Here's the Combofix log:
ComboFix 08-01-14.3 - Alan 2008-01-23 0:20:36.2 - NTFSx86
Running from: C:\Documents and Settings\Alan\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Alan\Desktop\CFScript.txt
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Autorun.inf
D:\Autorun.inf
.
((((((((((((((((((((((((( Files Created from 2007-12-23 to 2008-01-23 )))))))))))))))))))))))))))))))
.
2008-01-19 22:32 . 2008-01-21 14:51 202,528 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-01-19 22:32 . 2008-01-21 14:51 11,552 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2008-01-19 22:32 . 2008-01-21 14:51 4,832 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-01-19 22:32 . 2008-01-21 14:51 2,156 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx
2008-01-19 19:10 . 2008-01-19 19:10 <DIR> d-------- C:\KAV
2008-01-19 19:06 . 2004-08-03 23:00 260,272 -r-hs---- C:\cmldr
2008-01-19 19:06 . 2005-09-18 20:21 211 -rahs---- C:\BOOT.BAK
2008-01-19 17:28 . 2008-01-19 18:41 <DIR> d-------- C:\WINDOWS\XPSP2
2008-01-19 17:27 . 2008-01-19 18:53 <DIR> d-------- C:\WINDOWS\XPCD
2008-01-14 02:00 . 2003-03-31 04:00 4,224 --a------ C:\WINDOWS\system32\drivers\beep.sys
2008-01-14 02:00 . 2003-03-31 04:00 4,224 --a--c--- C:\WINDOWS\system32\dllcache\beep.sys
2008-01-09 01:54 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-07 03:18 . 2008-01-07 03:18 <DIR> d-------- C:\Deckard
2008-01-02 09:28 . 2008-01-03 03:04 <DIR> d-------- C:\Program Files\Trillian
2008-01-01 08:31 . 2008-01-01 08:31 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\SUPERAntiSpyware.com
2008-01-01 05:50 . 2008-01-01 05:50 <DIR> d-------- C:\Documents and Settings\Alan\Application Data\acccore
2008-01-01 04:26 . 2008-01-01 05:51 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\AOL OCP
2008-01-01 04:26 . 2008-01-01 04:26 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\AOL
2008-01-01 04:25 . 2008-01-01 04:25 <DIR> d-------- C:\Program Files\Common Files\AOL
2008-01-01 04:24 . 2008-01-01 05:49 <DIR> d-------- C:\Program Files\AIM6
2008-01-01 04:24 . 2008-01-01 05:49 536 --ah----- C:\IPH.PH
2007-12-31 21:29 . 2007-12-31 21:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2007-12-31 21:27 . 2008-01-15 20:22 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2007-12-31 21:27 . 2007-12-31 21:27 <DIR> d-------- C:\Documents and Settings\Alan\Application Data\SUPERAntiSpyware.com
2007-12-31 21:26 . 2007-12-31 21:26 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-12-31 21:12 . 2007-12-31 21:12 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\acccore
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-23 08:29 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-01-21 22:57 --------- d-----w C:\Documents and Settings\Alan\Application Data\AVG7
2008-01-09 09:30 --------- d-----w C:\Documents and Settings\All Users\Application Data\avg7
2008-01-07 07:43 --------- d-----w C:\Documents and Settings\TEMP\Application Data\AVG7
2008-01-01 12:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\Viewpoint
2007-12-25 16:45 --------- d-----w C:\Program Files\Traktor DJ Studio
2007-12-23 00:05 --------- d-----w C:\Documents and Settings\LocalService\Application Data\AVG7
2007-12-23 00:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
2007-12-22 19:14 --------- d-----w C:\Documents and Settings\LocalService\Application Data\Yahoo!
2007-12-22 17:59 89,088 ---h--w C:\Documents and Settings\TEMP\TEMP.exe
2007-12-22 17:59 89,088 ---h--w C:\Documents and Settings\Guest.ALANCOMP\Guest.ALANCOMP.exe
2007-12-22 03:59 --------- d-----w C:\Documents and Settings\TEMP\Application Data\Symantec
2007-12-06 07:49 --------- d-----w C:\Documents and Settings\TEMP\Application Data\U3
.
