Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Harrypotter Trojan


  • Please log in to reply
7 replies to this topic

#1 nukusjeff

nukusjeff

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 30 September 2006 - 10:09 AM

Did all in Preparation Guide. Spybot didn't run, Houscall, Panda, and Bitdefender didn't either. McAffee Stinger worked but didn't find anything. Put ZoneAlarm on and Windows are updated. Did the Hijackthis and when trying to run it I get "hijackthis_sfx.exe is not a valid Win32 application. Ad-ware SE finds something each time I startup and scan.

BC AdBot (Login to Remove)

 


m

#2 nukusjeff

nukusjeff
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 30 September 2006 - 10:43 AM

Oh, I have Norton on my laptop but it didn't seem to find anything. When I would shutdown my computer there would be a window that said, "Harry Potter Trojan" shutting down. Made me a little mad. Don't know if it is related but my left click button has been unresponsive though allows me to move it around. When click on document after awile it picks it up but not open it. So I use a mouse. This happened this week too. Coincidence? What do you advise?

#3 nukusjeff

nukusjeff
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 30 September 2006 - 11:40 AM

Here's my Adware SE log starting from 29th, I hope this helps:

ArchiveData(auto-quarantine- 2006-09-29 22-19-01.bckp)
Referencefile : SE1R124 19.09.2006
======================================================

TRACKING COOKIE

obj[0]=IECache Entry : Cookie:jeff@hitbox.com/
obj[1]=IECache Entry : Cookie:jeff@media.fastclick.net/
obj[2]=IECache Entry : Cookie:jeff@tribalfusion.com/
obj[3]=IECache Entry : Cookie:jeff@fastclick.net/
obj[4]=IECache Entry : Cookie:jeff@atdmt.com/
obj[5]=IECache Entry : Cookie:jeff@~~local~~/

BEGIN2SEARCH

obj[6]=Regkey : software\microsoft\downloadmanager
obj[7]=RegData : software\microsoft\internet explorer\main "Use Search Asst"
obj[8]=File : C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP221\A0104484.exe

ArchiveData(auto-quarantine- 2006-09-29 23-47-08.bckp)
Referencefile : SE1R124 19.09.2006
======================================================

