Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google Search Results Hijack


  • This topic is locked This topic is locked
12 replies to this topic

#1 melmo

melmo

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:08:54 AM

Posted 30 October 2009 - 09:59 PM

I have the following problems:
a) Windows Security Alert says my Symantic Antivirus has been disabled even though it is loaded.

:( Google Search Result when clicked hijack me to other sites, sometimes background of my PC changes.

c) Virus definition files get updated by the date remains unchanged as if not updates have been done for last week. Now Virus definition say no updates are available.

I have ran Malware bytes, Hijack This, F-Secure, and Unhackme on my machine. with NO success.

Based on a suggestion, I also performed eset scanner http://download.eset.com/special/eos/esets...staller_enu.exe WHICH FOUND two items called win32\search.toolbar......something those itesms were quarantined and deleted. YET no change in PC behavior.

In addition I also have Lavasoft's Adaware. Zone alarm firewall and everythig is always updated.

The Hijackthi and Malwarebytes logs are below:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:41:25 AM, on 10/29/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\WINDOWS\system32\MSTMON_P.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\UnHackMe\hackmon.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Mehul\My Documents\Downloads\TEMP\HiJackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32Info.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client=dell-usuk&channel=us-smb&ibd=3081014
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?Lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?Lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?Lin...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?Lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client=dell-usuk&channel=us-smb&ibd=3081014
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [KONICA MINOLTA magicolor2300WStatusDisplay] C:\WINDOWS\system32\MSTMON_P.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [UnHackMe Monitor] C:\Program Files\UnHackMe\hackmon.exe
O4 - HKUS\S-1-5-21-4146858469-2365970449-1548814910-1006\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler (User 'Vyoma')
O4 - HKUS\S-1-5-21-4146858469-2365970449-1548814910-1006\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User 'Vyoma')
O4 - HKUS\S-1-5-21-4146858469-2365970449-1548814910-1006\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Vyoma')
O4 - HKUS\S-1-5-21-4146858469-2365970449-1548814910-1006\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" (User 'Vyoma')
O4 - HKUS\S-1-5-21-4146858469-2365970449-1548814910-1006\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Vyoma')
O4 - HKUS\S-1-5-21-4146858469-2365970449-1548814910-1007\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler (User 'J&K')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls...
O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols...
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr0...
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 11325 bytes
First Malware Log
Malwarebytes' Anti-Malware 1.41
Database version: 3015
Windows 5.1.2600 Service Pack 3

10/22/2009 11:27:31 PM
mbam-log-2009-10-22 (23-27-31).txt

Scan type: Quick Scan
Objects scanned: 143386
Time elapsed: 7 minute(s), 46 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\net (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\xpreapp (Malware.Trace) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\net (Trojan.Downloader) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\net.net (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\xa.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

Today's Malware Log

Malwarebytes' Anti-Malware 1.41
Database version: 3015
Windows 5.1.2600 Service Pack 3

10/29/2009 6:34:47 PM
mbam-log-2009-10-29 (18-34-47).txt

Scan type: Quick Scan
Objects scanned: 149221
Time elapsed: 8 minute(s), 30 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


Thanks

I have downloaded combofix but have not ran it.

BC AdBot (Login to Remove)

 


#2 Guest_superbird_*

Guest_superbird_*

  • Guests
  • OFFLINE
  •  

Posted 31 October 2009 - 06:46 AM

Hi,

I will handle your log. As I am in training all my answers have to be approved by my Coaches.
I hope you understand.

I'll get back to you as soon as is possible.

#3 Guest_superbird_*

Guest_superbird_*

  • Guests
  • OFFLINE
  •  

Posted 31 October 2009 - 09:11 AM

Download ComboFix from here

* IMPORTANT !!! Save ComboFix.exe to your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Posted Image

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
Posted Image
Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt log in your next reply, together with a new Hijackthislog.

#4 melmo

melmo
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  

Posted 31 October 2009 - 12:36 PM

Hi Thanks..

The Symantic antivirus icon would not let me disablle it in system tray.....the slash over the icon did not stay for more then a few seconds. Thus, from the task manager, I ended the following programs Defwatch.exe, VPtray.exe, itunes updater, etc.

It asked me to reboot and then the various stages from 1to 50+ were ran.

When it rebooted again, it said do not run any programs until log is complete. HOWEVER, the system tray for my printer, windows messenger, ad-aware, zone alarm etc. started loading on their own. In addition, a program callled getwebupdate.exe was asking permission to access the internet (it has asked for that permission prior to me downloading combo thus i figure it is not related to combofix and I denied the permission in zonealarm).

In addition some how, the AD-Aware program opens a folder at start-up that i cannot prevent from opening at each reboot (even through start-menu). The folder is c:\program\lavasoft\ad-aware.

Does all of the above mean I have to run combofix in safe mode?
Nevertheless, here are the logs.


ComboFix 09-10-30.01 - Mehul 10/31/2009 13:08:00.1.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2037.1452 [GMT -4:00]
Running from: C:\Documents and Settings\Mehul\Desktop\ComboFix.exe
AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}
FW: ZoneAlarm Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

Infected copy of C:\WINDOWS\system32\DRIVERS\atapi.sys was found and disinfected
Restored copy from - Kitty ate it :(
.
((((((((((((((((((((((((( Files Created from 2009-09-28 to 2009-10-31 )))))))))))))))))))))))))))))))
.

2009-10-31 16:59:22 . 2007-06-14 02:25:14 304920 ----a-w- C:\WINDOWS\system32\drivers\iaStor.sys
2009-10-30 22:44:04 . 2009-10-30 22:44:04 0 d-----w- C:\Program Files\ESET
2009-10-29 15:22:44 . 2009-10-29 15:22:44 22016 ----a-w- C:\WINDOWS\system32\tdlwsp.dll
2009-10-28 17:58:46 . 2009-10-28 17:58:43 93360 ----a-w- C:\WINDOWS\system32\drivers\SBREDrv.sys
2009-10-25 17:56:01 . 2009-10-25 17:56:02 0 dc-h--w- C:\Documents and Settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-10-25 17:39:34 . 2009-10-25 17:39:34 0 d-----w- C:\Documents and Settings\All Users\Application Data\F-Secure
2009-10-23 23:28:57 . 2009-10-27 01:49:43 35040 ----a-w- C:\WINDOWS\system32\Partizan.exe
2009-10-23 23:28:57 . 2009-10-23 23:28:57 34760 ----a-w- C:\WINDOWS\system32\drivers\Partizan.sys
2009-10-23 23:28:53 . 2009-10-27 01:48:28 2 --shatr- C:\WINDOWS\winstart.bat
2009-10-23 23:28:40 . 2008-12-22 19:56:06 12752 ----a-w- C:\WINDOWS\system32\drivers\UnHackMeDrv.sys
2009-10-23 23:28:38 . 2009-10-27 01:52:37 0 d-----w- C:\Program Files\UnHackMe
2009-10-23 17:41:25 . 2009-10-23 17:41:25 0 d-----w- C:\Documents and Settings\J&K\Application Data\Malwarebytes
2009-10-23 16:29:08 . 2009-10-23 16:29:08 0 d-----w- C:\Documents and Settings\Vyoma\Application Data\Malwarebytes
2009-10-23 03:17:33 . 2009-10-23 03:17:33 0 d-----w- C:\Documents and Settings\Mehul\Application Data\Malwarebytes
2009-10-23 03:17:28 . 2009-09-10 18:54:06 38224 ----a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2009-10-23 03:17:27 . 2009-10-23 03:17:32 0 d-----w- C:\Program Files\Malwarebytes' Anti-Malware
2009-10-23 03:17:27 . 2009-10-23 03:17:27 0 d-----w- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-10-23 03:17:27 . 2009-09-10 18:53:50 19160 ----a-w- C:\WINDOWS\system32\drivers\mbam.sys
2009-10-10 17:45:22 . 2009-10-10 17:45:55 0 d-----w- C:\Program Files\K-Lite Codec Pack
2009-10-10 17:20:40 . 2009-10-10 17:20:40 0 d-----w- C:\Documents and Settings\Mehul\Application Data\DivX

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-31 14:29:42 . 2008-11-23 23:17:28 0 d-----w- C:\Documents and Settings\All Users\Application Data\Google Updater
2009-10-30 22:38:43 . 2009-05-24 20:07:46 0 d-----w- C:\Documents and Settings\Mehul\Application Data\BitTorrent
2009-10-22 03:53:53 . 2008-10-18 02:48:28 0 d-----w- C:\Program Files\Symantec AntiVirus
2009-09-28 11:49:09 . 2009-03-30 15:47:49 50744 ----a-w- C:\Documents and Settings\Guest\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-09-23 12:55:23 . 2009-07-27 03:05:55 64288 ----a-w- C:\WINDOWS\system32\drivers\Lbd.sys
2009-09-14 02:27:03 . 2008-10-14 15:34:43 50744 ----a-w- C:\Documents and Settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-09-14 01:11:22 . 2008-10-18 03:44:47 0 d-----w- C:\Program Files\Windows Live
2009-09-14 01:08:54 . 2009-09-14 01:08:54 0 d-----w- C:\Program Files\Microsoft
2009-09-14 01:08:37 . 2009-09-14 01:08:37 0 d-----w- C:\Program Files\Windows Live SkyDrive
2009-09-11 14:18:39 . 2008-04-25 16:16:19 136192 ----a-w- C:\WINDOWS\system32\msv1_0.dll
2009-09-04 21:03:36 . 2008-04-25 16:16:18 58880 ----a-w- C:\WINDOWS\system32\msasn1.dll
2009-09-03 09:17:47 . 2009-07-27 10:38:28 15688 ----a-w- C:\WINDOWS\system32\lsdelete.exe
2009-08-29 07:36:27 . 2008-04-25 16:16:28 832512 ----a-w- C:\WINDOWS\system32\wininet.dll
2009-08-29 07:36:24 . 2008-04-25 16:16:16 78336 ----a-w- C:\WINDOWS\system32\ieencode.dll
2009-08-29 07:36:24 . 2008-04-25 16:16:10 17408 ----a-w- C:\WINDOWS\system32\corpol.dll
2009-08-26 08:00:21 . 2008-04-25 16:16:40 247326 ----a-w- C:\WINDOWS\system32\strmdll.dll
2009-08-06 23:24:18 . 2008-04-25 21:27:53 327896 ----a-w- C:\WINDOWS\system32\wucltui.dll
2009-08-06 23:24:18 . 2008-04-25 21:27:53 209632 ----a-w- C:\WINDOWS\system32\wuweb.dll
2009-08-06 23:24:10 . 2008-04-25 21:27:53 35552 ----a-w- C:\WINDOWS\system32\wups.dll
2009-08-06 23:24:10 . 2007-07-30 23:19:12 44768 ----a-w- C:\WINDOWS\system32\wups2.dll
2009-08-06 23:24:06 . 2008-04-25 21:27:53 53472 ----a-w- C:\WINDOWS\system32\wuauclt.exe
2009-08-06 23:24:04 . 2008-04-25 16:16:09 96480 ----a-w- C:\WINDOWS\system32\cdm.dll
2009-08-06 23:23:54 . 2008-04-25 21:27:53 575704 ----a-w- C:\WINDOWS\system32\wuapi.dll
2009-08-06 23:23:46 . 2008-10-18 23:31:27 274288 ----a-w- C:\WINDOWS\system32\mucltui.dll
2009-08-06 23:23:46 . 2008-10-18 23:31:27 215920 ----a-w- C:\WINDOWS\system32\muweb.dll
2009-08-06 23:23:46 . 2008-04-25 21:27:53 1929952 ----a-w- C:\WINDOWS\system32\wuaueng.dll
2009-08-06 02:48:42 . 2009-09-14 01:11:23 54752 ----a-w- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys
2009-08-06 00:23:12 . 2008-10-18 02:29:06 4212 ---ha-w- C:\WINDOWS\system32\zllictbl.dat
2009-08-05 09:01:48 . 2008-04-25 16:16:19 204800 ----a-w- C:\WINDOWS\system32\mswebdvd.dll
2009-08-04 23:52:22 . 2009-08-04 23:52:22 1193832 ----a-w- C:\WINDOWS\system32\FM20.DLL
2009-08-04 15:13:08 . 2008-04-25 16:16:20 2145280 ----a-w- C:\WINDOWS\system32\ntoskrnl.exe
2009-08-04 14:20:09 . 2008-04-14 00:01:22 2023936 ----a-w- C:\WINDOWS\system32\ntkrnlpa.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-11 08:40:32 218032]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-10-14 15:32:16 68856]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 15:13:58 206064]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 20:44:34 3883856]
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 17:39:52 1289000]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2008-04-14 17:42:30 1695232]
"UnHackMe Monitor"="C:\Program Files\UnHackMe\hackmon.exe" [2009-10-06 16:19:50 238304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2007-06-14 02:21:12 142104]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2007-06-14 02:21:02 162584]
"Persistence"="C:\WINDOWS\system32\igfxpers.exe" [2007-06-14 02:21:04 138008]
"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" [2009-01-15 04:18:43 136600]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-10-14 15:32:18 29744]
"ECenter"="C:\Dell\E-Center\EULALauncher.exe" [2008-02-28 19:59:48 17920]
"dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-03-11 16:44:42 16384]
"PDVDDXSrv"="C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2008-02-26 14:57:28 128296]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 15:13:58 206064]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2006-07-19 23:26:04 52896]
"vptray"="C:\PROGRA~1\SYMANT~1\VPTray.exe" [2006-09-28 00:33:44 125168]
"KONICA MINOLTA magicolor2300WStatusDisplay"="C:\WINDOWS\system32\MSTMON_P.EXE" [2003-12-20 04:05:38 172032]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 21:10:28 35696]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2009-01-05 20:18:48 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2009-04-02 20:11:02 342312]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-02-16 04:10:22 981384]
"Malwarebytes Anti-Malware (reboot)"="C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 18:53:56 1312080]
"RTHDCPL"="RTHDCPL.EXE" - C:\WINDOWS\RTHDCPL.EXE [2007-06-14 03:41:42 16132608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0lsdelete\0Partizan\0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"iPod Service"=3 (0x3)
"Bonjour Service"=2 (0x2)
"Apple Mobile Device"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"= C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"= C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"= C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\BitTorrent\\bittorrent.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

R0 Lbd;Lbd;C:\WINDOWS\system32\drivers\Lbd.sys [7/26/2009 11:05:55 PM 64288]
R2 fssfltr;FssFltr;C:\WINDOWS\system32\drivers\fssfltr_tdi.sys [9/13/2009 9:11:23 PM 54752]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [9/24/2009 7:17:32 AM 1179232]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [8/28/2009 8:23:28 AM 102448]
S0 Partizan;Partizan;C:\WINDOWS\system32\drivers\Partizan.sys [10/23/2009 7:28:57 PM 34760]
S2 MLPTDR_P;MLPTDR_P;C:\WINDOWS\system32\MLPTDR_P.SYS [10/20/2008 8:52:07 PM 20032]
S3 fsssvc;Windows Live Family Safety Service;C:\Program Files\Windows Live\Family Safety\fsssvc.exe [8/5/2009 10:48:42 PM 704864]
S3 SavRoam;SAVRoam;C:\Program Files\Symantec AntiVirus\SavRoam.exe [9/27/2006 8:33:38 PM 116464]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - CLASSPNP_2
*NewlyCreated* - MBR
*Deregistered* - CLASSPNP_2
*Deregistered* - mbr
*Deregistered* - UnHackMeDrv
.
Contents of the 'Scheduled Tasks' folder

2009-10-31 C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 13:06:13 . 2009-10-28 17:58:24]

2009-10-31 C:\WINDOWS\Tasks\Google Software Updater.job
- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-10-14 15:32:16 . 2009-03-24 03:40:17]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - C:\Documents and Settings\Mehul\Application Data\Mozilla\Firefox\Profiles\ccan28or.default\
FF - prefs.js: browser.startup.homepage - about:blank
FF - plugin: C:\Program Files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: C:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-Ad-Watch - C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe


Hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:24:40 PM, on 10/31/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\UnHackMe\hackmon.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Mehul\My Documents\Downloads\TEMP\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client=dell-usuk&channel=us-smb&ibd=3081014
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [KONICA MINOLTA magicolor2300WStatusDisplay] C:\WINDOWS\system32\MSTMON_P.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [UnHackMe Monitor] C:\Program Files\UnHackMe\hackmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1...toUploader5.cab
O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secu.../fslauncher.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 10316 bytes

#5 Guest_superbird_*

Guest_superbird_*

  • Guests
  • OFFLINE
  •  

Posted 31 October 2009 - 02:32 PM

Hi,

Can you please post the contents from C:\ComboFix.txt again? You didn't post the entire log the first time. :(

Also do this please:

Go to Virustotal.com
Upload the following file by copy/paste the following (so do not use "Browse"!)): C:\WINDOWS\system32\tdlwsp.dll
Wait untill the results appear, and post them in your next reply.