(((((((((((((((((((((((((((((
[email protected]_ 2.09.38.18 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-01-09 09:55:15 241,664 ----a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000001\NTUSER.DAT
+ 2008-01-23 08:19:35 241,664 ----a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000001\NTUSER.DAT
- 2008-01-09 09:55:15 8,192 ----a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000002\UsrClass.dat
+ 2008-01-23 08:19:36 8,192 ----a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000002\UsrClass.dat
- 2008-01-09 09:55:15 241,664 ----a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000003\NTUSER.DAT
+ 2008-01-23 08:19:36 241,664 ----a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000003\NTUSER.DAT
- 2008-01-09 09:55:15 8,192 ----a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000004\UsrClass.dat
+ 2008-01-23 08:19:36 8,192 ----a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000004\UsrClass.dat
- 2008-01-09 09:55:15 4,354,048 ----a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000005\ntuser.dat
+ 2008-01-23 08:19:36 4,354,048 ----a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000005\ntuser.dat
- 2008-01-09 09:55:15 12,288 ----a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000006\UsrClass.dat
+ 2008-01-23 08:19:37 12,288 ----a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000006\UsrClass.dat
+ 2001-07-15 01:32:24 69,632 ----a-w C:\WINDOWS\setupupd\temp\wsdueng.dll
- 2005-02-21 02:48:05 16,384 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-01-21 04:08:45 16,384 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2005-02-21 02:48:05 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-01-21 04:08:45 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2005-02-21 02:48:05 49,152 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-01-21 04:08:45 49,152 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2007-12-23 00:05:12 3,968 ----a-w C:\WINDOWS\system32\drivers\avgclean.sys
+ 2008-01-15 03:39:26 10,760 ----a-w C:\WINDOWS\system32\drivers\avgclean.sys
- 2007-12-23 00:05:12 19,904 ----a-w C:\WINDOWS\system32\drivers\avgmfx86.sys
+ 2008-01-15 03:38:42 26,952 ----a-w C:\WINDOWS\system32\drivers\avgmfx86.sys
+ 2008-01-20 06:32:22 194,320 ----a-w C:\WINDOWS\system32\drivers\klif.sys
+ 2004-08-04 08:57:00 1,712,128 ------w C:\WINDOWS\XPCD\i386\ASMS\10\msft\windows\gdiplus\gdiplus.dll
+ 2002-09-03 16:20:28 1,700,352 ----a-w C:\WINDOWS\XPCD\i386\ASMS\1000\MSFT\WINDOWS\GDIPLUS\GDIPLUS.DLL
+ 2004-08-04 08:57:00 853,504 ------w C:\WINDOWS\XPCD\i386\ASMS\52\msft\windows\net\dxmrtp\dxmrtp.dll
+ 2004-08-04 08:57:00 991,232 ------w C:\WINDOWS\XPCD\i386\ASMS\52\msft\windows\net\rtcdll\rtcdll.dll
+ 2004-08-04 08:55:58 132,096 ------w C:\WINDOWS\XPCD\i386\ASMS\52\msft\windows\net\rtcres\rtcres.dll
+ 2004-08-04 08:57:02 1,050,624 ------w C:\WINDOWS\XPCD\i386\ASMS\60\msft\windows\common\controls\comctl32.dll
+ 2002-09-03 16:20:29 74,802 ----a-w C:\WINDOWS\XPCD\i386\ASMS\6000\MSFT\VCRTL\ATL.DLL
+ 2002-09-03 16:20:29 995,383 ----a-w C:\WINDOWS\XPCD\i386\ASMS\6000\MSFT\VCRTL\MFC42.DLL
+ 2002-09-03 16:20:29 995,384 ----a-w C:\WINDOWS\XPCD\i386\ASMS\6000\MSFT\VCRTL\MFC42U.DLL
+ 2002-09-03 16:20:29 401,462 ----a-w C:\WINDOWS\XPCD\i386\ASMS\6000\MSFT\VCRTL\MSVCP60.DLL
+ 2002-09-03 16:20:29 921,088 ----a-w C:\WINDOWS\XPCD\i386\ASMS\6000\MSFT\WINDOWS\COMMON\CONTROLS\COMCTL32.DLL
+ 2004-08-04 08:57:02 54,784 ------w C:\WINDOWS\XPCD\i386\ASMS\70\msft\windows\mswincrt\msvcirt.dll
+ 2004-08-04 08:57:02 343,040 ------w C:\WINDOWS\XPCD\i386\ASMS\70\msft\windows\mswincrt\msvcrt.dll
+ 2002-09-03 16:20:30 50,688 ----a-w C:\WINDOWS\XPCD\i386\ASMS\7000\MSFT\WINDOWS\MSWINCRT\MSVCIRT.DLL
