Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Pop Ups On Dekstop


  • Please log in to reply
3 replies to this topic

#1 AMadKipper

AMadKipper

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:53 AM

Posted 01 July 2007 - 05:14 PM

Hi guys.

I was looking for help in preventing some malware which is causing pop ups on my dekstop when connected to my broadband.
Ive included a HijackThis log.


Thanks.

Sorry guys havent run enough anti-spyware will repost later.

Attached Files


Edited by AMadKipper, 01 July 2007 - 05:33 PM.


BC AdBot (Login to Remove)

 


m

#2 RichieUK

RichieUK

    Malware Assassin


  • Malware Response Team
  • 13,614 posts
  • OFFLINE
  •  
  • Local time:05:53 AM

Posted 02 July 2007 - 10:25 AM

Welcome to the BleepingComputer HijackThis Logs and Analysis forum AMadKipper :thumbsup:

Download SDFix.exe and save it to your desktop:
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

* Double click on SDFix on your desktop,and install the fix to C:\

Please then reboot your computer into Safe Mode by doing the following:

* Restart your computer
* After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
* Instead of Windows loading as normal, a menu with options should appear;
* Select the first option, to run Windows in Safe Mode, then press "Enter".
* Choose your usual account.

* In Safe Mode,go to and open the C:\SDFix folder,then double click on RunThis.bat to start the script.
* Type Y to begin the script.
* It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot.
* Press any Key and it will restart the PC.
* Your system will take longer that normal to restart as the fixtool will be running and removing files.
* When the desktop loads the Fixtool will complete the removal and display Finished, then press any key to end the script and load your desktop icons.
* Finally open the SDFix folder on your desktop and copy and paste the contents of the results file Report.txt into your next reply.

===============================

Please download Combofix and save to your desktop:
Note:
It is important that it is saved directly to your desktop

Close any open browsers.
Double click on combofix.exe and follow the prompts.
When it's finished it will produce a log.
Post the entire contents of C:\ComboFix.txt into your next reply.
Note:
Do not mouseclick combofix's window while it's running.
That may cause the program to freeze/hang.


Also post a new Hijackthis log.
Posted Image
Posted Image

#3 AMadKipper

AMadKipper
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:53 AM

Posted 02 July 2007 - 03:56 PM

Thanks for your help and advice.

Ive attached the log files from SDFix, ComboFix and HijackThis.


SDFix: Version 1.89

Run by Michelle on 02/07/2007 at 21:33

Microsoft Windows XP [Version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:






Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

Below files will be copied to Backups folder then removed:

C:\Documents and Settings\Michelle\Desktop\Error Cleaner.url - Deleted
C:\Documents and Settings\Michelle\Favorites\Error Cleaner.url - Deleted
C:\Documents and Settings\Michelle\Desktop\Privacy Protector.url - Deleted
C:\Documents and Settings\Michelle\Favorites\Privacy Protector.url - Deleted
C:\Documents and Settings\Michelle\Desktop\Spyware&Malware Protection.url - Deleted
C:\Documents and Settings\Michelle\Favorites\Spyware&Malware Protection.url - Deleted
C:\WINDOWS\dat.txt - Deleted
C:\WINDOWS\main_uninstaller.exe - Deleted
C:\WINDOWS\msdde.dll - Deleted
C:\WINDOWS\rs.txt - Deleted



Removing Temp Files...

ADS Check:

Checking C:\WINDOWS
C:\WINDOWS
No streams found.

Checking C:\WINDOWS\system32
C:\WINDOWS\system32
No streams found.

Checking C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
No streams found.

Checking C:\WINDOWS\system32\ntoskrnl.exe
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\\Program Files\\Electronic Arts\\Battlefield 2142\\BF2142.exe"="C:\\Program Files\\Electronic Arts\\Battlefield 2142\\BF2142.exe:*:Enabled:Battlefield 2"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Kontiki\\KService.exe"="C:\\Program Files\\Kontiki\\KService.exe:*:Enabled:Delivery Manager Service"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

