:01:03 AM 624534 C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst
11/14/2008 8:53:51 PM 1930216 C:\WINDOWS\$NtUninstallKB954459$
11/14/2008 8:53:51 PM 623592 C:\WINDOWS\$NtUninstallKB954459$\spuninst
12/15/2008 3:00:55 AM 870552 C:\WINDOWS\$NtUninstallKB954600$
12/15/2008 3:00:55 AM 623738 C:\WINDOWS\$NtUninstallKB954600$\spuninst
11/14/2008 8:53:36 PM 1728370 C:\WINDOWS\$NtUninstallKB955069$
11/14/2008 8:53:36 PM 623474 C:\WINDOWS\$NtUninstallKB955069$\spuninst
12/15/2008 3:04:13 AM 684932 C:\WINDOWS\$NtUninstallKB955839$
12/15/2008 3:04:13 AM 624516 C:\WINDOWS\$NtUninstallKB955839$\spuninst
12/15/2008 3:00:38 AM 908787 C:\WINDOWS\$NtUninstallKB956802$
12/15/2008 3:00:38 AM 623603 C:\WINDOWS\$NtUninstallKB956802$\spuninst
11/14/2008 8:54:00 PM 1080540 C:\WINDOWS\$NtUninstallKB957097$
11/14/2008 8:54:00 PM 623964 C:\WINDOWS\$NtUninstallKB957097$\spuninst
12/15/2008 3:01:01 AM 11384 32 C:\WINDOWS\KB952069.log
11/11/2008 7:01:26 PM 11656 32 C:\WINDOWS\KB954459.log
12/15/2008 3:00:53 AM 7015 32 C:\WINDOWS\KB954600.log
11/14/2008 8:53:23 PM 8034 32 C:\WINDOWS\KB955069.log
12/10/2008 12:26:13 AM 34002 32 C:\WINDOWS\KB955839.log
12/10/2008 12:22:56 AM 12482 32 C:\WINDOWS\KB956802.log
11/14/2008 8:53:58 PM 7628 32 C:\WINDOWS\KB957097.log
12/15/2008 3:03:17 AM 20013 32 C:\WINDOWS\KB958215-IE7.log
12/22/2008 3:12:49 AM 7739 32 C:\WINDOWS\KB960714-IE7.log
11/14/2008 8:52:09 PM 318784 32 C:\WINDOWS\msxml4-KB954430-enu.LOG
12/26/2008 2:10:03 PM 901065 38 C:\WINDOWS\system32\aIOrYcdd.ini
12/26/2008 2:10:03 PM 900269 38 C:\WINDOWS\system32\aIOrYcdd.ini2
12/27/2008 8:06:06 AM 1299344 6 C:\WINDOWS\system32\bwcqmikg.ini
12/26/2008 2:10:29 PM 0 32 C:\WINDOWS\system32\d34ced82-.txt
12/12/2008 11:18:16 AM 87336 32 C:\WINDOWS\system32\dns-sd.exe
12/12/2008 11:11:46 AM 61440 32 C:\WINDOWS\system32\dnssd.dll
12/26/2008 2:32:47 PM 1254052 6 C:\WINDOWS\system32\ifohizit.ini
12/27/2008 3:24:26 AM 1254066 6 C:\WINDOWS\system32\ogijemom.ini
12/27/2008 8:04:42 AM 646941 38 C:\WINDOWS\system32\TtAaIRqr.ini
12/27/2008 8:04:42 AM 371 38 C:\WINDOWS\system32\TtAaIRqr.ini2
12/26/2008 2:13:10 PM 1299082 6 C:\WINDOWS\system32\wxisjtas.ini