+ 2002-09-03 16:20:30 322,560 ----a-w C:\WINDOWS\XPCD\i386\ASMS\7000\MSFT\WINDOWS\MSWINCRT\MSVCRT.DLL
+ 2004-08-04 08:56:48 588,800 ------w C:\WINDOWS\XPCD\i386\AUTOCHK.EXE
+ 2004-08-04 08:56:48 580,608 ------w C:\WINDOWS\XPCD\i386\AUTOFMT.EXE
+ 2004-08-04 08:56:42 59,904 ------w C:\WINDOWS\XPCD\i386\CABINET.DLL
+ 2002-09-03 16:30:31 847,872 ----a-w C:\WINDOWS\XPCD\i386\DBGENG.DLL
+ 2004-08-04 08:56:44 640,000 ------w C:\WINDOWS\XPCD\i386\DBGHELP.DLL
+ 2002-09-03 16:23:58 55,632 ----a-w C:\WINDOWS\XPCD\i386\DRW\1033\DWINTL.DLL
+ 2002-09-03 16:23:58 162,128 ----a-w C:\WINDOWS\XPCD\i386\DRW\DWWIN.EXE
+ 2002-09-03 16:23:58 28,672 ----a-w C:\WINDOWS\XPCD\i386\DRW\FAULTH.DLL
+ 2002-09-03 16:32:50 15,872 ----a-w C:\WINDOWS\XPCD\i386\EXPAND.EXE
+ 2002-09-03 16:32:51 121,856 ----a-w C:\WINDOWS\XPCD\i386\EXTS.DLL
+ 2004-08-04 08:56:50 20,992 ------w C:\WINDOWS\XPCD\i386\faxpatch.exe
+ 2002-09-03 16:34:30 402,340 ----a-w C:\WINDOWS\XPCD\i386\HWCOMP.DAT
+ 2002-09-03 16:34:30 69,632 ----a-w C:\WINDOWS\XPCD\i386\HWDB.DLL
+ 2004-08-04 08:56:44 144,384 ------w C:\WINDOWS\XPCD\i386\IMAGEHLP.DLL
+ 2002-09-03 16:37:16 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDA1.DLL
+ 2002-09-03 16:37:17 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDA2.DLL
+ 2002-09-03 16:37:17 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDA3.DLL
+ 2002-09-03 16:37:17 6,656 ----a-w C:\WINDOWS\XPCD\i386\KBDAL.DLL
+ 2002-09-03 16:37:18 5,120 ----a-w C:\WINDOWS\XPCD\i386\KBDARME.DLL
+ 2002-09-03 16:37:19 5,120 ----a-w C:\WINDOWS\XPCD\i386\KBDARMW.DLL
+ 2002-09-03 16:37:20 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDAZE.DLL
+ 2002-09-03 16:37:20 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDAZEL.DLL
+ 2002-09-03 16:37:21 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDBE.DLL
+ 2002-09-03 16:37:22 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDBLR.DLL
+ 2002-09-03 16:37:22 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDBR.DLL
+ 2002-09-03 16:37:22 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDBU.DLL
+ 2002-09-03 16:37:23 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDCA.DLL
+ 2002-09-03 16:37:24 6,656 ----a-w C:\WINDOWS\XPCD\i386\KBDCR.DLL
+ 2002-09-03 16:37:24 7,168 ----a-w C:\WINDOWS\XPCD\i386\KBDCZ.DLL
+ 2002-09-03 16:37:25 6,656 ----a-w C:\WINDOWS\XPCD\i386\KBDCZ1.DLL
+ 2002-09-03 16:37:25 6,656 ----a-w C:\WINDOWS\XPCD\i386\KBDCZ2.DLL
+ 2002-09-03 16:37:26 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDDA.DLL
+ 2002-09-03 16:37:26 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDDIV1.DLL
+ 2002-09-03 16:37:26 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDDIV2.DLL
+ 2002-09-03 16:37:27 5,120 ----a-w C:\WINDOWS\XPCD\i386\KBDDV.DLL
+ 2002-09-03 16:37:27 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDES.DLL
+ 2002-09-03 16:37:28 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDEST.DLL
+ 2002-09-03 16:37:28 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDFA.DLL
+ 2002-09-03 16:37:28 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDFC.DLL
+ 2002-09-03 16:37:29 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDFI.DLL
+ 2002-09-03 16:38:33 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDFR.DLL
+ 2002-09-03 16:38:34 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDGAE.DLL
+ 2002-09-03 16:38:35 5,120 ----a-w C:\WINDOWS\XPCD\i386\KBDGEO.DLL
+ 2002-09-03 16:38:35 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDGKL.DLL
+ 2002-09-03 16:38:36 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDGR.DLL
+ 2002-09-03 16:38:36 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDGR1.DLL
