Search Engine Redirect Virus [Solved]

Geeks to Go Forums > Security > Virus, Spyware, Malware Removal

Today's New Content

Search Engine Redirect Virus [Solved] My search engine takes me crazy places!

#1 cherdeb224

Group: Member
Posts: 12
Joined: 10-January 10

Posted 11 January 2010 - 10:41 AM

Recently received a used computer from my SIL. It is loaded with a lot of junk, and I started having virus problems right away. I removed her virus protection programs and reinstalled AVG, which seemed to clean most the viruses. The scan now runs clean, but my search engines are redirecting me to advertising (and some porn, yuck) sites. This happens whether I use IE or Firefox. I have followed the procedures in your removal instructions. I have also noticed that since I started the removal process, I am suddenly getting JIT debugging alerts for "Script". If I authorize debugging, I get an error message. Not sure if that is related or not. Thanks in advance for your help Here are my logs:

OTL

OTL logfile created on: 1/11/2010 10:51:30 AM - Run 1
OTL by OldTimer - Version 3.1.23.0 Folder = C:\Documents and Settings\HP_Owner\My Documents\Downloads
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

447.00 Mb Total Physical Memory | 158.00 Mb Available Physical Memory | 35.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 75.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 68.93 Gb Total Space | 24.95 Gb Free Space | 36.19% Space Free | Partition Type: NTFS
Drive D: | 5.58 Gb Total Space | 0.76 Gb Free Space | 13.68% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: YOUR-86339EB2BF
Current User Name: HP_Owner
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010/01/11 10:50:03 | 00,543,744 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Owner\My Documents\Downloads\OTL.exe
PRC - [2009/12/31 09:34:42 | 02,033,432 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exe
PRC - [2009/12/29 14:52:59 | 01,055,000 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe
PRC - [2009/12/29 14:52:59 | 00,600,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exe
PRC - [2009/12/29 14:52:59 | 00,503,576 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exe
PRC - [2009/12/29 14:52:58 | 00,702,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exe
PRC - [2009/12/29 14:52:47 | 00,285,392 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe
PRC - [2009/04/27 08:49:14 | 00,078,104 | ---- | M] (iWin Inc.) -- C:\Program Files\iWin Games\iWinTrusted.exe
PRC - [2007/11/16 18:35:28 | 00,068,856 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2007/11/15 21:51:42 | 00,059,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ZuneBusEnum.exe
PRC - [2007/10/31 14:09:16 | 00,110,592 | ---- | M] (Apple, Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2007/06/13 05:23:07 | 01,033,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/05/25 04:41:53 | 00,099,248 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddserv.exe
PRC - [2007/05/25 04:41:37 | 00,537,520 | ---- | M] ( ) -- C:\WINDOWS\system32\lxddcoms.exe
PRC - [2004/08/04 07:00:00 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe
PRC - [2004/02/26 08:55:50 | 00,174,592 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\system32\LEXPPS.EXE
PRC - [2004/02/26 08:55:20 | 00,307,200 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\system32\LEXBCES.EXE
PRC - [1999/12/12 12:01:00 | 00,044,032 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\CTSVCCDA.EXE

========== Modules (SafeList) ==========

MOD - [2010/01/11 10:50:03 | 00,543,744 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Owner\My Documents\Downloads\OTL.exe
MOD - [2006/08/25 10:45:55 | 01,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (Bonjour Service)
SRV - File not found [Auto | Stopped] -- -- (avg8wd)
SRV - [2009/12/29 14:52:47 | 00,285,392 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2009/04/27 08:49:14 | 00,078,104 | ---- | M] (iWin Inc.) [Auto | Running] -- C:\Program Files\iWin Games\iWinTrusted.exe -- (iWinTrusted)
SRV - [2007/12/11 12:10:16 | 00,504,104 | ---- | M] (Apple Inc.) [On_Demand | Stopped] -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service)
SRV - [2007/11/15 21:52:24 | 02,124,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\ZuneNss.exe -- (ZuneNetworkSvc)
SRV - [2007/11/15 21:51:56 | 00,245,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\ZuneWlanCfgSvc.exe -- (ZuneWlanCfgSvc)
SRV - [2007/11/15 21:51:42 | 00,059,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\ZuneBusEnum.exe -- (ZuneBusEnum)
SRV - [2007/10/31 14:09:16 | 00,110,592 | ---- | M] (Apple, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2007/10/11 16:44:45 | 00,138,168 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
SRV - [2007/05/25 04:41:53 | 00,099,248 | ---- | M] () [Auto | Running] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxddserv.exe -- (lxddCATSCustConnectService)
SRV - [2007/05/25 04:41:37 | 00,537,520 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\lxddcoms.exe -- (lxdd_device)
SRV - [2007/01/19 12:54:14 | 00,097,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\MSN Messenger\usnsvc.exe -- (usnjsvc)
SRV - [2004/02/26 08:55:20 | 00,307,200 | ---- | M] (Lexmark International, Inc.) [Auto | Running] -- C:\WINDOWS\system32\LEXBCES.EXE -- (LexBceS)
SRV - [2003/07/28 21:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [1999/12/12 12:01:00 | 00,044,032 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\WINDOWS\system32\CTSVCCDA.EXE -- (Creative Service for CDROM Access)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://m.www.yahoo.c...r741=1260762668
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "www.yahoo.com"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.716
FF - prefs.js..extensions.enabledItems: avg@igeared:3.011.025.005

FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2009/12/29 14:52:46 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG9\Toolbar\Firefox\avg@igeared [2009/12/29 14:53:11 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/01/06 21:00:31 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/01/06 21:00:31 | 00,000,000 | ---D | M]

[2009/12/14 14:26:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\HP_Owner\Application Data\Mozilla\Extensions
[2010/01/09 13:14:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\HP_Owner\Application Data\Mozilla\Firefox\Profiles\ud51zg38.default\extensions
[2009/12/14 14:25:08 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions

O1 HOSTS File: (734 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Yahoo! IE Services Button) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_12\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (IEHlprObj Class) - {8CA5ED52-F3FB-4414-A105-2E3491156990} - C:\Program Files\iWin Games\iWinGamesHookIE.dll (iWin Inc.)
O2 - BHO: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL File not found
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL File not found
O3 - HKLM\..\Toolbar: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKCU\..\Toolbar\WebBrowser: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL File not found
O3 - HKCU\..\Toolbar\WebBrowser: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe (Intuit Inc.)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Yahoo! Search - C:\Program Files\Yahoo!\Common [2008/12/27 11:08:11 | 00,000,000 | ---D | M]
O8 - Extra context menu item: Add To HP Organize... - C:\Program Files\Hewlett-Packard\HP Organize\bin\core.hp.main\SendTo.html ()
O8 - Extra context menu item: Yahoo! &Dictionary - C:\Program Files\Yahoo!\Common [2008/12/27 11:08:11 | 00,000,000 | ---D | M]
O8 - Extra context menu item: Yahoo! &Maps - C:\Program Files\Yahoo!\Common [2008/12/27 11:08:11 | 00,000,000 | ---D | M]
O8 - Extra context menu item: Yahoo! &SMS - C:\Program Files\Yahoo!\Common [2008/12/27 11:08:11 | 00,000,000 | ---D | M]
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_12\bin\NPJPI150_12.dll (Sun Microsystems, Inc.)
O9 - Extra Button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - Reg Error: Key error. File not found
O9 - Extra 'Tools' menuitem : IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - Reg Error: Key error. File not found
O9 - Extra Button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: turbotax.com ([]https in Trusted sites)
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} http://go.microsoft....k/?linkid=58813 (Office Genuine Advantage Validation Tool)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/Facebo...toUploader5.cab (Facebook Photo Uploader 5)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\yinsthelper.dll (YInstStarter Class)
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} http://lads.myspace....ploader1006.cab (MySpace Uploader Control)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://groups.msn.co...UC/MsnPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/microsoftu...b?1182732857406 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu...b?1182732816765 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab (Java Plug-in 1.5.0_12)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash...r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} http://sc.groups.msn...eUC/MsnUpld.cab (MSN File Upload Control)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl...indows-i586.cab (Java Plug-in 1.4.2_03)
O16 - DPF: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab (Java Plug-in 1.5.0_12)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab (Java Plug-in 1.5.0_12)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (denumehe.dll) - File not found
O20 - AppInit_DLLs: (c:\windows\system32\fujumara.dll) - C:\WINDOWS\System32\fujumara.dll File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O21 - SSODL: birunivif - {9b454c2f-061c-4a77-88a2-413f1ec62ec1} - C:\WINDOWS\System32\fujumara.dll File not found
O22 - SharedTaskScheduler: {9b454c2f-061c-4a77-88a2-413f1ec62ec1} - gahurihor - C:\WINDOWS\System32\fujumara.dll File not found
O29 - HKLM SecurityProviders - (msansspc.dll) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/04/03 12:58:07 | 00,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2001/07/28 06:07:38 | 00,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2004/04/30 22:01:14 | 00,000,053 | -HS- | M] () - D:\Autorun.inf -- [ FAT32 ]
O33 - MountPoints2\{58966060-7ce1-11dd-8a70-00112f81a183}\Shell\AutoRun\command - "" = J:\setupSNK.exe -- File not found
O33 - MountPoints2\{ca569327-fb86-11dd-8a7d-00112f81a183}\Shell - "" = AutoRun
O33 - MountPoints2\{ca569327-fb86-11dd-8a7d-00112f81a183}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{ca569327-fb86-11dd-8a7d-00112f81a183}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -- File not found
O33 - MountPoints2\J\Shell - "" = AutoRun
O33 - MountPoints2\J\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\LaunchU3.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - C:\WINDOWS\system32\ias [2007/04/03 12:32:22 | 00,000,000 | ---D | M]
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: Wmi - C:\WINDOWS\system32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (17173478272663552)

========== Files/Folders - Created Within 14 Days ==========

[2010/01/10 19:05:14 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\HP_Owner\Recent
[2010/01/10 12:12:08 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/01/10 12:10:14 | 00,000,000 | ---D | C] -- C:\desktop
[2010/01/09 10:42:30 | 00,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010/01/08 18:16:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\HP_Owner\Application Data\Malwarebytes
[2010/01/08 17:46:06 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/01/08 17:46:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/01/08 17:46:02 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/01/08 17:46:01 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/01/06 12:40:25 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Palo Alto Software
[2010/01/06 12:39:19 | 00,000,000 | ---D | C] -- C:\Program Files\Quicken
[2009/12/29 14:53:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2009/12/29 14:51:44 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2009/12/29 14:51:44 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2009/12/29 14:51:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2009/12/26 22:00:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\F-Secure
[2009/12/26 10:50:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2008/09/01 20:09:38 | 00,323,584 | ---- | C] ( ) -- C:\WINDOWS\System32\LXDDhcp.dll
[2007/10/13 17:17:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2007/05/17 09:19:57 | 00,643,072 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddpmui.dll
[2007/05/17 09:17:22 | 01,232,896 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddserv.dll
[2007/05/17 09:11:47 | 00,425,984 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddcomm.dll
[2007/05/17 09:10:16 | 00,585,728 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddlmpm.dll
[2007/05/17 09:08:43 | 00,397,312 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddiesc.dll
[2007/05/17 09:07:51 | 00,094,208 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddpplc.dll
[2007/05/17 09:07:02 | 00,684,032 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddcomc.dll
[2007/05/17 09:06:32 | 00,163,840 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddprox.dll
[2007/05/17 08:59:50 | 00,413,696 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddinpa.dll
[2007/05/17 08:58:46 | 00,999,424 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddusb1.dll
[2007/05/17 08:53:19 | 00,700,416 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddhbn3.dll
[2007/01/08 08:35:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Google
[2006/08/26 06:58:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Macromedia
[2005/08/12 10:05:16 | 00,774,144 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\RngInterstitial.dll
[2004/12/17 13:22:54 | 00,036,963 | R--- | C] (Cypress Semiconductor) -- C:\Program Files\Common Files\SM1updtr.dll
[2004/12/10 13:03:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Symantec
[2 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 14 Days ==========