MRU LIST

obj[0]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\06 aug 23[1].humility.LNK
obj[1]=MRU FileReference : C:\Documents and Settings\Jeff\recent\0507-19 minutes Gen[1]. NGO Coord.Mting.lnk
obj[2]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\adobe\acrobat reader\6.0\avgeneral\crecentfiles\c1
obj[3]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\corel\user assistant\12\recent work\wordperfect\last opened\a
obj[4]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\corel\user assistant\12\recent work\wordperfect\last opened\b
obj[5]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\corel\user assistant\12\recent work\wordperfect\last opened\c
obj[6]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\adobe\acrobat reader\6.0\avgeneral\crecentfiles\c5
obj[7]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\corel\user assistant\12\recent work\wordperfect\last opened
obj[8]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\direct3d\mostrecentapplication name
obj[9]=MRU RegReference : software\microsoft\direct3d\mostrecentapplication name
obj[10]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\direct3d\mostrecentapplication name
obj[11]=MRU RegReference : software\microsoft\direct3d\mostrecentapplication name
obj[12]=MRU RegReference : software\microsoft\directdraw\mostrecentapplication name
obj[13]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\directinput\mostrecentapplication name
obj[14]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\directinput\mostrecentapplication id
obj[15]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\internet explorer download directory
obj[16]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\internet explorer\main save directory
obj[17]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\internet explorer\typedurls
obj[18]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\mediaplayer\medialibraryui mllastselectednode
obj[19]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\mediaplayer\player\recentfilelist
obj[20]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\mediaplayer\preferences lastplaylistindex
obj[21]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\mediaplayer\preferences lastplaylist
obj[22]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\microsoft management console\recent file list
obj[23]=MRU FileReference : C:\Documents and Settings\Jeff\recent\5.11.06.lnk
obj[24]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Accountable Reimbursement Policy.lnk
obj[25]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Aceh Slideshow 2.key.lnk
obj[26]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Aceh Slideshow 2.lnk
obj[27]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\office\11.0\access\settings MRU1
obj[28]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\office\11.0\access\settings MRUFlags1
obj[29]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\search assistant\acmru\5603
obj[30]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\search assistant\acmru\5604
obj[31]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\office\11.0\access\settings MRU3
obj[32]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru\*
obj[33]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.AVI
obj[34]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.bmp
obj[35]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.cougars_catches_football_watw210
obj[36]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.dic
obj[37]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.doc
obj[38]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.eml
obj[39]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.gif
obj[40]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.HLP
obj[41]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.htm
obj[42]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.html
obj[43]=MRU RegReference : software\musicmatch\musicmatch jukebox\4.0\mmradio LastStation
obj[44]=MRU RegReference : software\musicmatch\musicmatch jukebox\4.0\mmradio LastStationName
obj[45]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.INS
obj[46]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.JPE
obj[47]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.jpg
obj[48]=MRU RegReference : .DEFAULT\software\microsoft\windows media\wmsdk\general computername
obj[49]=MRU RegReference : S-1-5-18\software\microsoft\windows media\wmsdk\general computername
obj[50]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows media\wmsdk\general computername
obj[51]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.mpg
obj[52]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.pdf
obj[53]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.pdx
obj[54]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.pps
obj[55]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.ppt
obj[56]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.pub
obj[57]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.rtf
obj[58]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.sdl
obj[59]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.shs
obj[60]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.sit
obj[61]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.tif
obj[62]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.txt
obj[63]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.WAV
obj[64]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.wma
obj[65]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.wmv
obj[66]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.wpd
obj[67]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.wps
obj[68]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.xls
obj[69]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.ZIP
obj[70]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\Folder
obj[71]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Donna9.11.06.lnk
obj[72]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\runmru
obj[73]=MRU RegReference : software\musicmatch\musicmatch jukebox\4.0\fileconv
obj[74]=MRU FileReference : C:\Documents and Settings\Jeff\recent\DSCN3248_JPG_files.lnk
obj[75]=MRU FileReference : C:\Documents and Settings\Jeff\recent\DSC_3254.lnk
obj[76]=MRU FileReference : C:\Documents and Settings\Jeff\recent\DSC_3265.lnk
obj[77]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Duane4.11.06.lnk
obj[78]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Duane5.22.06.lnk
obj[79]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Education budget.lnk
obj[80]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Emergency Staff Information2.lnk
obj[81]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Extras.lnk
obj[82]=MRU FileReference : C:\Documents and Settings\Jeff\recent\F1020021.lnk
obj[83]=MRU FileReference : C:\Documents and Settings\Jeff\recent\flowers.lnk
obj[84]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Former Michigan State football coach Muddy Waters dies at 83 - NCAAF - Yahoo! Sports.lnk
obj[85]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Germany Report.lnk
obj[86]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Gerry and Lois' Things for SALE.lnk
obj[87]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Gerry8.23.06.lnk
obj[88]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Gulzada9.29.06.lnk
obj[89]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Hank9.26.06.lnk
obj[90]=MRU FileReference : C:\Documents and Settings\Jeff\recent\HAPPY ANNIVERSARY.lnk
obj[91]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Hey Team.lnk
obj[92]=MRU FileReference : C:\Documents and Settings\Jeff\recent\HEY WRESTLERS.lnk
obj[93]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Hi Christianne.lnk
obj[94]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Hi Liz.lnk
obj[95]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Holly's4.lnk
obj[96]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Holly's4b.lnk
obj[97]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Holly4.27.06.lnk
obj[98]=MRU FileReference : C:\Documents and Settings\Jeff\recent\How to remove a Trojan, Virus, Worm, or other Malware.htm (2).lnk
obj[99]=MRU FileReference : C:\Documents and Settings\Jeff\recent\How to remove a Trojan, Virus, Worm, or other Malware.htm (3).lnk
obj[100]=MRU FileReference : C:\Documents and Settings\Jeff\recent\How to remove a Trojan, Virus, Worm, or other Malware.htm.lnk
obj[101]=MRU FileReference : C:\Documents and Settings\Jeff\recent\HPIM1027.lnk
obj[102]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Huttar-2006-09.lnk
obj[103]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Ibumah.lnk
obj[104]=MRU FileReference : C:\Documents and Settings\Jeff\recent\ImpactIndo.lnk
obj[105]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Incarnational Development.lnk
obj[106]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Items affected by USAID Road.lnk