+ 2002-09-03 16:38:37 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDHE.DLL
+ 2002-09-03 16:38:37 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDHE220.DLL
+ 2002-09-03 16:38:38 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDHE319.DLL
+ 2002-09-03 16:38:38 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDHEB.DLL
+ 2002-09-03 16:38:38 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDHELA2.DLL
+ 2002-09-03 16:38:41 6,656 ----a-w C:\WINDOWS\XPCD\i386\KBDHELA3.DLL
+ 2002-09-03 16:38:41 8,192 ----a-w C:\WINDOWS\XPCD\i386\KBDHEPT.DLL
+ 2002-09-03 16:38:41 6,656 ----a-w C:\WINDOWS\XPCD\i386\KBDHU.DLL
+ 2002-09-03 16:38:42 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDHU1.DLL
+ 2002-09-03 16:38:42 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDIC.DLL
+ 2002-09-03 16:38:43 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDINDEV.DLL
+ 2002-09-03 16:38:43 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDINGUJ.DLL
+ 2002-09-03 16:38:43 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDINHIN.DLL
+ 2002-09-03 16:38:44 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDINKAN.DLL
+ 2002-09-03 16:38:44 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDINMAR.DLL
+ 2002-09-03 16:38:44 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDINPUN.DLL
+ 2002-09-03 16:38:45 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDINTAM.DLL
+ 2002-09-03 16:38:45 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDINTEL.DLL
+ 2002-09-03 16:38:46 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDIR.DLL
+ 2002-09-03 16:38:46 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDIT.DLL
+ 2002-09-03 16:38:47 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDIT142.DLL
+ 2002-09-03 16:38:47 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDKAZ.DLL
+ 2002-09-03 16:38:47 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDKYR.DLL
+ 2002-09-03 16:38:48 6,656 ----a-w C:\WINDOWS\XPCD\i386\KBDLA.DLL
+ 2002-09-03 16:38:49 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDLT.DLL
+ 2002-09-03 16:38:49 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDLT1.DLL
+ 2002-09-03 16:38:50 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDLV.DLL
+ 2002-09-03 16:38:50 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDLV1.DLL
+ 2002-09-03 16:38:51 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDMON.DLL
+ 2002-09-03 16:38:51 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDNE.DLL
+ 2002-09-03 16:38:52 7,168 ----a-w C:\WINDOWS\XPCD\i386\KBDNEC.DLL
+ 2002-09-03 16:38:53 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDNO.DLL
+ 2002-09-03 16:38:54 6,656 ----a-w C:\WINDOWS\XPCD\i386\KBDPL.DLL
+ 2002-09-03 16:38:54 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDPL1.DLL
+ 2002-09-03 16:38:55 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDPO.DLL
+ 2002-09-03 16:38:55 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDRO.DLL
+ 2002-09-03 16:38:55 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDRU.DLL
+ 2002-09-03 16:38:56 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDRU1.DLL
+ 2002-09-03 16:38:56 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDSF.DLL
+ 2002-09-03 16:38:56 6,656 ----a-w C:\WINDOWS\XPCD\i386\KBDSG.DLL
+ 2002-09-03 16:38:57 6,656 ----a-w C:\WINDOWS\XPCD\i386\KBDSL.DLL
+ 2002-09-03 16:38:57 6,656 ----a-w C:\WINDOWS\XPCD\i386\KBDSL1.DLL
+ 2002-09-03 16:38:57 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDSP.DLL
+ 2002-09-03 16:38:58 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDSW.DLL
+ 2002-09-03 16:38:58 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDSYR1.DLL
+ 2002-09-03 16:38:59 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDSYR2.DLL