[2010/01/11 10:38:43 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/01/11 10:38:38 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/01/11 10:37:25 | 06,778,880 | ---- | M] () -- C:\Documents and Settings\HP_Owner\ntuser.dat
[2010/01/11 10:37:25 | 00,000,278 | -HS- | M] () -- C:\Documents and Settings\HP_Owner\ntuser.ini
[2010/01/11 10:33:00 | 00,000,362 | ---- | M] () -- C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
[2010/01/11 02:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At3.job
[2010/01/11 02:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At27.job
[2010/01/11 01:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At26.job
[2010/01/11 01:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2010/01/11 00:00:02 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At25.job
[2010/01/11 00:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2010/01/10 23:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At48.job
[2010/01/10 23:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At24.job
[2010/01/10 22:00:02 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At47.job
[2010/01/10 22:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At23.job
[2010/01/10 21:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At46.job
[2010/01/10 21:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At22.job
[2010/01/10 20:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At45.job
[2010/01/10 20:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At21.job
[2010/01/10 19:35:43 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\prvlcl.dat
[2010/01/10 19:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At44.job
[2010/01/10 19:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At20.job
[2010/01/10 18:34:28 | 47,690,391 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/01/10 18:32:26 | 00,137,429 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010/01/10 16:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At41.job
[2010/01/10 16:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At17.job
[2010/01/10 15:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At40.job
[2010/01/10 15:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At16.job
[2010/01/10 14:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At39.job
[2010/01/10 14:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At15.job
[2010/01/10 13:00:03 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At38.job
[2010/01/10 13:00:02 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At14.job
[2010/01/10 12:17:56 | 00,293,376 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\38ql0vmx.exe
[2010/01/10 12:10:44 | 00,000,574 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\NTREGOPT.lnk
[2010/01/10 12:10:43 | 00,000,555 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\ERUNT.lnk
[2010/01/10 12:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At37.job
[2010/01/10 12:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At13.job
[2010/01/10 11:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At36.job
[2010/01/10 11:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At12.job
[2010/01/10 02:01:00 | 00,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010/01/09 18:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At43.job
[2010/01/09 18:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At19.job
[2010/01/09 17:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At42.job
[2010/01/09 17:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At18.job
[2010/01/09 10:42:36 | 00,001,559 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\CCleaner.lnk
[2010/01/09 10:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At35.job
[2010/01/09 10:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At11.job
[2010/01/09 09:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At34.job
[2010/01/09 09:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At10.job
[2010/01/09 08:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At9.job
[2010/01/09 08:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At33.job
[2010/01/09 07:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At8.job
[2010/01/09 07:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At32.job
[2010/01/09 06:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At7.job
[2010/01/09 06:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At31.job
[2010/01/09 05:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At6.job
[2010/01/09 05:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At30.job
[2010/01/09 04:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At5.job
[2010/01/09 04:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At29.job
[2010/01/09 03:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2010/01/09 03:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\tasks\At28.job
[2010/01/09 00:10:02 | 00,000,376 | ---- | M] () -- C:\WINDOWS\ODBC.INI
[2010/01/08 18:22:42 | 00,000,000 | ---- | M] () -- C:\WINDOWS\System32\18467.exe
[2010/01/08 18:15:54 | 00,000,707 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/01/08 18:02:17 | 00,002,931 | ---- | M] () -- C:\WINDOWS\System32\warning.html
[2010/01/08 17:40:12 | 00,006,456 | -H-- | M] () -- C:\WINDOWS\System32\gegekole
[2010/01/07 16:07:14 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/01/07 16:07:04 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/01/06 12:43:07 | 00,001,478 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Quicken 2004.lnk
[2010/01/06 12:43:07 | 00,000,910 | ---- | M] () -- C:\WINDOWS\QUICKEN.INI
[2010/01/06 12:41:09 | 00,000,686 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Quicken Scheduled Updates.lnk
[2010/01/04 22:00:07 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/12/29 14:53:13 | 00,333,192 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2009/12/29 14:53:13 | 00,012,464 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2009/12/29 14:53:13 | 00,001,518 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\AVG Free 9.0.lnk
[2009/12/29 14:53:12 | 00,028,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2009/12/29 14:52:59 | 00,360,584 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2009/12/29 14:46:37 | 00,000,593 | ---- | M] () -- C:\WINDOWS\win.ini
[2009/12/29 14:46:37 | 00,000,281 | RHS- | M] () -- C:\boot.ini
[2009/12/29 14:46:37 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2009/12/29 14:44:25 | 00,000,248 | ---- | M] () -- C:\WINDOWS\System\hpsysdrv.dat
[2009/12/29 14:10:44 | 06,039,552 | R--- | M] () -- C:\Documents and Settings\All Users\Documents\ESBK.mbb
[2009/12/29 14:10:44 | 03,284,992 | R--- | M] () -- C:\Documents and Settings\All Users\Documents\ESBK.mb
[2009/12/29 14:03:14 | 00,415,848 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009/12/29 14:03:14 | 00,068,522 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2099/01/01 12:00:00 | 00,006,456 | -H-- | C] () -- C:\WINDOWS\System32\gegekole
[2010/01/10 12:17:35 | 00,293,376 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\38ql0vmx.exe
[2010/01/10 12:10:44 | 00,000,574 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\NTREGOPT.lnk
[2010/01/10 12:10:43 | 00,000,555 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\ERUNT.lnk
[2010/01/09 10:42:35 | 00,001,559 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\CCleaner.lnk
[2010/01/08 17:46:25 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\18467.exe
[2010/01/08 17:46:10 | 00,000,707 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/01/08 16:56:29 | 00,002,931 | ---- | C] () -- C:\WINDOWS\System32\warning.html
[2010/01/06 12:41:59 | 00,000,910 | ---- | C] () -- C:\WINDOWS\QUICKEN.INI
[2010/01/06 12:41:09 | 00,000,686 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Quicken Scheduled Updates.lnk
[2010/01/06 12:41:08 | 00,001,478 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Quicken 2004.lnk
[2009/12/29 15:34:28 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\prvlcl.dat
[2009/12/29 14:53:13 | 00,001,518 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\AVG Free 9.0.lnk
[2009/12/26 10:38:40 | 00,000,036 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\housecall.guid.cache
[2008/09/01 20:13:17 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMON.DLL
[2008/09/01 20:13:17 | 00,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXF3FXPU.DLL
[2008/09/01 20:13:16 | 00,036,864 | ---- | C] () -- C:\WINDOWS\System32\lxf3oem.dll
[2008/09/01 20:13:16 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMRC.DLL
[2008/09/01 20:10:47 | 00,000,044 | ---- | C] () -- C:\WINDOWS\System32\lxddrwrd.ini
[2008/09/01 20:09:38 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\LXDDinst.dll
[2008/09/01 20:08:15 | 00,344,064 | R--- | C] () -- C:\WINDOWS\System32\lxddcoin.dll
[2008/03/24 18:50:08 | 00,038,474 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Application Data\Comma Separated Values (Windows).ADR
[2008/01/19 17:17:55 | 00,002,016 | ---- | C] () -- C:\WINDOWS\Stella.ini
[2008/01/17 08:51:19 | 00,000,053 | ---- | C] () -- C:\WINDOWS\TassWin.INI
[2008/01/17 08:44:42 | 00,149,504 | ---- | C] () -- C:\WINDOWS\System32\CETNUASM.DLL
[2008/01/17 08:44:39 | 00,766,026 | ---- | C] () -- C:\WINDOWS\System32\ActiveTerra2.dll
[2007/10/09 20:32:51 | 00,000,021 | ---- | C] () -- C:\WINDOWS\atid.ini
[2007/07/10 12:17:54 | 00,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2007/05/23 23:04:56 | 00,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxddgrd.dll
[2007/05/13 20:40:01 | 00,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2007/05/13 20:40:01 | 00,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2007/05/13 20:40:01 | 00,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2007/04/03 13:00:36 | 00,000,131 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\fusioncache.dat
[2007/04/03 12:56:07 | 00,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2007/04/03 12:56:06 | 00,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2007/04/03 12:56:06 | 00,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2007/04/03 12:56:06 | 00,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2007/04/03 12:56:06 | 00,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2007/04/03 12:56:06 | 00,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2007/04/03 08:40:27 | 01,185,894 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Application Data\Install.dat
[2007/03/20 09:10:27 | 01,176,153 | -HS- | C] () -- C:\WINDOWS\adffii.ini
[2007/03/17 16:26:08 | 00,000,075 | ---- | C] () -- C:\WINDOWS\iltwain.ini
[2007/03/05 12:34:28 | 00,676,224 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.DLL
[2006/05/17 21:47:12 | 00,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxddvs.dll
[2006/04/02 18:22:07 | 00,000,000 | ---- | C] () -- C:\WINDOWS\ATIMMC.INI
[2006/01/19 18:15:21 | 00,003,407 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2005/09/24 16:15:40 | 00,000,000 | ---- | C] () -- C:\WINDOWS\PictConv.INI
[2005/08/03 10:14:38 | 00,000,074 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2005/07/16 09:54:25 | 00,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini
[2005/05/07 13:49:23 | 00,001,611 | ---- | C] () -- C:\WINDOWS\yahtzee.ini
[2005/04/29 11:12:30 | 00,003,012 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2005/04/03 13:43:15 | 00,000,082 | ---- | C] () -- C:\WINDOWS\MPLAYER.INI
[2005/01/28 17:24:59 | 00,000,692 | ---- | C] () -- C:\WINDOWS\hegames.ini
[2005/01/21 18:59:18 | 00,000,048 | ---- | C] () -- C:\WINDOWS\PerWin.ini
[2005/01/14 11:22:58 | 00,000,755 | ---- | C] () -- C:\WINDOWS\pi2000.ini
[2005/01/14 11:22:58 | 00,000,053 | ---- | C] () -- C:\WINDOWS\photoprn.ini
[2005/01/03 21:00:17 | 00,000,289 | ---- | C] () -- C:\WINDOWS\muveeapp.INI
[2004/12/18 11:03:51 | 00,000,000 | ---- | C] () -- C:\WINDOWS\Setup32.INI
[2004/12/10 23:53:52 | 00,044,544 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2004/12/10 13:09:47 | 00,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2004/12/10 12:34:45 | 00,000,510 | ---- | C] () -- C:\WINDOWS\LEXSTAT.INI
[2004/09/17 16:37:42 | 00,061,440 | ---- | C] () -- C:\WINDOWS\System32\vuins32.dll
[2004/08/18 18:10:11 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2004/08/12 01:30:03 | 00,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004/08/11 23:21:02 | 00,167,936 | ---- | C] () -- C:\WINDOWS\System32\PCDrJNI_1_1.dll
[2004/08/11 23:14:51 | 00,026,941 | ---- | C] () -- C:\WINDOWS\System32\CHODDI.SYS
[2004/08/11 23:14:13 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll
[2004/08/11 23:05:12 | 00,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2004/08/11 22:20:19 | 00,001,410 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2004/08/11 22:14:18 | 00,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2004/08/11 21:25:38 | 00,299,073 | ---- | C] () -- C:\WINDOWS\System32\PythonCOM22.dll
[2004/08/11 21:25:38 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\PyWinTypes22.dll
[2004/08/11 21:25:16 | 00,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll
[2004/08/11 20:16:20 | 00,000,802 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/08/11 20:00:08 | 00,000,549 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2004/06/29 07:58:50 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2003/09/17 09:12:00 | 00,540,672 | ---- | C] () -- C:\WINDOWS\System32\TX32.DLL
[2003/03/07 00:53:16 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\hpnvr82.dll
[2003/01/08 00:05:08 | 00,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002/09/17 15:46:30 | 00,229,376 | ---- | C] () -- C:\WINDOWS\System32\ISP2000.dll
[1997/09/12 15:41:00 | 00,063,488 | ---- | C] () -- C:\WINDOWS\System32\Eztw32.dll

========== LOP Check ==========

[2010/01/01 10:52:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2010/01/09 19:07:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9
[2009/12/29 14:03:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\F-Secure
[2009/12/26 21:51:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\fssg
[2008/09/13 20:41:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\iWin Games
[2005/01/01 18:55:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\muvee Technologies
[2005/01/03 18:04:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Napster
[2004/12/17 13:54:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nova Development
[2004/12/15 17:19:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PopCap
[2010/01/09 10:46:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2007/09/11 08:55:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WinZip
[2008/03/16 18:35:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Yahoo
[2010/01/11 00:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At1.job
[2010/01/09 09:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At10.job
[2010/01/09 10:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At11.job
[2010/01/10 11:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At12.job
[2010/01/10 12:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At13.job
[2010/01/10 13:00:02 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At14.job
[2010/01/10 14:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At15.job
[2010/01/10 15:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At16.job
[2010/01/10 16:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At17.job
[2010/01/09 17:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At18.job
[2010/01/09 18:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At19.job
[2010/01/11 01:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At2.job
[2010/01/10 19:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At20.job
[2010/01/10 20:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At21.job
[2010/01/10 21:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At22.job
[2010/01/10 22:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At23.job
[2010/01/10 23:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At24.job
[2010/01/11 00:00:02 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At25.job
[2010/01/11 01:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At26.job
[2010/01/11 02:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At27.job
[2010/01/09 03:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At28.job
[2010/01/09 04:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At29.job
[2010/01/11 02:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At3.job
[2010/01/09 05:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At30.job
[2010/01/09 06:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At31.job
[2010/01/09 07:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At32.job
[2010/01/09 08:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At33.job
[2010/01/09 09:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At34.job
[2010/01/09 10:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At35.job
[2010/01/10 11:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At36.job
[2010/01/10 12:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At37.job
[2010/01/10 13:00:03 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At38.job
[2010/01/10 14:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At39.job
[2010/01/09 03:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job
[2010/01/10 15:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At40.job
[2010/01/10 16:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At41.job
[2010/01/09 17:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At42.job
[2010/01/09 18:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At43.job
[2010/01/10 19:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At44.job
[2010/01/10 20:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At45.job
[2010/01/10 21:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At46.job
[2010/01/10 22:00:02 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At47.job
[2010/01/10 23:00:01 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At48.job
[2010/01/09 04:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At5.job
[2010/01/09 05:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At6.job
[2010/01/09 06:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At7.job
[2010/01/09 07:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At8.job
[2010/01/09 08:00:00 | 00,000,350 | ---- | M] () -- C:\WINDOWS\Tasks\At9.job
[2010/01/11 10:33:00 | 00,000,362 | ---- | M] () -- C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >
[2005/10/31 10:56:00 | 00,700,416 | ---- | M] (LimeWire) -- C:\StubInstaller.exe

< MD5 for: AGP440.SYS >
[2004/08/04 14:00:00 | 18,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2004/08/04 07:00:00 | 18,738,937 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp2.cab:AGP440.sys

< MD5 for: ATAPI.SYS >
[2004/08/04 14:00:00 | 18,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2004/08/04 07:00:00 | 18,738,937 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp2.cab:atapi.sys
[2004/08/04 07:00:00 | 00,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\dllcache\atapi.sys
[2004/08/04 07:00:00 | 00,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\drivers\atapi.sys

< MD5 for: EVENTLOG.DLL >
[2004/08/04 07:00:00 | 00,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2004/08/04 07:00:00 | 00,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\system32\eventlog.dll

< MD5 for: NETLOGON.DLL >
[2004/08/04 07:00:00 | 00,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2004/08/04 07:00:00 | 00,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004/08/04 07:00:00 | 00,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\system32\dllcache\scecli.dll
[2004/08/04 07:00:00 | 00,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\system32\scecli.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2006/08/14 11:43:22 | 00,452,264 | ---- | M] (Sonic Solutions) Unable to obtain MD5 -- C:\WINDOWS\system32\Px.dll
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

========== Files - Unicode (All) ==========
[2007/03/15 10:43:04 | 00,000,000 | ---D | M](C:\WINDOWS\?ppPatch) -- C:\WINDOWS\АppPatch
[2007/03/15 10:05:20 | 00,000,000 | ---D | M](C:\WINDOWS\s?curity) -- C:\WINDOWS\sеcurity
[2007/03/15 09:38:40 | 00,000,000 | ---D | M](C:\WINDOWS\s?curity\s?curity) -- C:\WINDOWS\sеcurity\sеcurity
[2007/03/15 09:38:37 | 00,000,000 | ---D | C](C:\WINDOWS\?ppPatch) -- C:\WINDOWS\АppPatch
[2007/03/15 09:38:31 | 00,000,000 | ---D | C](C:\WINDOWS\s?curity) -- C:\WINDOWS\sеcurity
< End of report >