====== Files under "\Administrator\Startup" Last 60 Days======


====== Files under "\All Users\Startup" Last 60 Days======


====== Folders under "\Program Files" Last 60 Days======

1/7/2009 12:58:26 PM 14195379 C:\Program Files\BitZipper
1/7/2009 12:58:26 PM 199680 C:\Program Files\BitZipper\data
1/7/2009 12:58:26 PM 170443 C:\Program Files\BitZipper\help
1/7/2009 12:58:26 PM 168884 C:\Program Files\BitZipper\language
12/25/2008 10:45:37 PM 390387 C:\Program Files\Bonjour
12/25/2008 10:41:15 PM 1366063 C:\Program Files\iPod
12/25/2008 10:41:15 PM 1362728 C:\Program Files\iPod\bin
12/25/2008 10:41:15 PM 825856 C:\Program Files\iPod\bin\iPodService.Resources
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\da.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\de.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\en.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\es.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\fi.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\fr.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\it.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\ja.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\ko.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\nb.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\nl.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\pl.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\pt.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\pt_PT.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\ru.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\sv.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\zh_CN.lproj
12/25/2008 10:41:15 PM 43520 C:\Program Files\iPod\bin\iPodService.Resources\zh_TW.lproj
12/25/2008 10:40:56 PM 88544477 C:\Program Files\iTunes
12/25/2008 10:40:56 PM 161119 C:\Program Files\iTunes\CD Configuration
12/25/2008 10:41:17 PM 70101047 C:\Program Files\iTunes\iTunes.Resources
12/25/2008 10:41:17 PM 3214129 C:\Program Files\iTunes\iTunes.Resources\da.lproj
12/25/2008 10:41:17 PM 46501 C:\Program Files\iTunes\iTunes.Resources\da.lproj\EQWindow.nib
12/25/2008 10:41:17 PM 28183 C:\Program Files\iTunes\iTunes.Resources\da.lproj\GradientWindow.nib
12/25/2008 10:41:17 PM 396518 C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib
12/25/2008 10:41:17 PM 10701 C:\Program Files\iTunes\iTunes.Resources\da.lproj\MusicStoreBar.nib
12/25/2008 10:41:17 PM 135616 C:\Program Files\iTunes\iTunes.Resources\da.lproj\Placards.nib
12/25/2008 10:41:17 PM 21957 C:\Program Files\iTunes\iTunes.Resources\da.lproj\Ringtone.nib
12/25/2008 10:41:17 PM 163531 C:\Program Files\iTunes\iTunes.Resources\da.lproj\SetupAssistant.nib
12/25/2008 10:41:17 PM 3661326 C:\Program Files\iTunes\iTunes.Resources\de.lproj
12/25/2008 10:41:18 PM 44230 C:\Program Files\iTunes\iTunes.Resources\de.lproj\EQWindow.nib
12/25/2008 10:41:18 PM 25849 C:\Program Files\iTunes\iTunes.Resources\de.lproj\GradientWindow.nib
12/25/2008 10:41:18 PM 353239 C:\Program Files\iTunes\iTunes.Resources\de.lproj\iPodSettings.nib
12/25/2008 10:41:18 PM 9186 C:\Program Files\iTunes\iTunes.Resources\de.lproj\MusicStoreBar.nib
12/25/2008 10:41:18 PM 134753 C:\Program Files\iTunes\iTunes.Resources\de.lproj\Placards.nib
12/25/2008 10:41:18 PM 21576 C:\Program Files\iTunes\iTunes.Resources\de.lproj\Ringtone.nib
12/25/2008 10:41:18 PM 147048 C:\Program Files\iTunes\iTunes.Resources\de.lproj\SetupAssistant.nib
12/25/2008 10:41:18 PM 3212776 C:\Program Files\iTunes\iTunes.Resources\en.lproj
12/25/2008 10:41:18 PM 46453 C:\Program Files\iTunes\iTunes.Resources\en.lproj\EQWindow.nib
12/25/2008 10:41:18 PM 27815 C:\Program Files\iTunes\iTunes.Resources\en.lproj\GradientWindow.nib
12/25/2008 10:41:18 PM 394241 C:\Program Files\iTunes\iTunes.Resources\en.lproj\iPodSettings.nib
12/25/2008 10:41:18 PM 10556 C:\Program Files\iTunes\iTunes.Resources\en.lproj\MusicStoreBar.nib
12/25/2008 10:41:18 PM 134480 C:\Program Files\iTunes\iTunes.Resources\en.lproj\Placards.nib
12/25/2008 10:41:18 PM 21460 C:\Program Files\iTunes\iTunes.Resources\en.lproj\Ringtone.nib
12/25/2008 10:41:18 PM 163198 C:\Program Files\iTunes\iTunes.Resources\en.lproj\SetupAssistant.nib
12/25/2008 10:41:19 PM 3463423 C:\Program Files\iTunes\iTunes.Resources\es.lproj
12/25/2008 10:41:19 PM 46562 C:\Program Files\iTunes\iTunes.Resources\es.lproj\EQWindow.nib
12/25/2008 10:41:19 PM 28186 C:\Program Files\iTunes\iTunes.Resources\es.lproj\GradientWindow.nib
12/25/2008 10:41:19 PM 398871 C:\Program Files\iTunes\iTunes.Resources\es.lproj\iPodSettings.nib
12/25/2008 10:41:19 PM 10704 C:\Program Files\iTunes\iTunes.Resources\es.lproj\MusicStoreBar.nib
12/25/2008 10:41:19 PM 135904 C:\Program Files\iTunes\iTunes.Resources\es.lproj\Placards.nib
12/25/2008 10:41:19 PM 21523 C:\Program Files\iTunes\iTunes.Resources\es.lproj\Ringtone.nib
12/25/2008 10:41:19 PM 164434 C:\Program Files\iTunes\iTunes.Resources\es.lproj\SetupAssistant.nib
12/25/2008 10:41:19 PM 3225976 C:\Program Files\iTunes\iTunes.Resources\fi.lproj
12/25/2008 10:41:19 PM 46543 C:\Program Files\iTunes\iTunes.Resources\fi.lproj\EQWindow.nib
12/25/2008 10:41:19 PM 28183 C:\Program Files\iTunes\iTunes.Resources\fi.lproj\GradientWindow.nib
12/25/2008 10:41:19 PM 397082 C:\Program Files\iTunes\iTunes.Resources\fi.lproj\iPodSettings.nib
12/25/2008 10:41:19 PM 10703 C:\Program Files\iTunes\iTunes.Resources\fi.lproj\MusicStoreBar.nib
12/25/2008 10:41:19 PM 135758 C:\Program Files\iTunes\iTunes.Resources\fi.lproj\Placards.nib
12/25/2008 10:41:19 PM 21522 C:\Program Files\iTunes\iTunes.Resources\fi.lproj\Ringtone.nib
12/25/2008 10:41:19 PM 163808 C:\Program Files\iTunes\iTunes.Resources\fi.lproj\SetupAssistant.nib
12/25/2008 10:41:19 PM 3567513 C:\Program Files\iTunes\iTunes.Resources\fr.lproj
12/25/2008 10:41:20 PM 46574 C:\Program Files\iTunes\iTunes.Resources\fr.lproj\EQWindow.nib
12/25/2008 10:41:20 PM 28189 C:\Program Files\iTunes\iTunes.Resources\fr.lproj\GradientWindow.nib
12/25/2008 10:41:20 PM 399178 C:\Program Files\iTunes\iTunes.Resources\fr.lproj\iPodSettings.nib
12/25/2008 10:41:20 PM 10703 C:\Program Files\iTunes\iTunes.Resources\fr.lproj\MusicStoreBar.nib
12/25/2008 10:41:20 PM 135952 C:\Program Files\iTunes\iTunes.Resources\fr.lproj\Placards.nib
12/25/2008 10:41:20 PM 21982 C:\Program Files\iTunes\iTunes.Resources\fr.lproj\Ringtone.nib
12/25/2008 10:41:20 PM 164848 C:\Program Files\iTunes\iTunes.Resources\fr.lproj\SetupAssistant.nib
12/25/2008 10:41:21 PM 3452721 C:\Program Files\iTunes\iTunes.Resources\it.lproj
12/25/2008 10:41:21 PM 46522 C:\Program Files\iTunes\iTunes.Resources\it.lproj\EQWindow.nib
12/25/2008 10:41:21 PM 28189 C:\Program Files\iTunes\iTunes.Resources\it.lproj\GradientWindow.nib
12/25/2008 10:41:21 PM 397825 C:\Program Files\iTunes\iTunes.Resources\it.lproj\iPodSettings.nib
12/25/2008 10:41:21 PM 10701 C:\Program Files\iTunes\iTunes.Resources\it.lproj\MusicStoreBar.nib
12/25/2008 10:41:21 PM 135772 C:\Program Files\iTunes\iTunes.Resources\it.lproj\Placards.nib
12/25/2008 10:41:21 PM 21973 C:\Program Files\iTunes\iTunes.Resources\it.lproj\Ringtone.nib
12/25/2008 10:41:21 PM 164005 C:\Program Files\iTunes\iTunes.Resources\it.lproj\SetupAssistant.nib
12/25/2008 10:41:21 PM 3180500 C:\Program Files\iTunes\iTunes.Resources\ja.lproj
12/25/2008 10:41:21 PM 46522 C:\Program Files\iTunes\iTunes.Resources\ja.lproj\EQWindow.nib
12/25/2008 10:41:22 PM 28210 C:\Program Files\iTunes\iTunes.Resources\ja.lproj\GradientWindow.nib
12/25/2008 10:41:22 PM 401488 C:\Program Files\iTunes\iTunes.Resources\ja.lproj\iPodSettings.nib
12/25/2008 10:41:22 PM 10702 C:\Program Files\iTunes\iTunes.Resources\ja.lproj\MusicStoreBar.nib
12/25/2008 10:41:22 PM 135951 C:\Program Files\iTunes\iTunes.Resources\ja.lproj\Placards.nib
12/25/2008 10:41:22 PM 21963 C:\Program Files\iTunes\iTunes.Resources\ja.lproj\Ringtone.nib
12/25/2008 10:41:22 PM 166258 C:\Program Files\iTunes\iTunes.Resources\ja.lproj\SetupAssistant.nib
12/25/2008 10:41:22 PM 4417679 C:\Program Files\iTunes\iTunes.Resources\ko.lproj
12/25/2008 10:41:22 PM 46324 C:\Program Files\iTunes\iTunes.Resources\ko.lproj\EQWindow.nib
12/25/2008 10:41:22 PM 27764 C:\Program Files\iTunes\iTunes.Resources\ko.lproj\GradientWindow.nib
12/25/2008 10:41:22 PM 395009 C:\Program Files\iTunes\iTunes.Resources\ko.lproj\iPodSettings.nib
12/25/2008 10:41:22 PM 10499 C:\Program Files\iTunes\iTunes.Resources\ko.lproj\MusicStoreBar.nib
12/25/2008 10:41:22 PM 134619 C:\Program Files\iTunes\iTunes.Resources\ko.lproj\Placards.nib
12/25/2008 10:41:22 PM 21478 C:\Program Files\iTunes\iTunes.Resources\ko.lproj\Ringtone.nib
12/25/2008 10:41:22 PM 161708 C:\Program Files\iTunes\iTunes.Resources\ko.lproj\SetupAssistant.nib
12/25/2008 10:41:23 PM 3301151 C:\Program Files\iTunes\iTunes.Resources\nb.lproj
12/25/2008 10:41:23 PM 46534 C:\Program Files\iTunes\iTunes.Resources\nb.lproj\EQWindow.nib
12/25/2008 10:41:23 PM 28180 C:\Program Files\iTunes\iTunes.Resources\nb.lproj\GradientWindow.nib
12/25/2008 10:41:23 PM 396953 C:\Program Files\iTunes\iTunes.Resources\nb.lproj\iPodSettings.nib
12/25/2008 10:41:23 PM 10701 C:\Program Files\iTunes\iTunes.Resources\nb.lproj\MusicStoreBar.nib
12/25/2008 10:41:23 PM 135644 C:\Program Files\iTunes\iTunes.Resources\nb.lproj\Placards.nib
12/25/2008 10:41:23 PM 21952 C:\Program Files\iTunes\iTunes.Resources\nb.lproj\Ringtone.nib
12/25/2008 10:41:23 PM 163583 C:\Program Files\iTunes\iTunes.Resources\nb.lproj\SetupAssistant.nib
12/25/2008 10:41:23 PM 3465055 C:\Program Files\iTunes\iTunes.Resources\nl.lproj
12/25/2008 10:41:23 PM 46458 C:\Program Files\iTunes\iTunes.Resources\nl.lproj\EQWindow.nib
12/25/2008 10:41:23 PM 28002 C:\Program Files\iTunes\iTunes.Resources\nl.lproj\GradientWindow.nib
12/25/2008 10:41:23 PM 337025 C:\Program Files\iTunes\iTunes.Resources\nl.lproj\iPodSettings.nib
12/25/2008 10:41:24 PM 10497 C:\Program Files\iTunes\iTunes.Resources\nl.lproj\MusicStoreBar.nib
12/25/2008 10:41:24 PM 135748 C:\Program Files\iTunes\iTunes.Resources\nl.lproj\Placards.nib
12/25/2008 10:41:24 PM 21908 C:\Program Files\iTunes\iTunes.Resources\nl.lproj\Ringtone.nib
12/25/2008 10:41:24 PM 149013 C:\Program Files\iTunes\iTunes.Resources\nl.lproj\SetupAssistant.nib
12/25/2008 10:41:24 PM 3409443 C:\Program Files\iTunes\iTunes.Resources\pl.lproj
12/25/2008 10:41:24 PM 46558 C:\Program Files\iTunes\iTunes.Resources\pl.lproj\EQWindow.nib
12/25/2008 10:41:24 PM 28177 C:\Program Files\iTunes\iTunes.Resources\pl.lproj\GradientWindow.nib
12/25/2008 10:41:24 PM 397735 C:\Program Files\iTunes\iTunes.Resources\pl.lproj\iPodSettings.nib
12/25/2008 10:41:24 PM 10701 C:\Program Files\iTunes\iTunes.Resources\pl.lproj\MusicStoreBar.nib
12/25/2008 10:41:24 PM 135669 C:\Program Files\iTunes\iTunes.Resources\pl.lproj\Placards.nib
12/25/2008 10:41:24 PM 21946 C:\Program Files\iTunes\iTunes.Resources\pl.lproj\Ringtone.nib
12/25/2008 10:41:24 PM 163644 C:\Program Files\iTunes\iTunes.Resources\pl.lproj\SetupAssistant.nib
12/25/2008 10:41:24 PM 3311212 C:\Program Files\iTunes\iTunes.Resources\pt.lproj
12/25/2008 10:41:24 PM 46548 C:\Program Files\iTunes\iTunes.Resources\pt.lproj\EQWindow.nib
12/25/2008 10:41:24 PM 28183 C:\Program Files\iTunes\iTunes.Resources\pt.lproj\GradientWindow.nib
12/25/2008 10:41:24 PM 397636 C:\Program Files\iTunes\iTunes.Resources\pt.lproj\iPodSettings.nib
12/25/2008 10:41:25 PM 10713 C:\Program Files\iTunes\iTunes.Resources\pt.lproj\MusicStoreBar.nib
12/25/2008 10:41:25 PM 135843 C:\Program Files\iTunes\iTunes.Resources\pt.lproj\Placards.nib
12/25/2008 10:41:25 PM 21553 C:\Program Files\iTunes\iTunes.Resources\pt.lproj\Ringtone.nib
12/25/2008 10:41:25 PM 164393 C:\Program Files\iTunes\iTunes.Resources\pt.lproj\SetupAssistant.nib
12/25/2008 10:41:25 PM 3441757 C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj
12/25/2008 10:41:25 PM 46555 C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\EQWindow.nib
12/25/2008 10:41:25 PM 28183 C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\GradientWindow.nib
12/25/2008 10:41:25 PM 397641 C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\iPodSettings.nib
12/25/2008 10:41:25 PM 10708 C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\MusicStoreBar.nib
12/25/2008 10:41:25 PM 135895 C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\Placards.nib
12/25/2008 10:41:25 PM 22065 C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\Ringtone.nib
12/25/2008 10:41:25 PM 164094 C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\SetupAssistant.nib
12/25/2008 10:41:25 PM 4178484 C:\Program Files\iTunes\iTunes.Resources\ru.lproj
12/25/2008 10:41:25 PM 46947 C:\Program Files\iTunes\iTunes.Resources\ru.lproj\EQWindow.nib
12/25/2008 10:41:25 PM 28189 C:\Program Files\iTunes\iTunes.Resources\ru.lproj\GradientWindow.nib
12/25/2008 10:41:26 PM 405919 C:\Program Files\iTunes\iTunes.Resources\ru.lproj\iPodSettings.nib
12/25/2008 10:41:26 PM 10738 C:\Program Files\iTunes\iTunes.Resources\ru.lproj\MusicStoreBar.nib
12/25/2008 10:41:26 PM 136827 C:\Program Files\iTunes\iTunes.Resources\ru.lproj\Placards.nib
12/25/2008 10:41:26 PM 21648 C:\Program Files\iTunes\iTunes.Resources\ru.lproj\Ringtone.nib
12/25/2008 10:41:26 PM 168090 C:\Program Files\iTunes\iTunes.Resources\ru.lproj\SetupAssistant.nib
12/25/2008 10:41:26 PM 3269412 C:\Program Files\iTunes\iTunes.Resources\sv.lproj
12/25/2008 10:41:26 PM 46528 C:\Program Files\iTunes\iTunes.Resources\sv.lproj\EQWindow.nib
12/25/2008 10:41:26 PM 28189 C:\Program Files\iTunes\iTunes.Resources\sv.lproj\GradientWindow.nib
12/25/2008 10:41:26 PM 396514 C:\Program Files\iTunes\iTunes.Resources\sv.lproj\iPodSettings.nib
12/25/2008 10:41:26 PM 10707 C:\Program Files\iTunes\iTunes.Resources\sv.lproj\MusicStoreBar.nib
12/25/2008 10:41:26 PM 135670 C:\Program Files\iTunes\iTunes.Resources\sv.lproj\Placards.nib
12/25/2008 10:41:26 PM 21967 C:\Program Files\iTunes\iTunes.Resources\sv.lproj\Ringtone.nib
12/25/2008 10:41:26 PM 163505 C:\Program Files\iTunes\iTunes.Resources\sv.lproj\SetupAssistant.nib
12/25/2008 10:41:26 PM 3150319 C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj
12/25/2008 10:41:27 PM 47168 C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\EQWindow.nib
12/25/2008 10:41:27 PM 28183 C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\GradientWindow.nib
12/25/2008 10:41:27 PM 398286 C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\iPodSettings.nib