Remaining Files:
---------------

Backups Folder: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
C:\Documents and Settings\Connor\Local Settings\Temp\BIT1.tmp
C:\Documents and Settings\Connor\Local Settings\Temp\BIT2.tmp
C:\Documents and Settings\Connor\Local Settings\Temp\BIT2C.tmp
C:\Documents and Settings\Connor\Local Settings\Temp\BIT2D.tmp
C:\Documents and Settings\Connor\Local Settings\Temp\BIT2E.tmp
C:\Documents and Settings\Connor\Local Settings\Temp\BIT2F.tmp
C:\Documents and Settings\Connor\Local Settings\Temp\BIT45.tmp
C:\Documents and Settings\Connor\Local Settings\Temp\BIT58.tmp
C:\Documents and Settings\Kieran\Local Settings\Temp\BIT1.tmp
C:\Documents and Settings\Kieran\Local Settings\Temp\BIT111.tmp
C:\Documents and Settings\Kieran\Local Settings\Temp\BIT11A.tmp
C:\Documents and Settings\Kieran\Local Settings\Temp\BIT2.tmp
C:\Documents and Settings\Kieran\Local Settings\Temp\BIT3.tmp
C:\Documents and Settings\Kieran\Local Settings\Temp\BIT4.tmp
C:\Documents and Settings\Kieran\Local Settings\Temp\BIT46.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT10.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT100.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT101.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT102.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT103.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT104.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT105.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT106.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT107.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT108.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT109.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT10A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT10B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT10C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT10D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT10E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT10F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT11.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT110.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT111.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT112.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT113.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT114.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT115.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT116.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT117.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT118.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT119.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT11A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT11B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT11C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT11D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT11E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT11F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT12.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT120.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT121.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT122.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT123.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT124.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT125.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT126.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT127.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT128.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT129.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT12A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT12B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT12C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT12D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT12E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT12F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT13.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT130.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT131.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT132.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT133.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT134.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT135.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT136.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT137.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT138.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT139.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT13A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT13B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT13C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT13D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT13E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT13F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT14.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT140.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT141.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT142.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT143.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT144.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT145.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT146.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT147.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT148.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT149.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT14A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT14B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT14C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT14D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT14E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT14F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT15.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT150.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT151.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT152.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT153.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT154.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT155.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT156.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT157.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT158.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT159.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT15A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT15B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT15C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT15D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT15E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT15F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT16.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT160.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT161.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT162.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT163.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT164.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT165.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT166.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT167.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT169.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT16A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT16B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT16C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT16D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT16E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT16F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT17.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT170.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT171.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT172.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT174.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT175.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT176.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT177.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT178.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT179.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT17A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT17B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT17C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT17D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT17E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT17F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT18.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT180.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT181.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT182.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT183.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT184.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT185.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT186.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT187.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT188.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT189.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT18A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT18B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT18C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT18D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT18E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT18F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT19.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT190.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT191.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT192.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT193.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT194.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT195.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT196.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT197.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT198.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT199.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT19A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT19B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT19C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT19D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT19E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT19F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1A0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1A1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1A2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1A3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1A4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1A5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1A6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1A7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1A8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1A9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1AA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1AB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1AC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1AD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1AE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1AF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1B0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1B1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1B2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1B3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1B4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1B5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1B6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1B7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1B8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1B9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1BA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1BB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1BC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1BD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1BE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1BF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1C0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1C1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1C2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1C3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1C4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1C5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1C6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1C7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1C8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1C9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1CA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1CB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1CC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1CD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1CE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1CF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1D0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1D1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1D2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1D3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1D4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1D5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1D6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1D7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1D8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1D9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1DA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1DB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1DC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1DD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1DE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1DF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1E0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1E1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1E2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1E3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1E4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1E5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1E6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1E7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1E8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1E9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1EA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1EB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1EC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1ED.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1EE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1EF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1F0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1F1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1F2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1F3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1F4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1FB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1FC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT1FD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT20.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT20C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT20D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT20F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT21.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT212.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT213.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT218.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT21B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT21C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT22.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT23.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT24.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT25.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT26.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT27.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT274.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT28.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT29.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT2A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT2B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT2B1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT2C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT2D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT2E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT2F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT30.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT31.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT311.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT312.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT316.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT32.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT321.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT33.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT331.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT333.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT33A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT34.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT35.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT355.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT358.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT35B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT35D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT36.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT37.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT373.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT374.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT376.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT377.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT378.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT379.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT37A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT37B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT37C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT37D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT37E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT37F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT38.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT380.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT381.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT382.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT383.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT384.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT38A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT39.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT391.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT397.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT398.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT399.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT39A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT39B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3AA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3AC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3AD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3B7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3B8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3B9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3BA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3C1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3C2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3C7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3C8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3C9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3CA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3CB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3CC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3CD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3D0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3D1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3D2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3D3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3D4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3D5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3D6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3D7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3D8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3D9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3DA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3DB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3DC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3DD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3DE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3DF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3E0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3E1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3E2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3E3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3E4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3E5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3E6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3E7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3E8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3E9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3EA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3EB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3EC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3ED.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3EE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3EF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3F0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3F1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3F2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3F3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3F5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3F6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3F8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3F9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3FA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3FB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3FC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3FD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3FE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT3FF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT40.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT400.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT401.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT402.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT403.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT404.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT405.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT406.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT407.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT41.