OTL Extra Log

OTL Extras logfile created on: 1/11/2010 10:51:30 AM - Run 1
OTL by OldTimer - Version 3.1.23.0 Folder = C:\Documents and Settings\HP_Owner\My Documents\Downloads
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

447.00 Mb Total Physical Memory | 158.00 Mb Available Physical Memory | 35.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 75.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 68.93 Gb Total Space | 24.95 Gb Free Space | 36.19% Space Free | Partition Type: NTFS
Drive D: | 5.58 Gb Total Space | 0.76 Gb Free Space | 13.68% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: YOUR-86339EB2BF
Current User Name: HP_Owner
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.js [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found
.txt [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- (Microsoft Corporation)
"C:\Program Files\Lexmark 2500 Series\app4r.exe" = C:\Program Files\Lexmark 2500 Series\App4R.exe:*:Enabled:Printing Application -- ()

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe" = C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe:*:Enabled:BackWeb for Pavilion -- ()
"C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" = C:\Program Files\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink -- File not found
"C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe" = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe:*:Enabled:EasyShare -- ()
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger -- (Yahoo! Inc.)
"C:\Program Files\Yahoo!\Messenger\YServer.exe" = C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server -- File not found
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" = C:\Program Files\Internet Explorer\IEXPLORE.EXE:*:Disabled:Internet Explorer -- (Microsoft Corporation)
"C:\Program Files\TurboTax\Deluxe 2006\32bit\ttax.exe" = C:\Program Files\TurboTax\Deluxe 2006\32bit\ttax.exe:LocalSubNet:Enabled:TurboTax -- (Intuit, Inc.)
"C:\Program Files\TurboTax\Deluxe 2006\32bit\updatemgr.exe" = C:\Program Files\TurboTax\Deluxe 2006\32bit\updatemgr.exe:LocalSubNet:Enabled:TurboTax Update Manager -- (Intuit, Inc.)
"C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- (Microsoft Corporation)
"C:\Program Files\Common Files\AOL\Loader\aolload.exe" = C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader -- File not found
"C:\Program Files\MySpace\IM\MySpaceIM.exe" = C:\Program Files\MySpace\IM\MySpaceIM.exe:*:Enabled:MySpaceIM -- File not found
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"C:\Program Files\Yahoo!\Yahoo! Music Jukebox\YahooMusicEngine.exe" = C:\Program Files\Yahoo!\Yahoo! Music Jukebox\YahooMusicEngine.exe:*:Enabled:Yahoo! Music Jukebox -- (Yahoo!)
"C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour -- File not found
"C:\Program Files\TurboTax\Deluxe 2007\32bit\ttax.exe" = C:\Program Files\TurboTax\Deluxe 2007\32bit\ttax.exe:LocalSubNet:Enabled:TurboTax -- (Intuit, Inc.)
"C:\Program Files\TurboTax\Deluxe 2007\32bit\updatemgr.exe" = C:\Program Files\TurboTax\Deluxe 2007\32bit\updatemgr.exe:LocalSubNet:Enabled:TurboTax Update Manager -- (Intuit, Inc.)
"C:\WINDOWS\system32\lxddcoms.exe" = C:\WINDOWS\system32\lxddcoms.exe:*:Enabled:Lexmark Communications System -- ( )
"C:\Program Files\Lexmark 2500 Series\lxddamon.exe" = C:\Program Files\Lexmark 2500 Series\lxddamon.exe:*:Enabled:Lexmark Device Monitor -- ()
"C:\Program Files\Lexmark 2500 Series\App4R.exe" = C:\Program Files\Lexmark 2500 Series\App4R.exe:*:Enabled:Lexmark Imaging Studio -- ()
"C:\Program Files\AVG\AVG8\avgupd.exe" = C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe -- File not found
"C:\Program Files\AVG\AVG8\avgnsx.exe" = C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe -- File not found
"C:\Program Files\iWin Games\iWinGames.exe" = C:\Program Files\iWin Games\iWinGames.exe:*:Enabled:iWin Games application. -- (iWin Inc.)
"C:\Program Files\iWin Games\WebUpdater.exe" = C:\Program Files\iWin Games\WebUpdater.exe:*:Enabled:iWin Games updater. -- ()
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddjswx.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddjswx.exe:*:Enabled: -- ()
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddpswx.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddpswx.exe:*:Enabled: -- ()
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddtime.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddtime.exe:*:Enabled: -- (Lexmark International, Inc.)
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddwbgw.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddwbgw.exe:*:Enabled: -- ()
"C:\Documents and Settings\HP_Owner\Local Settings\Temporary Internet Files\Content.IE5\K9GNS7O3\incredimail_install[1].exe" = C:\Documents and Settings\HP_Owner\Local Settings\Temporary Internet Files\Content.IE5\K9GNS7O3\incredimail_install[1].exe:*:Disabled:IncrediMail Installer -- File not found
"C:\Documents and Settings\HP_Owner\Local Settings\Temp\ImInstaller\IncrediMail\incredimail_install[1].exe" = C:\Documents and Settings\HP_Owner\Local Settings\Temp\ImInstaller\IncrediMail\incredimail_install[1].exe:*:Enabled:IncrediMail Installer -- File not found
"C:\Program Files\Lexmark 2500 Series\lxddmon.exe" = C:\Program Files\Lexmark 2500 Series\lxddmon.exe:*:Enabled: -- ()
"C:\Program Files\AVG\AVG9\avgupd.exe" = C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG9\avgnsx.exe" = C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe -- (AVG Technologies CZ, s.r.o.)
"C:\WINDOWS\explorer.exe" = C:\WINDOWS\explorer.exe:*:Enabled:Explorer -- (Microsoft Corporation)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0076E1AC-9E7B-4B9F-A62A-4CC9511AD8E3}" = Zune Language Pack (FR)
"{0750F693-86ED-4C92-8026-A265F2566FBA}" = Voyager III
"{0861E87B-24D7-4E7C-B11B-54F86E5C5199}" = hpg8200
"{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}" = Microsoft Plus! Photo Story 2 LE
"{1017A80C-6F09-4548-A84D-EDD6AC9525F0}" = Lexmark Toolbar
"{10798AE3-DCBB-43C3-9C93-C23512427E25}" = The Sims Deluxe Edition
"{13AD768A-9E04-499D-AE80-967A65DCCBA5}" = ebgcSDK
"{14589F05-C658-4594-9429-D437BA688686}" = IntelliMover Data Transfer Demo
"{14B4E017-ACDF-4DB0-9D94-8988F5F0145A}" = hpg4600
"{15B9DC72-73F9-4d99-9E28-848D66DA8D99}" = HP Photo & Imaging 3.5 - HP Devices
"{18388EF8-E0A3-442B-8BFE-E2F1B3D05C91}" = iTunes
"{1838C5A2-AB32-4145-85C1-BB9B8DFA24CD}" = QuickTime
"{1A103D70-5C9B-4E1A-B306-5106C68F9914}" = Microsoft Plus! Dancer LE
"{1F63ED0B-EDD2-4037-B6AB-1358C624AF48}" = Scan
"{20CF99FC-2CE7-4AA4-966E-A4B11C0662B4}" = hpg3970
"{21E75254-410E-49C4-8981-2E1A2A2221F2}" = HP Diagnostic Assistant
"{22DE1881-9D24-4981-B5CC-EC7E9F2F4D52}" = Rhapsody Player Engine
"{267868CE-6DFF-40F7-9C58-C01119B7B117}" = Fax
"{29B39FB2-5ADF-4F94-BC82-13942871DD0D}" = CameraDrivers
"{2BBC9458-07CA-4843-848B-5C8146E5EFA8}" = CreativeProjects
"{2FCE4FC5-6930-40E7-A4F1-F862207424EF}" = InterVideo WinDVD Creator 2
"{3248F0A8-6813-11D6-A77B-00B0D0150120}" = J2SE Runtime Environment 5.0 Update 12
"{34A59AC3-6C5C-4A09-A7F5-369A37176C8A}" = AiOSoftware
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{39B1BD87-561E-4762-AED9-7C5213B06C24}" = ebgcInfra
"{3AE681E0-4E8D-453F-950A-48534D3C0724}" = Copy
"{3AEF2F6C-F1D3-47CD-BF3B-A327F1FABE58}" = PSPrinters06
"{3BD0196C-6553-460c-A0C4-90D8AE5D60D2}" = Norton Personal Firewall
"{3CF78481-FB7B-4B51-99A2-D5E0CD0B3AAF}" = HPSystemDiagnostics
"{41254D7B-EADF-4078-AE4A-BD73B300EE86}" = Unload
"{44734179-8A79-4DEE-BB08-73037F065543}" = Apple Mobile Device Support
"{457791C5-D702-4143-A7B2-2744BE9573F2}" = HP Software Update
"{5380B111-5047-413D-A6E5-70D69391D08E}" = ebgcRes
"{54DE0B75-6CD9-44C4-B10A-1F25DA9899D8}" = Quicken 2004
"{571700F0-DB9D-4B3A-B03D-35A14BB5939F}" = Windows Live Messenger
"{5E1494D4-3562-4FFB-B35C-600F80F6934C}" = HP Image Zone Plus 4.2
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6972FD5E-01D0-4742-8EB0-A0D351CF28FF}" = Governor of Poker
"{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}" = Microsoft Plus! Digital Media Edition Installer
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{7148F0A8-6813-11D6-A77B-00B0D0142030}" = Java 2 Runtime Environment, SE v1.4.2_03
"{764D06D8-D8DE-411E-A1C8-D9E9380F8A84}" = Microsoft Works 7.0
"{7DD9A065-2C86-4A9F-A5FF-796EC1B99DCA}" = AnswerWorks 4.0 Runtime - English
"{82A8F5F7-0A4B-4257-B721-7783F97EEC4E}" = Print Perfect DVD
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder
"{8D9768AE-DE42-4A04-A461-2361A58C384D}" = HPIZ402
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{91110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{91120409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD Player
"{9541FED0-327F-4DF0-8B96-EF57EF622F19}" = Sonic RecordNow!
"{981FB376-8418-4EA8-BBED-9DE5AA63E7D5}" = SkinsHP1
"{9862E0CB-4727-4FFC-963A-E22A9E9EC10C}" = Creative ZEN V Series (R2)
"{9CB2512B-3EC4-43DF-8002-46BDAB5EDD1B}" = QuickProjects
"{9EEBF8D5-8712-4D1D-88F4-4CDC2D270BC3}" = PrintScreen
"{A1062847-0846-427A-92A1-BB8251A91E91}" = HP PSC & OfficeJet 4.0
"{A1DCC235-DACC-4E1F-8D11-D630634B4AEF}" = PhotoGallery
"{A2500497-FD32-493e-B8E5-28D6728DBEF5}" = Readme
"{A4EA3AB4-E78C-4286-96DF-26035507CE55}" = AiO_Scan
"{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}" = Photosmart 320,370,7400,8100,8400 Series
"{AC76BA86-7AD7-1033-7B44-A70000000000}" = Adobe Reader 7.0
"{AD17BC8E-4A5D-4E59-8640-10DF36E9EB75}" = hpg5530
"{AFF1EA96-9C23-4249-B7D4-CD4B54D4582F}" = TurboTax ItsDeductible 2006
"{B103C8A7-D1CC-4B1A-BD41-883F652E097D}" = muvee autoProducer 3.5 magicMoments - HPD
"{B32C75F2-7495-4D01-9431-C11E97D66F8C}" = DocProc
"{B3D5D4E0-E965-41C4-ABFD-A7B1AD0663C2}" = Director
"{B45D9FEE-1AF4-46F3-9A83-2545F81547F5}" = CreativeProjectsTemplates
"{B56D5B09-C4FB-4EA0-8EAD-7BC3E2715A2D}" = DocumentViewer
"{BC339BFD-F550-471a-8D26-4D08126C62F7}" = SkinsHP2
"{BCC992E5-5C81-4066-9B55-03DC10B24D21}" = InstantShare
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5
"{BF018D2F-C788-4AB1-AB95-1280EAB8F13E}" = TrayApp
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240B5}" = WinZip 11.1
"{D0122362-6333-4DE4-93F6-A5A2F3CC101A}" = HP Organize
"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp
"{EA2BEBD6-87B9-41E5-95AC-7E4C165A9475}" = WexTech AnswerWorks
"{EC8673DA-F96B-497E-B2DB-BC7B029FD680}" = BufferChm
"{ED869D8B-6C7E-44C7-9F2F-BD5436849C61}" = hpg2436
"{EE4ACABF-531E-419A-9225-B8E0FA4955AF}" = Zune Language Pack (ES)
"{F419D20A-7719-4639-8E30-C073A040D878}" = HP Deskjet Preloaded Printer Drivers
"{F4F47155-5B4D-42AA-97F8-490BC52EA7F3}" = Destinations
"{F65787F3-B356-45EC-8DD0-0E6758EDBCEE}" = WebReg
"{FE0256DB-509C-40AC-B888-2543AD4298E6}" = Zune
"{FF26F7EA-BCEE-478C-9A1B-6B4F88717D73}" = CueTour
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"Agere Systems Soft Modem" = Agere Systems PCI Soft Modem
"AudibleManager" = AudibleManager
"AVG9Uninstall" = AVG Free 9.0
"BackWeb-309731 Uninstaller" = Updates from HP
"Bookworm Deluxe 1.03" = Bookworm Deluxe 1.03
"CCleaner" = CCleaner
"Chuzzle Deluxe 1.0" = Chuzzle Deluxe 1.0
"Creative Removable Disk Manager" = Creative Removable Disk Manager
"Diablo II" = Diablo II
"ERUNT_is1" = ERUNT 1.1j
"Help and Support Additions" = Help and Support Additions
"HP Photo & Imaging" = HP Image Zone 4.2
"Insaniquarium Deluxe 1.0" = Insaniquarium Deluxe 1.0
"InstallShield_{54DE0B75-6CD9-44C4-B10A-1F25DA9899D8}" = Quicken 2004
"iWinArcade" = iWin Games (remove only)
"Jewel Quest" = Jewel Quest (remove only)
"Lexmark 2500 Series" = Lexmark 2500 Series
"Lexmark 510 Series" = Lexmark 510 Series
"Lexmark Fax Solutions" = Lexmark Fax Solutions
"LiveReg" = LiveReg (Symantec Corporation)
"LiveUpdate" = LiveUpdate 1.90 (Symantec Corporation)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Mozilla Firefox (3.5.7)" = Mozilla Firefox (3.5.7)
"Planetarium" = Planetarium
"PS2" = PS2
"Python 2.2 combined Win32 extensions" = Python 2.2 combined Win32 extensions
"Python 2.2.1" = Python 2.2.1
"Pyware iPAS" = Pyware iPAS
"RealArcade 1.2" = RealArcade
"RealPlayer 6.0" = RealPlayer
"S3" = VIA/S3G Display Driver
"SysInfo" = Creative System Information
"Touch The Sky" = Touch The Sky
"TurboTax Deluxe 2007" = TurboTax Deluxe 2007
"TurboTax Deluxe Deduction Maximizer 2006" = TurboTax Deluxe Deduction Maximizer 2006
"VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast Ethernet Adapter
"VTDisplay" = S3 S3Display
"VTGamma2" = S3 S3Gamma2
"VTInfo2" = S3 S3Info2
"VTOverlay" = S3 S3Overlay
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Customizations" = Yahoo! Browser Services
"Yahoo! Internet Mail" = Yahoo! Internet Mail
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Music Engine" = Yahoo! Music Jukebox
"Yahoo! Toolbar" = Yahoo! Toolbar
"YInstHelper" = Yahoo! Install Manager
"ZENcast Organizer" = ZENcast Organizer