Do this also with this file: C:\WINDOWS\winstart.bat

#6 melmo

melmo
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  

Posted 31 October 2009 - 04:22 PM

At Virus Total, there is only one way to upload.....browse cntrl-v option to paste the file nor anyonther way to copy/paste is available.

Should I do that vial e-mail? will i get the results back in e-mail? \\\\


Thanks

#7 melmo

melmo
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:08:54 AM

Posted 31 October 2009 - 07:12 PM

File tdlwsp.dll received on 2009.10.30 00:59:57 (UTC)
Current status: finished
Result: 13/41 (31.71%)


File tdlwsp.dll received on 2009.10.30 00:59:57 (UTC)
Antivirus Version Last Update Result
a-squared 4.5.0.41 2009.10.29 Trojan.Win32.Alureon!IK
AhnLab-V3 5.0.0.2 2009.10.29 -
AntiVir 7.9.1.50 2009.10.29 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2009.10.27 -
Authentium 5.1.2.4 2009.10.29 -
Avast 4.8.1351.0 2009.10.29 -
AVG 8.5.0.423 2009.10.29 -
BitDefender 7.2 2009.10.30 Gen:Trojan.Heur.TDSS.bu4@k8z4jepi
CAT-QuickHeal 10.00 2009.10.29 Win32.Packed.TDSS.z.5
ClamAV 0.94.1 2009.10.30 -
Comodo 2774 2009.10.30 -
DrWeb 5.0.0.12182 2009.10.29 BackDoor.Tdss.based.1
eSafe 7.0.17.0 2009.10.29 -
eTrust-Vet 35.1.7092 2009.10.29 -
F-Prot 4.5.1.85 2009.10.29 -
F-Secure 9.0.15370.0 2009.10.27 Gen:Trojan.Heur.TDSS.bu4@k8z4jepi
Fortinet 3.120.0.0 2009.10.29 -
GData 19 2009.10.29 Gen:Trojan.Heur.TDSS.bu4@k8z4jepi
Ikarus T3.1.1.72.0 2009.10.29 Trojan.Win32.Alureon
Jiangmin 11.0.800 2009.10.29 -
K7AntiVirus 7.10.883 2009.10.29 -
Kaspersky 7.0.0.125 2009.10.30 -
McAfee 5786 2009.10.29 -
McAfee+Artemis 5786 2009.10.29 Artemis!7084A7ED1723
McAfee-GW-Edition 6.8.5 2009.10.29 Trojan.Dropper.Gen
Microsoft 1.5202 2009.10.29 Trojan:Win32/Alureon.gen!U
NOD32 4556 2009.10.29 -
Norman 6.03.02 2009.10.29 -
nProtect 2009.1.8.0 2009.10.29 -
Panda 10.0.2.2 2009.10.29 Suspicious file
PCTools 4.4.2.0 2009.10.19 -
Prevx 3.0 2009.10.30 -
Rising 21.53.34.00 2009.10.29 -
Sophos 4.47.0 2009.10.30 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.10.29 -
Symantec 1.4.4.12 2009.10.30 -
TheHacker 6.5.0.2.056 2009.10.28 -
TrendMicro 8.950.0.1094 2009.10.29 -
VBA32 3.12.10.11 2009.10.29 -
ViRobot 2009.10.29.2011 2009.10.29 -
VirusBuster 4.6.5.0 2009.10.29 -
Additional information
File size: 22016 bytes
MD5   : 7084a7ed1723b4d97f153805a4b9e18f
SHA1  : 1880d36ff4e4a8497328448a6542232f03d2df2f
SHA256: e34e1dddce5e668662a5e0e9a21378c297be322ef6eac42a3bb878b85b360264
PEInfo: PE Structure information<br> <br> ( base data )<br> entrypointaddress.: 0x1581<br> timedatestamp.....: 0x4AE7D233 (Wed Oct 28 06:10:11 2009)<br> machinetype.......: 0x14C (Intel I386)<br> <br> ( 5 sections )<br> name viradd virsiz rawdsiz ntrpy md5<br> .text 0x1000 0x1474 0x1600 6.25 0f805540f4af7fa4f0fe7164e66d9285<br>.rdata 0x3000 0xC43 0xE00 5.94 5418366d752c6d64cc93799422fc1f01<br>.data 0x4000 0xDAB 0xE00 7.07 e162f5c8832aac03b01d53bf9c2bc3b4<br>.rsrc 0x5000 0x1D9D 0x1E00 6.98 5d4c12cb2420d19cc8917ac65705bb6c<br>.reloc 0x7000 0x36 0x200 0.83 aafe170d6ac805a4d513dd358bb081ca<br> <br> ( 4 imports )<br> <br>&gt; comdlg32.dll: PrintDlgExW, PrintDlgExA, GetOpenFileNameW, GetOpenFileNameA, ChooseColorW, FindTextA, dwLBSubclass<br>&gt; kernel32.dll: GetEnvironmentVariableA, LoadLibraryA, GetCurrentProcess, GetFileSize, GetVolumePathNameA, GetProcAddress, GetTempPathA, GetFileTime, GetFileType, SwitchToFiber, GetModuleHandleA, VirtualFree, SearchPathW, ReadFileEx, VirtualProtect, VirtualAlloc, EnumResourceNamesA<br>&gt; msvcrt.dll: _ftime, iscntrl, _mbsnicmp, atoi, putchar, _acmdln, _lseeki64, strcspn, memcpy<br>&gt; winmm.dll: wid32Message, midiOutShortMsg, mciSendCommandA, waveInGetID, waveOutGetID, waveInGetErrorTextA, midiOutClose, PlaySoundW, aux32Message, midiInGetDevCapsW, mciGetErrorStringW, waveOutGetErrorTextW, sndPlaySoundW, joyGetPosEx, joyGetNumDevs, joy32Message, mmioSetInfo, OpenDriver, waveOutGetDevCapsA<br> <br> ( 1 exports )<br> <br>&gt; XueOhwksojCfznQgb, HoVojngavElhqpOgl, ChomhsXgvulRwgipwkBfg, QqJnoiofPbrwmfWfqprJhe
TrID&nbsp;&nbsp;: File type identification<br>Win32 Executable Generic (42.3%)<br>Win32 Dynamic Link Library (generic) (37.6%)<br>Generic Win/DOS Executable (9.9%)<br>DOS Executable Generic (9.9%)<br>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
ssdeep: 384:48DRZ6m3VfY/NdK4SxpCJ9NzxNXBIOi5s+Ey:48VQm3Vf0duPCJ9NlNXfy
PEiD&nbsp;&nbsp;: -
RDS&nbsp;&nbsp;&nbsp;: NSRL Reference Data Set<br>-
==============================================
The Win Start

File winstart.bat received on 2009.10.30 13:27:41 (UTC)
Current status: finished
Result: 0/40 (0.00%