+ 2002-09-03 16:38:59 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDTAT.DLL
+ 2002-09-03 16:38:59 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDTH0.DLL
+ 2002-09-03 16:39:00 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDTH1.DLL
+ 2002-09-03 16:39:00 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDTH2.DLL
+ 2002-09-03 16:39:00 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDTH3.DLL
+ 2002-09-03 16:39:01 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDTUF.DLL
+ 2002-09-03 16:39:01 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDTUQ.DLL
+ 2002-09-03 16:39:01 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDUK.DLL
+ 2002-09-03 16:39:02 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDUR.DLL
+ 2002-09-03 16:39:02 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDURDU.DLL
+ 2002-09-03 16:39:03 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDUS.DLL
+ 2002-09-03 16:39:03 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDUSL.DLL
+ 2002-09-03 16:39:04 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDUSR.DLL
+ 2002-09-03 16:39:04 6,144 ----a-w C:\WINDOWS\XPCD\i386\KBDUSX.DLL
+ 2002-09-03 16:39:04 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDUZB.DLL
+ 2002-09-03 16:39:05 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDVNTC.DLL
+ 2002-09-03 16:39:05 5,632 ----a-w C:\WINDOWS\XPCD\i386\KBDYCC.DLL
+ 2002-09-03 16:39:06 6,656 ----a-w C:\WINDOWS\XPCD\i386\KBDYCL.DLL
+ 2004-08-04 06:59:48 92,032 ------w C:\WINDOWS\XPCD\i386\KSECDD.SYS
+ 2004-08-04 09:02:46 329,728 ------w C:\WINDOWS\XPCD\i386\NETSETUP.EXE
+ 2004-08-04 06:38:34 47,564 ------w C:\WINDOWS\XPCD\i386\NTDETECT.COM
+ 2004-08-04 08:56:38 708,096 ------w C:\WINDOWS\XPCD\i386\NTDLL.DLL
+ 2004-08-04 07:15:10 574,592 ------w C:\WINDOWS\XPCD\i386\NTFS.SYS
+ 2002-09-03 16:50:20 31,744 ----a-w C:\WINDOWS\XPCD\i386\NTSD.EXE
+ 2002-09-03 16:50:21 36,864 ----a-w C:\WINDOWS\XPCD\i386\NTSDEXTS.DLL
+ 2002-09-03 16:52:25 27,648 ----a-w C:\WINDOWS\XPCD\i386\PIDGEN.DLL
+ 2004-08-04 08:56:56 146,432 ------w C:\WINDOWS\XPCD\i386\REGEDIT.EXE
+ 2004-08-02 22:20:40 4,569 ------w C:\WINDOWS\XPCD\i386\SECUPD.DAT
+ 2004-08-04 07:00:00 260,272 ------w C:\WINDOWS\XPCD\i386\SETUPLDR.BIN
+ 2004-08-04 07:05:06 232,832 ------w C:\WINDOWS\XPCD\i386\SPCMDCON.SYS
+ 2004-08-04 08:56:58 11,776 ------w C:\WINDOWS\XPCD\i386\spnpinst.exe
+ 2002-09-03 17:05:59 244,736 ----a-w C:\WINDOWS\XPCD\i386\SYSPARSE.EXE
+ 2004-08-04 08:56:38 708,096 ------w C:\WINDOWS\XPCD\i386\SYSTEM32\NTDLL.DLL
+ 2004-08-04 08:56:58 470,016 ------w C:\WINDOWS\XPCD\i386\SYSTEM32\SMSS.EXE
+ 2004-08-04 08:56:58 75,264 ------w C:\WINDOWS\XPCD\i386\TELNET.EXE
+ 2002-09-03 17:08:52 469,504 ----a-w C:\WINDOWS\XPCD\i386\USETUP.EXE
+ 2002-09-03 16:26:17 65,536 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\ACROBAT\MIGRATE.DLL
+ 2002-09-03 16:26:19 30,208 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\CMMGR\MIGRATE.DLL
+ 2002-09-03 16:26:19 53,248 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\DEVUPGRD\MIGRATE.DLL
+ 2002-09-03 16:26:19 3,952 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\DMICALL\DMICALL.SYS
+ 2002-09-03 16:26:19 32,768 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\DMICALL\MIGRATE.DLL
+ 2002-09-03 16:26:19 13,824 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\DVD\MIGRATE.DLL
+ 2002-09-03 16:26:19 69,632 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\EASTMAN\MIGRATE.DLL
+ 2002-09-03 16:26:19 73,728 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\FAX\AWDVSTUB.EXE
+ 2002-09-03 16:26:20 25,600 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\FAX\MIGRATE.DLL