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 1/8/2010 8:03:33 PM | Computer Name = YOUR-86339EB2BF | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: A connection with the server could not be established

Error - 1/8/2010 8:03:33 PM | Computer Name = YOUR-86339EB2BF | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: The data is invalid.

Error - 1/8/2010 8:03:33 PM | Computer Name = YOUR-86339EB2BF | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 1/8/2010 8:21:36 PM | Computer Name = YOUR-86339EB2BF | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 1/8/2010 8:21:36 PM | Computer Name = YOUR-86339EB2BF | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 1/9/2010 2:20:41 AM | Computer Name = YOUR-86339EB2BF | Source = Application Hang | ID = 1002
Description = Hanging application mbam.exe, version 1.44.0.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 1/9/2010 11:34:37 AM | Computer Name = YOUR-86339EB2BF | Source = Application Error | ID = 1000
Description = Faulting application rundll32.exe, version 5.1.2600.2180, faulting
module appwiz.cpl, version 5.1.2600.2180, fault address 0x0000c881.

Error - 1/10/2010 3:06:56 PM | Computer Name = YOUR-86339EB2BF | Source = Application Hang | ID = 1002
Description = Hanging application OUTLOOK.EXE, version 11.0.8118.0, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 1/10/2010 8:02:09 PM | Computer Name = YOUR-86339EB2BF | Source = Application Error | ID = 1000
Description = Faulting application PamperedPartnerPlusSetupForWindows.exe, version
0.0.0.0, faulting module PamperedPartnerPlusSetupForWindows.exe, version 0.0.0.0,
fault address 0x0000312e.

Error - 1/11/2010 11:36:23 AM | Computer Name = YOUR-86339EB2BF | Source = ODBC | ID = 0
Description =

[ System Events ]
Error - 1/11/2010 3:38:14 AM | Computer Name = YOUR-86339EB2BF | Source = Srv | ID = 2019
Description = The server was unable to allocate from the system nonpaged pool because
the pool was empty.

Error - 1/11/2010 8:34:01 AM | Computer Name = YOUR-86339EB2BF | Source = Srv | ID = 2019
Description = The server was unable to allocate from the system nonpaged pool because
the pool was empty.

Error - 1/11/2010 11:31:22 AM | Computer Name = YOUR-86339EB2BF | Source = Srv | ID = 2019
Description = The server was unable to allocate from the system nonpaged pool because
the pool was empty.

Error - 1/11/2010 11:31:56 AM | Computer Name = YOUR-86339EB2BF | Source = DCOM | ID = 10010
Description = The server {D40DAF26-8F39-4430-97B9-D3E1A42426C8} did not register
with DCOM within the required timeout.

Error - 1/11/2010 11:39:06 AM | Computer Name = YOUR-86339EB2BF | Source = Ftdisk | ID = 262189
Description = The system could not sucessfully load the crash dump driver.

Error - 1/11/2010 11:39:06 AM | Computer Name = YOUR-86339EB2BF | Source = Ftdisk | ID = 262193
Description = Configuring the Page file for crash dump failed. Make sure there is
a page file on the boot partition and that is large enough to contain all physical
memory.

Error - 1/11/2010 11:39:12 AM | Computer Name = YOUR-86339EB2BF | Source = Service Control Manager | ID = 7000
Description = The AVG Free8 WatchDog service failed to start due to the following
error: %%2

Error - 1/11/2010 11:39:12 AM | Computer Name = YOUR-86339EB2BF | Source = Service Control Manager | ID = 7000
Description = The Bonjour Service service failed to start due to the following error:
%%2

Error - 1/11/2010 12:00:04 PM | Computer Name = YOUR-86339EB2BF | Source = Schedule | ID = 7901
Description = The At12.job command failed to start due to the following error: %%2147942405

Error - 1/11/2010 12:00:04 PM | Computer Name = YOUR-86339EB2BF | Source = Schedule | ID = 7901
Description = The At36.job command failed to start due to the following error: %%2147942405

< End of report >

GMER Log

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-01-11 10:32:43
Windows 5.1.2600 Service Pack 2
Running: 38ql0vmx.exe; Driver: C:\DOCUME~1\HP_Owner\LOCALS~1\Temp\awkoakoc.sys

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

Device -> \Driver\atapi \Device\Harddisk0\DR0 84EA8841

---- Files - GMER 1.0.15 ----

File C:\WINDOWS\system32\drivers\atapi.sys suspicious modification

---- EOF - GMER 1.0.15 ----

MBAM Log
Malwarebytes' Anti-Malware 1.44
Database version: 3510
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

1/10/2010 7:30:37 PM
mbam-log-2010-01-10 (19-30-37).txt

Scan type: Quick Scan
Objects scanned: 171863
Time elapsed: 13 minute(s), 49 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#2 Rorschach112

Group: Retired Staff
Posts: 47,710
Joined: 23-March 07

Posted 11 January 2010 - 10:53 AM

hi

Run OTL

Under the Custom Scans/Fixes box at the bottom, paste in the following

:OTL
O20 - AppInit_DLLs: (denumehe.dll) - File not found
O20 - AppInit_DLLs: (c:\windows\system32\fujumara.dll) - C:\WINDOWS\System32\fujumara.dll File not found
O21 - SSODL: birunivif - {9b454c2f-061c-4a77-88a2-413f1ec62ec1} - C:\WINDOWS\System32\fujumara.dll File not found
O22 - SharedTaskScheduler: {9b454c2f-061c-4a77-88a2-413f1ec62ec1} - gahurihor - C:\WINDOWS\System32\fujumara.dll File not found
O29 - HKLM SecurityProviders - (msansspc.dll) - File not found
O32 - AutoRun File - [2001/07/28 06:07:38 | 00,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2004/04/30 22:01:14 | 00,000,053 | -HS- | M] () - D:\Autorun.inf -- [ FAT32 ]
O33 - MountPoints2\{58966060-7ce1-11dd-8a70-00112f81a183}\Shell\AutoRun\command - "" = J:\setupSNK.exe -- File not found
O33 - MountPoints2\{ca569327-fb86-11dd-8a7d-00112f81a183}\Shell - "" = AutoRun
O33 - MountPoints2\{ca569327-fb86-11dd-8a7d-00112f81a183}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{ca569327-fb86-11dd-8a7d-00112f81a183}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -- File not found
O33 - MountPoints2\J\Shell - "" = AutoRun
O33 - MountPoints2\J\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\LaunchU3.exe -- File not found
[2010/01/08 18:02:17 | 00,002,931 | ---- | M] () -- C:\WINDOWS\System32\warning.html
[2010/01/08 17:40:12 | 00,006,456 | -H-- | M] () -- C:\WINDOWS\System32\gegekole
[2010/01/08 17:46:25 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\18467.exe
[2010/01/10 12:17:35 | 00,293,376 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\38ql0vmx.exe

:Files
C:\WINDOWS\system32\drivers\atapi.sys | C:\WINDOWS\system32\dllcache\atapi.sys /replace
C:\WINDOWS\tasks\At*.job
:Services

:Reg



:Commands
[purity]
[resethosts]
[emptytemp]
[Reboot]

Then click the Run Fix button at the top
Let the program run unhindered, reboot the PC when it is done

#3 cherdeb224

Group: Member
Posts: 12
Joined: 10-January 10

Posted 11 January 2010 - 11:12 AM

Ok..did that. Opened Firefox and did a random search. First link opened appropriately. Second link, AVG gave a warning, and it was redirected. Here is the warning link:

#4 cherdeb224

Group: Member
Posts: 12
Joined: 10-January 10

Posted 11 January 2010 - 11:42 AM

should I run my anti virus and MBAM again?

#5 Rorschach112

Group: Retired Staff
Posts: 47,710
Joined: 23-March 07

Posted 11 January 2010 - 12:27 PM

no

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you don't know how to disable them then just continue on.
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Posted Image

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt log in your next reply.