File winstart.bat received on 2009.10.30 13:27:41 (UTC)
Antivirus Version Last Update Result
a-squared 4.5.0.41 2009.10.30 -
AhnLab-V3 5.0.0.2 2009.10.30 -
AntiVir 7.9.1.50 2009.10.30 -
Antiy-AVL 2.0.3.7 2009.10.30 -
Authentium 5.1.2.4 2009.10.30 -
Avast 4.8.1351.0 2009.10.29 -
AVG 8.5.0.423 2009.10.30 -
BitDefender 7.2 2009.10.30 -
CAT-QuickHeal 10.00 2009.10.30 -
ClamAV 0.94.1 2009.10.30 -
Comodo 2779 2009.10.30 -
DrWeb 5.0.0.12182 2009.10.29 -
eSafe 7.0.17.0 2009.10.29 -
eTrust-Vet 35.1.7093 2009.10.30 -
F-Prot 4.5.1.85 2009.10.30 -
F-Secure 9.0.15370.0 2009.10.27 -
Fortinet 3.120.0.0 2009.10.30 -
GData 19 2009.10.30 -
Ikarus T3.1.1.72.0 2009.10.30 -
Jiangmin 11.0.800 2009.10.30 -
K7AntiVirus 7.10.884 2009.10.30 -
Kaspersky 7.0.0.125 2009.10.30 -
McAfee 5786 2009.10.29 -
McAfee+Artemis 5786 2009.10.29 -
McAfee-GW-Edition 6.8.5 2009.10.30 -
Microsoft 1.5202 2009.10.30 -
NOD32 4558 2009.10.30 -
Norman 6.03.02 2009.10.30 -
nProtect 2009.1.8.0 2009.10.30 -
Panda 10.0.2.2 2009.10.30 -
Prevx 3.0 2009.10.30 -
Rising 21.53.43.00 2009.10.30 -
Sophos 4.47.0 2009.10.30 -
Sunbelt 3.2.1858.2 2009.10.30 -
Symantec 1.4.4.12 2009.10.30 -
TheHacker 6.5.0.2.056 2009.10.28 -
TrendMicro 8.950.0.1094 2009.10.30 -
VBA32 3.12.10.11 2009.10.29 -
ViRobot 2009.10.30.2013 2009.10.30 -
VirusBuster 4.6.5.0 2009.10.29 -
Additional information
File&nbsp;size: 2 bytes
MD5&nbsp;&nbsp;&nbsp;: 81051bcc2cf1bedf378224b0a93e2877
SHA1&nbsp;&nbsp;: ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA256: 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
TrID&nbsp;&nbsp;: File type identification<br>Unknown!
ssdeep: 3:y:y
PEiD&nbsp;&nbsp;: -
CWSandbox: <a href="http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=81051bcc2cf1bedf378224b0a93e2877" target="_blank">http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=81051bcc2cf1bedf378224b0a93e2877</a>
RDS&nbsp;&nbsp;&nbsp;: NSRL Reference Data Set<br><br>( Atari )<br><br>Dora the Explorer Fairytale Adventure: RING5.SEQ, startup.luaTonka Town: Printing.seq<br>( NewTech Infosystems Inc. )<br><br>CD-Maker Plus Edition: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!<br>( Unknown )<br><br>Computing Edge: ManagementStdScripting.jseHardware Driver CD: DISK5.WHardware Driver Cd: DISK5.WHardware driver Cd: ESSISA.CATNmap: winfix.hOptSim: Cd.inf, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, GLOBALS.ALI, XWPEMPTYOptSim: Cd.inf, GLOBALS.ALIOptSim: Cd.inf, GLOBALS.ALIOptSim: Cd.inf, GLOBALS.ALIPT-ROM: README, RT_PATCH.EXEQuicken: DICT.APP<br>( Paradise Systems, Inc. )<br><br>Paradise VGA Plus 16 Card Utilities: _DISK_1, _DISK_2<br>( InterSolv,Inc. )<br><br>InterSolv DataDirect Series: IVDBC09.DLL<br>( Hauppauge Computer Works. )<br><br>WinTV Installation for Windows: empty.tmpWinTV Installation for Windows: empty.tmp<br>( Diamond Multimedia Inc. )<br><br>Viper V550 Installation Cd: DISK1.IDViper 550: empty.tmp<br>( Electronic Arts Ltd )<br><br>Moto Racer: DISK1.IDThe World of Need for Speed (High Stakes): SHBMW5.QFS, SHBZ3R.QFS, SHCCAM.QFS, SHCCOR.QFS, SHFF50.QFS, SHFM50.QFS, SHJXKR.QFS, SHLDIA.QFS, SHMCF1.QFS, SHMCLK.QFS, SHMSLK.QFS, SHP911.QFS, SHPFIR.QFS<br>( Allaire Corporation )<br><br>Cold Fusion: DISK1.ID, empty.tmpCold Fusion - Web Application Server: empty.tmpCold Fusion Application Server: DISK1.IDCold Fusion Application Server: DISK1.ID<br>( CogniTech Corp. )<br><br>SharkWare: MLDBDEFS.INI<br>( National Instruments )<br><br>Data Acquisition Driver Software: disk1.id, disk2.id, disk3.idGPIB Software for Windows 95: DISK1.ID, DISK2.IDInstrupedia: disk1.id, disk2.id, disk3.idInstrupedia: disk1.id, disk2.id, disk3.idLabView: disk1.id, disk2.id, disk3.idNational Instruments LabVIEW: disk1.id, disk2.id, disk3.id, disk4.id, disk5.id, disk6.id, disk7.id, disk8.id, disk9.idNational Instruments LabVIEW Base Package for Windows NT/95/3.1: disk1.id, disk2.id, disk3.id<br>( Sunset Direct Inc. )<br><br>Zap-IT: empty.tmp<br>( Rational Software Corp. )<br><br>Rational Solutions for Windows: roseaddin.cnt, testproc.tpl<br>( Gemplus )<br><br>GemSAFE: empty.tmp<br>( CompuServe Inc. )<br><br>CompuServe: empty.tmpCompuServe 2000 700 Hours Free: empty.tmpUnlimited Internet: empty.tmp<br>( Munich perl mongers )<br><br>YAPC Europe CPAN archive: typemap<br>( Susteen, Inc. )<br><br>Pix n Tunes: encoder.ini<br>( Leadtek )<br><br>Bonus Pack Version 1.4: empty.tmp<br>( Prodigy Internet )<br><br>Prodigy: empty.tmp<br>( Intelliquis )<br><br>TotalFax: NORMAL.CSS, empty.tmpTraffic Builder: NORMAL.CSS, empty.tmp<br>( Bytesize CD-ROM Inc. )<br><br>PC Maintenance: AWD.DAT<br>( IDG Books Worldwide, Inc )<br><br>Netobjects Fusion 3 For Dummies: empty.tmp<br>( US Robotics )<br><br>Connections: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.IDConnections: empty.tmpUSRobotics Connections Volume 2: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.ID<br>( AFIWC / NIST )<br><br>Forum of Incident Response and Security Teams: CR.LFForum of Incident Response and Security Teams (First): CR.LF<br>( THQ )<br><br>The Incredibles When Danger Comes: onstoproom.lua<br>( AT&amp;T Inc. )<br><br>AT&amp;T WorldNet Service: DISK1.ID, DISK3.ID<br>( Interact Commerce Corporation )<br><br>Act 2000: empty.tmp<br>( TextHelp Systems Ltd )<br><br>TextHelp Read and Writer Version 8: cache.dic, cache.dic56<br>( Core Publishing Inc. )<br><br>Master Hacker Internet Terrorism: --EXES--.---, -SOURCE-.---, CR.LF<br>( WRQ )<br><br>WRQ Reflection Suite for X: sunuser.al!<br>( Graphsim Entertainment )<br><br>Falcon 4.0 Allied Force: AC_art.LST, AC_snd.LST, COMM_snd.LST, CS_snd.LST, LB_snd.LST, PLN_snd.LST, SOUNDS.LST, cmn_snd.lst, help_scf.lst, records.irc, ts_art.lst, ts_res.lst, ts_snd.lstFalcon 4.0 Allied Force: AC_art.LST, AC_snd.LST, COMM_snd.LST, CS_snd.LST, LB_snd.LST, PLN_snd.LST, SOUNDS.LST, cmn_snd.lst, help_scf.lst, records.irc, ts_art.lst, ts_res.lst, ts_snd.lst<br>( Earthlink Inc. )<br><br>EarthLink: arlog.txtEarthLink 5.0: arlog.txt<br>( Artisoft Inc. )<br><br>LANtastic Network Software: DISK1.ID, empty.tmp<br>( Iomega Corporation )<br><br>ditto tools: ALERT.IP, ALERT.SPX<br>( Novell Inc. )<br><br>CNE Net NetWare 5 Beta 3: NWC_1, NWC_10, NWC_11, NWC_12, NWC_13, NWC_14, NWC_15, NWC_16, NWC_17, NWC_18, NWC_19, NWC_2, NWC_20, NWC_21, NWC_22, NWC_23, NWC_24, NWC_3, NWC_4, NWC_5, NWC_6, NWC_7, NWC_8, NWC_9<br>( Dragon Systems )<br><br>Dragon Naturally Speaking 9: _8E2BA41B1F9C40B4A82CDA0AD31BDB54, _FD70A147DAED431688E04EEF30D6EA44Dragon Naturally Speaking 9 Preferred: _8E2BA41B1F9C40B4A82CDA0AD31BDB54, _FD70A147DAED431688E04EEF30D6EA44Dragon Naturally Speaking 9 Standard: _259A6135FB63485F944981137992D1CB, _599F4A6483734FA886239797C941BBF0<br>( Micro Focus Incorporated )<br><br>Workbench: WBMASK.PCH<br>( Inprise Co. )<br><br>Borland C++ Builder 4 Standard: empty.tmpBorland Turbo C++ Suite: CPPOCF2.RH<br>( PowerQuest Coperation )<br><br>Drive Image: BOOTRESP.TMPDrive Image: BOOTRESP.TMPPowertools - Power PQ Quest: BOOTRESP.TMP<br>( Red Storm Entertainment )<br><br>Rainbow Six Covert Ops Essentials: empty.tmp<br>( Secure Computing )<br><br>Safeword Premier Access: codes.htmSafeword Premier Access: NWC_1, NWC_10, NWC_11, NWC_12, NWC_13, NWC_14, NWC_15, NWC_16, NWC_17, NWC_18, NWC_19, NWC_2, NWC_20, NWC_21, NWC_22, NWC_23, NWC_24, NWC_25, NWC_26, NWC_27, NWC_28, NWC_3, NWC_4, NWC_5, NWC_6, NWC_7, NWC_8, NWC_9, codes.htm<br>( IMSI )<br><br>TurboCAD Deluxe 14: tie.idlTurboCad Professional: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID<br>( Expert Software Inc. )<br><br>Bible Explorer: DISK1.ID, DISK2.ID, DISK3.ID<br>( MindScape )<br><br>PrintMaster Gold Classic: DISK1.ID, DISK2.ID, DISK3.ID, PMW.FIF, STOPLIST.TXTPrintMaster Gold Publishing Suite: DISK1.ID, DISK2.ID, DISK3.ID, PMW.FIF, STOPLIST.TXT<br>( OReilly and Associates )<br><br>Palm Programming The Developers Guide: stamp-hPalmPilot The Ultimate Guide: confdefs.h<br>( PGP, Inc. )<br><br>PGP for Personal Privacy: DISK1.ID<br>( Microtek Internation Inc )<br><br>Software The Power to Create and Communicate: DISK1.ID, DISK10.ID, DISK11.ID, DISK12.ID, DISK13.ID, DISK14.ID, DISK15.ID, DISK16.ID, DISK17.ID, DISK18.ID, DISK19.ID, DISK2.ID, DISK20.ID, DISK21.ID, DISK22.ID, DISK23.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.ID, DISK7.ID, DISK8.ID, DISK9.ID, disk1.id, disk10.id, disk11.id, disk12.id, disk13.id, disk14.id, disk15.id, disk16.id, disk17.id, disk18.id, disk19.id, disk2.id, disk20.id, disk3.id, disk4.id, disk5.id, disk6.id, disk7.id, disk8.id, disk9.id<br>( Borland Software Corp. )<br><br>C++ Builder with .net Interoperability: _relops_template.hC++ Mobile Edition: vm1_1_4.properties<br>( Macmillan Computer Publishing )<br><br>E-Commerce Construction Kit Deluxe: empty.tmp<br>( Learning Tree )<br><br>Multimedia CBT Training - Windows NT 4 Data Integrity: empty.tmpMultimedia CBT Training Internet and Network Security: H1-Step02.htm, H100-Step03.htm, H101-Step03.htm, H102-Step03.htm, H103-Step03.htm, H104-Step04.htm, H105-Step04.htm, H106-Step04.htm, H107-Step04.htm, H108-Step04.htm, H109-Step04.htm, H110-Step04.htm, H111-Step04.htm, H112-Step04.htm, H113-Step04.htm, H114-Step04.htm, H115-Step04.htm, H123-Step06.htm, H124-Step06.htm, H125-Step06.htm, H126-Step06.htm, H127-Step07.htm, H128-Step07.htm, H129-Step07.htm, H130-Step07.htm, H131-Step08.htm, H132-Step08.htm, H133-Step08.htm, H134-Step09.htm, H135-Step09.htm, H136-Step09.htm, H137-Step10.htm, H153-Step11.htm, H154-Step11.htm, H155-Step11.htm, H156-Step11.htm, H157-Step12.htm, H158-Step12.htm, H159-Step12.htm, H160-Step12.htm, H161-Step12.htm, H162-Step12.htm, H171-Step03.htm, H172-Step03.htm, H173-Step03.htm, H174-Step03.htm, H175-Step03.htm, H176-Step03.htm, H177-Step03.htm, H178-Step03.htm, H18-Step03.htm, H183-Step06.htm, H184-Step06.htm, H185-Step06.htm, H186-Step06.htm, H187-Step06.htm, H188-Step06.htm, H189-Step07.htm, H19-Step03.htm, H190-Step07.htm, H191-Step07.htm, H192-Step07.htm, H193-Step07.htm, H194-Step07.htm, H195-Step11.htm, H196-Step11.htm, H197-Step11.htm, H198-Step11.htm, H199-Step11.htm, H2-Step02.htm, H20-Step03.htm, H200-Step11.htm, H207-Step15.htm, H208-Step15.htm, H209-Step15.htm, H210-Step15.htm, H211-Step15.htm, H212-Step15.htm, H216-Step10.htm, H217-Step10.htm, H218-Step10.htm, H219-Step10.htm, H220-Step10.htm, H221-Step11.htm, H222-Step11.htm, H223-Step11.htm, H224-Step11.htm, H225-Step11.htm, H226-Step12.htm, H227-Step12.htm, H228-Step12.htm, H229-Step13.htm, H23-Step06.htm, H230-Step13.htm, H231-Step13.htm, H232-Step13.htm, H233-Step13.htm, H234-Step13.htm, H235-Step13.htm, H236-Step13.htm, H237-Step13.htm, H238-Step17.htm, H239-Step17.htm, H24-Step06.htm, H240-Step17.htm, H241-Step17.htm, H242-Step17.htm, H243-Step17.htm, H244-Step17.htm, H245-Step17.htm, H246-Step17.htm, H248-Step05.htm, H249-Step05.htm, H25-Step06.htm, H250-Step05.htm, H251-Step06.htm, H252-Step06.htm, H253-Step06.htm, H254-Step07.htm, H255-Step07.htm, H256-Step07.htm, H258-Step08.htm, H259-Step08.htm, H260-Step09.htm, H263-Step05.htm, H264-Step05.htm, H265-Step05.htm, H266-Step06.htm, H267-Step06.htm, H268-Step02.htm, H269-Step02.htm, H27-Step06.htm, H270-Step02.htm, H271-Step09.htm, H272-Step09.htm, H273-Step09.htm, H274-Step09.htm, H275-Step09.htm, H28-Step06.htm, H283-Step11.htm, H284-Step11.htm, H285-Step11.htm, H286-Step11.htm, H287-Step11.htm, H288-Step12.htm, H289-Step12.htm, H29-Step06.htm, H290-Step12.htm, H291-Step14.htm, H292-Step14.htm, H293-Step14.htm, H294-Step15.htm, H295-Step15.htm, H296-Step16.htm, H297-Step16.htm, H298-Step16.htm, H299-Step16.htm, H3-Step02.htm, H30-Step06.htm, H300-Step16.htm, H301-Step16.htm, H302-Step16.htm, H303-Step16.htm, H304-Step16.htm, H305-Step16.htm, H306-Step16.htm, H31-Step06.htm, H318-Step18.htm, H319-Step18.htm, H320-Step18.htm, H321-Step18.htm, H322-Step18.htm, H323-Step18.htm, H324-Step18.htm, H325-Step18.htm, H326-Step18.htm, H327-Step18.htm, H328-Step18.htm, H329-Step16.htm, H330-Step17.htm, H331-Step17.htm, H332-Step04.htm, H333-Step04.htm, H334-Step05.htm, H335-Step05.htm, H336-Step02.htm, H337-Step02.htm, H338-Step07.htm, H339-Step03.htm, H340-Step03.htm, H341-Step03.htm, H342-Step05.htm, H343-Step05.htm, H344-Step05.htm, H345-Step05.htm, H346-Step05.htm, H347-Step05.htm, H352-Step07.htm, H353-Step07.htm, H354-Step07.htm, H355-Step07.htm, H356-Step07.htm, H357-Step07.htm, H358-Step07.htm, H359-Step07.htm, H36-Step12.htm, H360-Step07.htm, H361-Step07.htm, H362-Step07.htm, H363-Step07.htm, H364-Step14.htm, H365-Step14.htm, H366-Step14.htm, H367-Step14.htm, H368-Step14.htm, H369-Step14.htm, H37-Step12.htm, H370-Step06.htm, H377-Step13.htm, H378-Step05.htm, H379-Step05.htm, H38-Step12.htm, H380-Step05.htm, H381-Step05.htm, H382-Step05.htm, H383-Step06.htm, H384-Step06.htm, H385-Step17.htm, H386-Step17.htm, H387-Step17.htm, H388-Step18.htm, H389-Step18.htm, H39-Step12.htm, H390-Step18.htm, H391-Step19.htm, H392-Step19.htm, H393-Step19.htm, H394-Step16.htm, H395-Step16.htm, H396-Step08.htm, H397-Step08.htm, H398-Step08.htm, H399-Step08.htm, H40-Step12.htm, H400-Step08.htm, H401-Step08.htm, H402-Step08.htm, H403-Step08.htm, H404-Step08.htm, H405-Step08.htm, H406-Step08.htm, H408-Step14.htm, H409-Step14.htm, H41-Step20.htm, H410-Step14.htm, H411-Step14.htm, H412-Step14.htm, H413-Step14.htm, H414-Step14.htm, H416-Step13.htm, H417-Step13.htm, H42-Step20.htm, H43-Step20.htm, H433-Step12.htm, H436-Step17.htm, H437-Step17.htm, H438-Step17.htm, H439-Step17.htm, H44-Step20.htm, H440-Step17.htm, H441-Step06.htm, H442-Step06.htm, H443-Step07.htm, H444-Step13.htm, H445-Step13.htm, H446-Step01.htm, H447-Step03.htm, H448-Step03.htm, H448-Step20.htm, H449-Step02.htm, H449-Step03.htm, H450-Step02.htm, H450-Step03.htm, H451-Step02.htm, H451-Step03.htm, H452-Step02.htm, H453-Step04.htm, H454-Step23.htm, H455-Step23.htm, H456-Step01.htm, H457-Step09.htm, H458-Step09.htm, H459-Step10.htm, H460-Step10.htm, H461-Step01.htm, H462-Step02.htm, H463-Step02.htm, H464-Step02.htm, H466-Step16.htm, H467-Step01.htm, H468-Step01.htm, H469-Step01.htm, H470-Step19.htm, H471-Step01.htm, H473-Step01.htm, H474-Step04.htm, H475-Step04.htm, H476-Step04.htm, H477-Step01.htm, H478-Step15.htm, H479-Step15.htm, H480-Step15.htm, H481-Step15.htm, H482-Step15.htm, H483-Step15.htm, H484-Step15.htm, H485-Step15.htm, H485-Step17.htm, H489-Step17.htm, H491-Step03.htm, H491-Step17.htm, H492-Step03.htm, H492-Step17.htm, H493-Step03.htm, H493-Step17.htm, H494-Step03.htm, H494-Step18.htm, H495-Step03.htm, H495-Step18.htm, H496-Step03.htm, H497-Step05.htm, H497-Step06.htm, H498-Step05.htm, H498-Step10.htm, H499-Step05.htm, H499-Step11.htm, H50-Step12.htm, H500-Step01.htm, H500-Step05.htm, H500-Step07.htm, H501-Step01.htm, H501-Step05.htm, H501-Step07.htm, H502-Step05.htm, H502-Step07.htm, H502-Step15.htm, H503-Step05.htm, H503-Step07.htm, H503-Step15.htm, H504-Step05.htm, H504-Step07.htm, H504-Step15.htm, H505-Step07.htm, H505-Step21.htm, H506-Step01.htm, H506-Step24.htm, H507-Step01.htm, H507-Step25.htm, H508-Step01.htm, H509-Step17.htm, H51-Step12.htm, H510-Step01.htm, H511-Step01.htm, H511-Step08.htm, H512-Step01.htm, H512-Step08.htm, H513-Step08.htm, H513-Step12.htm, H514-Step08.htm, H514-Step12.htm, H515-Step08.htm, H515-Step12.htm, H516-Step08.htm, H516-Step15.htm, H517-Step08.htm, H517-Step15.htm, H518-Step08.htm, H518-Step15.htm, H519-Step08.htm, H519-Step15.htm, H52-Step12.htm, H520-Step08.htm, H520-Step15.htm, H521-Step01.htm, H521-Step15.htm, H522-Step01.htm, H523-Step01.htm, H523-Step25.htm, H524-Step01.htm, H524-Step25.htm, H525-Step01.htm, H525-Step03.htm, H526-Step01.htm, H526-Step03.htm, H527-Step01.htm, H527-Step03.htm, H528-Step01.htm, H528-Step03.htm, H529-Step01.htm, H529-Step05.htm, H53-Step12.htm, H530-Step01.htm, H530-Step05.htm, H531-Step01.htm, H531-Step05.htm, H532-Step01.htm, H532-Step05.htm, H533-Step01.htm, H533-Step05.htm, H534-Step01.htm, H535-Step01.htm, H536-Step01.htm, H537-Step01.htm, H538-Step01.htm, H539-Step01.htm, H54-Step12.htm, H540-Step01.htm, H541-Step01.htm, H542-Step01.htm, H543-Step06.htm, H544-Step01.htm, H545-Step07.htm, H546-Step07.htm, H547-Step07.htm, H548-Step07.htm, H549-Step07.htm, H550-Step07.htm, H551-Step08.htm, H552-Step08.htm, H553-Step08.htm, H554-Step08.htm, H555-Step08.htm, H556-Step08.htm, H557-Step17.htm, H558-Step17.htm, H559-Step16.htm, H560-Step16.htm, H563-Step16.htm, H564-Step16.htm, H565-Step10.htm, H566-Step10.htm, H567-Step10.htm, H568-Step11.htm, H569-Step11.htm, H570-Step11.htm, H571-Step12.htm, H572-Step12.htm, H573-Step12.htm, H574-Step14.htm, H576-Step01.htm, H577-Step18.htm, H578-Step18.htm, H579-Step17.htm, H580-Step24.htm, H581-Step24.htm, H582-Step25.htm, H583-Step25.htm, H584-Step11.htm, H585-Step10.htm, H586-Step09.htm, H67-Step03.htm, H68-Step03.htm, H85-Step15.htm, H86-Step15.htm, H87-Step15.htm, H88-Step15.htm, H89-Step15.htm, H90-Step15.htm, H97-Step03.htm, H98-Step03.htm, H99-Step03.htm, empty.tmpMultimedia