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT413.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT41A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT41B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT42.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT422.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT423.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT424.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT425.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT426.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT427.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT428.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT429.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT42A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT42F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT43.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT430.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT431.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT432.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT433.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT434.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT435.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT437.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT439.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT43C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT43D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT43E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT44.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT441.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT442.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT443.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT444.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT445.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT446.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT447.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT448.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT449.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT44A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT44B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT44C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT44D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT44E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT44F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT45.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT450.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT451.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT452.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT453.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT454.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT457.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT45E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT45F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT46.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT460.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT461.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT462.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT463.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT464.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT465.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT466.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT467.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT468.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT469.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT46A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT46B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT46C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT46D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT46E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT46F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT47.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT470.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT471.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT472.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT473.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT474.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT475.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT476.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT477.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT478.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT479.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT47A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT47B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT47C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT47D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT47E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT47F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT48.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT480.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT481.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT482.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT483.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT484.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT485.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT486.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT487.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT488.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT489.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT48A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT48B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT48C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT48D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT48E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT49.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT499.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT49C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4AA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4AB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4B0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4B5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4BA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4BB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4C6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4C7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4CB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4D5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4DB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4DC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4DD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4E8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4EA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4EB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4EC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4F7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4F8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4F9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4FA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4FB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT4FC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT50.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT501.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT502.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT508.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT509.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT50A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT50B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT51.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT511.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT512.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT516.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT517.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT518.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT51F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT52.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT520.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT521.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT522.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT523.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT526.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT527.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT528.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT529.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT52A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT52B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT52C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT52D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT52E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT52F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT53.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT530.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT531.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT532.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT533.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT534.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT535.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT536.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT537.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT538.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT539.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT53A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT54.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT544.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT55.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT56.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT57.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT57C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT57D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT57E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT57F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT58.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT580.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT581.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT582.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT583.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT584.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT585.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT586.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT587.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT588.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT589.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT58C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT58D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT58E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT58F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT59.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT5A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT5B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT5C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT5C4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT5D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT5E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT5F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT60.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT601.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT602.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT603.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT604.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT60B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT60D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT61.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT614.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT61D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT62.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT63.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT64.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT65.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT66.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT662.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT67.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT68.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT69.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6BC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6BD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6C2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6C3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6C5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6C8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6C9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6CB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6CE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6CF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT6F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT70.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT71.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT72.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT727.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT728.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT73.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT74.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT75.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT76.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT77.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT78.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT79.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT7A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT7B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT7C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT7D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT7E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT7F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT80.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT81.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT82.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT83.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT84.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT85.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT86.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT87.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT88.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT89.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT890.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8AA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8AC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8AD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8AE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8AF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8B0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8B1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8B2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8B3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8B4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8B5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8B6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8B7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8B8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8B9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8BA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8BB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8BC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8D8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8D9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8DA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8DB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8DC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8DD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8DE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8DF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8E1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8E2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8ED.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8EE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8EF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8F3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8F4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8F5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8F6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8F7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT8F8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT90.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT900.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT903.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT904.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT90B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT91.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT912.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT913.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT92.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT93.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT94.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT95.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT96.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT97.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT98.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT99.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT9A.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT9B.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT9C.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT9D.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT9E.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BIT9F.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITA0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITA1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITA2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITA3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITA4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITA5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITA6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITA7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITA8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITA9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITAA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITAB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITAC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITAD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITAE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITAF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITB0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITB1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITB2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITB3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITB4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITB5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITB6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITB7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITB8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITB9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITBA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITBB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITBC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITBD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITBE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITBF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITC0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITC1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITC2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITC3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITC4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITC5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITC6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITC7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITC8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITC9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITCA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITCB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITCC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITCD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITCE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITCF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITD0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITD1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITD2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITD3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITD4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITD5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITD6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITD7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITD8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITD9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITDA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITDB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITDC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITDD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITDE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITDF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITE0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITE1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITE2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITE3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITE4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITE5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITE6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITE7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITE8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITE9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITEA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITEB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITEC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITED.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITEE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITEF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITF.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITF0.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITF1.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITF2.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITF3.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITF4.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITF5.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITF6.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITF7.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITF8.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITF9.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITFA.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITFB.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITFC.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITFD.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITFE.tmp
C:\Documents and Settings\Simon\Local Settings\Temp\BITFF.tmp