obj[107]=MRU FileReference : C:\Documents and Settings\Jeff\recent\james.htm.lnk
obj[108]=MRU FileReference : C:\Documents and Settings\Jeff\recent\JDout.lnk
obj[109]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Jeff.lnk
obj[110]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Jenn2Jaap9.18.06.lnk
obj[111]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Jess9.21.06.lnk
obj[112]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Job D.lnk
obj[113]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Job Description for health assistant (2).lnk
obj[114]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Keithref4Kelly.lnk
obj[115]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Kelly.lnk
obj[116]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Kelly3.22.06.lnk
obj[117]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Kelly3.23.06.lnk
obj[118]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Kelly3.9.06.lnk
obj[119]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Kelly5.30.06.lnk
obj[120]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Kelly7.18.06.lnk
obj[121]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Kissinger4.11.06.lnk
obj[122]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Lamb'sOUt.lnk
obj[123]=MRU FileReference : C:\Documents and Settings\Jeff\recent\LCC - prayer requests-legal page.lnk
obj[124]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Letter to JV 05-09-2006.lnk
obj[125]=MRU FileReference : C:\Documents and Settings\Jeff\recent\LIFELINE Sept 2006 field v pg 1.lnk
obj[126]=MRU FileReference : C:\Documents and Settings\Jeff\recent\LIFELINE Sept 2006 field v pg 2.lnk
obj[127]=MRU FileReference : C:\Documents and Settings\Jeff\recent\littlefan9di.lnk
obj[128]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Mac.lnk
obj[129]=MRU FileReference : C:\Documents and Settings\Jeff\recent\MACDRIVE.lnk
obj[130]=MRU FileReference : C:\Documents and Settings\Jeff\recent\macorder.lnk
obj[131]=MRU FileReference : C:\Documents and Settings\Jeff\recent\MedEvacdocument1[1][1][1][1].0.lnk
obj[132]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Medical Emergency Plan.lnk
obj[133]=MRU FileReference : C:\Documents and Settings\Jeff\recent\MiRKHAN9.1.06.lnk
obj[134]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Mirkhan9.11.06.lnk
obj[135]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Mirkhan9.4.06.lnk
obj[136]=MRU FileReference : C:\Documents and Settings\Jeff\recent\MomS5.8.06.lnk
obj[137]=MRU FileReference : C:\Documents and Settings\Jeff\recent\MOMS9.29.06.lnk
obj[138]=MRU FileReference : C:\Documents and Settings\Jeff\recent\MONTHLY ACCOUNT STATEMENT.lnk
obj[139]=MRU FileReference : C:\Documents and Settings\Jeff\recent\MRCDir.lnk
obj[140]=MRU FileReference : C:\Documents and Settings\Jeff\recent\MRDS Lamno Proposal - Agroforestry.lnk
obj[141]=MRU FileReference : C:\Documents and Settings\Jeff\recent\My Pictures.lnk
obj[142]=MRU FileReference : C:\Documents and Settings\Jeff\recent\NCAAF - Idaho Vandals-Michigan State Spartans Box Score Saturday September 2, 2006 - Yahoo! Sports.lnk
obj[143]=MRU FileReference : C:\Documents and Settings\Jeff\recent\NCAAF - Idaho Vandals-Michigan State Spartans Recap Saturday September 2, 2006 - Yahoo! Sports.lnk
obj[144]=MRU FileReference : C:\Documents and Settings\Jeff\recent\NCAAF - Iowa Hawkeyes-Syracuse Orange Recap Saturday September 9, 2006 - Yahoo! Sports.lnk
obj[145]=MRU FileReference : C:\Documents and Settings\Jeff\recent\NCAAF on Yahoo! Sports - News, Scores, Standings.lnk
obj[146]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Nortoncase #.lnk
obj[147]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Notre Dame-Michigan State Preview - NCAAF - Yahoo! Sports.lnk
obj[148]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Out.lnk
obj[149]=MRU FileReference : C:\Documents and Settings\Jeff\recent\P7130001.lnk
obj[150]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Personal Information.lnk
obj[151]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Personal.lnk
obj[152]=MRU FileReference : C:\Documents and Settings\Jeff\recent\PILAT Notebook.lnk
obj[153]=MRU FileReference : C:\Documents and Settings\Jeff\recent\plans of MRDS concering education.lnk
obj[154]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Prayer list for JVB.lnk
obj[155]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Preparation Guide For Use Before Posting A Hijackthis Log.htm.lnk
obj[156]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Readme.lnk
obj[157]=MRU FileReference : C:\Documents and Settings\Jeff\recent\readme_wa.lnk
obj[158]=MRU FileReference : C:\Documents and Settings\Jeff\recent\ReasonforSat.lnk
obj[159]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Rebers8.29.06.lnk
obj[160]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Schoolhouse Source.lnk
obj[161]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Section B.lnk
obj[162]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Section C (2).lnk
obj[163]=MRU FileReference : C:\Documents and Settings\Jeff\recent\SECTIONB.lnk
obj[164]=MRU FileReference : C:\Documents and Settings\Jeff\recent\SECURITY MEETING UN, NGO, BRR, RED CROSS 220906 - DRAFT.lnk
obj[165]=MRU FileReference : C:\Documents and Settings\Jeff\recent\September.lnk
obj[166]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Settings.lnk
obj[167]=MRU FileReference : C:\Documents and Settings\Jeff\recent\setup.lnk
obj[168]=MRU FileReference : C:\Documents and Settings\Jeff\recent\sha.lnk
obj[169]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Singapore2.22.06.lnk
obj[170]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Smiths9.4.06.lnk
obj[171]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Spartans Top Panthers, 38-23 Drew Stanton finishes with 303 total yards against Pittsburgh.lnk
obj[172]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Sports.internet.msc stuff.lnk
obj[173]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Sports.lnk
obj[174]=MRU FileReference : C:\Documents and Settings\Jeff\recent\SR29.lnk
obj[175]=MRU FileReference : C:\Documents and Settings\Jeff\recent\SR30.lnk
obj[176]=MRU FileReference : C:\Documents and Settings\Jeff\recent\STCTQSTN.lnk
obj[177]=MRU FileReference : C:\Documents and Settings\Jeff\recent\TearFund6.29.05.lnk
obj[178]=MRU FileReference : C:\Documents and Settings\Jeff\recent\TF05%.lnk
obj[179]=MRU FileReference : C:\Documents and Settings\Jeff\recent\TFProp10.19.05.lnk
obj[180]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Thanks.lnk
obj[181]=MRU FileReference : C:\Documents and Settings\Jeff\recent\The Apple Store (U_S_) - MacBook Pro.lnk
obj[182]=MRU FileReference : C:\Documents and Settings\Jeff\recent\The Apple Store (U_S_).lnk
obj[183]=MRU FileReference : C:\Documents and Settings\Jeff\recent\The Like Young - Worry A Lot - 192.lnk
obj[184]=MRU FileReference : C:\Documents and Settings\Jeff\recent\thumb.34f2bf0cf13c4dada5f859bd3daa2a26.lnk
obj[185]=MRU FileReference : C:\Documents and Settings\Jeff\recent\TomA4Kelly.lnk
obj[186]=MRU FileReference : C:\Documents and Settings\Jeff\recent\torti12.21.05.lnk
obj[187]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Transtool.lnk
obj[188]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Travel Office Search Main.lnk
obj[189]=MRU FileReference : C:\Documents and Settings\Jeff\recent\tURKEY9.14.06.lnk
obj[190]=MRU FileReference : C:\Documents and Settings\Jeff\recent\UM_Wonka3.lnk
obj[191]=MRU FileReference : C:\Documents and Settings\Jeff\recent\UseofrSat.lnk
obj[192]=MRU FileReference : C:\Documents and Settings\Jeff\recent\user Jeff.lnk
obj[193]=MRU FileReference : C:\Documents and Settings\Jeff\recent\WarHammer 40000 Winter Assault.lnk
obj[194]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Weis not panicking following lopsided loss - NCAAF - Yahoo! Sports.lnk
obj[195]=MRU FileReference : C:\Documents and Settings\Jeff\recent\WhitePages_com - Online Directory Assistance.lnk
obj[196]=MRU FileReference : C:\Documents and Settings\Jeff\recent\WinterAssault.lnk
obj[197]=MRU FileReference : C:\Documents and Settings\Jeff\recent\womens2nd.lnk
obj[198]=MRU FileReference : C:\Documents and Settings\Jeff\recent\work.lnk
obj[199]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Crystal and Neilout.LNK
obj[200]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Dale and Kathlene.LNK
obj[201]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Debbie.LNK
obj[202]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Debbieout.LNK
obj[203]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Donna.LNK
obj[204]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear family and friends.LNK
obj[205]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear family.LNK
obj[206]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear FRIENDS.LNK
obj[207]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Grace.LNK
obj[208]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear grandma Shermer.LNK