#6 cherdeb224

Group: Member
Posts: 12
Joined: 10-January 10

Posted 11 January 2010 - 02:04 PM

ComboFix 10-01-11.01 - HP_Owner 01/11/2010 13:49:16.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.447.120 [GMT -5:00]
Running from: c:\documents and settings\HP_Owner\My Documents\Downloads\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\HP_Owner\Application Data\Install.dat
c:\documents and settings\Richie\Application Data\Hotbar
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\101669.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1055531.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1055549.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1055749.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1057933.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1063425.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1065003.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1066790.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1067113.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1070500.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1070584.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1085507.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\127238.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1383771.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1383783.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385370.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385373.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385449.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385465.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385485.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385508.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385589.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385591.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385602.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385793.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1386834.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1386888.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1387180.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1387588.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1387615.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1387801.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1388435.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1388528.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1388784.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1400989.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1402049.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1407981.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1408318.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1450431.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1529405.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1732215.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\1759945.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\2171021.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\2211942.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\241506.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\2703656.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\278625.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\2884426.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\2885069.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\378565.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\396692.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\427587.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\456868.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\499863.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\575671.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\577767.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\600583.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\632810.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\65445.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\668262.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\698191.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\737654.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\761357.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\766692.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\793537.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\807196.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\819382.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\868678.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\880604.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\881468.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\939171.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\954896.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\ASPL1.dat
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\domains.txt
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\hstat\3229.dat
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\10052
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1085
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\11653
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\11891
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\13587
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\13634
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1382
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1395
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1411
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\14207
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1424
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\14570
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\14575
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1491
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\15162
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\15541
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1587
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1590
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\16173
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\17025
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\18391
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\18721
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\18730
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\18883
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\18991
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\19409
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\19419
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\19650
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1974
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20106
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20128
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20304
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20701
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20898
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\2119
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\21218
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\21234
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\2129
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\2134
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\21889
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\22254
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\22257
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\22657
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\23923
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\24341
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\25043
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\25093
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\25466
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\25509
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\257947
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\25839
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\26336
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\26340
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\26664
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\26763
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\26852
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\27414
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\27503
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\27505
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\27533
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\28383
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\288733
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\29115
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\29135
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\29308
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\29425
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\29642
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\29683
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\30036
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\306
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\31262
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\31276
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\31979
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\32024
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\32276
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\32326
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\33069
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\33146
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\3338
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\3347
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\33697
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34120
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34123
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34134
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34150
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34186
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34237
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\35009
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\35012
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\35015
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\35040
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\35047
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\35062
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\35389
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\35554
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\35941
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\36072
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\36079
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\36239
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\386635
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\39245
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\39897
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\40260
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\40855
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41215
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41364
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\4142
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41421
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\4157
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41641
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41733
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41980
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41999
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\42372
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\42425
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\42915
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\43098
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\43184
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44214
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44228
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44293
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44878
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44957
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\45833
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\45837
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\46415
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\471072
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\47484
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\47914
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\4899
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\49432
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\50228
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\50548
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\50552
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\505921
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\51666
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\52335
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\526389
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\528235
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\52972
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\531510
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\53813
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\53923
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\54189
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\54247
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\54469
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\54473
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\55054
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\556601
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56527
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56726
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\572769
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\577929
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\578081
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\578140
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\578150
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\58804
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\591958
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\59234
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\59283
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\59844
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61299
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61779
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61795
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61837
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61894
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\62133
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\621625
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\627155
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6292
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\63174
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\63264
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\63882
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\64404
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\64703
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\65429
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\65461
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6586
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\658714
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\662554
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\665796
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\66836
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\66867
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\67226
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\67564
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\67733
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\68055
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\68094
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\68257
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\68386
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6873
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\68838
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\68942
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\69118
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\69199
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\69325
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\69361
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\69626
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\703336
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\70692
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\70958
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\71175
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\71340
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\72010
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\72786
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\72846
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\72882
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\72889
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\72898
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\72912
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\73119
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\73391
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\73811
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\73840
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\73905
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\73922
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\73948
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\74576
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\75089
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\7518
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\7521
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\7553
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\76208
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\7652
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\77618
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\78600
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\79079
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\79257
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\79596
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\79977
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\79989
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\80012
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\80026
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\80670
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\81293
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\81551
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\81785
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\82126
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\82557
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\82646
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\82647
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\8282
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\8306
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\83706
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\85062
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\86023
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\86146
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\86379
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\86837
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\86999
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\87304
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\87499
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\87576
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\89075
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\90009
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\90271
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\90358
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\90711
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\91224
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\91231
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\91238
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\92886
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\92893
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\9332
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\93343
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\93899
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\93921
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\94356
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95200
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95325
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95610
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95615
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95678
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95701
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95704
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95740
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95803
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95825
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95828
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\96961
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\97172
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\97499
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\97734
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\97964
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\9805
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\98229
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\98677
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\99293
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\9991
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\dynamic\ustat\3229.dat
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\ads.cdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\business_promo.htm
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\buttondir.txt
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\components.cdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_1000.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_2000.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_3000.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bar.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar1.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar10.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar11.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar12.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar13.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar14.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar2.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar3.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar4.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar5.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar6.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar7.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar8.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar9.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_logos.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_other.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_x.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_weather.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\default.cdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_511745-514279.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_categorize.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_comparison.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_explorer-Mails.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_explorer-people.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_favorites.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_Games.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_Hide.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_hotbarcom.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_Hotmail.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_hsskin.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_Mails.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_new.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_premium.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_ringtone.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_SearchBoxTrapper.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_searchfor.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_searchgo.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_weather.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_yellowpages.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\email-def-511724-9595.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\email-t1-bg.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\hotbar-premium-hotbar-premium.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\hotbar-premium.cdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\hotbar_promo.htm
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\icons2.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\keywords.idx
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\keywords_idx.idx
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\keywords_sdf.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\keywords1.dat
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\layout.cdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\linkpathlegal.txt
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\progress.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\s_icons_buttons.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\t2_bg.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\theweb.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\top7.cdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\Top7_theweb.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\1\tsd_bg.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\ads.cdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\business_promo.htm
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\buttondir.txt
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\components.cdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_1000.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_2000.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_3000.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bar.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar1.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar10.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar11.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar12.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar13.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar14.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar2.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar3.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar4.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar5.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar6.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar7.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar8.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar9.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_logos.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_other.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_x.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_weather.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\default.cdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_511745-514279.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_categorize.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_comparison.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_explorer-Mails.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_explorer-people.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_favorites.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_Games.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_Hide.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_hotbarcom.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_Hotmail.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_hsskin.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_Mails.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_new.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_premium.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_ringtone.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_SearchBoxTrapper.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_searchfor.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_searchgo.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_weather.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_yellowpages.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\email-def-511724-9595.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\email-t1-bg.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\hotbar-premium-hotbar-premium.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\hotbar-premium.cdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\hotbar_promo.htm
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\icons2.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\keywords.idx
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\keywords_idx.idx
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\keywords_sdf.sdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\keywords1.dat
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\layout.cdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\linkpathlegal.txt
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\progress.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\s_icons_buttons.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\t2_bg.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\theweb.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\top7.cdf
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\Top7_theweb.mnu
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\2\tsd_bg.res
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\ads.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\business_promo.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\buttondir.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_1000.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_2000.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_3000.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bar.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar1.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar10.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar11.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar12.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar13.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar14.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar2.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar3.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar4.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar5.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar6.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar7.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar8.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar9.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_logos.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_other.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_x.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_weather.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\default.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\email-t1-bg.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\hotbar-premium.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\hotbar_promo.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\icons2.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\keywords.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\keywords_idx.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\keywords_sdf.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\keywords1.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\layout.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\linkpathlegal.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\progress.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\s_icons_buttons.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\samplegroups2.txt
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\samplegroups2.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\t2_bg.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\top7.xip
c:\documents and settings\Richie\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\tsd_bg.xip
c:\documents and settings\Tammy\Application Data\Hotbar
c:\documents and settings\Tammy\Application Data\Hotbar\eskin\010104_anii5_img.htm
c:\documents and settings\Tammy\Application Data\Hotbar\eskin\010104_anii5_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\eskin\empty_bg_st.htm
c:\documents and settings\Tammy\Application Data\Hotbar\eskin\FileManager.txt
c:\documents and settings\Tammy\Application Data\Hotbar\eskin\valentine_prv.swf
c:\documents and settings\Tammy\Application Data\Hotbar\eskin\valentine_sn.wav
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte10_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte11_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte12_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte13_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte14_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte19_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte20_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte21_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte9_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\030203lib_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102angel_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102bigluf_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102bigsmile_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102birthday_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102cheers_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102flo_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102good_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102jump_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102king_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102lough_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102luf_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102smile_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102smiled_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102sor_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102thanx_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\033102uhu_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\040103ahh_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\040103wow_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\040104_emi2_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\042102_1134_112_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\050103big_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\050103gig_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\050103hm_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\050103nomail_emoti_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\050103norm_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema15_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema16_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema17_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema18_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema19_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema20_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema21_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema24_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema25_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema26_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema30_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema33_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema34_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\062802hippi_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\062802jumpie_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\080402argh_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\080402oops_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\080402ouch_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\082502no_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\082502yes_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_boring1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_confused_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_crying_ugly_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_fantastic_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_feel_better_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_gimme_break_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_heehee_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_hlopaet_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_ign_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_lol_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_no_comment_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_peace_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_smashing_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\110103_talk2thehand_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\block_sm.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\block_sm2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\block_smli.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\block_smli2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\blocked.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\blocked2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\btn_add-but.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\btn_back-but.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\btn_left_cut_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\btn_left_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\btn_left_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\btn_middle_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\btn_middle_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\btn_right_cut_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\btn_right_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\btn_right_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\business_promo.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\buttondir.txt
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\components.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\css_cattree.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\css_flashpreview.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\css2_main.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\css2_pagingmodule.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\css2_topbuttons.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\delete.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\edit_clear_sound.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\edit_fs.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\edit_select.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-511745-514279.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-backgrounds.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-bcards.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-ecards.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-edit.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-emoticons.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-estationery.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-funny.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-help.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-images.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-info.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-more.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-my.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-people.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-photo.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-tell.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-temp.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-temp_OI.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-text.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-voice.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-def.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-premium-email-premium.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-premium-email-premium_OI.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\email-t1-bg.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\estatationery.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\flashpreview.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\fs3.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\hotbar_promo.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_checked_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_close_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_close_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_edit_preview.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_edit_send.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_flash_preview.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_recently_used.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_remove_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_remove_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_sand-clock2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_tell_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_tell_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_tree_null.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_unchecked_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\icon_unchecked_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\img_barlayout.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\img_barlayout2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\img_barlayout4.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\img_corner_left.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\img_local_logo.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\js2_basetemplate.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\js2_hbgroups.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\js2_hbobject3.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\js2_hbobjectset3.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\js2_hotbarwrapper.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\js2_iteratorsandreaders3nf.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\js2_pagingmoduleobj3.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\js2_texts3.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\js2_xmltree3nf.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\layout.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\linkpathlegal.txt
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\n.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\nav_b_2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\nav_bb_2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\nav_f_2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\nav_ff_2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\progress.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\searchbtn.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\submit.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\tab_bg.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\tab_bga.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\tab_bgia.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\tab_l.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\tab_la.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\tab_lia.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\tab_r.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\tab_ra.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\tab_ria.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\tree_dots.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\tree_minus.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\tree_plus.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\treedata_animations.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\treedata_backgrounds.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\treedata_ecards.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\treedata_emoticons.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\treedata_notifiers.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\1\treedata_text.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\business_promo.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\buttondir.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\code.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\email-def.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\email-t1-bg.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\hotbar_promo.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\images.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\layout.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\linkpathlegal.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\localcontent.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\progress.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\treexml.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte10_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte11_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte12_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte13_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte14_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte19_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte20_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte21_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte9_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\030203lib_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102angel_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102bigluf_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102bigsmile_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102birthday_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102cheers_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102flo_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102good_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102jump_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102king_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102lough_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102luf_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102smile_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102smiled_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102sor_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102thanx_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\033102uhu_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\040103ahh_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\040103wow_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\040104_emi2_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\042102_1134_112_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\050103big_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\050103gig_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\050103hm_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\050103nomail_emoti_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\050103norm_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema15_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema16_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema17_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema18_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema19_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema20_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema21_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema24_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema25_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema26_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema30_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema33_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema34_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\062802hippi_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\062802jumpie_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\080402argh_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\080402oops_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\080402ouch_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\082502no_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\082502yes_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_boring1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_confused_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_crying_ugly_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_fantastic_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_feel_better_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_gimme_break_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_heehee_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_hlopaet_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_ign_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_lol_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_no_comment_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_peace_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_smashing_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\110103_talk2thehand_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\block_sm.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\block_sm2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\block_smli.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\block_smli2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\blocked.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\blocked2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\btn_add-but.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\btn_back-but.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\btn_left_cut_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\btn_left_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\btn_left_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\btn_middle_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\btn_middle_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\btn_right_cut_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\btn_right_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\btn_right_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\business_promo.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\buttondir.txt
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\components.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\css_cattree.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\css_flashpreview.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\css2_main.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\css2_pagingmodule.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\css2_topbuttons.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\delete.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\edit_clear_sound.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\edit_fs.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\edit_select.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511724-543450.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511724-9595.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511724-9696.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511745-514279.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-backgrounds.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-bcards.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-ecards.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-emoticons.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-estationery.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-flowers.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-funny.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-help.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-images.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-info.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-more.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-my.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-new.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-new2.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-options.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-people.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-photo.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-tell.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-temp.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-text.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-voice.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-def.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-premium-email-premium.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\email-t1-bg.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\estatationery.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\flashpreview.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\fs3.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\hotbar_promo.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_checked_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_close_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_close_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_edit_preview.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_edit_send.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_flash_preview.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_recently_used.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_remove_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_remove_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_sand-clock2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_tell_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_tell_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_tree_null.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_unchecked_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\icon_unchecked_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\img_barlayout.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\img_barlayout2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\img_barlayout4.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\img_corner_left.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\img_local_logo.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\js2_basetemplate.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\js2_hbgroups.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\js2_hbobject3.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\js2_hbobjectset3.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\js2_hotbarwrapper.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\js2_iteratorsandreaders3nf.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\js2_pagingmoduleobj3.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\js2_texts3.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\js2_xmltree3nf.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\layout.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\linkpathlegal.txt