CBT Training Windows NT 4 Monitoring and Planning: empty.tmp<br>( EAGames )<br><br>emazing mazes: empty.tmpMahJongg Variety Pack: empty.tmpMahJongg Variety Pack: empty.tmpPinball and Minigold Combo Pack: empty.tmpSolitare Master: empty.tmpTV Guide Crosswords: empty.tmp<br>( PeoplePC Inc. )<br><br>PeoplePC with 250 Free Hours: empty.tmp<br>( Artis )<br><br>Artifex Strategic Architecture Engineering: globals.aliOptSim: Cd.inf, GLOBALS.ALI<br>( Symantec )<br><br>Norton Antivirus: DISK1.ID, DISK2.IDNorton AntiVirus 2000: empty.tmpNorton Antivirus Deluxe: DISK1.ID, DISK2.IDNorton Ghost 12.0: TEMP.TXT, m2k3am64.cat, mpi2k332.cat, mpixp32.catNorton SystemWorks: DISK1.ID, DISK2.IDNorton SystemWorks 2005: WIN51IP.SP1Norton Utilities: DISK1.ID, DISK2.IDNorton Utilities: DISK1.ID, DISK2.IDNorton Utilities 2.0 NT 4.0: DISK1.ID, DISK2.IDNorton Utilities-Educational: DISK1.ID, DISK2.IDSymantec Endpoint Protection 11.0: defloc.datVisual Cafe for Java: DISK1.IDVisual Cafe for Java: DISK1.IDVisualCafe Tools &amp; Solutions: DISK1.ID<br>( Que Corporation )<br><br>Special Edition Using Microsoft Windows 2000 Professional: empty.tmp<br>( Mira )<br><br>1995 Fose Rom: AAFAEQAB.TXT, AAFALJAB.TXT, AAFALSAB.TXT, AAFAPWAC.TXT<br>( Fox Interactive )<br><br>X Files Unrestricted Access: empty.tmp<br>( Borland International Inc. )<br><br>Borland C++ - BC++ and AF: RETURN.TXTBorland C++ 4.0: RETURN.TXTBorland C++ Builder 3 Standard: empty.tmpBorland C++ Development Suite: CPPOCF2.RH, RETURN.TXTBorland C++ Version 4.5: CPPOCF2.RH, DUMMY.C, RETURN.TXTDelphi Desktop: DBDWORK.INITurbo C++: CPPOCF2.RHTurbo C++ Suite: CPPOCF2.RH<br>( Sony )<br><br>Sony System Recovery CD - Sony Driver Recovery CD - Sony Application Recovery CD: 2_5da2bfae9!Sony Vaio Notebook Computer PCG-F180: empty.tmpSony VAIO System Recovery CD: SETUP.ISS<br>( Trend Micro Inc. )<br><br>Internet Security: UpdPcc.iniInternet Security: UpdPcc.iniPC-cillin: UpdPcc.iniPC-cillin Internet Security 2004: UpdPcc.iniPC-cillin Internet Sequrity: UpdPcc.iniTrend Enterprise Solutuions: DISK1.ID, DISK2.ID, DISK3.ID, disk1.id, disk2.id, disk3.id, disk4.id<br>( RCN Corporation )<br><br>Erols Internet Netscape Navigator v3.01, Erols Internet Netscape Navigator v3.01: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID<br>( Adobe Systems Incorporated )<br><br>10 Great Adobe Tryout Versions: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.ID, DISK7.ID, DISK8.IDAcrobat: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.ID, DISK7.ID, DISK8.IDAdobe Illustrator: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.IDAdobe Illustrator: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.ID, DISK7.ID, DISK8.IDAdobe Illustrator 7.0: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.ID, DISK7.ID, DISK8.IDAdobe PageMaker: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.IDAdobe PhotoDeluxe: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.IDAdobe Photoshop: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.IDAdobe Photoshop - Application: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.ID, DISK7.ID, DISK8.IDAdobe Photoshop 5.0: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.ID, DISK7.ID, DISK8.IDAdobe Photoshop Application: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.ID, DISK7.ID, DISK8.IDAdobe Streamline: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.IDDimensions: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.IDDynamic Media &amp; Web Solutions: empty.tmp<br>( Linksys )<br><br>EtherFast: usb100m.cat<br>( Insignia Solutions )<br><br>SoftWindows98 for Macintosh: empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws<br>( Caere Corporation )<br><br>OmniForm: DISK1.ID, empty.tmpOmniPage Pro: DISK0.ID, DISK1.IDOmniPage Pro: DISK1.ID, disk1.id, disk10.id, disk11.id, disk12.id, disk13.id, disk14.id, disk15.id, disk16.id, disk17.id, disk18.id, disk19.id, disk2.id, disk20.id, disk3.id, disk4.id, disk5.id, disk6.id, disk7.id, disk8.id, disk9.idOmniPage Pro Scanner Suite: DISK1.ID, disk1.id<br>( 3Com )<br><br>3Com US Robotics Connections: ARLOG000, empty.tmpCodeWarrior for Palm OS: empty.tmpPalm Computing CodeWarrior for Palm Computing Platform: empty.tmp<br>( Simple Media Inc. )<br><br>Craft Projects: empty.tmp<br>( Corex )<br><br>CardScan Version 5: empty.tmp<br>( Vision Ware Limited )<br><br>XVision: XHOSTS.TXT<br>( Microsoft )<br><br>.NET Framework: chat.adm.NET Framework: chat.adm.NET Framework Resouce Cd: chat.adm.NET Framework SDK: CDTAG.1, COPYRIGHT.TXT, NORMAL.CSS, TAGFILE.1, empty.tmp.NET Framework SDK: chat.adm.NET Framework SDK: chat.adm.NET Framework SDK: NORMAL.CSS, empty.tmp2261A: Supporting Users Running the Microsoft Windows XP Operating System: WIN51IP.SP1, softbar.in!2262A: Supporting Users Running Applications on a Microsoft Windows XP Operating System: WIN51IP.SP1, softbar.in!AciveSync: NORMAL.CSS, empty.tmpApplication Center 2000 Developer Editon: cdtag.1, tagfile.1Applications Microsoft Office Family: empty.tmpApplications, Developer Tools: COPYRIGHT.TXT, NORMAL.CSS, chat.adm, empty.tmpApplications, Developer Tools: empty.tmpApplications, Developer Tools - Special Release: JSCRIPT.JS, STDAFX.H, TEMPLATES.INF, empty.tmpApplications, Developer Tools, Servers: CDTAG.1, COPYRIGHT.TXT, NORMAL.CSS, TAGFILE.1, empty.tmpApplications, Platforms: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Applications, Platforms: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Applications, Platforms, Servers: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Applications, Platforms, Servers: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Applications, SDK/DDK: NORMAL.CSS, chat.adm, empty.tmpApplications, SDK/DDK: NORMAL.CSS, empty.tmp, softbar.in!Back Office 2.5, Transaction Server, Merchant Server 1.0, Exchange SP4: crystl32.ocxBack Office Resource Kit: LMHOSTS, lmhostsBack Office Resource Kit, Part 1: LMHOSTS, lmhostsBackOffice: crystl32.ocxBackOffice Server: empty.tmpBackOffice Server: empty.tmpBackOffice Server - Developers edition: empty.tmpBackOffice Server 2000: empty.tmpBackOffice Server Beta: empty.tmpBackOffice Small Business Server: NORMAL.CSS, empty.tmpBeta 2 Kit 2003: NORMAL.CSS_1025, NORMAL.CSS_1028, NORMAL.CSS_1031, NORMAL.CSS_1033, NORMAL.CSS_1041, NORMAL.CSS_1042, NORMAL.CSS_2052, PAPERS.INI_1041, softbar.in!Beta Microsoft Visual C++ Tech Preview: empty.tmpBeta Microsoft Visual C++ Tech Previes: empty.tmpBeta Visual InterDev: UTILITY.GPZ, empty.tmpBeta Windows NT Server 5.0 Beta2(Alpha): iitipm.htmBeta Windows NT Workstation 5.0 Beta 2(Alpha): iitipm.htmBeta Windows NT Workstation 5.0 Beta2(x86): iitipm.htmBeta Windows NT Workstation 5.0 Checked.Debug Build, Beta2(Alpha): iitipm.htmBizTalk Server Enterprise Edition: CDTAG.1, TAGFILE.1Borland C++: CPPOCF2.RH, DUMMY.C, RETURN.TXTBuilding Interactive Entertainment and E-Commerce Content: empty.tmpCD Sampler: empty.tmpCommerce Server: WRUI3270.RC, WSLI3270.RCCommerce Server - Developer Edition: WRUI3270.RC, WSLI3270.RC, chat.admCommerce Server Developer Edition: WRUI3270.RC, WSLI3270.RC, chat.admCommerce Server Developer Edition: WRUI3270.RC, WSLI3270.RC, chat.admCommerce Server Developer Editon: WRUI3270.RC, WSLI3270.RC, chat.admComponent Update for Office XP Developer: chat.admContent Management Server 2002 Developer Edition: NCompassRCSInstall.logDDKs: ANSDeveloper Network: MSDNCDN1.DATDeveloper Network: MSDNCDN1.DATDeveloper Network: SETUP.RCDeveloper Network Library Visual Studio 97: MSDNCDN1.DATDeveloper Tools: empty.tmpDeveloper Tools: empty.tmp, jscript.js, stdafx.h, templates.infDeveloper Tools: empty.tmp, jscript.js, stdafx.h, templates.infDeveloper Tools: empty.tmp, jscript.js, stdafx.h, templates.infDeveloper Tools: empty.tmp, jscript.js, stdafx.h, templates.infDeveloper Tools: empty.tmp, jscript.js, stdafx.h, templates.infDeveloper Tools: empty.tmp, jscript.js, stdafx.h, templates.infDeveloper Tools: JScript.js, Stdafx.h, Templates.infDeveloper Tools - Special Release: empty.tmp, jscript.js, stdafx.h, templates.infDeveloper Tools - Special Release: empty.tmp, jscript.js, stdafx.h, templates.infDeveloper Tools, Platforms, SDK/DDK, Applications: NPRN_DDK_FILE_267, empty.tmp, softbar.in!Developer Tools, Servers: COPYRIGHT.TXT, TEMPLATES.INF, UTILITY.GPZ, WRUI3270.RC, WSLI3270.RC, chat.adm, empty.tmpDeveloper Tools, Servers: UTILITY.GPZ, chat.adm, empty.tmpDeveloper Tools, Servers: UTILITY.GPZ, chat.adm, empty.tmpDisc 2435.4: JSCRIPT.JS, TEMPLATES.INF, UTILITY.GPZ, empty.tmpDisc 2438.5: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Disc 2488: chat.admeMbedded Visual Tools: empty.tmpErols Internet: empty.tmpExcel: empty.tmpExcel: empty.tmpExchange 2000 Conference Server: COPYRIGHT.TXTExchange 2000 Enterprise Server: COPYRIGHT.TXT, TEMPLATES.INF, UTILITY.GPZ, WRUI3270.RC, WSLI3270.RC, chat.adm, empty.tmpExchange 2000 Enterprise Server: UTILITY.GPZ, chat.adm, empty.tmpExchange 2003 Server: empty.tmpExchange Server 2000: COPYRIGHT.TXTExchange Server 2000: COPYRIGHT.TXT, NORMAL.CSS, chat.adm, empty.tmpExpression Web: VBAGR10.CHM_1033, VBAOF11.CHM_1033Expression Web Upgrade: VBAGR10.CHM_1033, VBAOF11.CHM_1033Free Internet: empty.tmpFrontPage: NORMAL.CSS, empty.tmpFrontPage: NORMAL.CSS, empty.tmpFrontPage 2000: NORMAL.CSS, empty.tmpFrontPage 2000 Upgrade: NORMAL.CSS, empty.tmpIE 4.01SP1,4.0 Authors ToolKit, Resource kit: empty.tmpImplementing and Supporting Microsoft Windows XP Professional: softbar.in!Inside MS Windows 2000: empty.tmpInternet Explorer: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Internet Explorer: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Internet Explorer: empty.tmpInternet Explorer: empty.tmpInternet Explorer: empty.tmpInternet Explorer: empty.tmpInternet Explorer: empty.tmpInternet Explorer - Compaq: empty.tmpInternet Explorer -Includes Service Pack1: empty.tmpInternet Explorer Versions: CDTAG.1, NORMAL.CSS, TAGFILE.1, chat.adm, empty.tmpInternet Explorer Versions: chat.admInternet Explorer Versions: chat.admInternet Explorer Versions: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsInternet Explorer Versions: JSCRIPT.JS, NCompassRCSInstall.log, chat.adm, empty.tmp, softbar.in!Internet Explorer Versions: PAPERS.INI, WIN51IP.SP1, chat.adm, empty.tmp, softbar.in!Internet Security and Acceleration Server: CDTAG.1, NORMAL.CSS, TAGFILE.1, chat.adm, empty.tmp, mshyenle.8A5F.D0DF3458_A845_11D3_8D0A_0050046416B9Internet Security and Acceleration Server - Enterprise Edition: cdtag.1, tagfile.1Internet Security and Acceleration Server Release Candidate 1: CDTAG.1, TAGFILE.1J++: MSDNCDN1.DATJanuary 2006 MSDN Library: NORMAL.CSS_1033, empty.tmpLiquid Motion: SOURCESLiquid Motion: SOURCESMapPoint 2001: empty.tmpMapPoint 2001: empty.tmpMapPoint North America: empty.tmpMapPoint North America: empty.tmpMapPoint North America 2002: empty.tmpMastering Visual Basic 6 Fundamentals: empty.tmpMDSN Disc 2441.2: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Microsoft Access 2000 Upgrade: NORMAL.CSS, empty.tmpMicrosoft BackOffice Server 4.0 Intranet Strategy CD: empty.tmpMicrosoft Developer Network Disc 1: ANNOTATE.CMicrosoft Developer Network Disc 11: STDPRGMA.HMicrosoft Developer Network Library Visual Studio 97: MSDNCDN1.DATMicrosoft Developer Network Platform-U.S.: ANNOTATE.CMicrosoft Exchange 2000 Server: NORMAL.CSS, empty.tmpMicrosoft Expression Studio: VBAGR10.CHM_1033, VBAOF11.CHM_1033Microsoft Internet Explorer: empty.tmpMicrosoft Internet Explorer: empty.tmpMicrosoft Internet Explorer: empty.tmpMicrosoft MapPoint: empty.tmpMicrosoft MapPoint 2000 60 day trial: empty.tmpMicrosoft Office 2000 Professional Upgrade: NORMAL.CSS, empty.tmpMicrosoft Office 2000 sp2: empty.tmpMicrosoft Office 2000 Standard: NORMAL.CSS, empty.tmpMicrosoft Office Professional 2007: VBAAC10.CHM_1033, VBAGR10.CHM_1033, VBAOF11.CHM_1033, VBAXL10.CHM_1033Microsoft Office Publisher 2007: VBAGR10.CHM_1033, VBAOF11.CHM_1033Microsoft Office XP Professional: empty.tmpMicrosoft Office2000 Professional: NORMAL.CSS, empty.tmpMicrosoft Office2000 Professional Upgrade: NORMAL.CSS, empty.tmpMicrosoft Project 98 Not For Retail or OEM Distribution: empty.tmpMicrosoft Security Resource Kit: cdtag.1, softbar.in!, tagfile.1Microsoft Security Tool Kit: empty.tmpMicrosoft Select: empty.tmpMicrosoft Select: empty.tmpMicrosoft Select: NORMAL.CSS, empty.tmpMicrosoft Select for Licensed Customers Only: NORMAL.CSS, empty.tmpMicrosoft TechNet Trial Software 2002 Volume 1: NORMAL.CSS, cdtag.1, empty.tmp, softbar.in!, tagfile.1Microsoft Visio Standard 30 Day Trial: empty.tmpMicrosoft Visual Basic 6.0 Learning Edition: empty.tmpMicrosoft Visual C++ 6.0: empty.tmpMicrosoft Vizact 2000: empty.tmpMicrosoft Windows 98 Second Edition Updates: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsMicrosoft Windows 98 Upgrade: empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsMicrosoft Windows CE: empty.tmpMicrosoft Windows Rights Management Services Evaluation Kit: softbar.in!Microsoft Windows Server 2003 Web Edition RC2: softbar.in!Microsoft Windows XP Professional: WIN51IP.SP1, softbar.in!Microsoft Windows98: empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsMicrosoft Word 2000 SR-1: NORMAL.CSS, empty.tmpMicrosoft Works &amp; Money 99 Basic: MNY99.INF, empty.tmpMicrosoft Works Suite 2002: chat.adm, empty.tmp, thirdpty.iniMicrosoft Works Suite 2003: empty.tmp, thirdpty.iniMoney Deluxe: thirdpty.iniMoney