obj[209]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Grandma.LNK
obj[210]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Holly.LNK
obj[211]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Houston folk.LNK
obj[212]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Irma.LNK
obj[213]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Isobel.LNK
obj[214]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Jen4.21.06.LNK
obj[215]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear John.LNK
obj[216]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Juldiz.LNK
obj[217]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Julia.LNK
obj[218]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Larry.LNK
obj[219]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Laurie.LNK
obj[220]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Lewis and Claudia.LNK
obj[221]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Lindy.2 corrections.nur.LNK
obj[222]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Lindy.LNK
obj[223]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Liz.LNK
obj[224]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Marilyn Ritze.LNK
obj[225]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Mark and Karen.LNK
obj[226]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Mary Lou.LNK
obj[227]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Mirxan.LNK
obj[228]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Mom and Dad OUT.LNK
obj[229]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Mom and Dad(Genther).LNK
obj[230]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Mom and Dad.LNK
obj[231]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Mom V.LNK
obj[232]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Mom.LNK
obj[233]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear MomV.LNK
obj[234]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Mr Jeff Verbrugge.LNK
obj[235]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Mr.LNK
obj[236]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Nico and Astrid.LNK
obj[237]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Nico.LNK
obj[238]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Russ.LNK
obj[239]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Trisha and Roger.LNK
obj[240]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Trisha Protzman.LNK
obj[241]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear Vicki and Michael.LNK
obj[242]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear ?????1.11.06.LNK
obj[243]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Debbie1.23.06.LNK
obj[244]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Debbie2.3.07.LNK
obj[245]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Debbie4.27.06.LNK
obj[246]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dec 20th, 2005.LNK
obj[247]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\DeepSx (Z).LNK
obj[248]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Deloitte.LNK
obj[249]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Desktop.ini
obj[250]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Desktop.LNK
obj[251]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Discs needed.LNK
obj[252]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna.LNK
obj[253]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\donna1.3.06.LNK
obj[254]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna1.31.06.LNK
obj[255]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\donna12.21.05.LNK
obj[256]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\donna2.2.06.LNK
obj[257]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna2.3.06.LNK
obj[258]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna2.6.06.LNK
obj[259]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna2.9.06.LNK
obj[260]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna3.31.06.LNK
obj[261]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\donna4.21.06.LNK
obj[262]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna4.6.06.LNK
obj[263]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna5.1.06.LNK
obj[264]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna5.15.06.LNK
obj[265]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna5.23.06.LNK
obj[266]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna5.30.06.LNK
obj[267]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna5.4.06.LNK
obj[268]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna6.2.06.LNK
obj[269]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna6.23.06.LNK
obj[270]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\dONNA6.29.06.LNK
obj[271]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna7.7.06.LNK
obj[272]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna8.23.06.LNK
obj[273]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna8.25.06.LNK
obj[274]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna8.28.06.LNK
obj[275]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna8.3.06.LNK
obj[276]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna9.11.06.LNK
obj[277]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna9.14.06.LNK
obj[278]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna9.21.06.LNK
obj[279]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Donna9.22.06.LNK
obj[280]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\DonnaOut.LNK
obj[281]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dorn anniversary.LNK
obj[282]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dorns8.15.06.LNK
obj[283]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Duane2Lindy.LNK
obj[284]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Duane4.11.06.LNK
obj[285]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Duane5.11.06.LNK
obj[286]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Duane5.15.06.LNK
obj[287]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Duane5.19.06.LNK
obj[288]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Duane5.22.06.LNK
obj[289]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Duane6.23.06.LNK
obj[290]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Duane6.23.06b.LNK
obj[291]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Duane7.11.06.LNK
obj[292]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Duane7.31.06.LNK
obj[293]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\dUANE8.23.06famed.LNK
obj[294]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\DuaneonSawato7.5.06.LNK
obj[295]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Duaneout.LNK
obj[296]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\duanesortof.LNK
obj[297]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Duka Aceh-Bahasa Indoneisa.LNK
obj[298]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\ed- coordinator.LNK
obj[299]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\EmabssyInfo.LNK
obj[300]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\embassy letter.LNK
obj[301]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Emergency Staff Information2.LNK
obj[302]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\EmmaRose Mary Doran.LNK
obj[303]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Esther1.16.06.LNK
obj[304]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Evaluation Jan- maart.LNK
obj[305]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\evaluation june 2006 and beneficiaries and story.LNK
obj[306]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\evaluation june 2006.LNK
obj[307]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\evaluation may 2006.LNK
obj[308]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Faculty chart 2006.LNK
obj[309]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\FA_05029 first instalment.LNK
obj[310]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Final Draft Official Letter-English.LNK
obj[311]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Final Project.LNK
obj[312]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Firehand Lightening Key.LNK
obj[313]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\fluteprice.LNK
obj[314]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\for Claudia Johnson.LNK
obj[315]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Functions and Dysfunctions.LNK
obj[316]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Fungtian2.27.06.LNK
obj[317]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Fungtian4.12.06.LNK
obj[318]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\FungTian6.12.06.LNK
obj[319]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Fungtianout.LNK
obj[320]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\GAMBARAN PEKERJAAN UNTUK STAF BEKERJA DI KANTOR.LNK
obj[321]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\gambaran.LNK
obj[322]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\general condition UK.LNK