12/25/2008 10:41:27 PM 10699 C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\MusicStoreBar.nib
12/25/2008 10:41:27 PM 136713 C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\Placards.nib
12/25/2008 10:41:27 PM 21922 C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\Ringtone.nib
12/25/2008 10:41:27 PM 164201 C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\SetupAssistant.nib
12/25/2008 10:41:27 PM 2808272 C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj
12/25/2008 10:41:27 PM 46547 C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\EQWindow.nib
12/25/2008 10:41:27 PM 28183 C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\GradientWindow.nib
12/25/2008 10:41:27 PM 398390 C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\iPodSettings.nib
12/25/2008 10:41:27 PM 10699 C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\MusicStoreBar.nib
12/25/2008 10:41:27 PM 136658 C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\Placards.nib
12/25/2008 10:41:28 PM 21925 C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\Ringtone.nib
12/25/2008 10:41:28 PM 164223 C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\SetupAssistant.nib
12/25/2008 10:41:28 PM 825856 C:\Program Files\iTunes\iTunesHelper.Resources
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\da.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\de.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\en.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\es.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\fi.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\fr.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\it.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\ja.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\ko.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\nb.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\nl.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\pl.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\pt.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\pt_PT.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\ru.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\sv.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\zh_CN.lproj
12/25/2008 10:41:28 PM 43520 C:\Program Files\iTunes\iTunesHelper.Resources\zh_TW.lproj
12/25/2008 10:41:28 PM 903680 C:\Program Files\iTunes\iTunesMiniPlayer.Resources
12/25/2008 10:41:28 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\da.lproj
12/25/2008 10:41:28 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\de.lproj
12/25/2008 10:41:28 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\en.lproj
12/25/2008 10:41:28 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\es.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\fi.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\fr.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\it.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\ja.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\ko.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\nb.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\nl.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\pl.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\pt.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\pt_PT.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\ru.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\sv.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\zh_CN.lproj
12/25/2008 10:41:29 PM 43008 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\zh_TW.lproj
12/25/2008 10:41:29 PM 69851 C:\Program Files\iTunes\Mozilla Plugins
12/30/2008 1:10:21 PM 4116652 C:\Program Files\Malwarebytes' Anti-Malware
12/30/2008 1:10:21 PM 372747 C:\Program Files\Malwarebytes' Anti-Malware\Languages
12/23/2008 6:40:07 AM 4890144 C:\Program Files\Mp3tag
12/23/2008 6:40:08 AM 14924 C:\Program Files\Mp3tag\data
12/23/2008 6:40:08 AM 1090 C:\Program Files\Mp3tag\data\actions
12/23/2008 6:40:08 AM 12996 C:\Program Files\Mp3tag\data\sources
12/23/2008 6:40:08 AM 4945 C:\Program Files\Mp3tag\export
12/23/2008 6:40:08 AM 245448 C:\Program Files\Mp3tag\help
12/23/2008 6:40:08 AM 42199 C:\Program Files\Mp3tag\help\images
12/23/2008 6:40:07 AM 1188678 C:\Program Files\Mp3tag\lang
12/23/2008 6:40:08 AM 81286 C:\Program Files\Mp3tag\lang\icons
1/4/2009 1:53:43 PM 36195267 C:\Program Files\NortonInstaller
1/4/2009 2:00:59 PM 36195267 C:\Program Files\NortonInstaller\NAV
12/25/2008 10:34:24 PM 77209892 C:\Program Files\QuickTime
12/25/2008 10:34:32 PM 2188288 C:\Program Files\QuickTime\PictureViewer.Resources
12/25/2008 10:34:32 PM 144384 C:\Program Files\QuickTime\PictureViewer.Resources\da.lproj
12/25/2008 10:34:32 PM 132608 C:\Program Files\QuickTime\PictureViewer.Resources\de.lproj
12/25/2008 10:34:32 PM 92160 C:\Program Files\QuickTime\PictureViewer.Resources\en.lproj
12/25/2008 10:34:32 PM 143872 C:\Program Files\QuickTime\PictureViewer.Resources\es.lproj
12/25/2008 10:34:32 PM 132096 C:\Program Files\QuickTime\PictureViewer.Resources\fi.lproj
12/25/2008 10:34:32 PM 141312 C:\Program Files\QuickTime\PictureViewer.Resources\fr.lproj
12/25/2008 10:34:32 PM 138240 C:\Program Files\QuickTime\PictureViewer.Resources\it.lproj
12/25/2008 10:34:32 PM 92672 C:\Program Files\QuickTime\PictureViewer.Resources\ja.lproj
12/25/2008 10:34:32 PM 92160 C:\Program Files\QuickTime\PictureViewer.Resources\ko.lproj
12/25/2008 10:34:32 PM 92672 C:\Program Files\QuickTime\PictureViewer.Resources\nb.lproj
12/25/2008 10:34:32 PM 134144 C:\Program Files\QuickTime\PictureViewer.Resources\nl.lproj
12/25/2008 10:34:32 PM 136192 C:\Program Files\QuickTime\PictureViewer.Resources\pl.lproj
12/25/2008 10:34:32 PM 139776 C:\Program Files\QuickTime\PictureViewer.Resources\pt_PT.lproj
12/25/2008 10:34:32 PM 92672 C:\Program Files\QuickTime\PictureViewer.Resources\ru.lproj
12/25/2008 10:34:32 PM 140800 C:\Program Files\QuickTime\PictureViewer.Resources\sv.lproj
12/25/2008 10:34:33 PM 128512 C:\Program Files\QuickTime\PictureViewer.Resources\zh_CN.lproj
12/25/2008 10:34:33 PM 124416 C:\Program Files\QuickTime\PictureViewer.Resources\zh_TW.lproj
12/25/2008 10:35:01 PM 1010122 C:\Program Files\QuickTime\Plugins
12/25/2008 10:34:27 PM 422427 C:\Program Files\QuickTime\PropertyPanels
12/25/2008 10:34:32 PM 55808 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\da.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\de.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\en.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\es.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\fi.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\fr.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\it.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ja.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ko.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\nb.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\nl.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\pl.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\pt_PT.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ru.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\sv.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\zh_CN.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\zh_TW.lproj
12/25/2008 10:34:33 PM 75264 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\da.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\de.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\en.lproj
12/25/2008 10:34:33 PM 4608 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\es.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\fi.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\fr.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\it.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ja.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ko.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\nb.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\nl.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\pl.lproj
12/25/2008 10:34:33 PM 4608 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\pt_PT.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ru.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\sv.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\zh_CN.lproj
12/25/2008 10:34:33 PM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\zh_TW.lproj
12/25/2008 10:34:24 PM 0 C:\Program Files\QuickTime\QTComponents
12/25/2008 10:34:24 PM 60745838 C:\Program Files\QuickTime\QTSystem
12/25/2008 10:34:31 PM 55808 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\da.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\de.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\en.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\es.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\fi.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\fr.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\it.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ja.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ko.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\nb.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\nl.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\pl.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\pt_PT.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ru.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\sv.lproj
12/25/2008 10:34:31 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\zh_CN.lproj
12/25/2008 10:34:32 PM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\zh_TW.lproj
12/25/2008 10:34:33 PM 4391588 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources
12/25/2008 10:34:33 PM 241664 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\da.lproj
12/25/2008 10:34:33 PM 247296 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\de.lproj
12/25/2008 10:34:33 PM 238080 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\en.lproj
12/25/2008 10:34:33 PM 245248 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\es.lproj
12/25/2008 10:34:33 PM 238592 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\fi.lproj
12/25/2008 10:34:33 PM 247296 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\fr.lproj
12/25/2008 10:34:33 PM 239616 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\it.lproj
12/25/2008 10:34:33 PM 239104 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ja.lproj
12/25/2008 10:34:33 PM 236544 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ko.lproj
12/25/2008 10:34:33 PM 254464 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\nb.lproj
12/25/2008 10:34:33 PM 245248 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\nl.lproj
12/25/2008 10:34:33 PM 240640 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\pl.lproj
12/25/2008 10:34:33 PM 241664 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\pt_PT.lproj
12/25/2008 10:34:33 PM 240640 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ru.lproj
12/25/2008 10:34:33 PM 238080 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\sv.lproj
12/25/2008 10:34:33 PM 235008 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\zh_CN.lproj
12/25/2008 10:34:34 PM 231936 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\zh_TW.lproj
12/25/2008 10:34:34 PM 156672 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources
12/25/2008 10:34:34 PM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\da.lproj
12/25/2008 10:34:34 PM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\de.lproj
12/25/2008 10:34:34 PM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\en.lproj
12/25/2008 10:34:34 PM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\es.lproj
12/25/2008 10:34:34 PM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\fi.lproj
12/25/2008 10:34:34 PM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\fr.lproj
12/25/2008 10:34:34 PM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\it.lproj
12/25/2008 10:34:34 PM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ja.lproj
12/25/2008 10:34:34 PM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ko.lproj
12/25/2008 10:34:34 PM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\nb.lproj
12/25/2008 10:34:34 PM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\nl.lproj
12/25/2008 10:34:34 PM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\pl.lproj
12/25/2008 10:34:34 PM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\pt_PT.lproj
12/25/2008 10:34:34 PM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ru.lproj
12/25/2008 10:34:34 PM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\sv.lproj
12/25/2008 10:34:34 PM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\zh_CN.lproj
12/25/2008 10:34:34 PM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\zh_TW.lproj
12/25/2008 10:34:34 PM 293888 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources
12/25/2008 10:34:34 PM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\da.lproj
12/25/2008 10:34:34 PM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\de.lproj
12/25/2008 10:34:34 PM 16384 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\en.lproj
12/25/2008 10:34:34 PM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\es.lproj
12/25/2008 10:34:34 PM 16384 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\fi.lproj
12/25/2008 10:34:34 PM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\fr.lproj
12/25/2008 10:34:34 PM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\it.lproj
12/25/2008 10:34:34 PM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ja.lproj
12/25/2008 10:34:34 PM 15360 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ko.lproj
12/25/2008 10:34:34 PM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\nb.lproj
12/25/2008 10:34:34 PM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\nl.lproj
12/25/2008 10:34:34 PM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\pl.lproj
12/25/2008 10:34:34 PM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\pt_PT.lproj
12/25/2008 10:34:34 PM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ru.lproj
12/25/2008 10:34:34 PM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\sv.lproj
12/25/2008 10:34:34 PM 14848 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\zh_CN.lproj
12/25/2008 10:34:34 PM 14848 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\zh_TW.lproj