Standard: chat.adm, thirdpty.iniMPlatform SDK for Microsoft Windows 2000 - Release Candidate 2: platsdk.colMS Service Pack 2: empty.tmpMSDE For Visual Studio: empty.tmpMSDE for Visual Studio: empty.tmpMSDN 2939: softbar.in!MSDN BETA: chat.admMSDN Beta1 DISC2: JScript.js, Templates.infMSDN BETA2: CDTAG.1, TAGFILE.1MSDN BizTalk Server 2004 beta, BizTalk server 2002 dev. ed., MS content mgmt server, eMbedded visual C++ 4.0 with SP2, Exchange server 2000, SMS 2003: NCompassRCSInstall.log, UTILITY.GPZ, chat.adm, empty.tmpMSDN Development Platform: chat.admMSDN Development Platform Disc1: empty.tmp, platsdk.colMSDN Development Platform Beta: chat.admMSDN Development Platform Disc 1: empty.tmp, platsdk.colMSDN Development Platform Disc 3: platsdk.colMSDN Development Platform Disc 8: empty.tmpMSDN Development Platform Disc1: empty.tmp, platsdk.colMSDN Development Platform Disc1: empty.tmp, platsdk.colMSDN Development Platform Disc1: empty.tmp, platsdk.colMSDN Development Platform Disc14: NPRN_DDK_FILE_268MSDN Development Platform Disc2: CDTAG.1, NPRN_DDK_FILE_267, TAGFILE.1, empty.tmp, hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsMSDN Development Platform Disc2: empty.tmp, hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsMSDN Development Platform Disc2: NPRN_DDK_FILE_268, empty.tmp, hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsMSDN Development Platform Disc7: empty.tmpMSDN Development Platform Disc7: NPRN_DDK_FILE_268MSDN Development Platform Supplemental: empty.tmpMSDN Development Platform Supplemental: empty.tmpMSDN Development Platform Supplemental: empty.tmpMSDN Device Driver Kits: ANS, CDROM.W, CR, DISK1, DISK1.W, DISK10.W, DISK11.W, DISK12.W, DISK13.W, DISK14.W, DISK15.W, DISK16.W, DISK17.W, DISK18.W, DISK19.W, DISK2.W, DISK20.W, DISK21.W, DISK22.W, DISK23.W, DISK24.W, DISK25.W, DISK26.W, DISK27.W, DISK28.W, DISK29.W, DISK3.W, DISK30.W, DISK4.W, DISK5.W, DISK6.W, DISK7.W, DISK8.W, DISK9.W, SOURCESMSDN Disc: CDTAG.1, NCompassRCSInstall.log, TAGFILE.1MSDN Disc 0009.1: chat.admMSDN Disc 0022: empty.tmpMSDN Disc 0101: chat.admMSDN Disc 0226: NORMAL.CSS, empty.tmpMSDN Disc 0526: NPRN_DDK_FILE_267, WRui3270_Rc.804A724B_BBAE_46C1_B81C_6ED15F597D80, Wsli3270_Rc.C0EB62F9_7045_4092_B951_D8F3D40F5408, platsdk.colMSDN Disc 0527.1: CDTAG.1, TAGFILE.1, chat.adm, empty.tmp, hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsMSDN Disc 0527.2: chat.adm, empty.tmp, hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsMSDN Disc 0601: DISK1.ID, DISK2.ID, SOURCES, empty.tmpMSDN Disc 0727: NPRN_DDK_FILE_267, WRui3270_Rc.804A724B_BBAE_46C1_B81C_6ED15F597D80, Wsli3270_Rc.C0EB62F9_7045_4092_B951_D8F3D40F5408, platsdk.colMSDN Disc 0727.1: NPRN_DDK_FILE_267, WRui3270_Rc.804A724B_BBAE_46C1_B81C_6ED15F597D80, Wsli3270_Rc.C0EB62F9_7045_4092_B951_D8F3D40F5408, platsdk.colMSDN Disc 0727.2: NPRN_DDK_FILE_267MSDN Disc 0727.3: NPRN_DDK_FILE_267MSDN Disc 0727.4: NPRN_DDK_FILE_267MSDN Disc 0727.5: NPRN_DDK_FILE_267MSDN Disc 0773: chat.admMSDN Disc 0929: chat.admMSDN Disc 0953: softbar.in!MSDN Disc 1016.1: COPYRIGHT.TXTMSDN Disc 1550: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 1780: NPRN_DDK_FILE_267, empty.tmp, softbar.in!MSDN Disc 1796: empty.tmp, jscript.js, stdafx.h, templates.infMSDN Disc 2041: softbar.in!MSDN Disc 2053: WIN51IP.SP1, softbar.in!MSDN Disc 2085: softbar.in!, softbar.iniMSDN Disc 2121: softbar.in!MSDN Disc 2307: WIN51IP.SP1, empty.tmp, softbar.in!, softbar.iniMSDN Disc 2360: empty.tmp, softbar.in!MSDN Disc 2361: UTILITY.GPZ, chat.adm, empty.tmpMSDN Disc 2364: chat.admMSDN disc 2390: chat.adm, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!, softbar.iniMSDN Disc 2426: NPRN_DDK_FILE_267MSDN Disc 2426.10: SOURCESMSDN Disc 2426.13: SOURCESMSDN Disc 2426.16: SOURCESMSDN Disc 2426.17: SOURCESMSDN Disc 2426.18: SOURCESMSDN Disc 2426.19: SOURCESMSDN Disc 2426.2: SOURCESMSDN Disc 2426.3: SOURCESMSDN Disc 2426.4: SOURCESMSDN Disc 2426.5: SOURCESMSDN Disc 2426.6: SOURCESMSDN Disc 2426.7: SOURCESMSDN Disc 2426.9: New.txtMSDN Disc 2427.1: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsMSDN Disc 2428: WIN51IP.SP1, softbar.in!, softbar.iniMSDN Disc 2428.1: WIN51IP.SP1, softbar.in!MSDN Disc 2428.2: WIN51IP.SP1, softbar.in!MSDN Disc 2428.4: WIN51IP.SP1, softbar.in!MSDN Disc 2428.5: WIN51IP.SP1, softbar.in!MSDN Disc 2428.8: softbar.in!MSDN Disc 2432: WRUI3270.RC, WSLI3270.RCMSDN Disc 2432.2: WRUI3270.RC, WSLI3270.RCMSDN Disc 2432.4: WRUI3270.RC, WSLI3270.RCMSDN Disc 2434: NORMAL.CSS, chat.adm, empty.tmpMSDN Disc 2434.10: NORMAL.CSS_1033, empty.tmpMSDN Disc 2434.11: NORMAL.CSS_1033, empty.tmpMSDN Disc 2434.13: NORMAL.CSS_1033, empty.tmpMSDN Disc 2434.15: NORMAL.CSS_1033, empty.tmpMSDN Disc 2434.16: PRJSVR.SQL.CUBEADMIN.SQL.x64, PRJSVR.SQL.CUBEADMIN.SQL.x86, PRJSVR.SQL.METADATA.SQL.x64, PRJSVR.SQL.METADATA.SQL.x86, VBAAC10.CHM_1033, VBAGR10.CHM_1033, VBAOF11.CHM_1033, VBAXL10.CHM_1033MSDN Disc 2434.17: PRJSVR.SQL.CUBEADMIN.SQL.x64, PRJSVR.SQL.CUBEADMIN.SQL.x86, PRJSVR.SQL.METADATA.SQL.x64, PRJSVR.SQL.METADATA.SQL.x86, VBAAC10.CHM_1033, VBAGR10.CHM_1033, VBAOF11.CHM_1033, VBAXL10.CHM_1033MSDN Disc 2434.18: PRJSVR.SQL.CUBEADMIN.SQL.x64, PRJSVR.SQL.CUBEADMIN.SQL.x86, PRJSVR.SQL.METADATA.SQL.x64, PRJSVR.SQL.METADATA.SQL.x86, VBAAC10.CHM_1033, VBAGR10.CHM_1033, VBAOF11.CHM_1033, VBAXL10.CHM_1033MSDN Disc 2434.19: PRJSVR.SQL.CUBEADMIN.SQL.x64, PRJSVR.SQL.CUBEADMIN.SQL.x86, PRJSVR.SQL.METADATA.SQL.x64, PRJSVR.SQL.METADATA.SQL.x86, VBAAC10.CHM_1033, VBAGR10.CHM_1033, VBAOF11.CHM_1033, VBAXL10.CHM_1033MSDN Disc 2434.4: NORMAL.CSS_1025, NORMAL.CSS_1028, NORMAL.CSS_1029, NORMAL.CSS_1030, NORMAL.CSS_1031, NORMAL.CSS_1033, NORMAL.CSS_1036, NORMAL.CSS_1038, NORMAL.CSS_1041, NORMAL.CSS_1042, NORMAL.CSS_1044, NORMAL.CSS_1045, NORMAL.CSS_1053, NORMAL.CSS_1055, NORMAL.CSS_2052, NORMAL.CSS_2070, NORMAL.CSS_3082, PAPERS.INI_1041, empty.tmp, mshy2_en.lex_1069.D0DF3458_A845_11D3_8D0A_0050046416B9MSDN Disc 2434.5: NORMAL.CSS_1025, NORMAL.CSS_1028, NORMAL.CSS_1029, NORMAL.CSS_1030, NORMAL.CSS_1031, NORMAL.CSS_1033, NORMAL.CSS_1036, NORMAL.CSS_1037, NORMAL.CSS_1038, NORMAL.CSS_1041, NORMAL.CSS_1042, NORMAL.CSS_1044, NORMAL.CSS_1045, NORMAL.CSS_1053, NORMAL.CSS_1055, NORMAL.CSS_2052, NORMAL.CSS_2070, NORMAL.CSS_3082, PAPERS.INI_1041, empty.tmp, mshy2_en.lex_1069.D0DF3458_A845_11D3_8D0A_0050046416B9MSDN disc 2434.6: NORMAL.CSS_1025, NORMAL.CSS_1028, NORMAL.CSS_1029, NORMAL.CSS_1030, NORMAL.CSS_1031, NORMAL.CSS_1033, NORMAL.CSS_1036, NORMAL.CSS_1037, NORMAL.CSS_1038, NORMAL.CSS_1041, NORMAL.CSS_1042, NORMAL.CSS_1044, NORMAL.CSS_1045, NORMAL.CSS_1053, NORMAL.CSS_1054, NORMAL.CSS_1055, NORMAL.CSS_2052, NORMAL.CSS_2070, NORMAL.CSS_3082, PAPERS.INI_1041, empty.tmp, mshy2_en.lex_1069.D0DF3458_A845_11D3_8D0A_0050046416B9MSDN Disc 2434.8: NORMAL.CSS_1025, NORMAL.CSS_1028, NORMAL.CSS_1029, NORMAL.CSS_1030, NORMAL.CSS_1031, NORMAL.CSS_1033, NORMAL.CSS_1036, NORMAL.CSS_1037, NORMAL.CSS_1038, NORMAL.CSS_1041, NORMAL.CSS_1042, NORMAL.CSS_1044, NORMAL.CSS_1045, NORMAL.CSS_1053, NORMAL.CSS_1054, NORMAL.CSS_1055, NORMAL.CSS_2052, NORMAL.CSS_2070, NORMAL.CSS_3082, PAPERS.INI_1041, empty.tmp, mshy2_en.lex_1069.D0DF3458_A845_11D3_8D0A_0050046416B9MSDN Disc 2435: JSCRIPT.JS, TEMPLATES.INF, UTILITY.GPZ, chat.adm, empty.tmpMSDN Disc 2435.1: JSCRIPT.JS, TEMPLATES.INF, UTILITY.GPZ, chat.adm, empty.tmpMSDN Disc 2435.2: JSCRIPT.JS, TEMPLATES.INF, UTILITY.GPZ, chat.adm, empty.tmpMSDN Disc 2435.3: JSCRIPT.JS, TEMPLATES.INF, UTILITY.GPZ, empty.tmpMSDN Disc 2435.5: JSCRIPT.JS, TEMPLATES.INF, UTILITY.GPZ, empty.tmpMSDN Disc 2436.10: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.12: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.16: NCompassRCSInstall.logMSDN Disc 2436.18: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.19: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.20: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.22: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.24: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.25: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.26: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.27: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.28: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.29: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.30: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2436.31: NCompassRCSInstall.logMSDN Disc 2436.32: NCompassRCSInstall.logMSDN Disc 2436.5: NCompassRCSInstall.logMSDN Disc 2436.6: NCompass RCS Install.log, NCompassRCSInstall.logMSDN Disc 2436.7: NCompassRCSInstall.logMSDN Disc 2436.8: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disc 2437: empty.tmpMSDN Disc 2438: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2438.1: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2438.2: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN DISC 2438.3: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2438.7: softbar.in!MSDN Disc 2438.8: softbar.in!MSDN Disc 2439: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2439.1: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2439.2: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2439.3: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2439.6: softbar.in!MSDN Disc 2439.7: softbar.in!MSDN Disc 2439.8: softbar.in!MSDN Disc 2440.3: softbar.in!MSDN Disc 2440.4: softbar.in!MSDN Disc 2440.5: softbar.in!MSDN Disc 2441: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2441.1: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2441.5: softbar.in!MSDN Disc 2441.6: softbar.in!MSDN Disc 2441.7: softbar.in!MSDN Disc 2442: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2442.1: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2442.2: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!, softbar.iniMSDN Disc 2442.3: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2442.4: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2442.6: softbar.in!MSDN Disc 2443: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2443.1: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2443.2: softbar.in!MSDN Disc 2443.4: softbar.in!MSDN Disc 2444: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2444.1: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2444.3: softbar.in!MSDN Disc 2444.3: softbar.in!MSDN Disc 2444.4: softbar.in!MSDN Disc 2444.6: softbar.in!MSDN Disc 2455: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2455.1: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN disc 2455.2: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2455.3: WIN51IP.SP1MSDN Disc 2455.4: WIN51IP.SP1MSDN Disc 2455.6: softbar.in!MSDN Disc 2459: WRUI3270.RC, WSLI3270.RCMSDN Disc 2459.2: WRUI3270.RC, WSLI3270.RCMSDN Disc 2464: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2464.1: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2464.2: WIN51IP.SP1MSDN Disc 2464.5: softbar.in!MSDN Disc 2465: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2465.2: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2465.4: softbar.in!MSDN Disc 2465.5: softbar.in!MSDN Disc 2466: WIN51IP.SP1, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2466.1: WIN51IP.SP1, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2466.2: softbar.in!MSDN Disc 2466.4: softbar.in!MSDN Disc 2476: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2476.1: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc 2476.2: softbar.in!MSDN Disc 2476.4: softbar.in!MSDN Disc 2477.2: softbar.in!MSDN Disc 2537.2: SIV_WR.BRSMSDN Disc 2537.3: SIV_WR.BRSMSDN Disc 2537.4: SIV_WR.BRSMSDN Disc 2537.5: SIV_WR.BRSMSDN Disc 2619: cdtag.1, softbar.in!, tagfile.1, win51ic.SP1, win51ip.SP1MSDN Disc 2619.1: cdtag.1, softbar.in!, tagfile.1, win51ic.SP1, win51ip.SP1MSDN Disc 2724: softbar.in!MSDN Disc 2939.2: softbar.in!MSDN Disc 2939.3: softbar.in!MSDN Disc 2939.4: softbar.in!MSDN Disc 2942: softbar.in!MSDN Disc 2942: softbar.in!MSDN Disc 2973: softbar.in!MSDN Disc 2974: softbar.in!MSDN Disc 2974: softbar.in!MSDN Disc 3010: NORMAL.CSS_1025, NORMAL.CSS_1028, NORMAL.CSS_1029, NORMAL.CSS_1030, NORMAL.CSS_1031, NORMAL.CSS_1036, NORMAL.CSS_1037, NORMAL.CSS_1038, NORMAL.CSS_1041, NORMAL.CSS_1042, NORMAL.CSS_1044, NORMAL.CSS_1045, NORMAL.CSS_1053, NORMAL.CSS_1054, NORMAL.CSS_1055, NORMAL.CSS_2052, NORMAL.CSS_2070, NORMAL.CSS_3082, PAPERS.INI_1041, mshy2_en.lex_1069.D0DF3458_A845_11D3_8D0A_0050046416B9MSDN Disc 3017: wlh_CMNBINS_FILE_10MSDN Disc 3017.1: wlh_CMNBINS_FILE_10MSDN Disc 3089: chat.admMSDN Disc 3089.1: chat.admMSDN Disc 3096.01: MSHY2_EN.LEX_1069, NORMAL.CSS_1028, NORMAL.CSS_1031, NORMAL.CSS_1036, NORMAL.CSS_1041, NORMAL.CSS_1042, NORMAL.CSS_2052, NORMAL.CSS_3082, VBAGR10.CHM_1028, VBAGR10.CHM_1031, VBAGR10.CHM_1033, VBAGR10.CHM_1036, VBAGR10.CHM_1040, VBAGR10.CHM_1041, VBAGR10.CHM_1042, VBAGR10.CHM_2052, VBAGR10.CHM_3082, VBAOF11.CHM_1028, VBAOF11.CHM_1031, VBAOF11.CHM_1033, VBAOF11.CHM_1036, VBAOF11.CHM_1040, VBAOF11.CHM_1041, VBAOF11.CHM_1042, VBAOF11.CHM_2052, VBAOF11.CHM_3082MSDN Disc 3235: COPYRIGHT.TXT, chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsMSDN Disc 3264: WIN51IP.SP1, softbar.in!MSDN Disc 3345.2: wlh_CMNBINS_FILE_10MSDN Disc 3498: softbar.in!MSDN Disc 3617: mshy2_en.lex_1069.D0DF3458_A845_11D3_8D0A_0050046416B9MSDN Disc 4402: FL_empty_def_48471_cn_enu.3643236F_FC70_11D3_A536_0090278A1BB8MSDN Disc 7 Microsoft Internet Explorer Versions: empty.tmpMSDN Disc MSDN Index Oct 2000 IE Versions Platform SDK July 2000 Edition: empty.tmp, platsdk.colMSDN Disc0004: WRui3270_Rc.804A724B_BBAE_46C1_B81C_6ED15F597D80, Wsli3270_Rc.C0EB62F9_7045_4092_B951_D8F3D40F5408, platsdk.colMSDN Disc0009: empty.tmpMSDN Disc1918: CDTAG.1, NORMAL.CSS, TAGFILE.1, chat.adm, empty.tmp, mshyenle.8A5F.D0DF3458_A845_11D3_8D0A_0050046416B9MSDN Disc2225: NORMAL.CSS, chat.adm, empty.tmpMSDN Disc2357: UTILITY.GPZ, chat.adm, empty.tmpMSDN Disc2365: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc2386: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN Disc2389: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!MSDN DISC2426.8: SOURCESMSDN Disc2428.3: WIN51IP.SP1, softbar.in!MSDN Disc2434.2: NORMAL.CSS_1025, NORMAL.CSS_1030, NORMAL.CSS_1031, NORMAL.CSS_1033, NORMAL.CSS_1036, NORMAL.CSS_1041, NORMAL.CSS_2052, PAPERS.INI_1041, empty.tmpMSDN DISC2434.7: NORMAL.CSS_1025, NORMAL.CSS_1028, NORMAL.CSS_1029, NORMAL.CSS_1030, NORMAL.CSS_1031, NORMAL.CSS_1033, NORMAL.CSS_1036, NORMAL.CSS_1037, NORMAL.CSS_1038, NORMAL.CSS_1041, NORMAL.CSS_1042, NORMAL.CSS_1044, NORMAL.CSS_1045, NORMAL.CSS_1053, NORMAL.CSS_1054, NORMAL.CSS_1055, NORMAL.CSS_2052, NORMAL.CSS_2070, NORMAL.CSS_3082, PAPERS.INI_1041, empty.tmp, mshy2_en.lex_1069.D0DF3458_A845_11D3_8D0A_0050046416B9MSDN Disc2436.3: CDTAG.1, NCompassRCSInstall.log, TAGFILE.1MSDN Disc2488.1: chat.admMSDN Disk 2436.14: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPMSDN Disk 2436.22: ENTERPRISEINSTRUMENTATION.CONFIG.BACKUP, NCompassRCSInstall.log, TASINSTRUMENTATION.CONFIG.BACKUPmsdn Internet Explorer/ windows2000 Server: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsMSDN Library: empty.tmpMSDN Library: THREAD.CMSDN Library: THREAD.CMSDN Library for Visual Studio .NET 2003: Stdafx.hMSDN