obj[323]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\General Staff Meeting January 17.LNK
obj[324]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\General Staff Meeting January 9.LNK
obj[325]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Gerry and Lois' Things for SALE.LNK
obj[326]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Gerry3.22.06.LNK
obj[327]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Gerry3.9.06.LNK
obj[328]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Gerry7.25.06.LNK
obj[329]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Gerry8.23.06.LNK
obj[330]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Gerryout.LNK
obj[331]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Gilbert.LNK
obj[332]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Grand Plaza Parkroyal.LNK
obj[333]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\grandpav1.13.06.LNK
obj[334]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\GrandpaV4.17.06.LNK
obj[335]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Greetings from Seattle.LNK
obj[336]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Gulzada Recommend letter for BC.LNK
obj[337]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Gulzada4.27.06.LNK
obj[338]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Gulzada7.25.06.LNK
obj[339]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Gulzada8.15.06.LNK
obj[340]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\GulzadaOut.LNK
obj[341]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hamadi CV.LNK
obj[342]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hank1.31.06.LNK
obj[343]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hank12.28.05.LNK
obj[344]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hank2.23.06.LNK
obj[345]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hank4.7.06.LNK
obj[346]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hank5.12.06.LNK
obj[347]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hank7.7.06.LNK
obj[348]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hank9.26.06.LNK
obj[349]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\HankOut.LNK
obj[350]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\HAPPY ANNIVERARY.LNK
obj[351]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\HAPPY ANNIVERSARY.LNK
obj[352]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\HAPPY ANNIVERSARYout.LNK
obj[353]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\harrods1.3.06.LNK
obj[354]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Health Unit Log Frame.LNK
obj[355]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Heather1.23.06.LNK
obj[356]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Heatherout.LNK
obj[357]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Heidi7.7.06sent on30th.LNK
obj[358]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\HelenIFRC7.21.06.LNK
obj[359]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Helpmeet.LNK
obj[360]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hey Claudia.LNK
obj[361]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hey guys.LNK
obj[362]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hey Jensens OUT.LNK
obj[363]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hey Team.LNK
obj[364]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\HEY WRESTLERS.LNK
obj[365]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\HFL Karakol Savings and Credit Union.LNK
obj[366]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi Christianne.LNK
obj[367]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi Crystal.LNK
obj[368]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi Dave and Chris.LNK
obj[369]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi Donna.LNK
obj[370]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi Holly.LNK
obj[371]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi James.LNK
obj[372]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\HI JILL.LNK
obj[373]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi Liz.LNK
obj[374]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi Lois.LNK
obj[375]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi MelOUT.LNK
obj[376]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi Mom and Dad.LNK
obj[377]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi Mom and DadOUT.LNK
obj[378]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi ProtzmansOUT.LNK
obj[379]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi Russ and Jill and Alia OUT.LNK
obj[380]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hi SNL friends.LNK
obj[381]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Holly1.16.06.LNK
obj[382]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Holly1.4.06.LNK
obj[383]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Holly2.16.06.LNK
obj[384]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Holly3.14.06.LNK
obj[385]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Holly4.27.06.LNK
obj[386]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Holly5.15.06.LNK
obj[387]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\HOPE THIS IS WHAT YOU NEEDED.LNK
obj[388]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Hotels.LNK
obj[389]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Houston8.23.06.LNK
obj[390]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\HR mentoring.LNK
obj[391]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\HRSDM.LNK
obj[392]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\I assume you heard the news about Saturday.LNK
obj[393]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\I will be sending two emails attached are birth certificates for Jill.LNK
obj[394]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Ibsenvisit4.6.06.LNK
obj[395]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Ibumah.LNK
obj[396]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Ida2Jenn4.27.06.LNK
obj[397]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Iim7.3.06.LNK
obj[398]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Iimref4.26.06.LNK
obj[399]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\ImpactIndo.LNK
obj[400]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\In response to your e.LNK
obj[401]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Incarnation & Development.LNK
obj[402]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\index.dat
obj[403]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\International Health.LNK
obj[404]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Interview for Video Participants.LNK
obj[405]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jaap.12.28.05.LNK
obj[406]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jaap.LNK
obj[407]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jaap4.12.06.LNK
obj[408]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jaap6.16.06.LNK
obj[409]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jaap7.5.06.LNK
obj[410]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\James2.9.06.LNK
obj[411]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\James4.27.06.LNK
obj[412]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\James6.12.06.LNK
obj[413]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\James8.1.06.LNK
obj[414]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\James8.23.06.LNK
obj[415]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\James9.14.06.LNK
obj[416]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\JamesOut.LNK
obj[417]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jarl2.23.06.LNK
obj[418]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jarl2.7.06.LNK
obj[419]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jarlout.LNK
obj[420]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Javaprop8.15.06.LNK
obj[421]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\JD8.23.06.LNK
obj[422]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\JD9.4.06.LNK
obj[423]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\JDout.LNK
obj[424]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jeff and Fitsum.LNK
obj[425]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jeff's flash.LNK
obj[426]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jeff's TM report6.06.LNK
obj[427]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jeffreferenceletter.LNK
obj[428]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\jeffresume.LNK
obj[429]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\JeffW2.10.06.LNK
obj[430]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\JeffWixon2.13.06.LNK
obj[431]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jenn2Jaap1.13.06.LNK
obj[432]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jenn2Jaap2.17.06.LNK
obj[433]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Jenn2Jaap9.18.06.LNK
obj[434]=MRU FileReference : C:\Documen