Finished

"Michelle" - 2007-07-02 21:45:51 - ComboFix 07-07-03.3 - Service Pack 2


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\Documents and Settings\Michelle.\err.log
C:\Program Files\Common Files\PrivacyProtector Free
C:\Program Files\Common Files\PrivacyProtector Free\dnse.exe


((((((((((((((((((((((((( Files Created from 2007-06-02 to 2007-07-02 )))))))))))))))))))))))))))))))


2007-07-02 21:44 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-07-02 21:33 <DIR> d-------- C:\WINDOWS\ERUNT
2007-07-02 19:24 <DIR> d-------- C:\Program Files\CCleaner
2007-07-02 00:20 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-07-01 23:53 <DIR> d-------- C:\DOCUME~1\Simon\.housecall6.6
2007-07-01 23:09 <DIR> d-------- C:\hijackthis
2007-07-01 22:26 <DIR> d-------- C:\Autoruns
2007-07-01 20:12 <DIR> d-------- C:\Program Files\STOPzilla!
2007-07-01 20:12 <DIR> d-------- C:\Program Files\Common Files\iS3
2007-07-01 20:12 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\STOPzilla!
2007-07-01 18:17 <DIR> d-------- C:\Program Files\Lavasoft
2007-07-01 18:17 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
2007-07-01 18:16 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-07-01 17:50 <DIR> d-------- C:\DOCUME~1\Simon\APPLIC~1\Google
2007-07-01 17:41 <DIR> d-------- C:\WINDOWS\pss
2007-06-30 20:52 <DIR> d-------- C:\DOCUME~1\Connor\APPLIC~1\Apple Computer
2007-06-29 21:49 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
2007-06-29 20:53 <DIR> d-------- C:\DOCUME~1\Russell\APPLIC~1\FunWebProducts
2007-06-29 16:33 <DIR> d-------- C:\Program Files\Channel4
2007-06-28 11:53 217,088 -ra------ C:\WINDOWS\system32\SZBase5.dll
2007-06-26 20:31 <DIR> d-------- C:\DOCUME~1\Kieran\Incomplete
2007-06-26 20:28 <DIR> d-------- C:\Program Files\LimeWire
2007-06-26 20:28 <DIR> d-------- C:\DOCUME~1\Kieran\APPLIC~1\LimeWire
2007-06-25 21:55 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bluetooth
2007-06-25 21:50 <DIR> d-------- C:\Program Files\IVT Corporation
2007-06-25 15:59 <DIR> d-------- C:\Program Files\mIRC
2007-06-23 16:44 <DIR> d-------- C:\DOCUME~1\Connor\APPLIC~1\OpenOffice.org2
2007-06-22 14:59 294,912 -ra------ C:\WINDOWS\system32\IS3DBA5.dll
2007-06-22 14:59 126,976 -ra------ C:\WINDOWS\system32\IS3HTUI5.dll
2007-06-22 14:58 69,632 -ra------ C:\WINDOWS\system32\IS3Hks5.dll
2007-06-22 14:58 372,736 -ra------ C:\WINDOWS\system32\IS3UI5.dll
2007-06-22 14:57 94,208 -ra------ C:\WINDOWS\system32\IS3Inet5.dll
2007-06-22 14:57 23,040 -ra------ C:\WINDOWS\system32\IS3XDat5.dll
2007-06-22 14:57 184,320 -ra------ C:\WINDOWS\system32\IS3Win325.dll
2007-06-22 14:56 90,112 -ra------ C:\WINDOWS\system32\IS3Svc5.dll
2007-06-22 14:56 688,128 -ra------ C:\WINDOWS\system32\IS3Base5.dll
2007-06-21 13:03 3,670,016 --a------ C:\DOCUME~1\Michelle\ntuser.dat
2007-06-21 13:03 1,310,720 --a------ C:\DOCUME~1\LOCALS~1\ntuser.dat
2007-06-21 13:03 <DIR> d-------- C:\WINDOWS\Downloaded Installations
2007-06-21 13:03 <DIR> d-------- C:\Program Files\Kontiki
2007-06-21 13:03 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kontiki
2007-06-18 20:06 <DIR> d-------- C:\DOCUME~1\Russell\APPLIC~1\HbTools_Icons
2007-06-17 19:12 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
2007-06-16 22:00 <DIR> d-------- C:\DOCUME~1\Connor\APPLIC~1\HbTools_Icons
2007-06-16 16:36 <DIR> d-------- C:\DOCUME~1\Russell\APPLIC~1\HbTools
2007-06-16 13:46 <DIR> d-------- C:\DOCUME~1\Connor\APPLIC~1\HbTools
2007-06-16 08:45 <DIR> d-------- C:\DOCUME~1\Simon\APPLIC~1\OpenOffice.org2