12/25/2008 10:34:34 PM 1379840 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources
12/25/2008 10:34:34 PM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\da.lproj
12/25/2008 10:34:34 PM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\de.lproj
12/25/2008 10:34:34 PM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\en.lproj
12/25/2008 10:34:34 PM 84480 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\es.lproj
12/25/2008 10:34:34 PM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\fi.lproj
12/25/2008 10:34:34 PM 79872 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\fr.lproj
12/25/2008 10:34:34 PM 83968 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\it.lproj
12/25/2008 10:34:34 PM 79872 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ja.lproj
12/25/2008 10:34:34 PM 78848 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ko.lproj
12/25/2008 10:34:34 PM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\nb.lproj
12/25/2008 10:34:34 PM 83968 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\nl.lproj
12/25/2008 10:34:34 PM 83456 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\pl.lproj
12/25/2008 10:34:35 PM 83968 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\pt_PT.lproj
12/25/2008 10:34:35 PM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ru.lproj
12/25/2008 10:34:35 PM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\sv.lproj
12/25/2008 10:34:35 PM 78336 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\zh_CN.lproj
12/25/2008 10:34:35 PM 78336 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\zh_TW.lproj
12/25/2008 10:34:35 PM 4045824 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources
12/25/2008 10:34:35 PM 226816 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\da.lproj
12/25/2008 10:34:35 PM 226816 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\de.lproj
12/25/2008 10:34:35 PM 225792 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\en.lproj
12/25/2008 10:34:35 PM 227328 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\es.lproj
12/25/2008 10:34:35 PM 225792 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\fi.lproj
12/25/2008 10:34:35 PM 227328 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\fr.lproj
12/25/2008 10:34:35 PM 226816 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\it.lproj
12/25/2008 10:34:35 PM 226816 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ja.lproj
12/25/2008 10:34:35 PM 224256 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ko.lproj
12/25/2008 10:34:35 PM 226304 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\nb.lproj
12/25/2008 10:34:35 PM 227328 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\nl.lproj
12/25/2008 10:34:35 PM 227328 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\pl.lproj
12/25/2008 10:34:35 PM 227840 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\pt_PT.lproj
12/25/2008 10:34:35 PM 226304 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ru.lproj
12/25/2008 10:34:35 PM 226304 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\sv.lproj
12/25/2008 10:34:35 PM 223232 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\zh_CN.lproj
12/25/2008 10:34:35 PM 223232 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\zh_TW.lproj
12/25/2008 10:34:35 PM 178688 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources
12/25/2008 10:34:35 PM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\da.lproj
12/25/2008 10:34:35 PM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\de.lproj
12/25/2008 10:34:35 PM 9728 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\en.lproj
12/25/2008 10:34:35 PM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\es.lproj
12/25/2008 10:34:35 PM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\fi.lproj
12/25/2008 10:34:35 PM 10752 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\fr.lproj
12/25/2008 10:34:35 PM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\it.lproj
12/25/2008 10:34:35 PM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ja.lproj
12/25/2008 10:34:35 PM 9728 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ko.lproj
12/25/2008 10:34:35 PM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\nb.lproj
12/25/2008 10:34:36 PM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\nl.lproj
12/25/2008 10:34:36 PM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\pl.lproj
12/25/2008 10:34:36 PM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\pt_PT.lproj
12/25/2008 10:34:36 PM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ru.lproj
12/25/2008 10:34:36 PM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\sv.lproj
12/25/2008 10:34:36 PM 9728 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\zh_CN.lproj
12/25/2008 10:34:36 PM 9728 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\zh_TW.lproj
12/25/2008 10:34:36 PM 1969152 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources
12/25/2008 10:34:36 PM 115200 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\da.lproj
12/25/2008 10:34:36 PM 116736 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\de.lproj
12/25/2008 10:34:36 PM 114688 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\en.lproj
12/25/2008 10:34:36 PM 116224 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\es.lproj
12/25/2008 10:34:36 PM 114688 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\fi.lproj
12/25/2008 10:34:36 PM 116736 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\fr.lproj
12/25/2008 10:34:36 PM 116736 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\it.lproj
12/25/2008 10:34:36 PM 113152 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ja.lproj
12/25/2008 10:34:36 PM 112640 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ko.lproj
12/25/2008 10:34:36 PM 116224 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\nb.lproj
12/25/2008 10:34:36 PM 115712 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\nl.lproj
12/25/2008 10:34:36 PM 117248 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\pl.lproj
12/25/2008 10:34:36 PM 116736 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\pt_PT.lproj
12/25/2008 10:34:36 PM 115712 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ru.lproj
12/25/2008 10:34:36 PM 115200 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\sv.lproj
12/25/2008 10:34:36 PM 110592 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\zh_CN.lproj
12/25/2008 10:34:36 PM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\zh_TW.lproj
12/25/2008 10:34:36 PM 476160 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\da.lproj
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\de.lproj
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\en.lproj
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\es.lproj
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\fi.lproj
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\fr.lproj
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\it.lproj
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ja.lproj
12/25/2008 10:34:36 PM 13312 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ko.lproj
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\nb.lproj
12/25/2008 10:34:36 PM 14336 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\nl.lproj
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\pl.lproj
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\pt_PT.lproj
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ru.lproj
12/25/2008 10:34:36 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\sv.lproj
12/25/2008 10:34:36 PM 13312 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\zh_CN.lproj
12/25/2008 10:34:36 PM 13312 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\zh_TW.lproj
12/25/2008 10:34:36 PM 66560 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\da.lproj
12/25/2008 10:34:37 PM 4096 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\de.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\en.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\es.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\fi.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\fr.lproj
12/25/2008 10:34:37 PM 4096 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\it.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ja.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ko.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\nb.lproj
12/25/2008 10:34:37 PM 4096 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\nl.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\pl.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\pt_PT.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ru.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\sv.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\zh_CN.lproj
12/25/2008 10:34:37 PM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\zh_TW.lproj
12/25/2008 10:34:37 PM 388096 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources
12/25/2008 10:34:37 PM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\da.lproj
12/25/2008 10:34:37 PM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\de.lproj
12/25/2008 10:34:37 PM 21504 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\en.lproj
12/25/2008 10:34:37 PM 22528 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\es.lproj
12/25/2008 10:34:37 PM 21504 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\fi.lproj
12/25/2008 10:34:37 PM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\fr.lproj
12/25/2008 10:34:37 PM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\it.lproj
12/25/2008 10:34:37 PM 21504 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ja.lproj
12/25/2008 10:34:37 PM 20992 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ko.lproj
12/25/2008 10:34:37 PM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\nb.lproj
12/25/2008 10:34:37 PM 22528 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\nl.lproj
12/25/2008 10:34:37 PM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\pl.lproj
12/25/2008 10:34:37 PM 22528 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\pt_PT.lproj
12/25/2008 10:34:37 PM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ru.lproj
12/25/2008 10:34:37 PM 21504 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\sv.lproj
12/25/2008 10:34:37 PM 20480 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\zh_CN.lproj
12/25/2008 10:34:37 PM 20480 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\zh_TW.lproj
12/25/2008 10:34:37 PM 2745856 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources
12/25/2008 10:34:37 PM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\da.lproj
12/25/2008 10:34:37 PM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\de.lproj
12/25/2008 10:34:37 PM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\en.lproj
12/25/2008 10:34:37 PM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\es.lproj
12/25/2008 10:34:38 PM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\fi.lproj
12/25/2008 10:34:38 PM 161280 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\fr.lproj
12/25/2008 10:34:38 PM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\it.lproj
12/25/2008 10:34:38 PM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\ja.lproj
12/25/2008 10:34:38 PM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\ko.lproj
12/25/2008 10:34:38 PM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\nb.lproj
12/25/2008 10:34:38 PM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\nl.lproj
12/25/2008 10:34:38 PM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\pl.lproj
12/25/2008 10:34:38 PM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\pt_PT.lproj
12/25/2008 10:34:38 PM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\ru.lproj
12/25/2008 10:34:38 PM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\sv.lproj
12/25/2008 10:34:38 PM 159744 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\zh_CN.lproj
12/25/2008 10:34:38 PM 159744 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\zh_TW.lproj
12/25/2008 10:34:38 PM 104960 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\da.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\de.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\en.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\es.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\fi.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\fr.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\it.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\ja.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\ko.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\nb.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\nl.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\pl.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\pt_PT.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\ru.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\sv.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\zh_CN.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\zh_TW.lproj
12/25/2008 10:34:38 PM 103936 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\da.lproj
12/25/2008 10:34:38 PM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\de.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\en.lproj
12/25/2008 10:34:38 PM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\es.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\fi.lproj
12/25/2008 10:34:38 PM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\fr.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\it.lproj
12/25/2008 10:34:38 PM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\ja.lproj
12/25/2008 10:34:38 PM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\ko.lproj
12/25/2008 10:34:38 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\nb.lproj
12/25/2008 10:34:39 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\nl.lproj
12/25/2008 10:34:39 PM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\pl.lproj
12/25/2008 10:34:39 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\pt_PT.lproj
12/25/2008 10:34:39 PM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\ru.lproj
12/25/2008 10:34:39 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\sv.lproj