+ 2002-09-03 16:26:20 83,456 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\HPTOOLS\MIGRATE.DLL
+ 2002-09-03 16:26:20 40,960 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\IBMAV\MIGRATE.DLL
+ 2002-09-03 16:26:20 8,704 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\ICM\MIGRATE.DLL
+ 2002-09-03 16:26:21 10,240 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\IEMIG\MIGRATE.DLL
+ 2002-09-03 16:26:26 108,544 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\MAPI\DLL\MIGRATE.DLL
+ 2002-09-03 16:26:26 36,864 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\MAPI\DLL\MKNTFRMCACHE.EXE
+ 2002-09-03 16:26:26 25,629 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\MAPI\DLL\MSPATCHA.DLL
+ 2002-09-03 16:26:32 39,424 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\MODEMS\MIGRATE.DLL
+ 2002-09-03 16:26:32 11,776 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\MSGQUEUE\MIGRATE.DLL
+ 2002-09-03 16:26:32 7,680 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\MSI\MIGRATE.DLL
+ 2002-09-03 16:26:32 33,792 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\MSI\MSI9XMIG.DLL
+ 2002-09-03 16:26:32 31,744 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\MSI\MSINTMIG.DLL
+ 2002-09-03 16:26:32 46,864 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\MSP\MIGRATE.DLL
+ 2002-09-03 16:26:32 36,352 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\NECKBD\MIGRATE.DLL
+ 2002-09-03 16:26:32 176,128 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\NECPA\MIGRATE.DLL
+ 2002-09-03 16:26:33 147,456 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\NECWPS\MIGRATE.DLL
+ 2002-09-03 16:26:33 86,016 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\OCTOPUS\MIGRATE.DLL
+ 2002-09-03 16:26:33 37,888 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\OEWAB\MIGRATE.DLL
+ 2002-09-03 16:26:33 30,208 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\PRINT\MIGRATE.DLL
+ 2002-09-03 16:26:34 35,328 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\PWS\MIGRATE.DLL
+ 2002-09-03 16:26:35 184,320 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\RUMBA\MIGRATE.DLL
+ 2004-08-04 07:05:32 69,632 ------w C:\WINDOWS\XPCD\i386\WIN9XMIG\SETUP\MIGRATE.DLL
+ 2002-09-03 16:26:35 76,288 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\TRANSACT\MIGRATE.DLL
+ 2002-09-03 16:26:35 14,848 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\WIA\MIGRATE.DLL
+ 2002-09-03 16:26:35 40,960 ----a-w C:\WINDOWS\XPCD\i386\WIN9XMIG\WMP\MIGRATE.DLL
+ 2004-07-17 19:47:40 55,056 ------w C:\WINDOWS\XPCD\i386\WIN9XUPG\CABINET.DLL
+ 2002-09-03 16:26:35 25,600 ----a-w C:\WINDOWS\XPCD\i386\WIN9XUPG\CFGMGR32.DLL
+ 2002-09-03 16:26:35 90,563 ----a-w C:\WINDOWS\XPCD\i386\WIN9XUPG\E95ONLY.DAT
+ 2004-07-17 19:47:40 99,376 ------w C:\WINDOWS\XPCD\i386\WIN9XUPG\IMAGEHLP.DLL
+ 2002-09-03 16:26:35 106,496 ----a-w C:\WINDOWS\XPCD\i386\WIN9XUPG\ISMIG.DLL
+ 2004-07-17 19:47:40 267,536 ------w C:\WINDOWS\XPCD\i386\WIN9XUPG\MSVCRT.DLL
+ 2004-08-04 07:04:40 888,832 ------w C:\WINDOWS\XPCD\i386\WIN9XUPG\SETUPAPI.DLL
+ 2002-09-03 16:26:36 3,584 ----a-w C:\WINDOWS\XPCD\i386\WIN9XUPG\TWID.EXE
+ 2004-08-04 07:05:36 872,448 ------w C:\WINDOWS\XPCD\i386\WIN9XUPG\W95UPG.DLL
+ 2004-08-04 06:41:40 84,939 ------w C:\WINDOWS\XPCD\i386\WINNT.EXE
+ 2004-08-04 07:05:08 48,128 ------w C:\WINDOWS\XPCD\i386\WINNT32.EXE
+ 2004-08-04 08:56:36 1,171,456 ------w C:\WINDOWS\XPCD\i386\WINNT32A.DLL
+ 2004-08-04 08:56:36 1,294,336 ------w C:\WINDOWS\XPCD\i386\WINNT32U.DLL
+ 2004-08-04 08:56:36 763,392 ------w C:\WINDOWS\XPCD\i386\WINNTBBA.DLL
+ 2004-08-04 08:56:36 764,928 ------w C:\WINDOWS\XPCD\i386\WINNTBBU.DLL