Library Visual Studio: empty.tmpMSDN Library Visual Studio: THREAD.CMSDN Library, Visual Studio 6.0a: THREAD.CMSDN MS .NET framework 1.1 SDK, App. Center 2000 dev. ed., Commerce server 2002 dev. ed., Data Analyzer 3.5, Host Integration server 2000: CDTAG.1, NORMAL.CSS, TAGFILE.1, WRUI3270.RC, WSLI3270.RC, chat.adm, empty.tmpMSDN MS .NET Framework 1.1 SDK, IE 5.5 SP1, IE 6.0, IE 6.0 SP1, SharePoint Server 2001, SharePoint Server 2001 SP2A: chat.admMSDN MS Application Center 2000, BizTalk Server 2002, BizTalk server 2004 beta, Content Management Server 2002, Identity Integration Server 2003: CDTAG.1, NCompassRCSInstall.log, TAGFILE.1MSDN MS Business Solutions Customer relationship Mgmt 1.0, CRM Sales for Outlook - June 2003, Office FrontPage 2003, Office OneNote 2003, Office Pro: NORMAL.CSS_1033MSDN MS Business Solutions Small Bus. Manager 7.5, Great Plains 7.5, Solomon 5.5, FRx Financial Reporter 6.5 for Great Plains and Forecaster 6.5: SIV_WR.BRSMSDN MS Commerce Server 2002 Developer ed., Exchange Server 2003 Enterprise ed., Exchange Server 2003 Standard ed., Host Integration server 2000, SQL: WRUI3270.RC, WSLI3270.RCMSDN MS commerce server 2002 developer ed., Exchange server 2003 enterprise ed., exchange server 2003 standard ed., host integration server, SQL 2000: WRUI3270.RC, WSLI3270.RCMSDN MS MapPoint N.America 2002: empty.tmpMSDN MS Office XP Developer, Office XP Pro w FrontPage, SMS 2.0 w SP2, Project Pro 2002, Project Server 2002, Publisher 2002: NORMAL.CSS, chat.adm, empty.tmpMSDN MSIE 6.0, IE 6.0 SP1, Windows 2000 Advanced Server, Windows 2000 Professional, Windows 2000 Server, Windows 98 Second ed., Windows ME, Win XP Pro: WIN51IP.SP1, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!, softbar.iniMSDN Office Publisher 2003: NORMAL.CSS_1025, NORMAL.CSS_1028, NORMAL.CSS_1031, NORMAL.CSS_1033, NORMAL.CSS_1041, NORMAL.CSS_1042, NORMAL.CSS_2052, PAPERS.INI_1041MSDN Platform Archive Disc2: DISK1.ID, DISK2.ID, SOURCES, empty.tmpMSDN SDK BETA: chat.admMSDN SDKs and Operating Systems: ANNOTATE.C, DLL16.DEF, SETUP.RCMSDN SharePoint portal server 2001, SMS 2.0 w SP2, MS IE 5.5 SP1, IE 6.0, IE 6.0 SP1, Windows 98, Windows ME: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsMSDN Subscription: chat.admMSDN Subscription Library: empty.tmpMSDN Subscription Library: empty.tmpMSDN Subscription Library: empty.tmpMSDN Subscription Library: Stdafx.hMSDN Subscription Library: Stdafx.hMSDN Subscriptions: chat.admMSDN Subscriptions: chat.admMSDN Subscriptions: chat.admMSDN Subscriptions 0101 Part No. X06-17637: chat.admMSDN Subscriptions Library: chat.adm, empty.tmpMSDN Subscriptions Library: chat.adm, empty.tmpMSDN Subscriptions Library: chat.adm, empty.tmpMSDN Subscriptions Library: chat.adm, empty.tmpMSDN Subscriptions Library: empty.tmpMSDN Subscriptions Library: Stdafx.hMSDN Subscriptions Library: STDAFX.HMSDN Subscriptions Library: Stdafx.hMSDN Visual Studio .NET 2003 Enterprise Architect, Library, SourceSafe 6.0d, Visio: JSCRIPT.JS, TEMPLATES.INFMSDN Windows Server 2003 Standard &amp; Enterprise: softbar.in!MSDN Windows Server 2003 Standard &amp; Enterprise: softbar.in!, softbar.iniMSN for United: setup.bmpMSN Internet Access: empty.tmpMSN Internet Access: empty.tmpMSN Internet Access: empty.tmpMSN Starter Disk: empty.tmpNT DDK for NT Work 3.51: CR, SOURCESNT DDK for NT Work 3.51 US: CR, SOURCESNT DDK for NT Work 4.0 US: SOURCESNT Work 4.0 HCT: CROffice: empty.tmpOffice: ffastlog.txtOffice: MSHY_HU.USR, MSSP_HU.EXCOffice: NORMAL.CSS, empty.tmpOffice: NORMAL.CSS, empty.tmpOffice: NORMAL.CSS, empty.tmpOffice: OMA.DICOffice 2000: NORMAL.CSS, empty.tmpOffice - Small Business: NORMAL.CSS, empty.tmpOffice 2000: empty.tmpOffice 2000 - Small Business: NORMAL.CSS, empty.tmpOffice 2000 - special Upgrade edition: NORMAL.CSS, empty.tmpOffice 2000 Developer: empty.tmpOffice 2000 Developer SR-1: empty.tmpOffice 2000 Standard: MSHY_EL.LEX, MSHY_EU.LEX, MSHY_HU.USR, NORMAL.CSS, empty.tmpOffice 97 Pro SR1, Project: mshy_ro.us!, mssp_ro.exe, mssp_ro.nf!, mssp_ro.su!Office 97, Professional Edition: MSHY_EL.LEXOffice 97, Professional Edition Win95: BENUTZER.DIC, ffastlog.txtOffice 97.2 Small Business Edition: empty.tmp, mssp_hu.excOffice FrontPage 2003: NORMAL.CSS_1033Office FrontPage 2003: NORMAL.CSS_1033Office Home and Student 2007: VBAGR10.CHM_1033, VBAOF11.CHM_1033, VBAXL10.CHM_1033Office OneNote 2007: VBAGR10.CHM_1033, VBAOF11.CHM_1033Office Outlook 2007: VBAGR10.CHM_1033, VBAOF11.CHM_1033Office Standard 2007 Upgrade: VBAGR10.CHM_1033, VBAOF11.CHM_1033, VBAXL10.CHM_1033Office Ultimate 2007: VBAAC10.CHM_1033, VBAGR10.CHM_1033, VBAOF11.CHM_1033, VBAXL10.CHM_1033Office Visio Professional 2007: VBAGR10.CHM_1033, VBAOF11.CHM_1033Office XP: empty.tmpOffice XP: NORMAL.CSS, empty.tmpOffice XP: NORMAL.CSS, empty.tmpOffice XP - for Students and Teachers: empty.tmpOffice XP 2002 Professional: empty.tmpOffice XP Professional: empty.tmpOffice XP Professional with FrontPage: NORMAL.CSS, chat.adm, empty.tmpOffice XP Professional with FrontPage: NORMAL.CSS, chat.adm, empty.tmp, mshyenle.4D37.D0DF3458_A845_11D3_8D0A_0050046416B9, mshyhuus.16ED.D0DF3458_A845_11D3_8D0A_0050046416B9, softbar.in!Office XP Small Business: empty.tmpOffice XP with FrontPage: empty.tmpOffice2000 Professional Upgrade: NORMAL.CSS, empty.tmpOfficial Microsoft HTML Help Authoring Kit: empty.tmpOperating System Reinstallation CD Microsoft Windows XP Professional Service Pack 2: softbar.in!Outlook 2000: NORMAL.CSS, empty.tmpOutlook 98: empty.tmpOutlook 98: empty.tmpOutlook 98: empty.tmpOutlook 98 Step by Step: empty.tmp, mssp_hu.excPlatform SDK: WRui3270_Rc.804A724B_BBAE_46C1_B81C_6ED15F597D80, Wsli3270_Rc.C0EB62F9_7045_4092_B951_D8F3D40F5408, platsdk.colPlatforms: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Platforms SDKs/DDKs: NPRN_DDK_FILE_267, chat.adm, softbar.in!Platforms, SDK/DDK: COPYRIGHT.TXT, chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Platforms, SDK/DDK: WIN51IP.SP1, softbar.in!Platforms, SDK/DDK, Developer Tools: COPYRIGHT.TXT, chat.adm, softbar.in!Platforms, Servers, Applications: empty.tmp, hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsPlatforms, Servers, Applications, SDK/DDK: empty.tmp, softbar.in!PowerPoint: empty.tmpPowerPoint: NORMAL.CSS, empty.tmpPowerpoint: NORMAL.CSS, empty.tmpPowerPoint 2000: NORMAL.CSS, empty.tmpProject: empty.tmpProject - International Releases: ffastlog.txtProject Data Analyzer: empty.tmpProject Professional 2002: empty.tmpPublisher Deluxe with Photo Editing: empty.tmpSDK/DDK, Servers - Special Release: COPYRIGHT.TXTSDK/DDK, Servers - Special Release: COPYRIGHT.TXTSecurity Tool Kit: empty.tmpServers: CDTAG.1, TAGFILE.1Servers: COPYRIGHT.TXT, WRUI3270.RC, WSLI3270.RC, chat.admSharePoint Portal Server: chat.adm, empty.tmp, mshyenle.8A5F.D0DF3458_A845_11D3_8D0A_0050046416B9, sboff.mws, sbpx1.mws, sbpx2.mwsSmart Device Extensions for Visual Studio: TEMPLATES.INFSmartTag: empty.tmpSNA Server: empty.tmpSpeech SDK: NPRN_DDK_FILE_267SQLServer: empty.tmpsubscriptions library: Stdafx.hTeam Manager 97, Project 98, Visual Modeler, Macro Assembler, Office 97 SR-1 Patch: empty.tmpTeam Manger 97, Project 98, Visual Modeler, Macro Assembler, Liquid Motion: empty.tmpToshiba Recovery and Applications Drivers CD: empty.tmpVirtual PC for Mac Windows XP Home Edition: softbar.in!Virtual PC for Mac Windows XP Professional Edition: softbar.in!Visio: empty.tmpVisio: empty.tmpVisio: empty.tmpVisio: empty.tmpVisio Enterprise Edition: empty.tmpVisio Enterprise Edition: empty.tmpVisio for Enterprise Architects: empty.tmpVisio for Enterprise Architects: empty.tmpVisio for Enterprise Architects 2003: empty.tmpVisio Markerting Beta: empty.tmpVisio Professional 2002: empty.tmpVisual Basic: empty.tmpVisual Basic 6.0 Prof. Edition Upgrade: empty.tmpVisual Basic Professional Edition: empty.tmpVisual C++: chat.admVisual C++ .net: Stdafx.hVisual InterDev: THREAD.C, UTILITY.GPZ, empty.tmpVisual InterDev March Pre-release: UTILITY.GPZ, empty.tmpVisual J: TEMPLATES.INFVisual J++: UTILITY.GPZ, empty.tmpVisual J++: UTILITY.GPZ, empty.tmpVisual J++ 6.0: empty.tmpVisual J++ 6.0 Standard Edition: THREAD.CVisual J++ Technology Preview: UTILITY.GPZ, empty.tmpVisual J++ Technology Preview 1: UTILITY.GPZ, empty.tmpVisual SourceSafe: chat.admVisual Studio: empty.tmpVisual Studio: empty.tmpVisual Studio: empty.tmpVisual Studio . NET: JScript.js, Stdafx.h, Templates.infVisual Studio .Net: JScript.js, Templates.infVisual Studio .net: Stdafx.h, stdafx.hVisual Studio .NET 2003: JSCRIPT.JS, TEMPLATES.INFVisual Studio .NET 2003 Enterprise Architect: JScript.js, Stdafx.h, Templates.infVisual Studio .NET 2003 Enterprise Architect Final Beta: JScript.js, Templates.infVisual Studio .NET 2003 Final Beta: JSCRIPT.JS, NCompassRCSInstall.log, chat.adm, empty.tmpVisual Studio .Net Enterprise Architect: JScript.js, Stdafx.h, Templates.infVisual Studio .Net Enterprise Edition: JScript.js, Stdafx.h, Templates.infVisual Studio .Net Framework: Stdafx.h, jscript.js, stdafx.h, templates.infVisual Studio .net Knowledge Base: Stdafx.h, stdafx.hVisual Studio 6.0: chat.admVisual Studio 6.0: chat.admVisual Studio 6.0 Enterprisr Edition: UTILITY.GPZ, empty.tmpVisual Studio 6.0 MSDN Library: THREAD.CVisual Studio 6.0 Service Pack 4 (x86) - Microsoft Internet Information Server Resource Kit: empty.tmpVisual Studio 97, Visual C++ 5.0, Enterprise Edition: VS97ECD3.DATVisual Studio 97, Visual InterDev, Visual J++ Prof. Edition: VS97ECD2.DATVisual Studio 97, Visual SourceSafe 5.0: VS97ECD4.DATVisual Studio 97,Visual Basic 5.0 Enterprise Edition , Visual Fox Pro 5.0: VS97ECD1.DATVisual Studio Enterprise Edition: UTILITY.GPZ, chat.adm, empty.tmpVisual Studio Enterprise Edition: UTILITY.GPZ, empty.tmpVisual Studio.net .net Framework Beta 2: Stdafx.h, jscript.js, stdafx.h, templates.infWelcome to MSDN Getting Started Guide: chat.admWelcome to MSDN Getting Started Guide: chat.admWin32 SDK with FarEast Updates: SETUP.RCWin32 Software Development Kit: DISK1, DISK2, SETUP.RC, SWITCH.INF, switch.in!Window NT Terminal Server Editon: empty.tmpWindow Server 2003: softbar.in!Windows: empty.tmpWindows: empty.tmp, hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsWindows: empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsWindows: empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsWindows: empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsWindows: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsWindows: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsWindows: WIN51IP.SP1, empty.tmpWindows .NET Enterprise Serever Beta Build 3604.1: softbar.in!Windows .NET Enterprise Server Beta Debug/Checked Build 3604.1: softbar.in!Windows .NET Standard Server Beta Build 3604.1: softbar.in!Windows .NET Web Server Beta 3 Build 3604.1: softbar.in!Windows 2000: empty.tmpWindows 2000 Server Administrators Companion: empty.tmpWindows 2000 Versions: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Windows 95: SETUP.RCWindows 95 versions, Add-ons for Windows 95: empty.tmpWindows 98: empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsWindows 98: empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsWindows 98: empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsWindows 98 : empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsWindows 98 DDK: NPRN_DDK_FILE_267Windows 98 Debug Symbols: empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mwsWindows 98 for PCs without windows: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsWindows 98 for PCs without windows: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsWindows 98 Plus!98: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsWindows 98 Starts Here: empty.tmpWindows 98 Starts Here: empty.tmpWindows 98 Starts Here: empty.tmpWindows 98 Versions: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Windows 98 with Plus! 98: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsWindows 98Plus: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsWindows CE .NET Evaluation Software: softbar.iniWindows CE 2.0 Technical Information: NOTHING.CWindows Codename Whistler Advanced Server: softbar.in!Windows Codename Whistler Advanced Server Checked/Debug Build: softbar.in!Windows Codename Whistler Server: softbar.in!Windows Component Update: chat.admWindows DDks: NPRN_DDK_FILE_267, empty.tmp, hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Windows Driver Development Kit: NPRN_DDK_FILE_267Windows NT: DISK1Windows NT: DISK1, DISK10, DISK11, DISK12, DISK13, DISK14, DISK15, DISK16, DISK17, DISK18, DISK19, DISK2, DISK20, DISK21, DISK22, DISK3, DISK4, DISK5, DISK6, DISK7, DISK8, DISK9, SWITCH.INF, switch.in!Windows NT: empty.tmpWindows NT: empty.tmpWindows NT: empty.tmpWindows NT: empty.tmpWindows NT: SOURCESWindows NT Device Driver Kit: DISK1, DISK2, SWITCH.INF, switch.in!Windows NT Option Pack: empty.tmpWindows NT Option Pack 4.0: empty.tmpWindows NT Server: CDROM.S, DISK1, DISK1.S, DISK10.S, DISK11.S, DISK12.S, DISK13.S, DISK14.S, DISK15.S, DISK16.S, DISK17.S, DISK18.S, DISK19.S, DISK2.S, DISK20.S, DISK21.S, DISK22.S, DISK23.S, DISK24.S, DISK25.S, DISK26.S, DISK27.S, DISK28.S, DISK29.S, DISK3.S, DISK30.S, DISK4.S, DISK5.S, DISK50.S, DISK51.S, DISK6.S, DISK7.S, DISK8.S, DISK9.SWindows NT Server: DISK1, DISK2, SWITCH.INF, switch.in!Windows NT Server: DISK1, DISK2, SWITCH.INF, switch.in!Windows NT Server 4.0 Resource Kit Supp 2: DISK1.ID, DISK2.IDWindows NT Server Resource Kit Supplement 4: DISK1.ID, DISK2.ID, empty.tmpWindows NT Server Upgrade: AUTOREG.DAT, DISK1.ID, DISK2.ID, DISK3.IDWindows NT Service Pack 4: empty.tmpWindows NT Service Pack 4: empty.tmpWindows NT Service Pack 4: empty.tmpWindows NT Service Pack 4 12/98: empty.tmpWindows NT Service Pack 5: empty.tmpWindows NT Technical Support Training: DISK1.IDWindows NT Workstation: DISK2Windows NT Workstation: empty.tmpWindows NT Workstation: empty.tmpWindows NT Workstation: empty.tmpWindows NT Workstation 3.5: CDROM.W, CR, DISK1, DISK1.W, DISK10.W, DISK11.W, DISK12.W, DISK13.W, DISK14.W, DISK15.W, DISK16.W, DISK17.W, DISK18.W, DISK19.W, DISK2, DISK2.W, DISK20.W, DISK21.W, DISK22.W, DISK23.W, DISK24.W, DISK25.W, DISK26.W, DISK27.W, DISK28.W, DISK29.W, DISK3.W, DISK30.W, DISK4.W, DISK5.W, DISK6.W, DISK7.W, DISK8.W, DISK9.W, DISKNT, SETUP.RCWindows NT Workstation 3.51: CR, DLL16.DEF, SETUP.RC, SOURCESWindows NT Workstation 4.0, SP3 Drivers: empty.tmpWindows Professional Debug Checked Build: CDTAG.1, TAGFILE.1Windows Server 2003 Enterprise Edition: softbar.in!Windows Server 2003 Visual Studio.net Attendee Portfolio: JScript.js, Templates.inf, softbar.in!Windows Update Windows 98 Service Pack 1: empty.tmpWindows XP: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!, softbar.iniWindows XP: empty.tmp, softbar.in!Windows XP: empty.tmp, softbar.in!, softbar.iniWindows XP: NORMAL.CSS, WIN51IP.SP1, chat.adm, empty.tmp, softbar.in!Windows XP: NORMAL.CSS, WIN51IP.SP1, chat.adm, empty.tmp, softbar.in!Windows XP: softbar.in!Windows XP: softbar.in!Windows XP: softbar.in!Windows XP: softbar.in!Windows XP: softbar.in!Windows XP: softbar.in!Windows XP: softbar.in!Windows XP: softbar.in!, softbar.iniWindows XP: softbar.in!, softbar.iniWindows XP eMbedded Evaluation Software: softbar.iniWindows XP Home Edition: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!Windows XP Home Edition: softbar.in!Windows XP Home Edition Release Candidate 1: softbar.in!Windows XP Professional: softbar.in!Windows XP Professional: WIN51IP.SP1, softbar.in!Windows XP Professional 2002 Service Pack 1: WIN51IP.SP1, softbar.in!Windows XP Professional Checked Build Release Candidate 1: softbar.in!Windows XP Professional Checked/Debug Build: softbar.in!Windows XP Professional Release Candidte 1: softbar.in!Windows XP Tablet PC Edition: WIN51IP.SP1, softbar.in!WindowsNT Service Pack 4 with Update Device Drivers: empty.tmpWindowsNT Service Pack 5: empty.tmpWord: empty.tmpWord: empty.tmpWord: NORMAL.CSS, empty.tmpWorks Suite: empty.tmp, thirdpty.iniWorks with Microsoft Money: empty.tmp, insd_oem.ini, insd_ost.ini, insd_trl.ini, insider.iniYear 2000 Resource CD: eform_templ1.htm, empty.tmp<br>( Autodesk )<br><br>Autodesk Land Desktop: zzldmacs.lsp.AecLDDTcmnAutodesk Mechanical Desktop: ACADPSC.PSAutodesk Mechanical Desktop: ACADPSC.PS, ADDRESS.TXTMechanical Desktop: ACADPSC.PSVIP CD Library: DISK1.ID, empty.tmpVIP CD Library: DISK1.ID, empty.tmp<br>( Software Solutions )<br><br>BLock It!: empty.tmp<br>( MGI )<br><br>Photo Suite: empty.tmpPhoto Suite Platimum Edition: empty.tmp<br>( Adaptec Inc. )<br><br>EZ-SCSI Standard Edition: DISK1.ID, DISK2.ID<br>( Scholastic )<br><br>Clifford The Big Red Dog Reading: BlnMiss.txt, BlnStat.txt, TSStat.txtMath Missions The Amazing Arcade Adventure Grades 3-5: message.txt<br>( Network Associates )<br><br>Network Associates VirusScan 4.0.2: DISK1.IDVirusScan: DISK1.IDVirusScan: DISK1.ID<br>( Maris Multimedia Ltd. )<br><br>Red Shift: empty.tmp<br>( Pro One )<br><br>Multimedia English Composition: CHAPTER5.7T<br>( Micrel-Synergy Semiconductor )<br><br>Data Book: empty.tmp<br>( Compaq )<br><br>Compaq iPAQ Pocket PC Companion CD H3800 Series: empty.tmpCompaq Operating System CD: desktop.ini, softbar.in!Frontline Partnership: empty.tmp<br>( Broderbund Software Inc )<br><br>PC Copy Center: empty.tmpPrint Shop Pro Publisher: PhotoSuite.ini, empty.tmpPrintMaster v.11: empty.tmpThe Print Shop: empty.tmp<br>( Disney Interactive )<br><br>Disney Princess Enchanted Journey: volookup.ds<br>( Data Junction Corp. )<br><br>Data Junction Corporation: DISK1.IDThe Industry Standard for Data Transformation Software: DISK1.ID<br>( Silver Stream )<br><br>SilverStream eXtend: MANIFEST.MF<br>( Whirlwind Software )<br><br>Hackers Encyclopedia 2002: HANGUP.SCR, PICKUP.SCR, seen.ini<br>( Disney )<br><br>Bowling for Screams: cdtag.1, softbar.in!, tagfile.1, win51ic.SP1, win51ip.SP1Disneys Preschool: Long Filename Test File.txtDisneys Toddler: Long Filename Test File.txt<br>( Hemera Technologies Inc. )<br><br>Photo Clip Art 100000: empty.tmp<br>( eGames )<br><br>Break: empty.tmpCollectors Edition 251 Awesome Games!: empty.tmpDrop!: empty.tmpEmazing Mazes: empty.tmpMahjongg Master 5: empty.tmpPenguin Puzzle: empty.tmpPoker Master: empty.tmpPool Master Live Billiards: empty.tmpPuzzle and Word Games: empty.tmpPuzzle Master 4: empty.tmpSnake Eyes: empty.tmpSolitaire Master 5: empty.tmpSupper Bubble Pop: empty.tmpTV Guide Trivia: empty.tmp<br>( LaCie Limited )<br><br>Lacie Silverlining Pro v.6.4.5: DISK1.ID, DISK2.ID<br>( Juno )<br><br>Juno: empty.tmpJuno: empty.tmpJuno New and Improved Version 4.0: empty.tmpJuno New and Improved Version 4.0 150 Free Hours: empty.tmp<br>( The Learning Company Inc. )<br><br>Learn To Speak English: empty.tmpLearn to Speak French: empty.tmpLearn to Speak Spanish: empty.tmpPrint Master Publishing Suite: PMW.FIF, STOPLIST.TXTReader Rabbits Toddler: chat.adm, empty.tmp, sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!<br>( STB Systems )<br><br>PowerGraph 64 V: DISK5.W<br>( Gateway2000 )<br><br>Enterprise System CD Revision 1.1: DISK1.IDGateway System Restoration CD: DISK1.IDGateway System Restoration Kit: DISK2, DISK3, DISK5, DISKN3System CD Revision 1.2: DISK1.IDThe Gateway 2000 Start Pack System CD: DISK5.WThe Gateway 2000 Start Pack System CD: DISK5.W, RT_PATCH.EXE<br>( Abbyy USA Software House Inc. )<br><br>FineReader: chat.adm<br>( Sierra Inc. )<br><br>NasCar Racing: SOURCES<br>( Boomerang Software )<br><br>C++: CPPOCF2.RH, DUMMY.C, RETURN.TXT<br>( Lotus Development Corporation )<br><br>Lotus Notes: DISK.1Lotus Smart Suite 97: LODBC09.DLLSmart Suite 96: APR.030, APR.V30SmartSuite: APR.030, APR.V30SmartSuite: empty.tmp<br>( Silver Star Publishing )<br><br>Guide to Hacking Software Security 2002: CR.LF, actions.ini, challowed.txt, file_id.diz, kicks.txt, pager.txt, repeat.ini, swearlst.txt, tetrinet.ban<br>( Topics Entertainment )<br><br>3rd &amp; 4th Grade Excelerator: DISK1.IDCard and Invitation Maker: SETTINGS.ODSInstant Home Design: sboff.mws, sbpx1.mws, sbpx2.mws, softbar.in!National Geographic Calendars: empty.tmpStudent Dictionary: empty.tmpTarot: TAROT.INI<br>( Intel )<br><br>AL440LX Motherboard Software and Manual CD: DISK1.IDSE440BX Motherboard Software and Manual CD: DISK1.IDSE440BX-2 Motherboard Software and Manual CD: HELP.URLSuperMicr: DISK1.ID, DISK2.ID, cio.dfl<br>( Pinnacle Systems )<br><br>Instant Copy: MP20.cat<br>( Groove Media Inc. )<br><br>Land of the Dead Road to Fiddlers Green: MainMenu.int<br>( Metrowerks )<br><br>CodeWarrior for Palm OS: MWRegSvr.log, empty.tmpCodeWarrior for Plam OS: empty.tmp<br>( Fore Systems, Inc. )<br><br>TACtics Software: expert, mfg<br>( Computer Associates )<br><br>ABCserve Inoculan: ALERT.IP, ALERT.SPXARCserve: ALERT.IP, ALERT.SPX<br>( American Power Conversion )<br><br>PowerChute Plus: pwrchute.dat<br>( Accolade, Inc )<br><br>Eradicator: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID<br>( Encore Software Inc. )<br><br>Family Tree Maker Deluxe 16: empty.tmp<br>( Oracle )<br><br>Oracle 7 Workgroup Server: NULL.TCL, SLMUSGAG.TCLOracle 8i Enterprise Edition: NULL.TCLOracle Fail Safe 2.1.3.0.0: null.tclOracle JDeveloper Suite - Application Server: samplesinstalled.txtOracle JDeveloper Suite - Oracle 8 Enterprise Edition: NULL.TCLOracle Open Tools Initiative: DISK1.IDOracle Visual Workbench for Oracle Procedural Gateway for IBM MQSeries: pgmdummy.datOracle Visual Workbench for Oracle Procedural Gateway for IBM MQSeries: pgmdummy.datOracle Visual Workbench for Oracle Procedural Gateway for IBM MQSeries: pgmdummy.datOracle Workflow Cartridge: null.tclOracle Workflow Cartridge: null.tclOracle Workgroup 2000: CAGPREFS.ORAOralce Open Tools Initiative: DISK1.IDPower Objects: CAGPREFS.ORA<br>( DataKey )<br><br>SignaSURE DTK Developer Tool Kit: empty.tmp<br>( Cosmi Corporation )<br><br>1000 Best Games: HIGH.SCR, print.tx!Bible: New.txtPerfect Typing Pro: _.GrpThe Deluxe Multimedia Bible: New.txt<br>( Ziff-Davis Publishing Company L.P. )<br><br>3 Volume Software Library I: BHOCOPHELP.HMagic for Windows: DISK1.ID, DISK2.ID, DISK3.IDMultimedia Megapac: DISK1.ID, DISK2.ID, DISK3.IDPC Magazine Gaming Megapac: empty.tmpPC Magazine Interactive Companion to Win95/98: empty.tmpPC Magazine Ultimate Archive: empty.tmpPC Magazine Ultimate Utilities for Win95/98: empty.tmp<br>( Information Builder )<br><br>Focus Desktop Developer: empty.tmp<br>( Corel Corporation )<br><br>Corel PaintShop Pro Photo X2: _14845345283B5104439BBCEE60410F39, _3356C74944F746088C606D8013E0341BCorel Word Perfect Suite: DISK1.ID, DISK2.ID, DISK3.IDCorel WordPerfect Suite: DISK1.ID, DISK2.ID, DISK3.IDCorel WordPerfect Suite 7: DISK1.ID, DISK2.ID, DISK3.IDCorel WordPerfect Suite 7: DISK1.ID, DISK2.ID, DISK3.IDUlead VideoStudio 11 Plus: _14845345283B5104439BBCEE60410F39, _68F5453658CA49ED8E9236DD680AC46FVentura 7: CDBEDIT.CNTWordPerfect Suite: DISK1.ID, DISK2.ID, DISK3.ID<br>( Dark Bay Ltd. )<br><br>Hackers Handbook: HANGUP.SCR, PICKUP.SCRHacks and Cracks: paper.spe, &nbsp;WS&nbsp;ĘGe&nbsp;.ĘTĘ<br>( Penumbra Software )<br><br>Super Mojo: DISK1.ID<br>( Matrox )<br><br>Millenium G200: empty.tmp<br>( Wingear )<br><br>Internet Utilities: MLT1.DAT, MLT10.DAT, MLT11.DAT, MLT12.DAT, MLT2.DAT, MLT3.DAT, MLT4.DAT, MLT5.DAT, MLT6.DAT, MLT7.DAT, MLT8.DAT, MLT9.DAT, empty.tmp<br>( SmithMicro Software )<br><br>Check It Suite: empty.tmp<br>( Rational Software Corporation )<br><br>Rational Software 98i Professional Edition Service Pack 1: roseaddin.cnt<br>( ScanSoft Inc. )<br><br>Dragon Naturally Speaking 8: _183285E5011442B0BA8CE077B1F0409F, _98B6831E021F441380FD957D62F80DBCPhotoSoap2: empty.tmp<br>( Quicken )<br><br>Quicken TurboTax Federal Return Tax Year 1998: empty.tmp<br>( Pyro Studios )<br><br>Praetorians: SIV_WR.BRS<br>( Individual Software Inc. )<br><br>Resume Maker: empty.tmp<br>( IBM Inc. )<br><br>DB2 Universal Database Enterprise Edition: UDBEEIBM 10/100 Ethernet Mini-PCI Adapter with 56K Modem by 3Com: WDHAIBF.CAT, WMHAIBF.catIBM Developer Connection: ibm-1089.xml, ibm-1123.xmlThinkPad Customization CD for IMB ThinkPad 600: LODBC09.DLL<br>( Trellix Corporation )<br><br>Trellix The Document Builder for the Web Era: DISK1.ID<br>( Barnes &amp; Noble )<br><br>Free Unlimited Internet Service Barnes &amp; Nobles: empty.tmp<br>( MKS )<br><br>MKS Toolkit for Developers: Cd.inf, F1041_noop.rules.78D410E0_4B1B_11D5_B383_0001023564D1, GLOBALS.ALImks Toolkit: Cd.inf, GLOBALS.ALI, cd.infMKS Toolkit for System Administrator: Cd.inf, F1041_noop.rules.78D410E0_4B1B_11D5_B383_0001023564D1, GLOBALS.ALI<br>( ANSYS )<br><br>ANSYS: ans_ext.tbl, ans_ext.tbl.sav, menulist57.ansAnsys - Hardware Platforms and Os: ANS_EXT.TBL, ans_ext.tbl.sav<br>( Platinum Technology )<br><br>VR Creator: empty.tmp<br>( Epson )<br><br>Epson Stylus Color 600 - Perfect Picture: INTRO.DATPrinter Software: INTRO.DAT<br>( Dell )<br><br>Application Backup: Dell-Installed Programs: empty.tmpDell Dimension Resource Cd: DISK1.ID, DISK2.IDDell Dimension ResourceCD: DISK1.ID, DISK2.IDDell Drivers and Utilities: RADX3D.LOGDell Inspiron 7000 System Software: DISK1.ID, DISK2.IDDell Inspiron System Software: Disk1.id, Disk2.idDell Precision Workstation ResourceCD: RADX3D.LOGDell Precision Workstation ResourceCD Backup Information: RADX3D.LOGDell Product Recovery CD: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsReinstallation CD Microsoft Windows XP Professional: softbar.in!<br>( ABBY Software Ltd. )<br><br>FineReader: chat.adm<br>( McAfee Software )<br><br>Firewall: empty.tmpInternet GuardDog Pro: empty.tmpInternet Security: empty.tmpMcAfee VirusScan: DISK1.IDMcAfee VirusScan: DISK1.IDMcAfee VirusScan for Windos 3.1x: DISK1.ID, DISK2.IDMcAfee VirusScan for Windows 95: DISK1.ID, DISK2.ID, DISK3.IDQuickClean: empty.tmpUnInstaller: SETUP.ISSVirusScan: DISK1.IDVirusScan: empty.tmpVirusScan: empty.tmpVirusScan: empty.tmpVirusScan: SETUP.ISS<br>( Red Orb )<br><br>Riven: empty.tmp<br>( SoftKey Multimedia Inc. )<br><br>MPC Wizard: DISK1<br>( Wiley Publishing, Inc )<br><br>Hack Attacks Denied Second Edition: links.txt<br>( EMS Database Management Solutions, Inc. )<br><br>SQL Manager.net: DBDWORK.INI<br>( ZG Financial Corp )<br><br>Hard Drives &amp; Subsystems: config.dat<br>( Aladdin Systems Inc. )<br><br>Stuffit Deluxe: empty.tmpStuffIt Deluxe: empty.tmp<br>( Hewlett Packard )<br><br>HewLett Packard LaserJet Internet Custom News Kit: DISK1.ID, DISK2.ID, DISK3.IDTake the leap into digital photography: empty.tmpTrellix: DISK1.IDWin 95/98 Product Recovery: DISK1.ID, DISK2.ID<br>( Peachtree Software Inc. )<br><br>Accounting: DISK1.ID, empty.tmpComplete Accounting: empty.tmp<br>( Visioneer )<br><br>Visioneer PaperPort Deluxe: disk1.idVisioneer PaperPort Deluxe: disk1.id, empty.tmp<br>( Digital Equipment Corporation )<br><br>Digital PC 5100: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID, DISK5.ID, DISK6.ID, DISK7.ID<br>( Disney/ Pixar )<br><br>The Incredibles When Danger Calls: onstoproom.lua<br>( SoftQuad Software )<br><br>HotMetal Pro: empty.tmpHotMetal Pro - NARA: empty.tmpSoftQuad XMetal: empty.tmpXMetal: empty.tmp<br>( Cheyenne Software Inc. )<br><br>Cheyenne Live Trial Software: ALERT.IP, ALERT.SPX<br>( MyFamily.com Inc. )<br><br>Family Tree Maker 2006: empty.tmp<br>( Austin-Hayne Corporation )<br><br>Employee Appraiser: DICT.APP<br>( Gateway )<br><br>Gateway - Operating System Backup Cd: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsGateway 2000 Start Pack - System Cd: DISK5.WGateway 2000 System Cd: DISK1.ID, DISK2.ID, DISK5.WGateway Applications Disc 1 of 2: empty.tmpGateway Drivers: DISK2, DISK3, DISK5, DISKN3Gateway Drivers: DISK2, DISK3, DISK5, DISKN3Gateway Drivers Controladores Pilotes: DISK2, DISK3, DISK5, DISKN3Gateway Micro Server Companion CD: empty.tmpGateway Operating System Backup Cd: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsGateway Operating System Windows XP Pro Edition SP2: softbar.in!Gateway Product Information: empty.tmpGateway System Cd: DISK1.ID, DISK2.ID, DISK5.WGateway System CD V 4.5: CDTEST.LOG, COMTEST.LOG, DISK5.W, FDTEST.LOG, HDTEST.LOG, KBDTEST.LOG, LPTTEST.LOG, MBTEST.LOG, MEMTEST.LOG, RT_PATCH.EXE, VIDTEST.LOGGateway System Restoration Cd: DISK1.IDGateway System Restoration CD: DISK1.IDGateway System Restoration Cd: DISK1.ID, DISK2, DISK3, DISK5, DISKN3Gateway System Restoration CD: DISK1.ID, DISK2, DISK3, DISK5, DISKN3Gateway System Restoration CD: DISK1.ID, DISK2, DISK3, DISK5, DISKN3Gateway System Restoration CD: DISK1.ID, DISK2, DISK3, DISK5, DISKN3Gateway System Restoration Cd: DISK2, DISK3, DISK5, DISKN3Gateway System Restoration Cd: DISK2, DISK3, DISK5, DISKN3Gateway System Restoration CD: DISK2, DISK3, DISK5, DISKN3Gateway System Restoration CD: DISK2, DISK3, DISK5, DISKN3Gateway System Restoration CD: DISK2, DISK3, DISK5, DISKN3Gateway System Restoration CD: DISK2, DISK3, DISK5, DISKN3Gateway System Restoration Kit: hold1.txt, hold2.txt, hold3.txt, hold4.txt, hold5.txt, hold6.txt, hold7.txt, hold8.txt, hold9.txt, sboff.mws, sbpx1.mws, sbpx2.mwsProduct Information: empty.tmpSystem Cd: CDTEST.LOG, COMTEST.LOG, DISK5.W, FDTEST.LOG, HDTEST.LOG, KBDTEST.LOG, LPTTEST.LOG, MBTEST.LOG, MEMTEST.LOG, VIDTEST.LOGSystem CD: DISK1.ID, DISK5.WSystem CD: DISK5.WSystem CD: DISK5.WSystem Restoration CD: DISK1.ID, DISK2, DISK3, DISK5, DISKN3System Software for Gateway 2000 Computers: DISK5.WThe Gateway 2000 Start Pack System CD: DISK5.W, RT_PATCH.EXEThe Gateway 2000 System CD Start Pack: DISK1.ID, DISK2.ID, DISK5.WThe Gateway 2000 System CD Start Pack: DISK5.WThe Gateway 2000 System CD Start Pack: DISK5.W<br>( First International Computer Inc. )<br><br>CD Pro 1st Mainboard: SIS620.CAT<br>( Salford Software Ltd )<br><br>Salford Compilers and Tools: empty.tmp<br>( MICROPROSE )<br><br>Master of ORION II Battle at Antares: DISK1.ID, DISK2.ID, DISK3.ID, DISK4.ID<br>( Jaton )<br><br>3D Force Software &amp; Document: empty.tmp3D Force Software &amp; Document: TRIDXP.CATSoftware &amp; Document Master CD for Video Family: DISK1.ID<br>( Sausage Software Pty Ltd. )<br><br>Hot Dog Web Editor: HTDOGPRO.INI<br>( Macromedia Inc. )<br><br>Beta Windows NT Workstation 5.0 Checked/Debug Build: iitipm.htmDreamweaver: empty.tmpDreamweaver: empty.tmpDreamweaver: empty.tmpDreamWeaver: empty.tmpFireworks: empty.tmp