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\n.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\nav_b_2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\nav_bb_2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\nav_f_2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\nav_ff_2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\progress.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\searchbtn.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\submit.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\tab_bg.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\tab_bga.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\tab_bgia.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\tab_l.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\tab_la.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\tab_lia.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\tab_r.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\tab_ra.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\tab_ria.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\tree_dots.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\tree_minus.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\tree_plus.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\treedata_animations.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\treedata_backgrounds.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\treedata_ecards.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\treedata_emoticons.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\treedata_notifiers.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\1\treedata_text.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte10_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte11_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte12_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte13_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte14_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte19_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte20_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte21_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte9_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\030203lib_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102angel_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102bigluf_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102bigsmile_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102birthday_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102cheers_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102flo_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102good_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102jump_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102king_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102lough_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102luf_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102smile_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102smiled_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102sor_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102thanx_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\033102uhu_1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\040103ahh_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\040103wow_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\040104_emi2_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\042102_1134_112_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\050103big_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\050103gig_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\050103hm_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\050103nomail_emoti_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\050103norm_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema15_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema16_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema17_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema18_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema19_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema20_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema21_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema24_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema25_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema26_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema30_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema33_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema34_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\062802hippi_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\062802jumpie_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\080402argh_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\080402oops_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\080402ouch_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\082502no_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\082502yes_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_boring1_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_confused_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_crying_ugly_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_fantastic_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_feel_better_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_gimme_break_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_heehee_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_hlopaet_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_ign_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_lol_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_no_comment_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_peace_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_smashing_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\110103_talk2thehand_prv.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\block_sm.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\block_sm2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\block_smli.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\block_smli2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\blocked.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\blocked2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\btn_add-but.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\btn_back-but.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\btn_left_cut_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\btn_left_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\btn_left_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\btn_middle_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\btn_middle_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\btn_right_cut_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\btn_right_enabled_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\btn_right_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\business_promo.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\buttondir.txt
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\components.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\css_cattree.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\css_flashpreview.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\css2_main.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\css2_pagingmodule.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\css2_topbuttons.css
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\delete.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\edit_clear_sound.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\edit_fs.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\edit_select.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511724-543450.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511724-9595.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511724-9696.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511745-514279.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-backgrounds.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-bcards.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-ecards.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-emoticons.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-estationery.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-funny.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-help.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-images.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-info.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-more.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-my.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-new.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-new2.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-options.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-people.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-photo.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-tell.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-temp.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-text.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-voice.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-def.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-premium-email-premium.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\email-t1-bg.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\estatationery.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\flashpreview.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\fs3.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\hotbar_promo.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_checked_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_close_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_close_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_edit_preview.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_edit_send.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_flash_preview.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_recently_used.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_remove_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_remove_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_sand-clock2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_tell_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_tell_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_tree_null.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_unchecked_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\icon_unchecked_pressed_1.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\img_barlayout.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\img_barlayout2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\img_barlayout4.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\img_corner_left.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\img_local_logo.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\js2_basetemplate.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\js2_hbgroups.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\js2_hbobject3.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\js2_hbobjectset3.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\js2_hotbarwrapper.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\js2_iteratorsandreaders3nf.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\js2_pagingmoduleobj3.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\js2_texts3.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\js2_xmltree3nf.js
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\layout.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\linkpathlegal.txt
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\n.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\nav_b_2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\nav_bb_2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\nav_f_2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\nav_ff_2.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\progress.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\searchbtn.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\submit.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\tab_bg.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\tab_bga.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\tab_bgia.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\tab_l.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\tab_la.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\tab_lia.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\tab_r.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\tab_ra.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\tab_ria.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\tree_dots.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\tree_minus.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\tree_plus.gif
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\treedata_animations.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\treedata_backgrounds.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\treedata_ecards.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\treedata_emoticons.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\treedata_notifiers.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\2\treedata_text.xml
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\business_promo.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\buttondir.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\code.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\email-def.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\email-t1-bg.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\hotbar_promo.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\images.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\layout.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\linkpathlegal.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\localcontent.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\progress.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\treexml.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1055531.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1055646.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1055978.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1065003.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1066422.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1066790.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1066887.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\120267.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\121938.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1258156.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1384284.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385370.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385467.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1387289.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1387588.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1390263.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1395212.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1395429.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1400989.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\1401883.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\18255.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\192145.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\2171021.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\2208946.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\2313471.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\241506.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\2884302.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\2884308.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\2885069.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\468061.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\506210.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\566217.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\573421.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\598170.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\609636.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\625696.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\69711.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\698191.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\721901.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\724987.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\754736.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\805478.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\805930.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\819382.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\865123.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\877979.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\890068.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\94161.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\956750.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\ASPL1.dat
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\domains.txt
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\hstat\321f.dat
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\12486
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\13036
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\13546
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\13613
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\13615
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\13617
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\13637
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\13939
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\141880
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\14575
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\14747
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\15024
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1509
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\15870
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\16173
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\17008
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\17025
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\17362
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\17805
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\18035
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\182864
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\18391
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\184591
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\18676
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\18721
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\18806
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\19009
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\19650
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\19677
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\202850
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20299
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20478
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20517
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20549
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20570
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20869
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\21017
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\213558
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\22254
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\223385
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\228229
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\23636
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\24996
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\25093
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\25911
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\259172
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\26664
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\27414
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\27503
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\27505
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\27515
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\27654
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\28049
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\28065
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\28383
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\288733
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\29115
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\29479
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\29642
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\3009
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\30604
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\30741
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\32242
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\32418
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\32424
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\32541
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\32639
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\32680
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\32812
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\32883
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\33069
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\33137
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34123
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34186
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34237
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34374
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34388
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34513
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\35047
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\352
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\36079
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\37135
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\372500
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\37999
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\38868
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\39632
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\398397
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\39897
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\39947
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\39972
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\40766
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41115
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41364
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\4142
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41421
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41528
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41561
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41641
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41940
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\42013
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\42208
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\4226
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\43638
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\43803
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\43907
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44061
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44099
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44228
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44300
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44303
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44313
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\4442
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44458
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44706
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\4472
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44878
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\45642
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\45833
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\46415
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\471072
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\4967
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\49821
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\51666
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\51880
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\52335
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\526389
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\528235
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\53842
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\54189
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\55857
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56100
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56271
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56527
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56613
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56726
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56733
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56748
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56815
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56829
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\57137
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\578150
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\58804
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\58965
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\591977
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\59234
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\59344
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\59598
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\59844
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6098
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61207
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61367
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61779
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61837
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61894
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6289
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6292
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\63143
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\63770
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\64411
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\64412
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\64646
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\64678
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6552
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6553
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6556
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6558
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6559
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6561
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6565
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6586
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6635
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\66836
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\67226
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\67491
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6751
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\68016
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\68021
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\68370
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6873
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6915
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\69325
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\69515
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\70075
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\703336
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\70692
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\70958
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\72748
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\72882
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\72932
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\73811
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\73905
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\73922
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\74576
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\7482
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\75296
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\7553
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\75653
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\75743
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\76119
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\7652
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\77461
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\78220
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\78237
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\78600
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\79079
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\79257
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\79382
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\79596
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\79805
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\80193
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\80670
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\80689
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\81551
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\81830
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\82292
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\82385
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\83139
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\83706
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\83732
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\83733
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\83743
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\83757
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\85062
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\8544
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\85449
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\86023
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\86379
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\86593
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\86632
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\87215
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\87385
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\88183
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\88533
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\89075
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\90358
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\91224
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\916
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\924
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\92886
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\92930
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\93192
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\93899
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\94789
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95325
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95610
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95615
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95716
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95774
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95873
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\96961
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\97172
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\97499
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\97507
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\97518
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\97524
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\9805
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\98426
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\99008
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\9974
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\dynamic\ustat\321f.dat
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\ads.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\business_promo.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\buttondir.txt
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\components.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_1000.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_2000.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_3000.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bar.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar1.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar10.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar11.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar12.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar13.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar14.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar2.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar3.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar4.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar5.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar6.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar7.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar8.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar9.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_logos.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_other.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_x.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_weather.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\default.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_511745-514279.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_categorize.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_comparison.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_explorer-Mails.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_explorer-people.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_favorites.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_Games.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_Hide.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_hotbarcom.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_Hotmail.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_hsskin.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_Mails.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_new.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_premium.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_ringtone.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_SearchBoxTrapper.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_searchfor.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_searchgo.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_weather.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_yellowpages.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\email-def-511724-9595.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\email-t1-bg.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\hotbar-premium-hotbar-premium.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\hotbar-premium.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\hotbar_promo.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\icons2.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\keywords.idx
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\keywords_idx.idx
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\keywords_sdf.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\keywords1.dat
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\layout.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\linkpathlegal.txt
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\progress.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\s_icons_buttons.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\t2_bg.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\theweb.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\top7.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\Top7_theweb.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\1\tsd_bg.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\ads.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\business_promo.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\buttondir.txt
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\components.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_1000.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_2000.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_3000.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bar.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar1.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar10.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar11.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar12.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar13.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar14.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar2.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar3.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar4.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar5.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar6.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar7.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar8.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar9.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_logos.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_other.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_x.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_weather.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\default.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_511745-514279.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_categorize.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_comparison.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_explorer-Mails.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_explorer-people.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_favorites.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_Games.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_Hide.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_hotbarcom.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_Hotmail.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_hsskin.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_Mails.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_new.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_premium.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_ringtone.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_SearchBoxTrapper.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_searchfor.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_searchgo.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_weather.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_yellowpages.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\email-def-511724-9595.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\email-t1-bg.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\hotbar-premium-hotbar-premium.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\hotbar-premium.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\hotbar_promo.htm
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\icons2.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\keywords.idx
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\keywords_idx.idx
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\keywords_sdf.sdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\keywords1.dat
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\layout.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\linkpathlegal.txt
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\progress.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\s_icons_buttons.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\t2_bg.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\theweb.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\top7.cdf
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\Top7_theweb.mnu
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\2\tsd_bg.res
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\ads.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\business_promo.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\buttondir.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_1000.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_2000.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_3000.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bar.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar1.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar10.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar11.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar12.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar13.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar14.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar2.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar3.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar4.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar5.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar6.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar7.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar8.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar9.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_logos.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_other.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_x.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_weather.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\default.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\email-t1-bg.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\hotbar-premium.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\hotbar_promo.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\icons2.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\keywords.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\keywords_idx.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\keywords_sdf.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\keywords1.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\layout.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\linkpathlegal.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\progress.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\s_icons_buttons.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\samplegroups2.txt
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\samplegroups2.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\t2_bg.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\top7.xip
c:\documents and settings\Tammy\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\tsd_bg.xip
c:\documents and settings\Tony\Application Data\Hotbar
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\1.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\1065366.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\1135778.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\1384083.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\1385581.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\1400126.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\1400989.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\18255.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\1903530.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\1907584.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\2171021.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\2208948.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\483014.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\498796.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\61209.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\625696.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\677706.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\690129.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\777882.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\819382.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\880604.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\890068.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\957291.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\ASPL1.dat
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\domains.txt
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\hstat\3227.dat
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\13061
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\13546
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\15541
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\16173
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\17025
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\17063
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\18721
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\19650
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\19677
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20299
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\20970
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\22257
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\22265
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\24341
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\25093
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\25100
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\27503
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\27505
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\28383
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\29642
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\3009
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\30604
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\32276
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\33137
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\33146
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\33697
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\33923
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34123
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\34186
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\35047
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\36598
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\40766
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41372
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\41641
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44049
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44228
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44293
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\44878
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\45833
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\46415
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\471072
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\51666
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\526389
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\54189
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56412
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56726
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56733
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\56748
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\578150
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\58804
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\59234
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\59844
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\60841
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61779
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61795
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61837
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\61894
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\64451
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6458
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\64678
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\6468
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\67226
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\68021
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\68055
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\68924
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\703336
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\70692
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\72786
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\73905
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\75743
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\78600
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\80670
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\82126
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\83743
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\83821
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\85062
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\85535
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\85547
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\86023
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\86379
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\86837
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\89075
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\90358
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\91224
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\91231
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\91238
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\92886
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95678
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95704
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\95716
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\99008
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\dynamic\ustat\3227.dat
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\ads.cdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\business_promo.htm
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\buttondir.txt
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\components.cdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_1000.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_2000.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_3000.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bar.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar1.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar10.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar11.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar12.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar13.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar14.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar2.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar3.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar4.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar5.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar6.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar7.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar8.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_bbar9.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_logos.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_other.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_buttons_x.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\d_icons_weather.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\default.cdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_511745-514279.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_categorize.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_comparison.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_explorer-Mails.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_explorer-people.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_favorites.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_Games.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_Hide.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_hotbarcom.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_Hotmail.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_hsskin.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_Mails.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_new.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_premium.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_ringtone.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_SearchBoxTrapper.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_searchfor.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_searchgo.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_weather.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Default_yellowpages.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\email-def-511724-9595.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\email-t1-bg.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\hotbar-premium-hotbar-premium.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\hotbar-premium.cdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\hotbar_promo.htm
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\icons2.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\keywords.idx
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\keywords1.dat
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\layout.cdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\linkpathlegal.txt
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\progress.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\s_icons_buttons.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\t2_bg.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\theweb.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\top7.cdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\Top7_theweb.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\1\tsd_bg.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\ads.cdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\business_promo.htm
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\buttondir.txt
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\components.cdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_1000.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_2000.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_3000.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bar.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar1.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar10.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar11.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar12.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar13.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar14.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar2.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar3.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar4.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar5.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar6.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar7.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar8.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_bbar9.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_logos.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_other.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_buttons_x.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\d_icons_weather.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\default.cdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_511745-514279.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_categorize.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_comparison.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_explorer-Mails.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_explorer-people.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_favorites.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_Games.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_Hide.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_hotbarcom.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_Hotmail.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_hsskin.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_Mails.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_new.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_premium.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_ringtone.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_SearchBoxTrapper.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_searchfor.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_searchgo.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_weather.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Default_yellowpages.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\email-def-511724-9595.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\email-t1-bg.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\hotbar-premium-hotbar-premium.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\hotbar-premium.cdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\hotbar_promo.htm
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\icons2.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\keywords.idx
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\keywords_idx.idx
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\keywords_sdf.sdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\keywords1.dat
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\layout.cdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\linkpathlegal.txt
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\progress.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\s_icons_buttons.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\t2_bg.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\theweb.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\top7.cdf
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\Top7_theweb.mnu
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\2\tsd_bg.res
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\ads.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\business_promo.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\buttondir.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_1000.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_2000.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_3000.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bar.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar1.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar10.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar11.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar12.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar13.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar14.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar2.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar3.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar4.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar5.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar6.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar7.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar8.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar9.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_logos.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_other.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_x.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_weather.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\default.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\email-t1-bg.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\hotbar-premium.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\hotbar_promo.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\icons2.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\keywords.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\keywords_idx.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\keywords_sdf.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\keywords1.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\layout.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\linkpathlegal.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\progress.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\s_icons_buttons.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\samplegroups2.txt
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\samplegroups2.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\t2_bg.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\top7.xip
c:\documents and settings\Tony\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\tsd_bg.xip
c:\progra~1\COMMON~1\{5861A~1
c:\program files\iWin Games\iWinGamesHookIE.dll
c:\program files\License_Manager
c:\recycler\S-1-5-21-131497283-767760892-875621169-1009
c:\recycler\S-1-5-21-2244920045-2318353198-2787473484-1009
c:\recycler\S-1-5-21-2752151754-1172148758-1956651409-1009
c:\recycler\S-1-5-21-382669650-4161088980-2298257755-1003
c:\recycler\S-1-5-21-3968185026-3172758575-901229228-1009
c:\recycler\S-1-5-21-3968185026-3172758575-901229228-1010
c:\recycler\S-1-5-21-3968185026-3172758575-901229228-1011
c:\recycler\S-1-5-21-3968185026-3172758575-901229228-1012
c:\recycler\S-1-5-21-3968185026-3172758575-901229228-1014
c:\recycler\S-1-5-21-431432912-4097800142-2930868113-1009
c:\windows\adffii.ini
c:\windows\Downloaded Program Files\popcaploader.inf
c:\windows\system32\ps2.bat
c:\windows\viassary-hp.reg