#4 nukusjeff

nukusjeff
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 30 September 2006 - 11:42 AM

More log:
Data\microsoft\office\recent\Nico2.10.06.LNK
obj[666]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\NICO2.2.06.LNK
obj[667]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Nico2.9.06.LNK
obj[668]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Normal.LNK
obj[669]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Nortoncase #.LNK
obj[670]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Note From Jon.LNK
obj[671]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\November 21st Leadership Meeting.LNK
obj[672]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Orderhotel.LNK
obj[673]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Out.LNK
obj[674]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Out2AMM.LNK
obj[675]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Out2Gerry.LNK
obj[676]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Out2Jess.LNK
obj[677]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Out2Lindy.LNK
obj[678]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Out2NicoDuane.LNK
obj[679]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Outdorn.LNK
obj[680]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\OutJaap.LNK
obj[681]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\OutLindy.LNK
obj[682]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\OuttoKelly.LNK
obj[683]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\oxfam7.31.06.LNK
obj[684]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\P.Hank1.20.06.LNK
obj[685]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Panasonic PV.LNK
obj[686]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Paul2.27.06.LNK
obj[687]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Peacemaking Manual.LNK
obj[688]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Penny5.19.06.LNK
obj[689]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Perjanjian Hera nini.LNK
obj[690]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Personal Information.LNK
obj[691]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Personal Release Form.LNK
obj[692]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Personal.LNK
obj[693]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Peter Kamarea12.8.05.LNK
obj[694]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Phil 1.LNK
obj[695]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Phil 3.LNK
obj[696]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Philippians Chapter 1.LNK
obj[697]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Photos for Houston.LNK
obj[698]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\PILAT Notebook.LNK
obj[699]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\plan to help people.LNK
obj[700]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Polaroid.LNK
obj[701]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Practical Project Planning.LNK
obj[702]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Prayer list for JVB.LNK
obj[703]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Prayer time.LNK
obj[704]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\ProjectSurveyIndon-SNLmno(24Jul06).LNK
obj[705]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Proposalchangesletter2Dale.LNK
obj[706]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Proposed Pay Scale 30.LNK
obj[707]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Protzman1.11.06.LNK
obj[708]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Protzman2.9.06.LNK
obj[709]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Protzman4.14.06.LNK
obj[710]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Protzman9.26.06.LNK
obj[711]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Protzmans4.3.06.LNK
obj[712]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\proverb.LNK
obj[713]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\PS-PrjctSmmryForm(24Jul06)-Media.LNK
obj[714]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\PS-PrjctSmmryForm(24Jul06).LNK
obj[715]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\PubSchool8.23.06.LNK
obj[716]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Putue.LNK
obj[717]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Q1 2006 Narrative.LNK
obj[718]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Quarterly Report June 2006.LNK
obj[719]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Questionnaire Tf.LNK
obj[720]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Questionnaire Tfcomplete.LNK
obj[721]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Read Me for Yogya MRDS training video #3.LNK
obj[722]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Read Me for Yogya MRDS training videos.LNK
obj[723]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\ReasonforSat.LNK
obj[724]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Rebers2.3.06.LNK
obj[725]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Rebers6.29.06.LNK
obj[726]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Rebers8.06.LNK
obj[727]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Rebers8.29.06.LNK
obj[728]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Reimbursement Report 4th qutr 2006.LNK
obj[729]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Reimbursements 1st Quarter 2006.LNK
obj[730]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Relationship between CD and CP.LNK
obj[731]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Relief.Code of Conduct Int.RedCross.LNK
obj[732]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Response Jaap Boersma 13-04-2006.LNK
obj[733]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\RInggit.LNK
obj[734]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\roar12.28.05.LNK
obj[735]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Roar2.27.06.LNK
obj[736]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Roar2.9.06.LNK
obj[737]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Rose2.9.06.LNK
obj[738]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Roth Ideas.LNK
obj[739]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Rothnew.LNK
obj[740]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Russ1.3.06.LNK
obj[741]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Russ1.31.06.LNK
obj[742]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Russ1.5.06.LNK
obj[743]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Russ12.28.05.LNK
obj[744]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Russ6.20.06.LNK
obj[745]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Russ7.25.06.LNK
obj[746]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Russ7.27.06.LNK
obj[747]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\RussOut.LNK
obj[748]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Sangat panas.LNK
obj[749]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Sarah Brooks5.22.06.LNK
obj[750]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Sarah9.18.06.LNK
obj[751]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Sawato8.28.06.LNK
obj[752]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\SDM Form-jadwal.LNK
obj[753]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\SDM PO (E).LNK
obj[754]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\se asia tsunami pix.LNK
obj[755]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Seacon4.20.06.LNK
obj[756]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Section B.LNK
obj[757]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Section C.LNK
obj[758]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\SECTIONB.LNK
obj[759]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\SECURITY MEETING UN, NGO, BRR, RED CROSS 220906 - DRAFT.LNK
obj[760]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Sherry7.21.06.LNK
obj[761]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Sherry7.29.06.LNK
obj[762]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\SherryOut(with schooluniformpic).LNK
obj[763]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\ShukBeth4.21.06.LNK
obj[764]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\shukrat.LNK
obj[765]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Siam12.28.05.LNK
obj[766]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Siam3.14.06.LNK
obj[767]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Singapore2.21.06.LNK
obj[768]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Singapore2.22.06.LNK
obj[769]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\singapore2.23.06.LNK
obj[770]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Singapore2.24.06.LNK
obj[771]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Singapore4.7.06.LNK
obj[772]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Smith Stories 36-E.LNK
obj[773]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Smiths8.23.06.LNK
obj[774]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Smiths9.4.06.LNK
obj[775]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\SNL Health Kesehatan Budget.LNK
obj[776]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\SNTReport - ENG.LNK
obj[777]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Sofia.LNK
obj[778]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Sophie4.18.06.LNK
obj[779]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Sounds of.LNK
obj[780]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Sports.internet.msc stuff.LNK
obj[781]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Sports.LNK
obj[782]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\STMT SAVINGS.LNK
obj[783]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\stuff.LNK
obj[784]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Sub District Matrix - July Master File.LNK
obj[785]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\sumatrannews.LNK
obj[786]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\SUMBANGSIH NUANSA LAMNO.LNK
obj[787]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Summary of BRA Livelihoods Group Meeting 03 May 06 - DRAFT.LNK
obj[788]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Summary of BRA Livelihoods Group Meeting 10 May 06 - DRAFT.LNK
obj[789]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Summary of CDD- LRWG Meeting on Conflict Programming 21 April 06.LNK
obj[790]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\SURAT PERJANJIAN KESEPAKATAN KERJA(8 Mei).LNK
obj[791]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\SURAT PERJANJIAN KESEPAKATAN KERJA(9 Aug).LNK
obj[792]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\syllabus philipines.LNK
obj[793]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\teacherORemployer's reference.LNK
obj[794]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\TeerCatcher12.8.05.LNK
obj[795]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Testamony.LNK
obj[796]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Tf Project proposal guidelines April 2003.LNK
obj[797]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Tf Project reporting guidelines April 2003.LNK
obj[798]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\TF2ndQuarter2006.LNK
obj[799]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\TFProp10.19.05.LNK
obj[800]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\TFProp8.13.05.LNK
obj[801]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\TFSemi2006.LNK
obj[802]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Thank you for considering Ardsley Music when shopping for a musical.LNK
obj[803]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Thank you for taking the CernySmith Adjustment Index.LNK
obj[804]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Thanks for your price inquiry.LNK
obj[805]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Thanks.LNK
obj[806]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\The auctioneer droned on.LNK
obj[807]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\The Ove Glove Set of 2.LNK
obj[808]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\The Passport Services Office provides information and services to American citizens about how to obtain.LNK
obj[809]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\there will be 3 ladies from singapore joining us this time round.LNK
obj[810]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Things from Penang.LNK
obj[811]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\THIS email NEEDS a RESPONSE.LNK
obj[812]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\This is the LIST.LNK
obj[813]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Thuggery7.11.06.LNK
obj[814]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Timeline.LNK
obj[815]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\To Do.LNK
obj[816]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Toba Calendar.LNK
obj[817]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Todd2.27.06.LNK
obj[818]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Tom re Jeff's email about Sawato.LNK
obj[819]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Tom7.18.06.LNK
obj[820]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\TomA4Kelly.LNK
obj[821]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Tommy knew he was taking an awful chance.LNK
obj[822]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\torti12.21.05.LNK
obj[823]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Travel Office Search Main.LNK
obj[824]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Triangular Conflict.LNK
obj[825]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Tsunami Video LogFrame.LNK
obj[826]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\tURKEY9.14.06.LNK
obj[827]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Ugai12.28.05.LNK
obj[828]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Unit AF-Livelihood - Evaluation June 2006.LNK
obj[829]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\UPGs.LNK
obj[830]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\URAIAN TUGA1.LNK
obj[831]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Uraian Tugas Unit AF.LNK
obj[832]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\URAIAN TUGAS.LNK
obj[833]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Urtug HAG 05 nini.LNK
obj[834]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Urtug HAG 05.LNK
obj[835]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Urtug Konsultan Unit SNT-YPB.LNK
obj[836]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Urtug SDM 05.LNK
obj[837]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Urtug TEPAT 05.LNK
obj[838]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\UseofrSat.LNK
obj[839]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\user Jeff.LNK
obj[840]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Uz.LNK
obj[841]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Uzbekistan Survey.LNK
obj[842]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\vertrag killpack06.LNK
obj[843]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Vicki1.31.06.LNK
obj[844]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\vicki3.1.06.LNK
obj[845]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Vicki5.30.06.LNK
obj[846]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Villages for Tsunami Video.LNK
obj[847]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\visasIndon.LNK
obj[848]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Vision and Leadership.LNK
obj[849]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Visit report March 2006.LNK
obj[850]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Wachovia.LNK
obj[851]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Wahya 081360506413 Health and accident insurance.LNK
obj[852]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Want from home.LNK
obj[853]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\We are a small school in Ne.LNK
obj[854]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\WebsitejeffJill.LNK
obj[855]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\websitel_version_Russian_For Jill.LNK
obj[856]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\WeissFoolBerk.LNK
obj[857]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\WElcome.LNK
obj[858]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\will be in crown jewel on 4 jun 2pm onwards.LNK
obj[859]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Wixon4.14.06.LNK
obj[860]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Wixoninvest2.20.06.LNK
obj[861]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Wixonout.LNK
obj[862]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\work.LNK
obj[863]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Wow.LNK
obj[864]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Wrestling Together in August.LNK
obj[865]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Write Jeff Liverman.LNK
obj[866]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Yo Dog2.17.06.LNK
obj[867]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Your Birth Request has been sent.LNK
obj[868]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Your newsletter seems to be a hit.LNK
obj[869]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Your Trip Details.LNK
obj[870]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Yulia7.17.06.LNK
obj[871]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\YuliaOut.LNK
obj[872]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Zarzars4.27.06.LNK
obj[873]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\~WRO0001.LNK
obj[874]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\~WRO1987.LNK
obj[875]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\??????? ???????.LNK