2007-06-14 15:34 <DIR> d-------- C:\Program Files\Common Files\EasyInfo
2007-06-13 23:54 <DIR> d-------- C:\KATIE_MELUA
2007-06-13 23:50 <DIR> d-------- C:\Program Files\DVDx
2007-06-13 23:50 <DIR> d-------- C:\Program Files\DVD Shrink
2007-06-13 23:50 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
2007-06-13 21:34 10,752 --a------ C:\WINDOWS\system32\ff_vfw.dll
2007-06-13 21:34 <DIR> d-------- C:\Program Files\ffdshow
2007-06-13 21:33 544,768 --a------ C:\WINDOWS\system32\msvcr71d.dll
2007-06-13 21:33 20,992 --a------ C:\WINDOWS\system32\CMCT2FR.DLL
2007-06-13 21:33 <DIR> d-------- C:\Program Files\Ipod Video Converter
2007-06-13 21:23 59,904 --a------ C:\WINDOWS\system32\Mscc2fr.dll
2007-06-13 21:23 516,173 --a------ C:\WINDOWS\system32\MSVCP60D.DLL
2007-06-13 21:23 385,100 --a------ C:\WINDOWS\system32\MSVCRTD.DLL
2007-06-13 21:23 32,768 --a------ C:\WINDOWS\system32\CMDLGFR.DLL
2007-06-13 21:23 21,504 --a------ C:\WINDOWS\system32\TABCTFR.DLL
2007-06-13 21:23 15,360 --a------ C:\WINDOWS\system32\inetfr.DLL
2007-06-13 21:23 141,312 --a------ C:\WINDOWS\system32\MSCMCFR.DLL
2007-06-13 21:23 119,568 --a------ C:\WINDOWS\system32\VB6FR.DLL
2007-06-13 21:23 101,888 --a------ C:\WINDOWS\system32\VB6STKIT.DLL
2007-06-13 21:23 <DIR> d-------- C:\Program Files\Free Audio Pack
2007-06-13 17:54 85,376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys
2007-06-13 17:54 61,440 -ra------ C:\WINDOWS\ov519dib.dll
2007-06-13 17:54 53,760 --a------ C:\WINDOWS\system32\vfwwdm32.dll
2007-06-13 17:54 5,504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys
2007-06-13 17:54 40,960 -ra------ C:\WINDOWS\system32\ov519ext.dll
2007-06-13 17:54 40,960 -ra------ C:\WINDOWS\CleanDev.exe
2007-06-13 17:54 32,528 -ra------ C:\WINDOWS\amcap.exe
2007-06-13 17:54 307,200 -ra------ C:\WINDOWS\vidcap32.exe
2007-06-13 17:54 25,211 -ra------ C:\WINDOWS\system32\drivers\ov519cmd.sys
2007-06-13 17:54 200,704 -ra------ C:\WINDOWS\sel3110.exe
2007-06-13 17:54 19,328 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2007-06-13 17:54 174,530 -ra------ C:\WINDOWS\system32\drivers\ov519vid.sys
2007-06-13 17:54 17,024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys
2007-06-13 17:54 16,426 -ra------ C:\WINDOWS\system32\ov519usd.dll
2007-06-13 17:54 15,360 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys
2007-06-13 17:54 135,168 -ra------ C:\WINDOWS\ov519cap.exe
2007-06-13 17:54 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys
2007-06-13 17:54 10,880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys
2007-06-13 17:54 <DIR> d-------- C:\WINDOWS\OvtCam
2007-06-13 17:48 59,264 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
2007-06-13 16:37 <DIR> d-------- C:\Program Files\Macrogaming
2007-06-13 15:37 <DIR> d-------- C:\DOCUME~1\Connor\APPLIC~1\HP
2007-06-12 17:19 <DIR> d-------- C:\DOCUME~1\Russell\APPLIC~1\HP
2007-06-11 20:18 <DIR> d-------- C:\DOCUME~1\Simon\APPLIC~1\HP
2007-06-11 15:42 <DIR> d-------- C:\DOCUME~1\Kieran\APPLIC~1\HP
2007-06-11 11:09 <DIR> d-------- C:\Program Files\iPod
2007-06-10 22:25 <DIR> d-------- C:\DOCUME~1\Michelle\APPLIC~1\EPSON
2007-06-10 21:51 <DIR> d-------- C:\DOCUME~1\Michelle\APPLIC~1\Image Zone Express
2007-06-10 21:41 <DIR> d-------- C:\DOCUME~1\Michelle\APPLIC~1\HP
2007-06-10 21:40 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
2007-06-10 21:39 <DIR> d-------- C:\Program Files\Hewlett-Packard
2007-06-10 21:38 <DIR> d-------- C:\Program Files\Common Files\HP
2007-06-10 21:37 77,824 -ra------ C:\WINDOWS\system32\hpzids01.dll