+ 2002-09-03 16:26:37 12,288 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\APMUPGRD.DLL
+ 2002-09-03 16:26:37 6,656 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\BOSCOMP.DLL
+ 2002-09-03 16:26:37 58,128 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\CFGMGR32.DLL
+ 2002-09-03 16:26:37 40,960 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\CLUSCOMP.DLL
+ 2002-09-03 16:26:37 5,120 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\FSFILTER.DLL
+ 2002-09-03 16:26:37 6,656 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\FTCOMP.DLL
+ 2002-09-03 16:26:37 5,632 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\INPUPGRD.DLL
+ 2002-09-03 16:26:38 5,632 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\MS\MODEMSHR\MDMSHRUP.DLL
+ 2002-09-03 16:26:39 30,748 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\MS\SNA\IBMMGUG.DLL
+ 2002-09-03 16:26:39 38,941 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\MS\SNA\NTSNAUPG.DLL
+ 2002-09-03 16:26:39 28,701 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\MS\SNA\SNADLCUG.DLL
+ 2002-09-03 16:26:37 5,632 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\MSMQCOMP.DLL
+ 2004-08-04 08:56:36 121,344 ------w C:\WINDOWS\XPCD\i386\WINNTUPG\NETUPGRD.DLL
+ 2002-09-03 16:26:38 11,264 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\NTDSUPG.DLL
+ 2004-08-04 08:56:36 6,144 ------w C:\WINDOWS\XPCD\i386\WINNTUPG\nv4prep.dll
+ 2002-09-03 16:26:39 9,756 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\OEM\DIGI\ASYNC\DGUPGRD.DLL
+ 2002-09-03 16:26:39 72,732 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\OEM\DIGI\ISDN\BRI\DIGIUPG.DLL
+ 2002-09-03 16:26:39 28,701 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\OEM\DIGI\ISDN\PRI\DIGPRIUP.DLL
+ 2002-09-03 16:26:39 11,292 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\OEM\DIGI\REALPORT\DGRPUPG.DLL
+ 2002-09-03 16:26:40 114,717 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\OEM\EQN\EQNUPGRD.DLL
+ 2002-09-03 16:26:40 31,744 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\OEM\SPX\MPS\SPXUPGRD.DLL
+ 2002-09-03 16:26:40 33,792 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\OEM\TIGERJET\TJUPG.DLL
+ 2004-08-04 08:56:36 323,344 ------w C:\WINDOWS\XPCD\i386\WINNTUPG\SETUPAPI.DLL
+ 2002-09-03 16:26:38 4,608 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\TSCOMP.DLL
+ 2002-09-03 16:26:38 11,776 ----a-w C:\WINDOWS\XPCD\i386\WINNTUPG\VIDUPGRD.DLL
+ 2002-09-03 17:14:29 53,248 ----a-w C:\WINDOWS\XPCD\i386\WSDU.DLL
+ 2004-08-04 08:56:36 77,824 ------w C:\WINDOWS\XPCD\i386\WSDUENG.DLL
+ 2008-01-20 02:33:35 278,927,592 ----a-w C:\WINDOWS\XPSP2\WindowsXP-KB835935-SP2-ENU.exe
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 08:24 1694208]
"RemoteCenter"="C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE" [2004-06-25 10:21 147456]
"Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" [2006-07-05 07:29 4538368]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-09 21:14 68856]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:56 15360]
"Aim6"="C:\Program Files\AIM6\aim6.exe" [2007-12-18 11:04 50528]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="C:\Program Files\Apoint\Apoint.exe" [2003-11-07 17:21 114688]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-04-27 20:10 335872]
"Mouse Suite 98 Daemon"="ICO.EXE" []
"VAIO Recovery"="C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe" [2003-04-19 21:08 28672]
"SonyPowerCfg"="C:\Program Files\Sony\VAIO Power Management\SPMgr.exe" [2003-12-11 22:03 167936]
"HKSERV.EXE"="C:\Program Files\Sony\HotKey Utility\HKserv.exe" [2004-02-12 22:01 98304]