12/25/2008 10:34:39 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\zh_CN.lproj
12/25/2008 10:34:39 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\zh_TW.lproj
12/25/2008 10:34:39 PM 274944 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources
12/25/2008 10:34:39 PM 15872 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\da.lproj
12/25/2008 10:34:39 PM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\de.lproj
12/25/2008 10:34:39 PM 14848 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\en.lproj
12/25/2008 10:34:39 PM 16384 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\es.lproj
12/25/2008 10:34:39 PM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\fi.lproj
12/25/2008 10:34:39 PM 15872 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\fr.lproj
12/25/2008 10:34:39 PM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\it.lproj
12/25/2008 10:34:39 PM 15872 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\ja.lproj
12/25/2008 10:34:39 PM 14336 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\ko.lproj
12/25/2008 10:34:39 PM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\nb.lproj
12/25/2008 10:34:39 PM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\nl.lproj
12/25/2008 10:34:39 PM 16384 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\pl.lproj
12/25/2008 10:34:39 PM 16384 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\pt_PT.lproj
12/25/2008 10:34:39 PM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\ru.lproj
12/25/2008 10:34:39 PM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\sv.lproj
12/25/2008 10:34:39 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\zh_CN.lproj
12/25/2008 10:34:39 PM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\zh_TW.lproj
12/25/2008 10:34:39 PM 720384 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources
12/25/2008 10:34:39 PM 40448 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\da.lproj
12/25/2008 10:34:39 PM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\de.lproj
12/25/2008 10:34:39 PM 40448 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\en.lproj
12/25/2008 10:34:39 PM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\es.lproj
12/25/2008 10:34:39 PM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\fi.lproj
12/25/2008 10:34:39 PM 41472 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\fr.lproj
12/25/2008 10:34:39 PM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\it.lproj
12/25/2008 10:34:39 PM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\ja.lproj
12/25/2008 10:34:39 PM 39936 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\ko.lproj
12/25/2008 10:34:39 PM 40448 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\nb.lproj
12/25/2008 10:34:39 PM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\nl.lproj
12/25/2008 10:34:39 PM 42496 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\pl.lproj
12/25/2008 10:34:39 PM 41984 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\pt_PT.lproj
12/25/2008 10:34:39 PM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\ru.lproj
12/25/2008 10:34:39 PM 40448 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\sv.lproj
12/25/2008 10:34:39 PM 37888 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\zh_CN.lproj
12/25/2008 10:34:39 PM 37888 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\zh_TW.lproj
12/25/2008 10:34:40 PM 82944 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\da.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\de.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\en.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\es.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fi.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fr.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\it.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ja.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ko.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nb.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nl.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pl.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pt_PT.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ru.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\sv.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_CN.lproj
12/25/2008 10:34:40 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_TW.lproj
12/25/2008 10:34:40 PM 1921536 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources
12/25/2008 10:34:40 PM 111616 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\da.lproj
12/25/2008 10:34:40 PM 111616 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\de.lproj
12/25/2008 10:34:40 PM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\en.lproj
12/25/2008 10:34:40 PM 112128 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\es.lproj
12/25/2008 10:34:40 PM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\fi.lproj
12/25/2008 10:34:40 PM 112128 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\fr.lproj
12/25/2008 10:34:40 PM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\it.lproj
12/25/2008 10:34:40 PM 111616 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\ja.lproj
12/25/2008 10:34:40 PM 110592 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\ko.lproj
12/25/2008 10:34:40 PM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\nb.lproj
12/25/2008 10:34:40 PM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\nl.lproj
12/25/2008 10:34:40 PM 112640 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\pl.lproj
12/25/2008 10:34:40 PM 112128 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\pt_PT.lproj
12/25/2008 10:34:40 PM 111616 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\ru.lproj
12/25/2008 10:34:40 PM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\sv.lproj
12/25/2008 10:34:41 PM 109568 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\zh_CN.lproj
12/25/2008 10:34:41 PM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\zh_TW.lproj
12/25/2008 10:34:41 PM 204800 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources
12/25/2008 10:34:41 PM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\da.lproj
12/25/2008 10:34:41 PM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\de.lproj
12/25/2008 10:34:41 PM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\en.lproj
12/25/2008 10:34:41 PM 11776 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\es.lproj
12/25/2008 10:34:41 PM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\fi.lproj
12/25/2008 10:34:41 PM 11776 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\fr.lproj
12/25/2008 10:34:41 PM 12288 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\it.lproj
12/25/2008 10:34:41 PM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\ja.lproj
12/25/2008 10:34:41 PM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\ko.lproj
12/25/2008 10:34:41 PM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\nb.lproj
12/25/2008 10:34:41 PM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\nl.lproj
12/25/2008 10:34:41 PM 11776 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\pl.lproj
12/25/2008 10:34:41 PM 11776 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\pt_PT.lproj
12/25/2008 10:34:41 PM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\ru.lproj
12/25/2008 10:34:41 PM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\sv.lproj
12/25/2008 10:34:41 PM 10752 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\zh_CN.lproj
12/25/2008 10:34:41 PM 10752 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\zh_TW.lproj
12/25/2008 10:34:41 PM 83456 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\da.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\de.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\en.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\es.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\fi.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\fr.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\it.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\ja.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\ko.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\nb.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\nl.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\pl.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\pt_PT.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\ru.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\sv.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\zh_CN.lproj
12/25/2008 10:34:41 PM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\zh_TW.lproj
12/25/2008 10:34:41 PM 519168 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources
12/25/2008 10:34:41 PM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\da.lproj
12/25/2008 10:34:41 PM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\de.lproj
12/25/2008 10:34:41 PM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\en.lproj
12/25/2008 10:34:41 PM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\es.lproj
12/25/2008 10:34:41 PM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\fi.lproj
12/25/2008 10:34:41 PM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\fr.lproj
12/25/2008 10:34:41 PM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\it.lproj
12/25/2008 10:34:41 PM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\ja.lproj
12/25/2008 10:34:41 PM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\ko.lproj
12/25/2008 10:34:41 PM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\nb.lproj
12/25/2008 10:34:41 PM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\nl.lproj
12/25/2008 10:34:41 PM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\pl.lproj
12/25/2008 10:34:41 PM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\pt_PT.lproj
12/25/2008 10:34:41 PM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\ru.lproj
12/25/2008 10:34:41 PM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\sv.lproj
12/25/2008 10:34:41 PM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\zh_CN.lproj
12/25/2008 10:34:41 PM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\zh_TW.lproj
12/25/2008 10:34:42 PM 99840 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\da.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\de.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\en.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\es.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\fi.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\fr.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\it.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\ja.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\ko.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\nb.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\nl.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\pl.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\pt_PT.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\ru.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\sv.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\zh_CN.lproj
12/25/2008 10:34:42 PM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\zh_TW.lproj
12/25/2008 10:34:42 PM 1402880 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources
12/25/2008 10:34:42 PM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\da.lproj
12/25/2008 10:34:42 PM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\de.lproj
12/25/2008 10:34:42 PM 60928 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\en.lproj
12/25/2008 10:34:42 PM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\es.lproj
12/25/2008 10:34:42 PM 60928 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\fi.lproj
12/25/2008 10:34:42 PM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\fr.lproj
12/25/2008 10:34:42 PM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\it.lproj
12/25/2008 10:34:42 PM 60928 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\ja.lproj
12/25/2008 10:34:42 PM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\ko.lproj
12/25/2008 10:34:42 PM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\nb.lproj
12/25/2008 10:34:42 PM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\nl.lproj
12/25/2008 10:34:42 PM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\pl.lproj
12/25/2008 10:34:42 PM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\pt_PT.lproj
12/25/2008 10:34:42 PM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\ru.lproj
12/25/2008 10:34:42 PM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\sv.lproj
12/25/2008 10:34:42 PM 60416 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\zh_CN.lproj
12/25/2008 10:34:42 PM 60928 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\zh_TW.lproj
12/25/2008 10:34:39 PM 510464 C:\Program Files\QuickTime\QuickTimePlayer.Resources
12/25/2008 10:34:39 PM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\da.lproj
12/25/2008 10:34:39 PM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\de.lproj
12/25/2008 10:34:39 PM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\en.lproj
12/25/2008 10:34:39 PM 10240 C:\Program Files\QuickTime\QuickTimePlayer.Resources\es.lproj
12/25/2008 10:34:39 PM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\fi.lproj
12/25/2008 10:34:39 PM 10240 C:\Program Files\QuickTime\QuickTimePlayer.Resources\fr.lproj
12/25/2008 10:34:39 PM 10240 C:\Program Files\QuickTime\QuickTimePlayer.Resources\it.lproj
12/25/2008 10:34:39 PM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\ja.lproj
12/25/2008 10:34:39 PM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\ko.lproj
12/25/2008 10:34:39 PM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\nb.lproj
12/25/2008 10:34:39 PM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\nl.lproj
12/25/2008 10:34:39 PM 11264 C:\Program Files\QuickTime\QuickTimePlayer.Resources\pl.lproj
12/25/2008 10:34:39 PM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\pt_PT.lproj
12/25/2008 10:34:39 PM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\ru.lproj
12/25/2008 10:34:40 PM 10752 C:\Program Files\QuickTime\QuickTimePlayer.Resources\sv.lproj
12/25/2008 10:34:40 PM 17920 C:\Program Files\QuickTime\QuickTimePlayer.Resources\zh_CN.lproj
12/25/2008 10:34:40 PM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\zh_TW.lproj