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-02 15:59:46 -------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-07-01 17:58:12 -------- d-----w C:\Program Files\GameSpy Arcade
2007-06-30 20:14:36 -------- d-----w C:\DOCUME~1\Michelle\APPLIC~1\YourScreen
2007-06-29 21:50:40 -------- d-----w C:\Program Files\Google
2007-06-29 19:53:15 -------- d-----w C:\Program Files\MSN Messenger
2007-06-25 09:20:42 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-06-11 20:15:24 -------- d-----w C:\Program Files\UltimateBet
2007-06-11 10:10:10 -------- d-----w C:\Program Files\iTunes
2007-06-11 09:52:04 -------- d-----w C:\Program Files\Apple Software Update
2007-05-30 16:23:28 -------- d-----w C:\Program Files\GameSpy
2007-05-30 16:11:11 -------- d-----w C:\Program Files\Electronic Arts
2007-05-27 21:20:23 -------- d-----w C:\Program Files\EPSON
2007-05-27 21:18:35 -------- d-----w C:\Program Files\Common Files\InstallShield
2007-05-27 21:00:13 -------- d-----w C:\Program Files\Razer
2007-05-24 20:41:09 -------- d-s---w C:\Program Files\Xfire
2007-05-24 13:24:00 -------- d-----w C:\Program Files\Common Files\Motive
2007-05-24 06:22:17 -------- d-----w C:\Program Files\Rhapsody
2007-05-23 21:15:54 -------- d-----w C:\Program Files\Freeze.com
2007-05-23 21:03:47 797 ----a-w C:\WINDOWS\unins001.dat
2007-05-23 21:03:47 72,748 ----a-w C:\WINDOWS\unins001.exe
2007-05-23 21:03:18 797 ----a-w C:\WINDOWS\unins000.dat
2007-05-23 21:03:18 72,748 ----a-w C:\WINDOWS\unins000.exe
2007-05-23 21:03:18 -------- d-----w C:\Program Files\Anark
2007-05-23 21:03:13 -------- d-----w C:\Program Files\Temp
2007-05-23 20:55:14 -------- d-----w C:\Program Files\Common Files\Real
2007-05-23 20:54:15 8,413 ----a-w C:\WINDOWS\system32\drivers\mcstrm.sys
2007-05-23 20:22:11 -------- d-----w C:\Program Files\VentriloMIX
2007-05-23 08:57:28 -------- d-----w C:\DOCUME~1\Michelle\APPLIC~1\Google
2007-05-22 17:55:14 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2007-05-22 06:18:53 -------- d-----w C:\DOCUME~1\Michelle\APPLIC~1\Apple Computer
2007-05-22 06:18:30 -------- d-----w C:\Program Files\QuickTime
2007-05-21 22:55:03 -------- d-----w C:\DOCUME~1\Michelle\APPLIC~1\Yahoo!
2007-05-21 22:47:00 -------- d-----w C:\Program Files\Symantec
2007-05-21 22:46:59 48,776 ----a-w C:\WINDOWS\system32\S32EVNT1.DLL
2007-05-21 22:46:59 115,000 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2007-05-21 22:27:26 -------- d-----w C:\Program Files\Yahoo!
2007-05-21 21:43:58 -------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-05-21 20:23:54 -------- d-----w C:\Program Files\Windows Media Connect 2
2007-05-21 20:19:48 -------- d-----w C:\Program Files\Windows Live Toolbar
2007-05-21 20:15:23 -------- d-----w C:\Program Files\VIA
2007-05-21 19:52:29 -------- d-----w C:\Program Files\MSBuild
2007-05-21 19:49:06 -------- d-----w C:\Program Files\Reference Assemblies
2007-05-21 19:13:27 -------- d-----w C:\Program Files\Messenger
2007-05-21 19:05:19 -------- d-----w C:\Program Files\Common Files\ODBC
2007-05-21 19:05:16 -------- d-----w C:\Program Files\Common Files\SpeechEngines
2007-05-21 18:38:36 -------- d-----w C:\Program Files\MultiRes
2007-05-21 18:38:07 451,072 ----a-w C:\WINDOWS\Radeon Omega Drivers v3.8.330 Uninstall.exe
2007-05-21 18:38:07 -------- d-----w C:\Program Files\Radeon Omega Drivers
2007-05-21 18:34:44 -------- d-----w C:\Program Files\Creative
2007-05-21 18:30:48 -------- d-----w C:\Program Files\ANI
2007-05-21 18:30:36 -------- d-----w C:\Program Files\D-Link
2007-05-21 18:15:15 -------- d-----w C:\Program Files\microsoft frontpage
2007-05-21 18:15:00 0 --sha-r C:\MSDOS.SYS
2007-05-21 18:15:00 0 --sha-r C:\IO.SYS
2007-05-21 18:15:00 0 ----a-w C:\CONFIG.SYS
2007-05-21 18:15:00 0 ----a-w C:\AUTOEXEC.BAT
2007-05-21 18:13:54 -------- d--h--w C:\Program Files\WindowsUpdate
2007-05-21 18:13:15 -------- d-----w C:\Program Files\Common Files\MSSoap
2007-05-21 18:13:08 -------- d-----w C:\Program Files\Movie Maker
2007-05-21 18:12:26 21,640 ----a-w C:\WINDOWS\system32\emptyregdb.dat
2007-05-21 18:12:21 -------- d-----w C:\Program Files\Online Services
2007-05-21 18:12:14 -------- d-----w C:\Program Files\MSN Gaming Zone
2007-05-21 18:12:07 -------- d-----w C:\Program Files\Windows NT
2007-05-16 15:12:02 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-04-25 14:21:15 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