WINDOWS

obj[40]=RegData : software\microsoft\windows nt\currentversion\winlogon "Shell"

TRACKING COOKIE

obj[41]=IECache Entry : Cookie:jeff@ehg-youtube.hitbox.com/
obj[42]=IECache Entry : Cookie:jeff@doubleclick.net/
obj[43]=IECache Entry : Cookie:jeff@stat.onestat.com/


ArchiveData(auto-quarantine- 2006-09-30 00-15-38.bckp)
Referencefile : SE1R124 19.09.2006
======================================================

MRU LIST

obj[0]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear ?????1.11.06.LNK
obj[1]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\??????? ???????.LNK
obj[3]=MRU RegReference : software\microsoft\direct3d\mostrecentapplication name
obj[4]=MRU RegReference : software\microsoft\direct3d\mostrecentapplication name
obj[5]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\directinput\mostrecentapplication name
obj[6]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\directinput\mostrecentapplication id

WINDOWS

obj[5]=RegData : software\microsoft\windows nt\currentversion\winlogon "Shell"

ArchiveData(auto-quarantine- 2006-09-30 08-15-55.bckp)
Referencefile : SE1R124 19.09.2006
======================================================

MRU LIST

obj[0]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Birthdays Anniversaries.doc.LNK
obj[1]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Birthdays Anniversaries.doc.lnk
obj[2]=MRU FileReference : C:\Documents and Settings\Jeff\recent\How to remove a Trojan, Virus, Worm, or other Malware.htm (2).lnk
obj[3]=MRU FileReference : C:\Documents and Settings\Jeff\recent\How to remove a Trojan, Virus, Worm, or other Malware.htm.lnk
obj[4]=MRU FileReference : C:\Documents and Settings\Jeff\recent\HR.lnk
obj[5]=MRU FileReference : C:\Documents and Settings\Jeff\recent\hs_err_pid3904.log.lnk
obj[6]=MRU FileReference : C:\Documents and Settings\Jeff\recent\james.htm (2).lnk
obj[7]=MRU FileReference : C:\Documents and Settings\Jeff\recent\james.htm.lnk
obj[8]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Preparation Guide For Use Before Posting A Hijackthis Log.htm.lnk
obj[10]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\search assistant\acmru\5604
obj[11]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru\*
obj[12]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.doc
obj[13]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.htm
obj[14]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.log
obj[15]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\Folder
obj[16]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\internet explorer\typedurls
obj[9]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\search assistant\acmru\5603

WINDOWS

obj[13]=RegData : software\microsoft\windows nt\currentversion\winlogon "Shell"