c:\windows\system32\DRIVERS\atapi.sys . . . is infected!! . . .Failed to restore. Attempting to replace on reboot

Infected copy of c:\windows\system32\DRIVERS\atapi.sys was found and disinfected
Restored copy from - c:\system volume information\_restore{02818594-CB0B-43E3-8139-587D9EF98970}\RP737\A0160293.sys
.
((((((((((((((((((((((((( Files Created from 2009-12-11 to 2010-01-11 )))))))))))))))))))))))))))))))
.

2010-01-11 18:36 . 2010-01-11 18:36 -------- d-----w- c:\documents and settings\HP_Owner\Application Data\AVG9
2010-01-11 16:59 . 2010-01-11 16:59 -------- d-----w- C:\_OTL
2010-01-10 17:10 . 2010-01-10 17:10 -------- d-----w- C:\desktop
2010-01-09 15:42 . 2010-01-09 15:43 -------- d-----w- c:\program files\CCleaner
2010-01-09 05:08 . 2010-01-09 05:08 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Application Data\Adobe
2010-01-08 23:16 . 2010-01-08 23:16 -------- d-----w- c:\documents and settings\HP_Owner\Application Data\Malwarebytes
2010-01-08 22:46 . 2010-01-07 21:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-08 22:46 . 2010-01-08 22:46 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-01-08 22:46 . 2010-01-07 21:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-08 22:46 . 2010-01-08 23:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-06 17:40 . 2010-01-06 17:40 -------- d-----w- c:\program files\Common Files\Palo Alto Software
2010-01-06 17:39 . 2010-01-06 17:43 -------- d-----w- c:\program files\Quicken
2009-12-29 20:34 . 2010-01-11 17:36 0 ----a-w- c:\documents and settings\HP_Owner\Local Settings\Application Data\prvlcl.dat
2009-12-29 19:53 . 2010-01-01 15:52 -------- d-----w- c:\documents and settings\All Users\Application Data\AVG Security Toolbar
2009-12-27 03:00 . 2009-12-27 03:00 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\F-Secure
2009-12-27 01:16 . 2009-12-27 01:16 -------- d-----w- c:\windows\system32\wbem\Repository
2009-12-26 17:49 . 2009-12-27 01:15 -------- d-----w- c:\program files\Common Files\PC Tools
2009-12-26 17:49 . 2009-12-27 01:15 -------- d-----w- c:\program files\Spyware Doctor
2009-12-26 16:09 . 2009-12-26 16:09 -------- d-----w- c:\documents and settings\HP_Owner\Local Settings\Application Data\AVG Security Toolbar
2009-12-26 16:08 . 2009-12-26 16:12 -------- d-----w- C:\$AVG
2009-12-26 16:07 . 2010-01-10 00:07 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9
2009-12-26 14:59 . 2010-01-03 08:19 -------- d-----w- c:\documents and settings\HP_Owner\Local Settings\Application Data\hlysod
2009-12-26 14:58 . 2009-12-26 14:59 -------- d-----w- c:\documents and settings\HP_Owner\Local Settings\Application Data\kiasxq
2009-12-22 23:47 . 2009-12-24 18:24 -------- d-----w- c:\program files\PamperedPartnerPlus
2009-12-19 13:46 . 2009-12-25 04:19 -------- d-----w- c:\windows\SxsCaPendDel
2009-12-14 19:25 . 2009-12-14 19:25 -------- d-----w- c:\documents and settings\HP_Owner\Local Settings\Application Data\Mozilla
2009-12-14 03:13 . 2004-08-04 05:56 21504 -c--a-w- c:\windows\system32\dllcache\hidserv.dll
2009-12-14 03:13 . 2004-08-04 05:56 21504 ----a-w- c:\windows\system32\hidserv.dll
2009-12-14 03:13 . 2004-08-04 03:58 14848 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys
2009-12-14 03:13 . 2004-08-04 03:58 14848 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2009-12-14 03:06 . 2001-08-17 18:47 12928 -c--a-w- c:\windows\system32\dllcache\dot4prt.sys
2009-12-14 03:06 . 2001-08-17 18:47 12928 ----a-w- c:\windows\system32\drivers\Dot4Prt.sys
2009-12-14 03:03 . 2004-08-04 03:58 207360 -c--a-w- c:\windows\system32\dllcache\dot4.sys
2009-12-14 03:03 . 2004-08-04 03:58 207360 ----a-w- c:\windows\system32\drivers\Dot4.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-11 19:28 . 2009-04-28 11:51 -------- d-----w- c:\program files\iWin Games
2010-01-11 18:42 . 2004-08-18 23:47 95360 ----a-w- c:\windows\system32\drivers\atapi.sys
2010-01-09 15:46 . 2005-03-06 20:41 -------- d-----w- c:\documents and settings\All Users\Application Data\Viewpoint
2010-01-09 15:46 . 2005-03-06 20:41 -------- d-----w- c:\program files\Viewpoint
2010-01-09 15:30 . 2004-08-12 04:27 -------- d-----w- c:\program files\Easy Internet signup
2010-01-06 17:43 . 2004-08-12 03:57 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-04 21:12 . 2007-05-14 01:28 -------- d-----w- c:\program files\Diablo I
2009-12-29 19:53 . 2009-03-26 02:07 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2009-12-29 19:53 . 2009-03-26 02:07 333192 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-12-29 19:53 . 2009-03-26 02:07 28424 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-12-29 19:52 . 2009-03-26 02:07 360584 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-12-29 19:52 . 2009-03-26 02:06 -------- d-----w- c:\program files\AVG
2009-12-29 19:08 . 2006-08-23 12:51 -------- d-----w- c:\program files\Charter High-Speed Security Suite
2009-12-29 19:03 . 2007-04-04 16:10 -------- d-----w- c:\documents and settings\All Users\Application Data\F-Secure
2009-12-27 05:47 . 2007-02-06 12:29 -------- d-----w- c:\documents and settings\HP_Owner\Application Data\F-Secure
2009-12-27 02:51 . 2007-12-02 15:20 -------- d-----w- c:\documents and settings\All Users\Application Data\fssg
2009-12-26 16:08 . 2009-03-26 02:07 12464 ----a-w- c:\windows\system32\avgrsstx(2).dll
2009-12-19 14:07 . 2007-04-27 03:18 -------- d--h--r- c:\documents and settings\HP_Owner\Application Data\yahoo!
2009-12-19 14:06 . 2004-12-15 00:47 33 -c--a-w- c:\windows\popcinfo.dat
2009-12-19 13:48 . 2005-09-08 12:39 -------- d-----w- c:\documents and settings\All Users\Application Data\yahoo!
2009-12-14 15:57 . 2006-05-17 21:06 -------- d-----w- c:\program files\Google
2005-08-12 15:05 . 2005-08-12 15:05 774144 ----a-w- c:\program files\RngInterstitial.dll
2003-08-27 19:19 . 2004-12-17 18:22 36963 ----a-r- c:\program files\Common Files\SM1updtr.dll
2005-02-16 04:45 . 2005-02-16 02:45 0 -csha-w- c:\windows\SMINST\HPCD.sys
.

------- Sigcheck -------

[-] 2010-01-11 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\system32\drivers\atapi.sys

[-] 2004-08-04 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\asyncmac.sys
[-] 2004-08-04 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\drivers\asyncmac.sys

[-] 2004-08-04 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2004-08-04 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys

[-] 2004-08-04 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\kbdclass.sys
[-] 2004-08-04 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\system32\ReinstallBackups\0001\DriverFiles\i386\kbdclass.sys
[-] 2004-08-04 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\system32\ReinstallBackups\0002\DriverFiles\i386\kbdclass.sys
[-] 2004-08-04 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\system32\drivers\kbdclass.sys
[-] 2004-08-04 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\kbdclass.sys

[-] 2004-08-04 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ndis.sys
[-] 2004-08-04 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\system32\drivers\ndis.sys

[-] 2007-02-09 . 05AB81909514BFD69CBB1F2C147CF6B9 . 574976 . . [5.1.2600.3081] . . c:\windows\$hf_mig$\KB930916\SP2QFE\ntfs.sys
[-] 2007-02-09 . 19A811EF5F1ED5C926A028CE107FF1AF . 574464 . . [5.1.2600.3081] . . c:\windows\system32\dllcache\ntfs.sys
[-] 2007-02-09 . 19A811EF5F1ED5C926A028CE107FF1AF . 574464 . . [5.1.2600.3081] . . c:\windows\system32\drivers\ntfs.sys
[-] 2004-08-04 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB930916$\ntfs.sys
[-] 2004-08-04 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\I386\NTFS.SYS

[-] 2004-08-04 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
[-] 2004-08-04 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys

[-] 2006-04-20 . B2220C618B42A2212A59D91EBD6FC4B4 . 360576 . . [5.1.2600.2892] . . c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
[-] 2006-04-20 . 1DBF125862891817F374F407626967F4 . 359808 . . [5.1.2600.2892] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2006-04-20 . 1DBF125862891817F374F407626967F4 . 359808 . . [5.1.2600.2892] . . c:\windows\system32\drivers\tcpip.sys
[-] 2006-01-13 . 5562CC0A47B2AEF06D3417B733F3C195 . 360448 . . [5.1.2600.2827] . . c:\windows\$hf_mig$\KB913446\SP2QFE\tcpip.sys
[-] 2005-05-25 . 63FDFEA54EB53DE2D863EE454937CE1E . 359936 . . [5.1.2600.2685] . . c:\windows\$hf_mig$\KB893066\SP2QFE\tcpip.sys
[-] 2005-05-25 . 88763A98A4C26C409741B4AA162720C9 . 359808 . . [5.1.2600.2685] . . c:\windows\$NtUninstallKB913446$\tcpip.sys
[-] 2004-08-04 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB893066$\tcpip.sys
[-] 2004-08-04 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB917953$\tcpip.sys

[-] 2004-08-04 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180] . . c:\windows\system32\browser.dll
[-] 2004-08-04 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\browser.dll

[-] 2004-08-04 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180] . . c:\windows\system32\lsass.exe
[-] 2004-08-04 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\lsass.exe

[-] 2005-08-22 . 36739B39267914BA69AD0610A0299732 . 197632 . . [5.1.2600.2743] . . c:\windows\system32\netman.dll
[-] 2005-08-22 . 36739B39267914BA69AD0610A0299732 . 197632 . . [5.1.2600.2743] . . c:\windows\system32\dllcache\netman.dll
[-] 2005-08-22 . 3516D8A18B36784B1005B950B84232E1 . 197632 . . [5.1.2600.2743] . . c:\windows\$hf_mig$\KB905414\SP2QFE\netman.dll
[-] 2004-08-04 . DAB9E6C7105D2EF49876FE92C524F565 . 198144 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB905414$\netman.dll

[-] 2004-08-04 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows\system32\qmgr.dll
[-] 2004-08-04 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows\system32\dllcache\qmgr.dll

[-] 2005-07-26 . CE94A2BD25E3E9F4D46A7373FF455C6D . 397824 . . [5.1.2600.2726] . . c:\windows\system32\rpcss.dll
[-] 2005-07-26 . CE94A2BD25E3E9F4D46A7373FF455C6D . 397824 . . [5.1.2600.2726] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2005-07-26 . C369DF215D352B6F3A0B8C3469AA34F8 . 398336 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\rpcss.dll
[-] 2005-04-28 . DA383FB39A6F1C445F3AFC94B3EB1248 . 396288 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\rpcss.dll
[-] 2005-04-28 . C8061F289E000703E7672916B7FE1571 . 395776 . . [5.1.2600.2665] . . c:\windows\$NtUninstallKB902400$\rpcss.dll
[-] 2005-01-14 . 94456045BEB4545B5EBE1DCC85951AFA . 395776 . . [5.1.2600.2595] . . c:\windows\$hf_mig$\KB873333\SP2QFE\rpcss.dll
[-] 2004-08-04 . 5C83A4408604F737717AB96371201680 . 395776 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB873333$\rpcss.dll
[-] 2004-08-04 . 5C83A4408604F737717AB96371201680 . 395776 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB894391$\rpcss.dll

[-] 2004-08-04 . C6CE6EEC82F187615D1002BB3BB50ED4 . 108032 . . [5.1.2600.2180] . . c:\windows\system32\services.exe
[-] 2004-08-04 . C6CE6EEC82F187615D1002BB3BB50ED4 . 108032 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\services.exe

[-] 2005-06-11 . AD3D9D191AEA7B5445FE1D82FFBB4788 . 57856 . . [5.1.2600.2696] . . c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
[-] 2005-06-10 . DA81EC57ACD4CDC3D4C51CF3D409AF9F . 57856 . . [5.1.2600.2696] . . c:\windows\system32\spoolsv.exe
[-] 2005-06-10 . DA81EC57ACD4CDC3D4C51CF3D409AF9F . 57856 . . [5.1.2600.2696] . . c:\windows\system32\dllcache\spoolsv.exe
[-] 2004-08-04 . 7435B108B935E42EA92CA94F59C8E717 . 57856 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB896423$\spoolsv.exe

[-] 2004-08-04 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\system32\winlogon.exe
[-] 2004-08-04 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\winlogon.exe

[-] 2006-08-25 . B0124CB21D28B1C9F678B566B6B57D92 . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll
[-] 2006-08-25 . B0124CB21D28B1C9F678B566B6B57D92 . 617472 . . [5.82] . . c:\windows\system32\dllcache\comctl32.dll
[-] 2004-08-04 . A77DFB85FAEE49D66C74DA6024EBC69B . 611328 . . [5.82] . . c:\windows\$NtUninstallKB923191$\comctl32.dll
[-] 2004-08-04 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\I386\ASMS\6000\MSFT\WINDOWS\COMMON\CONTROLS\COMCTL32.DLL

[-] 2004-08-04 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180] . . c:\windows\system32\cryptsvc.dll
[-] 2004-08-04 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\cryptsvc.dll

[-] 2005-07-26 04:39 . 34BBD9ACC1538818F2C878898C64E793 . 243200 . . [2001.12.4414.308] . . c:\windows\system32\es.dll
[-] 2005-07-26 04:39 . 34BBD9ACC1538818F2C878898C64E793 . 243200 . . [2001.12.4414.308] . . c:\windows\system32\dllcache\es.dll
[-] 2005-07-26 04:20 . 95F5FEA4C6DE2C3F28784D0DCC8F0DD3 . 243200 . . [2001.12.4414.308] . . c:\windows\$hf_mig$\KB902400\SP2QFE\es.dll
[-] 2004-08-04 12:00 . ACD36A2DD7D1E9D8A060AA651DC07E63 . 243200 . . [2001.12.4414.258] . . c:\windows\$NtUninstallKB902400$\es.dll

[-] 2004-08-04 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180] . . c:\windows\system32\imm32.dll
[-] 2004-08-04 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\imm32.dll

[-] 2007-04-16 . 09F7CB3687F86EDAA4CA081F7AB66C03 . 986112 . . [5.1.2600.3119] . . c:\windows\$hf_mig$\KB935839\SP2QFE\kernel32.dll
[-] 2007-04-16 . A01F9CA902A88F7CED06884174D6419D . 984576 . . [5.1.2600.3119] . . c:\windows\system32\kernel32.dll
[-] 2007-04-16 . A01F9CA902A88F7CED06884174D6419D . 984576 . . [5.1.2600.3119] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2006-07-05 . 0FDD84928A5DDE2510761B7EC76CCEC9 . 985088 . . [5.1.2600.2945] . . c:\windows\$hf_mig$\KB917422\SP2QFE\kernel32.dll
[-] 2004-08-04 . 888190E31455FAD793312F8D087146EB . 983552 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB917422$\kernel32.dll
[-] 2004-08-04 . 888190E31455FAD793312F8D087146EB . 983552 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB935839$\kernel32.dll