2007-04-18 16:12:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-16 21:47:36 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2007-04-16 21:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-16 21:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-04-16 21:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-04-16 21:45:36 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-04-16 21:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-04-16 21:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-04-16 21:45:20 43,352 ----a-w C:\WINDOWS\system32\wups2.dll
2007-04-16 21:44:20 271,224 ----a-w C:\WINDOWS\system32\mucltui.dll
2007-04-16 21:43:40 208,248 ----a-w C:\WINDOWS\system32\muweb.dll
2007-04-13 14:19:52 7,680 ----a-w C:\WINDOWS\system32\lsdelete.exe
2007-04-04 17:55:00 261,480 ----a-w C:\WINDOWS\system32\xactengine2_7.dll
2007-04-04 17:53:42 81,768 ----a-w C:\WINDOWS\system32\xinput1_3.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
2006-10-26 10:28 440384 --a------ C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
2006-10-22 23:08 62080 --a------ C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1827766B-9F49-4854-8034-F6EE26FCB1EC}]
2007-06-28 12:01 275640 -ra------ C:\Program Files\STOPzilla!\SZSG.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A}]
2006-11-05 16:44 548992 -ra------ C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
2005-05-31 01:04 853672 --a------ C:\PROGRA~1\SPYBOT~1\SDHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}]
2006-10-31 16:33 198136 --a------ C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
2007-03-14 03:43 501400 --a------ C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
2006-08-31 20:33 322368 --a------ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9ECB9560-04F9-4bbc-943D-298DDF1699E1}]
2006-04-14 12:20 94384 --a------ C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A8F38D8D-E480-4D52-B7A2-731BB6995FDD}]
2007-05-23 12:13 140912 --a------ C:\Program Files\Yahoo!\NAV\NavShExt.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
2007-06-29 22:50 2554944 -ra------ c:\program files\google\googletoolbar2.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
2007-06-29 22:50 325048 --a------ C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
2006-09-27 17:45 544032 --a------ C:\Program Files\Windows Live Toolbar\msntb.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E3215F20-3212-11D6-9F8B-00D0B743919D}]
2007-06-28 12:01 177336 -ra------ C:\Program Files\STOPzilla!\SZIEBHO.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
2005-02-22 13:50 368640 --a------ C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D}]
2005-02-03 17:07 124032 --a------ C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-04 13:00 C:\WINDOWS\system32\bthprops.cpl]
"D-Link AirPlus G"="C:\Program Files\D-Link\AirPlus G\AirGCFG.exe" [2006-07-19 20:48]
"ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2006-06-29 17:34]
"P17Helper"="P17.dll" [2005-05-03 19:38 C:\WINDOWS\system32\P17.dll]
"AtiPTA"="atiptaxx.exe" [2006-02-22 01:05 C:\WINDOWS\system32\atiptaxx.exe]
"YBrowser"="C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe" [2006-07-21 16:19]
"YOP"="C:\PROGRA~1\Yahoo!\YOP\yop.exe" [2006-08-31 16:01]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-01-22 22:19]
"YPC"="C:\PROGRA~1\Yahoo!\PARENT~1\ypc.exe" [2005-06-03 16:32]
"razer"="C:\Program Files\Razer\Copperhead\razerhid.exe" [2005-10-08 16:27]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 02:41]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-06-01 16:51]
"4oD"="C:\Program Files\Kontiki\KHost.exe" [2006-11-08 17:32]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-09 11:09]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-29 21:49]
"kdx"="C:\Program Files\Kontiki\KHost.exe" [2006-11-08 17:32]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices]
"DJSNetCN"=C:\Program Files\Common Files\Symantec Shared\DJSNETCN.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^VIA RAID TOOL.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VIA RAID TOOL.lnk
backup=C:\WINDOWS\pss\VIA RAID TOOL.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^YourScreen.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\YourScreen.lnk
backup=C:\WINDOWS\pss\YourScreen.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Michelle^Start Menu^Programs^Startup^OpenOffice.org 2.2.lnk]
path=C:\Documents and Settings\Michelle\Start Menu\Programs\Startup\OpenOffice.org 2.2.lnk
backup=C:\WINDOWS\pss\OpenOffice.org 2.2.lnkStartup