====== Files under "\System32\Drivers" Last 60 Days======

12/30/2008 1:10:24 PM 15504 32 C:\WINDOWS\system32\drivers\mbam.sys
12/30/2008 1:10:22 PM 38496 32 C:\WINDOWS\system32\drivers\mbamswissarmy.sys

====== Files Deleted under "%Temp%" ======

C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\04.wmv
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\095195.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\1698F44D.dmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\1h91FF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\24l1AB.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\2xt3.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\376a_appcompat.txt
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\3sj1A7.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\4zwE.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\5cj1E7.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\6ny1D0.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\75c19B.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\7ze1AE.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\8df1D1.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\afm200.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\be97_appcompat.txt
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\birthdays.rtf
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\bwa11.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\byXPGArR.bat
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\cbXRLfFw.bat
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\count_your_blessings.wmv
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\dbqD.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ddcArRjg.bat
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\dd_netfx20MSI5DBC.txt
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\dd_netfx20UI5DBC.txt
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\dvi6.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\dw.log
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\erk5.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\euh182.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\gkv18B.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\GunControlWitness.wmv
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\h3o3p6ft.ZIP
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\h50191.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\hem18F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\HUHsLclC.exe
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\IadHide5.dll
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ifyA.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\jjsdf8w3jdt.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\jusched.log
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\k86199.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\kfo1E8.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\kr41A3.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\lilo2
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\lilo3
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\lilo4
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\lilo5
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ls4ib2uk.rar
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\mga1A9.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\My Catalog-pju.ldb
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\My Catalog-pju.psa
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\nsmail-1.eml
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\nsmail-1.html
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\nsmail-2.eml
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\nsmail.eml
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\nsmail.html
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\nyj7.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\o2r1D2.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ol9201.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\or41EC.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\p0905y1g.zip
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\page.html
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\PPGUID.txt
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\rbo1A1.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\rfy17F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\s6n4.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\set52E.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\sfF12.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\sfl15E.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ssqNFXqN.bat
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ssqOGaba.bat
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Storeclerk1.wmv
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\sts1FE.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\sxs189.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\SymNRT 1-4-2009 13h53m47s.log
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\SymNRT 1-4-2009 14h1m21s.log
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\t0a57C.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\t3u1B7.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\title.gif
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\TmpUrl.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\tqq55F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ts91A5.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Twain001.Mtx
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Twunk001.MTX
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Twunk002.MTX
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\u54372.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\unl193.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\v3g580.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\v9i4B2.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\vbc1C0.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\vqd106.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\vy6373.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\w0w2F4.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\w5w64.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\w6y535.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\w8b2DD.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\w9t534.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\wba1BE.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\wcy537.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\wf574.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\wjf38F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\wk0378.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\wny9.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\wtg13.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\wzy55.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\x7n461.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\x7v331.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\xha1BB.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\xoaCF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\xqo2FA.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\xuk186.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ype1B5.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ysr36B.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ywg15A.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\yxp8.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\yxq1CF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\z7e1A5.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\zd51F9.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\zdf19F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\zj318D.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\zz11C5.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\_ad2.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF102D.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF1355.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF1495.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF14EE.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF150A.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF161B.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF16C2.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF173F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF1762.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF1836.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF1846.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF19DF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF19E7.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF1E93.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF1F0E.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF1FDF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF211A.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF211C.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF21D4.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF23AD.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF25A6.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF263C.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF2728.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF27A8.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF28E0.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF2AC5.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF2B04.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF2CF5.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF2D51.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF2D64.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF2D6F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF2F27.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF303.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF32F2.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF33A7.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF33FD.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF35A7.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF35D8.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF375A.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF379A.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF38B8.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF38D0.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF39CF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF3CEF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF3EAE.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF423.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF4832.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF499C.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF4AC.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF4ACB.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF4B15.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF4C.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF4DA8.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF4EB9.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF508.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF51BF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF51F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF5451.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF54C.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF576D.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF58DD.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF5E6F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF60F4.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF64C7.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF67F9.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF6C42.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF6E44.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF6E94.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF6F49.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF6FD1.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF7210.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF75CB.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF7651.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF773A.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF77D0.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF780.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF79CF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF7A03.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF7C55.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF7D91.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF80F3.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF83FC.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF843.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF8BBC.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF8C5.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF8C6F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF8E08.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF8F36.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF902D.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF91C0.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF94BF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF94D.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF9513.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF9539.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF972B.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF9734.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF9964.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF9A66.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF9BDB.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF9C3.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF9C8F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF9CC.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF9D84.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF9EA3.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFA2DE.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFA2E.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFA45B.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFA574.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFA688.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFA8BF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFAAAB.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFAC34.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFAC6.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFAD61.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFAD9A.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFAEF1.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFB266.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFB31B.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFB35D.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFB607.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFB654.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFB689.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFB6E4.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFBA0C.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFBE3.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFC1A2.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFC5D7.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFC658.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFC68.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFC81F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFC9CD.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFCAC5.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFCBC2.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFCCC1.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFCCCF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFCD3.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFCD6E.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFCDD0.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFCE05.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFCF00.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFCF14.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFCFCF.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD0AC.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD155.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD1A4.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD1E4.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD42.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD548.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD5CB.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD703.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD7CE.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD868.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD926.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD957.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFD9E6.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDA5C.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDA64.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDB00.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDB33.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDB3B.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDC47.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDC62.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDEDA.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDEF6.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDF0F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDF56.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDFD7.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE161.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE17E.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE1F7.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE208.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE27B.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE2D6.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE30E.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE33C.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE393.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE39B.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE3CB.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE42F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE4CE.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE5BE.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE5F4.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE67F.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE687.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE6FC.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE728.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE756.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE7A7.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE7A9.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE7AB.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE7C1.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE80C.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFEAA1.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFEAF6.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFEB0B.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFEB6A.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFEB78.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFEBB0.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFEC6E.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFEE1A.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFEE2D.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFEE40.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFEE6A.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF08B.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF125.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF1E.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF2FD.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF3FB.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF422.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF60E.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF66.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF6A0.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF709.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF713.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF72.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF94E.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFF9FD.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFFAE2.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFFBCC.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFFC40.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFFCD9.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFFCE9.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFFD5D.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFFE0A.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFFE82.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFFF2C.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFFF69.tmp
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~WRS0000.tmp