"VAIO Update 2"="C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" [2004-01-17 02:36 135168]
"ezShieldProtector for Px"="C:\WINDOWS\System32\ezSP_Px.exe" [2002-08-20 10:29 40960]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2005-12-12 14:37 71328]
"URLLSTCK.exe"="C:\Program Files\Norton Internet Security\UrlLstCk.exe" [2003-12-11 18:35 70800]
"VMConsole.exe"="C:\Program Files\sony\vaio media integrated server\Platform\VMConsole.exe" [2004-02-25 05:08 536576]
"P2P Networking"="C:\WINDOWS\System32\P2P Networking\P2P Networking.exe" [ ]
"SbUsb AudCtrl"="sbusbdll.dll" [2004-07-08 18:27 119296 C:\WINDOWS\system32\sbusbdll.dll]
"UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 01:00 90112]
"Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [2005-11-25 15:01 100056]
"CTSysVol"="C:\Program Files\Creative\SBLive 24-Bit External\Surround Mixer\CTSysVol.exe" [2003-09-17 10:43 57344]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe" [2005-04-13 02:48 36975]
"BJCFD"="C:\Program Files\BroadJump\Client Foundation\CFD.exe" [2002-09-10 21:26 368706]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-12-09 16:25 185896]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-12-09 16:34 282624]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-01-14 19:39 579072]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Symantec NetDriver Warning"="C:\PROGRA~1\SYMNET~1\SNDWarn.exe" [2004-10-29 08:52 218232]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-12-22 16:04 219136]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 21:05:26]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 10:05:56]
Quicken Scheduled Updates.lnk - C:\Program Files\Quicken\bagent.exe [2003-10-02 13:08:08]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run]
"{402528E8-0AE7-1033-0519-040404230001}"= "C:\Program Files\Common Files\{402528E8-0AE7-1033-0519-040404230001}\Update.exe" mc-110-12-0000140
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 12:55 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-02-27 11:39 282624 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, wowfx.dll
Security Providers "msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"\
0\
0R2 VAIO Entertainment File Import Service;VAIO Entertainment File Import Service;C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe [2004-03-12 16:32]
S2 CiscoVpnInstallService;Cisco Systems, Inc. Installer service;C:\Documents and Settings\Alan\Local Settings\Temp\WZSB1.tmp\installservice.exe []
S3 sbusb;Sound Blaster USB Audio Driver;C:\WINDOWS\system32\DRIVERS\sbusb.sys [2004-07-27 01:31]
S3 VAIO Entertainment UPnP Client Adapter;VAIO Entertainment UPnP Client Adapter;C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VCSW\VCSW.exe [2004-03-12 15:57]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{36b96ad6-a097-11dc-9bf0-b049a0c8caff}]
\Shell\AutoRun\command - G:\LaunchU3.exe -a
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5aebcc43-2b0d-11da-9b48-000e9b42a799}]
\Shell\AutoRun\command - G:\
\Shell\open\Command - G:\BC175E47.exe
.
Contents of the 'Scheduled Tasks' folder
"2007-12-22 04:00:00 C:\WINDOWS\Tasks\Norton AntiVirus - Scan my computer.job"
- C:\PROGRA~1\NORTON~1\NORTON~1\Navw32.exeh/task:
"2008-01-08 02:51:45 C:\WINDOWS\Tasks\Symantec NetDetect.job"
- C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2008-01-23 00:29:21
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
PROCESS: C:\WINDOWS\explorer.exe [6.00.2900.3156]
-> C:\Program Files\Common Files\Sony Shared\Sony Utilities\KeyHook.dll
.
Completion time: 2008-01-23 0:33:46
ComboFix-quarantined-files.txt 2008-01-23 08:33:41
ComboFix2.txt 2008-01-14 10:09:58
.
2007-12-22 18:11:25 --- E O F ---