#8 Guest_superbird_*

Guest_superbird_*

  • Guests
  • OFFLINE
  •  

Posted 01 November 2009 - 09:00 AM

Hi,

One or more of the identified infections is a backdoor trojan.

This allows hackers to remotely control your computer, steal critical system information and download and execute files.

I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Though the trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?
When Should I Format, How Should I Reinstall

We can still clean this machine but I can't guarantee that it will be 100% secure afterwards. Let me know what you decide to do.

If you want to proceed, do this please:

Open Notepad.
Copy this in the Notepad-file:

@ECHO OFF
IF EXIST log.txt DEL log.txt
ECHO Deleting files>>log.txt
FOR %%g in (
C:\WINDOWS\system32\tdlwsp.dll) DO (
IF EXIST %%g (
ATTRIB -r -s -h %%g
DEL %%g
IF EXIST %%g (
ECHO %%g not deleted>>log.txt
) ELSE (
ECHO %%g deleted>>log.txt)
) ELSE (
ECHO %%g not found>>log.txt))
START NOTEPAD.EXE log.txt

Go to File - Save as...
Fill in the next values:
Location: Desktop
File name: del.bat
File type: All files (*.*).
Now, click Save.
Doubleclick del.bat.
Post the contents of the logfile that opens in your next reply.

#9 melmo

melmo
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  

Posted 01 November 2009 - 10:11 AM

I have the following questions:

a) Are you saying that even after the reformat you can't gurantee the PC is secure?
:( Is there a way to know when the trojan inserted in the PC. I have a PC Back-up on external USB drive - that I have not backed up in 3-4 months - So loosing data may not be an issue. Thus is the trojan came in in last month, i should not have an issue because the external drive has not been powered up in 3-4 months.
c) Is it safe to copy photo, files etc to a DVD or will the trojan get into the dvd too?
d) When you say "if you want to proceed, do this please: Open Notepad. Copy this in the Notepad-file: " are you taking me to the formating steps or just the cleaning steps?

e) I have a PC that was Vista business with XP downgrade that I paid for. - will the recovery disk force me to just Vista? It is probably a Dell question not you.


Thanks

#10 Guest_superbird_*

Guest_superbird_*

  • Guests
  • OFFLINE
  •  

Posted 01 November 2009 - 10:55 AM

Hi,

a) Are you saying that even after the reformat you can't gurantee the PC is secure?

No, after a format you can be sure everything is gone. But when you decide to don't do a format, and we clean up, then we can't be 100% sure that you can trust your computer completely.

b ) Is there a way to know when the trojan inserted in the PC. I have a PC Back-up on external USB drive - that I have not backed up in 3-4 months - So loosing data may not be an issue. Thus is the trojan came in in last month, i should not have an issue because the external drive has not been powered up in 3-4 months.

It happened somewhere in the end of october as far as I can see.

c) Is it safe to copy photo, files etc to a DVD or will the trojan get into the dvd too?

You can always copy photos and other images, and documents. But it's risky when you copy zipped files, or executable files.
You should not backup any operating system related files, and files you don't recognize. So you only should backup files you really need, and that you can't replace.

) When you say "if you want to proceed, do this please: Open Notepad. Copy this in the Notepad-file: " are you taking me to the formating steps or just the cleaning steps?

That is the cleaning step.

e) I have a PC that was Vista business with XP downgrade that I paid for. - will the recovery disk force me to just Vista? It is probably a Dell question not you.

Then I think it will ask for Vista, as the recovery disks were made for that. To be sure, you can ask Dell for this.

#11 melmo

melmo
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:08:54 AM

Posted 02 November 2009 - 07:59 PM

Superbird,

I have decided to reinstall Win XP. I am also hoping it will speed up my PC.

I have noticed that my work notebook boots up extremely fast but not my PC which is newer and faster.

The slowness creeps in after adding on plugins, system tray items and too many running processes in background when taskbar is opened.

Do you have suggestions on how to minimize taskbar items?


Thanks for all your help.

#12 Guest_superbird_*

Guest_superbird_*

  • Guests
  • OFFLINE
  •  

Posted 03 November 2009 - 10:16 AM

Hi,

You can diable unneeded startup items by doing the following:
  • Go to Start > Run
  • Type msconfig and press Enter
  • Now click on the Startup tab
  • You see the items present now that boot automatically
  • You can refer all items on this webpage
  • Disable the things you want, and then click Apply and Close
  • Windows will ask you to reboot. Do this now.
Never disable your anti-virus program and other neccessary programs!
Including the entries from your mouse and keyboard. Also don't disable anything where you are not sure of.

Also, to protect yourself against malware and reduce your chance of reinfection in the future, I strongly recommend to have a look at following links (giving some advice and tips):

#13 htv8

htv8

  • Members
  • 1,694 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:08:54 AM

Posted 11 November 2009 - 04:34 AM

As the problem here seems to be resolved, this topic is now closed.
If you need this topic reopened, please PM a staff member and we will reopen it for you (include the address of this thread in your request). This applies to the original topic starter only. If you should have a new issue, please start a new topic. Everyone else with similar problems, please start a new topic.
If I have not posted back within 24 hours, feel free to send me a PM with your topic link.

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users