349 Files deleted

====== Files and Folders under "All Users\Application Data" Last 60 Days======

12/30/2008 9:47:30 AM 4096 C:\Documents and Settings\All Users\Application Data\Grisoft
12/30/2008 9:47:30 AM 4096 C:\Documents and Settings\All Users\Application Data\Grisoft\AVG Anti-Spyware 7.5
12/30/2008 9:47:30 AM 4096 C:\Documents and Settings\All Users\Application Data\Grisoft\AVG Anti-Spyware 7.5\Downloads
12/30/2008 1:10:21 PM 4180952 C:\Documents and Settings\All Users\Application Data\Malwarebytes
12/30/2008 1:10:21 PM 4180952 C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware
1/4/2009 2:01:05 PM 155 C:\Documents and Settings\All Users\Application Data\Norton
1/4/2009 1:53:43 PM 191240 C:\Documents and Settings\All Users\Application Data\NortonInstaller
1/4/2009 1:53:43 PM 191240 C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs
1/4/2009 2:01:15 PM 36410 C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\01-04-2009-14h01m14s
1/4/2009 2:02:01 PM 18200 C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\01-04-2009-14h02m00s
1/4/2009 1:53:43 PM 136630 C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\1-4-2009-13h53m43s
1/4/2009 2:01:29 PM 0 C:\Documents and Settings\All Users\Application Data\NortonInstaller\SymTemp
12/25/2008 10:40:56 PM 510849 C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
12/25/2008 10:41:29 PM 510849 C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}\x86
12/25/2008 10:41:29 PM 122832 C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}\x86\x86

====== Possible Rootkit Scan (Note: Items listed here are not necessarily bad)======


====== Values under HKLM\Software\microsoft\shared tools\msconfig\startupreg ======

====== Services ( Services that are Whitelisted are not shown) ======

Apple Mobile Device (Apple Mobile Device) "C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe" - Auto
CA Personal Firewall ASEM (CA Personal Firewall ASEM) C:\Program Files\Security\CA Internet Security Suite\CA Personal Firewall\capfasem.exe - Disabled
CaCCProvSP (CaCCProvSP) "C:\Program Files\Security\CA Internet Security Suite\ccprovsp.exe" - Manual
CA Pest Patrol Realtime Protection Service (ITMRTSVC) "C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe" - Auto
PPCtlPriv (PPCtlPriv) "C:\Program Files\Security\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe" - Manual
HIPS Event Manager (UmxAgent) "C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe" - Auto
HIPS Configuration Interpreter (UmxCfg) "C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe" - Auto
HIPS Firewall Helper (UmxFwHlp) "C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe" - Auto
HIPS Policy Manager (UmxPol) "C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe" - Auto
WAN Miniport (ATW) Service (WANMiniportService) "C:\WINDOWS\wanmpsvc.exe" - Auto
Windows Defender (WinDefend) "C:\Program Files\Windows Defender\MsMpEng.exe" - Auto

====== Uninstall List From Registry ======

MyDSC_CIF
3D Spring Blossoms Screen Saver
a-squared Free 2.1
Ad-aware 6 Personal
Adobe Flash Player ActiveX
Adobe Flash Player Plugin
Adobe Shockwave Player
Adobe SVG Viewer 3.0
Adobe® Photoshop® Album Starter Edition 3.2
Agere Systems PCI Soft Modem
AnalogX NetStat Live
AOL Uninstaller
AOL Coach Version 1.0(Build:20030807.3)
Art Deco Font Trial, Version 3.5b
Arthur's Wilderness Rescue
Compaq Connections
Mahjong Towers Eternity (remove only)
Big Fish Games Client
BitZipper 5.1
Conference Client Uninstall
CCleaner (remove only)
MetaFrame Presentation Server Web Client for Win32
DeductionPro 2004-05
DigiPass 2.10
DLG Viewer
Easy Chef 1,000,000 Recipes
CA Internet Security Suite
Help and Support Additions
HijackThis 1.99.1
Microsoft Internationalized Domain Names Mitigation APIs
Windows Internet Explorer 7
Inspiration 8
Easy Internet Sign-up
Kaspersky Online Scanner
High Definition Audio Driver Package - KB835221
Windows Genuine Advantage Validation Tool (KB892130)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 9 (KB911565)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows XP (KB923689)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Internet Explorer 7 (KB928090)
Hotfix for Windows Media Format 11 SDK (KB929399)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows XP (KB938464)
Security Update for Windows Internet Explorer 7 (KB939653)
Hotfix for Windows Media Player 11 (KB939683)
Security Update for Windows XP (KB941569)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows XP (KB946648)
Hotfix for Windows Internet Explorer 7 (KB947864)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Update for Windows XP (KB951072-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Update for Windows XP (KB951978)
Security Update for Windows Media Player (KB952069)
Hotfix for Windows XP (KB952287)
Security Update for Windows XP (KB952954)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows XP (KB953839)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Update for Windows XP (KB955839)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows Internet Explorer 7 (KB960714)
Enhanced Multimedia Keyboard Solution
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
mIRC
Mozilla Firefox (2.0.0.20)
Mozilla Thunderbird (2.0.0.19)
Mp3tag v2.42
Microsoft Compression Client Pack 1.0 for Windows XP
MSN
Microsoft Text-to-Speech Engine 4.0 (English)
Microsoft National Language Support Downlevel APIs
PC Pitstop Exterminate 1.0
Personal Resume Workshop 2.00.1127
PS2
Python 2.2 combined Win32 extensions
Python 2.2.1
RealPlayer
VIA/S3G Display Driver
SecondLife (remove only)
Macromedia Flash Player 8
Spybot - Search & Destroy 1.2
Learn2 Player (Uninstall Only)
Sudoku
TaxCut 2004
TurboTax Deluxe 2007
TurboTax Premier 2005
Tweak UI
Viewpoint Media Player
VideoLAN VLC media player 0.8.6
VIA Rhine-Family Fast Ethernet Adapter
S3 S3Display
S3 S3Gamma2
S3 S3Info2
S3 S3Overlay
Weather Watcher
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Notifications (KB905474)
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
Windows Media Format 11 runtime
Windows Media Player 11
Microsoft User-Mode Driver Framework Feature Pack 1.0
Yahoo! Toolbar
Yahoo! Toolbar
Bonjour
Sunbelt CounterSpy
Microsoft Plus! Photo Story 2 LE
SmartFTP Client
Microsoft Plus! Dancer LE
Corel Paint Shop Pro X
PC-Doctor for Windows
My DSC
MobileMe Control Panel
Quicken 2006
TurboTax ItsDeductible 2005
iTunes
WebFldrs XP
MSXML 4.0 SP2 (KB927978)
Google Earth
Lizardtech Express View Browser Plug-in
Windows Genuine Advantage v1.3.0254.0
Apple Software Update
Microsoft Plus! Digital Media Edition Installer
Java 2 Runtime Environment, SE v1.4.2_03
MSXML 4.0 SP2 Parser and SDK
OpenOffice.org 2.0
Microsoft Works 7.0
Avanquest update
AnswerWorks 4.0 Runtime - English
Easy Internet Sign-up
MSXML 4.0 SP2 (KB954430)
Microsoft Office Standard Edition 2003
InterVideo WinDVD Player
Sonic RecordNow!
Windows Defender
Adobe® Photoshop® Album Starter Edition 3.2
Adobe Reader 7.1.0
Art Explosion Greeting Card Factory Express
HP Deskjet 3840
Microsoft .NET Framework 2.0 Service Pack 1
MSXML 4.0 SP2 (KB936181)
EclipseCrossword
Safari
Microsoft .NET Framework 1.1
ActivePerl 5.8.8 Build 822
Personal Ancestral File 5
HpSdpAppCoreApp
CLE1
Bookkeeper
WexTech AnswerWorks
Apple Mobile Device Support
CA Pest Patrol Realtime Protection
QuickTime
Sudoku
HP Update

======== Other Info ========

TOTAL PHYSICAL RAM: 469 MB

#4 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:06:09 AM

Posted 09 January 2009 - 09:07 AM

Arkhyz

1. Please download The Avenger by Swandog46 to your Desktop.
  • Click on Avenger.zip to open the file
  • Extract avenger.exe to your desktop
    (How to extract (decompress) zipped or compressed files, help in the link here: )
2. Copy all the text contained in the bold below to your Clipboard by highlighting it and pressing (Ctrl+C):