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\My Web Search Bar Search Scope Monitor]
"C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Email Plugin]
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando]
"C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrivacyProtector Free]
"C:\Program Files\PrivacyProtector Free\UPRP.exe" /min

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\smgr]
mgrs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs BthServ


Contents of the 'Scheduled Tasks' folder
2007-06-24 13:04:00 C:\WINDOWS\tasks\AppleSoftwareUpdate.job
2007-07-02 20:41:00 C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
2007-06-29 19:00:00 C:\WINDOWS\tasks\Norton AntiVirus - Run Full System Scan - Michelle.job

**************************************************************************

catchme 0.3.914 W2K/XP/Vista - rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-02 21:48:13
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-07-02 21:49:21
C:\ComboFix-quarantined-files.txt ... 2007-07-02 21:49

--- E O F ---

Logfile of HijackThis v1.99.1
Scan saved at 21:56:37, on 02/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\STOPzilla!\STOPzilla.exe
C:\Program Files\Common Files\Symantec Shared\DJSNETCN.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kontiki\KService.exe
C:\Program Files\Yahoo!\NAV\navapsvc.exe
C:\Program Files\Yahoo!\NAV\IWP\NPFMntor.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Yahoo!\PARENT~1\ypc.exe
C:\WINDOWS\system32\YPCSER~1.EXE
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\Yahoo!\YOP\secstat.exe
C:\Program Files\Razer\Copperhead\razertra.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\explorer.exe
C:\PROGRA~1\Yahoo!\browser\YBrowser.exe
C:\Program Files\Messenger\msmsgs.exe
C:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://gomyron.com/NjU2NA==/2/3560/homepage/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SITEguard BHO - {1827766B-9F49-4854-8034-F6EE26FCB1EC} - C:\Program Files\STOPzilla!\SZSG.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Norton Personal Firewall - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Yahoo!\NAV\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: STOPzilla - {98828DED-A591-462F-83BA-D2F62A68B8B8} - C:\Program Files\STOPzilla!\SZSG.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [YPC] C:\PROGRA~1\Yahoo!\PARENT~1\ypc.exe
O4 - HKLM\..\Run: [razer] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [4oD] "C:\Program Files\Kontiki\KHost.exe" -all
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunServices: [DJSNetCN] C:\Program Files\Common Files\Symantec Shared\DJSNETCN.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/...arch.jhtml?p=ZZ
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: UltimateBet - {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - C:\Program Files\UltimateBet\UltimateBet.exe
O9 - Extra 'Tools' menuitem: UltimateBet - {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - C:\Program Files\UltimateBet\UltimateBet.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'ypclsp.dll' missing
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: Yahoo! Poker - http://download2.games.yahoo.com/games/clients/y/pt3_x.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://eu-housecall.trendmicro-europe.com/...ivex/hcImpl.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1179782122640
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - http://launch.gamespyarcade.com/software/launch/alaunch.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab
O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - http://help.broadbandassist.com/bbdesktop/...tivePreQual.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Yahoo!\NPF\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Licensing Detect Internet Connection (DJSNETCN) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\DJSNETCN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: KService - Unknown owner - C:\Program Files\Kontiki\KService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Yahoo!\NAV\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Yahoo!\NAV\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Yahoo!\NAV\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE

#4 RichieUK

RichieUK

    Malware Assassin


  • Malware Response Team
  • 13,614 posts
  • OFFLINE
  •  
  • Local time:05:53 AM

Posted 02 July 2007 - 04:12 PM

Copy and paste the following bold blue text in the Quote box below into Notepad.
Click on File(in the menu at the top)>Save as../Save as Type: 'All Files' /File name: fix.reg to your desktop.
Then double click on the fix.reg file on your desktop and agree to merge it into the registry,then reboot.

REGEDIT4
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\My Web Search Bar Search Scope Monitor]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Email Plugin]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrivacyProtector Free]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\smgr]

============================

Download\install 'SuperAntiSpyware Home Edition Free Version' from here:
http://www.superantispyware.com/downloadfi...ANTISPYWAREFREE

Launch SuperAntiSpyware and click on 'Check for updates'.
Once the updates have been installed,exit SuperAntiSpyware.

Have Hijack This fix the following by placing a check in the appropriate boxes and selecting 'Fix checked'.
Make sure all browser and all Windows Explorer windows are closed before fixing:
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/...arch.jhtml?p=ZZ
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - http://launch.gamespyarcade.com/software/launch/alaunch.cab

Exit Hijackthis.

Start SuperAntiSpyware.
On the main screen click on 'Scan your computer'.
Check: 'Perform Complete Scan'.
Click 'Next' to start the scan.

Superantispyware will now scan your computer,when it's finished it will list all/any infections found.
Make sure everything found has a checkmark next to it,then press 'Next'.
Click on 'Finish' when you've done.

It's possible that the program will ask you to reboot in order to delete some files.

Obtain the SuperAntiSpyware log as follows:
Click on 'Preferences'.
Click on the 'Statistics/Logs' tab.
Under 'Scanner Logs' double click on 'SuperAntiSpyware Scan Log'.
It will then open in your default text editor,such as Notepad.
Copy and paste the contents of that report into your next reply.
Also post a new Hijackthis log,let me know how your pc is running now.

Posted Image
Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users