TRACKING COOKIE

obj[14]=IECache Entry : Cookie:jeff@doubleclick.net/
obj[15]=IECache Entry : Cookie:jeff@adtech.de/
obj[16]=IECache Entry : Cookie:jeff@statse.webtrendslive.com/
obj[17]=IECache Entry : Cookie:jeff@mediaplex.com/
obj[18]=IECache Entry : Cookie:jeff@tribalfusion.com/

ArchiveData(auto-quarantine- 2006-09-30 08-59-08.bckp)
Referencefile : SE1R124 19.09.2006
======================================================

MRU LIST

obj[0]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear ?????1.11.06.LNK
obj[1]=MRU FileReference : C:\Documents and Settings\Jeff\recent\james.htm.lnk
obj[2]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Preparation Guide For Use Before Posting A Hijackthis Log.htm.lnk
obj[4]=MRU RegReference : software\microsoft\direct3d\mostrecentapplication name
obj[5]=MRU RegReference : software\microsoft\direct3d\mostrecentapplication name
obj[6]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\directinput\mostrecentapplication name
obj[7]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.htm
obj[8]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\internet explorer\typedurls

WINDOWS

obj[8]=RegData : software\microsoft\windows nt\currentversion\winlogon "Shell"


ArchiveData(auto-quarantine- 2006-09-30 11-17-32.bckp)
Referencefile : SE1R124 19.09.2006
======================================================

MRU LIST

obj[0]=MRU FileReference : C:\Documents and Settings\Jeff\Application Data\microsoft\office\recent\Dear ?????1.11.06.LNK
obj[1]=MRU FileReference : C:\Documents and Settings\Jeff\recent\Preparation Guide For Use Before Posting A Hijackthis Log.htm.lnk
obj[3]=MRU RegReference : software\microsoft\direct3d\mostrecentapplication name
obj[4]=MRU RegReference : software\microsoft\direct3d\mostrecentapplication name
obj[5]=MRU RegReference : software\microsoft\directdraw\mostrecentapplication name
obj[6]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\directinput\mostrecentapplication name
obj[7]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\directinput\mostrecentapplication id
obj[8]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\internet explorer download directory
obj[9]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru\*
obj[10]=MRU RegReference : S-1-5-21-32071472-4073106078-790933210-1006\software\microsoft\windows\currentversion\explorer\recentdocs\.htm

WINDOWS

obj[11]=RegData : software\microsoft\windows nt\currentversion\winlogon "Shell"

TRACKING COOKIE

obj[12]=IECache Entry : Cookie:jeff@atdmt.com/

#5 nukusjeff

nukusjeff
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 02 October 2006 - 02:04 AM

I ran Xoftspy SE and it came up with IBIS/Hunt Toolbar registry key, Teadoor-D registry value (Software\microsoft\windows\current version\run\hdaudiodriver 1.0), Win32.ConHook.I(Program File\My Way SA\1.bin\deSrcAs.dll). I'm going on a manual hunt.... won't let me delete the Win32.ConHook... any ideas?

Edited by nukusjeff, 02 October 2006 - 02:24 AM.


#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,560 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:57 PM

Posted 02 October 2006 - 06:41 AM

Hello nukusjeff

Please download ATF Cleaner by Atribune & save it to your desktop. DO NOT use yet.
Please download DrWeb-CureIt & save it to your desktop. DO NOT perform a scan yet.

If your running Win XP/2000, Ewido Anti-Spyware v4.0. DO NOT perform a scan yet.
Be sure to print out the Ewido Install and Scan Instructions.

Reboot your computer in SAFE MODE" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup [but before the Windows icon appears] press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.

Scan with DrWeb-CureIt as follows:
1. Double-click on drweb-cureit.exe to start the program.
2. An "Express Scan of your PC" notice will appear. Under "Start the Express Scan Now", Click "OK" to start.
3. Click "Select drives" and then click the "Start/Stop Scanning" button (green arrow on the right) to start.
4. When done a message will be displayed at the bottom advising if any viruses were found.
5. Click "Yes to all" if it asks if you want to cure/move the file.
6. A log file will be created in C:\Documents and Settings\username\DoctorWeb\CureIt.log
7. Any quarantined files will be sent to C:\Documents and Settings\username\DoctorWeb\Quarantine.
8. Exit the program when done.

Scan with Ewido per the instructions you printed out and reboot normally.

After reboot, try running hijackthis again to see if it works. If you still cannot get HijackThis to run, then try renaming it. Open the HijackThis Folder, find the hijackthis_sfx.exe file, right click on the file and select rename. Type Analyze.exe and hit "Enter". Double-click on Analyze.exe (which is still hijackthis) to run the program. If needed change the .exe to something else such as .bat, .com, .pif, or .scr. Example: Analyze.bat or Analyze.com

If you get it to work, don't post a log here. Instead post your log in the HijackThis Logs and Analysis Forum.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 nukusjeff

nukusjeff
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 08 October 2006 - 09:20 PM

Thanks a bunch Quietman7. I was unable to access the Dr.Web download but the AVG nailed the worm/trojan. Others in my office said they tried AVG but it didn't seem to help but that was 'cuz they weren't in safe mode. Here's the report. Oh, I did enjoy quarantining the beastie...


C:\WINDOWS\Cursors\3Dcursors\HarPot\services.exe -> Worm.Delf.as : No action taken.
[852] C:\WINDOWS\Cursors\3Dcursors\HarPot\services.exe -> Worm.Delf.as : No action taken.

Should I try to do the log thing anyways or think we are done? nukusjeff

#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,560 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:57 PM

Posted 09 October 2006 - 06:05 AM

Post a log in the HijackThis Logs and Analysis Forum, NOT here, for assistance by the HJT Team Experts. A member of the Team will walk you through, step by step, on how to clean your computer. If you post your log back in this thread, the response from the HJT Team will be delayed because your post will have to be moved. This means it will fall in line behind any others posted that same day.

Start a new topic, give it a relevant title and post your log along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. Please include the top portion of the HijackThis log that lists version information. An expert will analyze your log and reply with instructions advising you what to fix.

Please be patient. It may take a while to get a response because the HJT Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.

If after 5 days you still have received no response, then post a link to your HJT log here.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users