Files to Delete:
C:\WINDOWS\system32\aIOrYcdd.ini
C:\WINDOWS\system32\aIOrYcdd.ini2
C:\WINDOWS\system32\bwcqmikg.ini
C:\WINDOWS\system32\d34ced82-.txt
C:\WINDOWS\system32\ifohizit.ini
C:\WINDOWS\system32\ogijemom.ini
C:\WINDOWS\system32\TtAaIRqr.ini
C:\WINDOWS\system32\TtAaIRqr.ini2
C:\WINDOWS\system32\wxisjtas.ini
C:\WINDOWS\system32\ddcYrOIa.dll


Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Now, start The Avenger program by clicking on its icon on your desktop.
  • Select Load Script
  • Select Paste from Clipboard
  • The information should now appear in the Open window
  • Select Execute
  • Answer Yes When prompted "Are you sure you want to execute the current script?"
4. The Avenger will automatically do the following:
  • It will Restart your computer.
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
5. Please copy/paste the content of c:\avenger.txt into your reply along with a fresh HJT log
Posted Image
Microsoft MVP - Windows Security

#5 Arkhyz

Arkhyz
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Location:Wyoming
  • Local time:05:09 AM

Posted 09 January 2009 - 09:26 AM

Logfile of The Avenger Version 2.0, © by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File "C:\WINDOWS\system32\aIOrYcdd.ini" deleted successfully.
File "C:\WINDOWS\system32\aIOrYcdd.ini2" deleted successfully.
File "C:\WINDOWS\system32\bwcqmikg.ini" deleted successfully.
File "C:\WINDOWS\system32\d34ced82-.txt" deleted successfully.
File "C:\WINDOWS\system32\ifohizit.ini" deleted successfully.
File "C:\WINDOWS\system32\ogijemom.ini" deleted successfully.
File "C:\WINDOWS\system32\TtAaIRqr.ini" deleted successfully.
File "C:\WINDOWS\system32\TtAaIRqr.ini2" deleted successfully.
File "C:\WINDOWS\system32\wxisjtas.ini" deleted successfully.

Error: file "C:\WINDOWS\system32\ddcYrOIa.dll" not found!
Deletion of file "C:\WINDOWS\system32\ddcYrOIa.dll" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Completed script processing.

*******************

Finished! Terminate.

#6 Arkhyz

Arkhyz
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Location:Wyoming
  • Local time:05:09 AM

Posted 09 January 2009 - 09:30 AM

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:29:45 AM, on 1/9/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Security\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Security\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Security\CA Internet Security Suite\CA Personal Firewall\capfsem.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Xerox\NWWia\XrxFTPLt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Compaq_Owner\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 3.1\aoltb.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {764D2E87-3DF0-4019-8A6B-5A10BC552FE2} - C:\WINDOWS\system32\ddcYrOIa.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 3.1\aoltb.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [NI.UWA6P_0001_N68M2301] "C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\0LING1MJ\WinAntiVirusPro2006ScannerInstall[1].exe" -nag
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [XeroxScannerDaemon] C:\Program Files\Xerox\NWWia\XrxFTPLt.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [jsf8j34rgfght] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\winloggn.exe
O4 - HKUS\S-1-5-19\..\Run: [veyenodoyi] Rundll32.exe "C:\WINDOWS\system32\lumorahe.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [veyenodoyi] Rundll32.exe "C:\WINDOWS\system32\lumorahe.dll",s (User 'NETWORK SERVICE')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk.disabled
O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 3.1\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 3.1\aoltb.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.antimalwareguard.com
O15 - Trusted Zone: *.gomyhit.com
O15 - Trusted Zone: *.antimalwareguard.com (HKLM)
O15 - Trusted Zone: *.gomyhit.com (HKLM)
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1168724706015
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion...anner371270.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab
O20 - Winlogon Notify: byXOiGYS - byXOiGYS.dll (file missing)
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\Security\CA Internet Security Suite\ccprovsp.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\Security\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
O23 - Service: PPCtlPriv - CA, Inc. - C:\Program Files\Security\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
O23 - Service: HIPS Event Manager (UmxAgent) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
O23 - Service: HIPS Configuration Interpreter (UmxCfg) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
O23 - Service: HIPS Firewall Helper (UmxFwHlp) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
O23 - Service: HIPS Policy Manager (UmxPol) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\Security\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--
End of file - 9811 bytes

#7 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:06:09 AM

Posted 09 January 2009 - 09:35 AM

Arkhyz

Nice work.

1. Rerun Hijackthis (scan only) and place checks beside the following entriesO2 - BHO: (no name) - {764D2E87-3DF0-4019-8A6B-5A10BC552FE2} - C:\WINDOWS\system32\ddcYrOIa.dll (file missing)
O4 - HKCU\..\Run: [jsf8j34rgfght] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\winloggn.exe
O4 - HKUS\S-1-5-19\..\Run: [veyenodoyi] Rundll32.exe "C:\WINDOWS\system32\lumorahe.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [veyenodoyi] Rundll32.exe "C:\WINDOWS\system32\lumorahe.dll",s (User 'NETWORK SERVICE')
O20 - Winlogon Notify: byXOiGYS - byXOiGYS.dll (file missing)

Close all other open windows except Hijackthis and Select "Fix checked"

Close Hijackthis ->> Reboot your PC ->> Rerun Hijackthis and post a fresh Hijackthis log

And in your reply give me an update on how your PC is running now
Posted Image
Microsoft MVP - Windows Security

#8 Arkhyz

Arkhyz
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Location:Wyoming
  • Local time:05:09 AM

Posted 09 January 2009 - 09:13 PM

Computer is running well. I don't know if it is my imagination, but programs seem to load faster as well.

Thank you!
------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:08:37 PM, on 1/9/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device

Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Security\CA Internet Security Suite\CA

Anti-Virus\ISafe.exe
C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Security\CA Internet Security Suite\CA

Anti-Virus\VetMsg.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Security\CA Internet Security Suite\CA Personal

Firewall\capfsem.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter

Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Xerox\NWWia\XrxFTPLt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Compaq Connections\6750491\Program\Compaq

Connections.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Compaq_Owner\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet

Settings,ProxyOverride = *.local
R3 - URLSearchHook: AOLTBSearch Class -

{EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL

Toolbar 3.1\aoltb.dll
O2 - BHO: Yahoo! Toolbar Helper -

{02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program

Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -

C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88}

- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} -

C:\Program Files\AOL\AOL Toolbar 3.1\aoltb.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility]

C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program

Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [NI.UWA6P_0001_N68M2301] "C:\Documents and

Settings\Compaq_Owner\Local Settings\Temporary Internet

Files\Content.IE5\0LING1MJ\WinAntiVirusPro2006ScannerInstall[1].exe"

-nag
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows

Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program

Files\Java\j2re1.4.2_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program

Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common

Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [XeroxScannerDaemon] C:\Program

Files\Xerox\NWWia\XrxFTPLt.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program

Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program

Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program

Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program

Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.

exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe"

/background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program

Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk.disabled
O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq

Connections\6750491\Program\Compaq Connections.exe
O8 - Extra context menu item: &AOL Toolbar Search - c:\program

files\aol\aol toolbar 3.1\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel -

res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}

- C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: AOL Toolbar -

{3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL

Toolbar 3.1\aoltb.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66}

- C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 -

{85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -

C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -

C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583}

- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -

{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network

Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683}

- C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.antimalwareguard.com
O15 - Trusted Zone: *.gomyhit.com
O15 - Trusted Zone: *.antimalwareguard.com (HKLM)
O15 - Trusted Zone: *.gomyhit.com (HKLM)
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan

Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE

Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class)

-

http://update.microsoft.com/windowsupdate/.../en/x86/client/

wuweb_site.cab?1168724706015
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) -

http://download.zonelabs.com/bin/promotion...ctor/ICSScanner

371270.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash

Object) -

http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online,

Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program

Files\Common Files\Apple\Mobile Device

Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program

Files\Bonjour\mDNSResponder.exe
O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\Security\CA

Internet Security Suite\ccprovsp.exe
O23 - Service: CAISafe - Computer Associates International, Inc. -

C:\Program Files\Security\CA Internet Security Suite\CA

Anti-Virus\ISafe.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision

Corporation - C:\Program Files\Common

Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program

Files\iPod\bin\iPodService.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) -

CA, Inc. - C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
O23 - Service: PPCtlPriv - CA, Inc. - C:\Program Files\Security\CA

Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
O23 - Service: HIPS Event Manager (UmxAgent) - CA - C:\Program

Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
O23 - Service: HIPS Configuration Interpreter (UmxCfg) - CA -

C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
O23 - Service: HIPS Firewall Helper (UmxFwHlp) - CA - C:\Program

Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
O23 - Service: HIPS Policy Manager (UmxPol) - CA - C:\Program

Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program

Files\Security\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) -

America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--
End of file - 9380 bytes

#9 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:06:09 AM

Posted 12 January 2009 - 09:40 AM

Arkhyz

Excellent.

You may now remove/delete/uninstall the tools we used to clean your PC

Now that your log is clean

There are some final notes:
Lets create a clean System Restore point
the instructions are here
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version Java components and update.

Updating Java:Download the latest version of
Java Runtime Environment (JRE) 6.u11.
Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
Click the "Download" button to the right.
Check the box that says: "Accept License Agreement".
The page will refresh.
Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
Close any programs you may have running - especially your web browser.
Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
Check any item with Java Runtime Environment (JRE or J2SE) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java versions.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-6u11-windowsi586-p.exe to install the newest version.
Update your Anti Virus Software

Use and maintain a Firewall
Visit Microsoft's Windows Update Site Frequently for critical updates

Backup your Important Documents and Files on a regular basisTo a disc or a USB key, not your Hardrive
You may want to read this article"So how did I get infected in the first place" by Tony Klein

surf safe
Posted Image
Microsoft MVP - Windows Security




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users