[-] 2005-09-01 . 648BF0B4DDE4F7A1156DAE7174D36EFA . 19968 . . [5.1.2600.2751] . . c:\windows\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
[-] 2005-09-01 . A1A688EE56CF3BBD24EDEB815D48E9BA . 19968 . . [5.1.2600.2751] . . c:\windows\system32\linkinfo.dll
[-] 2005-09-01 . A1A688EE56CF3BBD24EDEB815D48E9BA . 19968 . . [5.1.2600.2751] . . c:\windows\system32\dllcache\linkinfo.dll
[-] 2004-08-04 . C2BBD044C741EA4292016C36F718D2E4 . 18944 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB900725$\linkinfo.dll

[-] 2004-08-04 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180] . . c:\windows\system32\lpk.dll
[-] 2004-08-04 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\lpk.dll

[-] 2008-06-25 . 04EEC0FF4DD3C7041628973CA6832C33 . 3067904 . . [6.00.2900.5626] . . c:\windows\SoftwareDistribution\Download\7266a4d025877b3f91e09ddc873eafd6\sp3qfe\mshtml.dll
[-] 2008-06-23 . 1FC693A4EE1D9D9CD78DDA6C87232F6F . 3067392 . . [6.00.2900.3395] . . c:\windows\SoftwareDistribution\Download\7266a4d025877b3f91e09ddc873eafd6\sp2qfe\mshtml.dll
[-] 2008-06-23 . 74B5A84AC8FCF52C249B74C3D2A3E7B8 . 3059712 . . [6.00.2900.3395] . . c:\windows\SoftwareDistribution\Download\7266a4d025877b3f91e09ddc873eafd6\sp2gdr\mshtml.dll
[-] 2008-06-23 . F433136C23D13B120412B300D1324A7E . 3067392 . . [6.00.2900.5626] . . c:\windows\SoftwareDistribution\Download\7266a4d025877b3f91e09ddc873eafd6\sp3gdr\mshtml.dll
[-] 2007-10-30 . DA077E334961230C12E3E4D62626286E . 3058688 . . [6.00.2900.3243] . . c:\windows\system32\mshtml.dll
[-] 2007-10-30 . DA077E334961230C12E3E4D62626286E . 3058688 . . [6.00.2900.3243] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2007-10-30 . 79314A0A6B0DA78AFE491FF2D8B117BA . 3065856 . . [6.00.2900.3243] . . c:\windows\$hf_mig$\KB942615\SP2QFE\mshtml.dll
[-] 2007-08-22 . 591449BD8F2C8090B9259E88C78AE61D . 3058176 . . [6.00.2900.3199] . . c:\windows\$NtUninstallKB942615$\mshtml.dll
[-] 2007-08-22 . 885E3BF99EA4B2213901EBC35B34CF12 . 3064832 . . [6.00.2900.3199] . . c:\windows\$hf_mig$\KB939653\SP2QFE\mshtml.dll
[-] 2007-06-15 . 53F3FD772C010622346C39284C4A863B . 3064320 . . [6.00.2900.3157] . . c:\windows\$hf_mig$\KB937143\SP2QFE\mshtml.dll
[-] 2007-06-14 . F049C52772FC86FD5F6C16D77A2A6204 . 3058688 . . [6.00.2900.3157] . . c:\windows\$NtUninstallKB939653$\mshtml.dll
[-] 2007-05-04 . 00ADCB32832A10ED9419493BCEA97526 . 3064320 . . [6.00.2900.3132] . . c:\windows\$hf_mig$\KB933566\SP2QFE\mshtml.dll
[-] 2007-05-04 . 4D92717B5BBCE85F1254BAD23B0D357C . 3058688 . . [6.00.2900.3132] . . c:\windows\$NtUninstallKB937143$\mshtml.dll
[-] 2006-09-14 . BE45460D1453B7342E01EAE79BFBC681 . 3054592 . . [6.00.2900.2995] . . c:\windows\ie7\mshtml.dll
[-] 2006-09-14 . CEFEA1C301139A817931BE132F0359FE . 3058688 . . [6.00.2900.2995] . . c:\windows\$hf_mig$\KB922760\SP2QFE\mshtml.dll
[-] 2006-07-28 . D251679BD9EF0250201FB899EC40FD32 . 3058176 . . [6.00.2900.2963] . . c:\windows\$hf_mig$\KB918899\SP2QFE\mshtml.dll
[-] 2006-07-28 . C7074DA3D8F8C0F6C03874BA0B05069C . 3054080 . . [6.00.2900.2963] . . c:\windows\$NtUninstallKB922760$\mshtml.dll
[-] 2006-05-19 . 284CE76B71DD5260B42A3CCF0135AF67 . 3052544 . . [6.00.2900.2912] . . c:\windows\$NtUninstallKB918899$\mshtml.dll
[-] 2006-05-19 . 8687E029BE63C77D4919485068C54D77 . 3055104 . . [6.00.2900.2912] . . c:\windows\$hf_mig$\KB916281\SP2QFE\mshtml.dll
[-] 2006-03-23 . DEAA438EA31095E14A196FF647E38D13 . 3053568 . . [6.00.2900.2873] . . c:\windows\$NtUninstallKB916281$\mshtml.dll
[-] 2006-03-23 . ABCD123F888E4E97C8751378CCCC4F26 . 3055616 . . [6.00.2900.2873] . . c:\windows\$hf_mig$\KB912812\SP2QFE\mshtml.dll
[-] 2005-11-24 . D3F037F5DA702AE9DDD7663EC9D78BA7 . 3018240 . . [6.00.2900.2802] . . c:\windows\$hf_mig$\KB905915\SP2QFE\mshtml.dll
[-] 2005-11-24 . 5E7A39950EA133BB54719A6E08C544A7 . 3015680 . . [6.00.2900.2802] . . c:\windows\$NtUninstallKB912812$\mshtml.dll
[-] 2005-10-05 . 3394299FBF1CD0B24089FC762611360B . 3017728 . . [6.00.2900.2769] . . c:\windows\$hf_mig$\KB896688\SP2QFE\mshtml.dll
[-] 2005-10-04 . 042AC20E084D21DD6BEE99B89CC30FB7 . 3015168 . . [6.00.2900.2769] . . c:\windows\$NtUninstallKB905915$\mshtml.dll
[-] 2005-07-20 . A14A7A206AE22DE4FE563E44CFC7DDF5 . 3016192 . . [6.00.2900.2722] . . c:\windows\$hf_mig$\KB896727\SP2QFE\mshtml.dll
[-] 2005-07-20 . 31E7520E58E5E4DFA93215A6D5603AF2 . 3014144 . . [6.00.2900.2722] . . c:\windows\$NtUninstallKB896688$\mshtml.dll
[-] 2005-05-02 . DCC5C79B99F02EEF8C826B074DBFC222 . 3014144 . . [6.00.2900.2668] . . c:\windows\$hf_mig$\KB883939\SP2QFE\mshtml.dll
[-] 2005-05-02 . DCFAC5470EE0A159EC4222BC28AE3EE6 . 3012608 . . [6.00.2900.2668] . . c:\windows\$NtUninstallKB896727$\mshtml.dll
[-] 2005-03-10 . 84A1B9B0C362051E68BB131F14C6DAAD . 3010560 . . [6.00.2900.2627] . . c:\windows\$NtUninstallKB883939$\mshtml.dll
[-] 2005-03-10 . 255C2CE965543ABDC3E0A25A5DA1874A . 3011072 . . [6.00.2900.2627] . . c:\windows\$hf_mig$\KB890923\SP2QFE\mshtml.dll
[-] 2005-01-27 . FAE3CA9B2459581C45B3A8845BE3077C . 3006976 . . [6.00.2900.2604] . . c:\windows\$NtUninstallKB890923$\mshtml.dll
[-] 2005-01-27 . 91C5ADE25BC4E3322577854FA2E7B58B . 3008000 . . [6.00.2900.2604] . . c:\windows\$hf_mig$\KB867282\SP2QFE\mshtml.dll
[-] 2004-09-29 . D94E6405E420373161467ACD3DA65640 . 3004928 . . [6.00.2900.2523] . . c:\windows\$NtUninstallKB867282$\mshtml.dll
[-] 2004-09-29 . 087FF7C54E7EBE4A59BD4DFC1D0EE9B8 . 3004928 . . [6.00.2900.2524] . . c:\windows\$hf_mig$\KB834707\SP2QFE\mshtml.dll
[-] 2004-08-04 . 376E0843B2356CA91CEC8D9837A56FF7 . 3003392 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB834707$\mshtml.dll
[-] 2004-08-04 . 376E0843B2356CA91CEC8D9837A56FF7 . 3003392 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB933566$\mshtml.dll

[-] 2004-08-04 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\I386\ASMS\7000\MSFT\WINDOWS\MSWINCRT\MSVCRT.DLL
[-] 2004-08-04 . B0FEFA816D61EC66AA765DDF534EAB5E . 343040 . . [7.0.2600.2180] . . c:\windows\system32\msvcrt.dll
[-] 2004-08-04 . B0FEFA816D61EC66AA765DDF534EAB5E . 343040 . . [7.0.2600.2180] . . c:\windows\system32\dllcache\msvcrt.dll

[-] 2004-08-04 . 4E74AF063C3271FBEA20DD940CFD1184 . 245248 . . [5.1.2600.2180] . . c:\windows\system32\mswsock.dll
[-] 2004-08-04 . 4E74AF063C3271FBEA20DD940CFD1184 . 245248 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\mswsock.dll

[-] 2004-08-04 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180] . . c:\windows\system32\netlogon.dll
[-] 2004-08-04 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\netlogon.dll

[-] 2007-02-28 . 5A5C8DB4AA962C714C8371FBDF189FC9 . 2182144 . . [5.1.2600.3093] . . c:\windows\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
[-] 2007-02-28 . 582A8DBAA58C3B1F176EB2817DAEE77C . 2180352 . . [5.1.2600.3093] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2007-02-28 . 582A8DBAA58C3B1F176EB2817DAEE77C . 2180352 . . [5.1.2600.3093] . . c:\windows\system32\ntoskrnl.exe
[-] 2007-02-28 . 582A8DBAA58C3B1F176EB2817DAEE77C . 2180352 . . [5.1.2600.3093] . . c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2005-03-02 . 28187802B7C368C0D3AEF7D4C382AABB . 2179456 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
[-] 2005-03-02 . 4D4CF2C14550A4B7718E94A6E581856E . 2179328 . . [5.1.2600.2622] . . c:\windows\$NtUninstallKB931784$\ntoskrnl.exe
[-] 2004-08-04 . CE218BC7088681FAA06633E218596CA7 . 2180992 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\ntoskrnl.exe

[-] 2004-08-04 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180] . . c:\windows\system32\powrprof.dll
[-] 2004-08-04 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180] . . c:\windows\system32\dllcache\powrprof.dll

[-] 2004-08-04 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180] . . c:\windows\system32\scecli.dll
[-] 2004-08-04 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\scecli.dll

[-] 2004-08-04 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180] . . c:\windows\system32\sfc.dll
[-] 2004-08-04 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\sfc.dll

[-] 2004-08-04 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\svchost.exe
[-] 2004-08-04 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\svchost.exe

[-] 2005-07-08 . 1418A3A6E76E5A2E3F5E43866E793A8B . 249344 . . [5.1.2600.2716] . . c:\windows\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
[-] 2005-07-08 . FB78839B36025AA286A51289ED28B73E . 249344 . . [5.1.2600.2716] . . c:\windows\system32\tapisrv.dll
[-] 2005-07-08 . FB78839B36025AA286A51289ED28B73E . 249344 . . [5.1.2600.2716] . . c:\windows\system32\dllcache\tapisrv.dll
[-] 2004-08-04 . EB4A4187D74A8EFDCBEA3EA2CB1BDFBD . 246272 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB893756$\tapisrv.dll

[-] 2007-03-08 . 7AA4F6C00405DFC4B70ED4214E7D687B . 578048 . . [5.1.2600.3099] . . c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
[-] 2007-03-08 . B409909F6E2E8A7067076ED748ABF1E7 . 577536 . . [5.1.2600.3099] . . c:\windows\system32\user32.dll
[-] 2007-03-08 . B409909F6E2E8A7067076ED748ABF1E7 . 577536 . . [5.1.2600.3099] . . c:\windows\system32\dllcache\user32.dll
[-] 2005-03-02 . 1800F293BCCC8EDE8A70E12B88D80036 . 577024 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
[-] 2005-03-02 . DE2DB164BBB35DB061AF0997E4499054 . 577024 . . [5.1.2600.2622] . . c:\windows\$NtUninstallKB925902$\user32.dll
[-] 2004-08-04 . C72661F8552ACE7C5C85E16A3CF505C4 . 577024 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\user32.dll

[-] 2004-08-04 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180] . . c:\windows\system32\userinit.exe
[-] 2004-08-04 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\userinit.exe

[-] 2008-06-23 . 611ACE3F4201E9610AF8452F7C268995 . 667136 . . [6.00.2900.3395] . . c:\windows\SoftwareDistribution\Download\7266a4d025877b3f91e09ddc873eafd6\sp2qfe\wininet.dll
[-] 2008-06-23 . 9EEA04BC4C3FA521D256D89940FAB4DB . 659456 . . [6.00.2900.3395] . . c:\windows\SoftwareDistribution\Download\7266a4d025877b3f91e09ddc873eafd6\sp2gdr\wininet.dll
[-] 2008-06-23 . F12FBB673DE9CC802C5DC518FE99AA2F . 666112 . . [6.00.2900.5626] . . c:\windows\SoftwareDistribution\Download\7266a4d025877b3f91e09ddc873eafd6\sp3gdr\wininet.dll
[-] 2008-06-23 . 972299B7241EC325D8C7E5638C884925 . 666624 . . [6.00.2900.5626] . . c:\windows\SoftwareDistribution\Download\7266a4d025877b3f91e09ddc873eafd6\sp3qfe\wininet.dll
[-] 2007-10-11 . 2005AD86A22AEE68E21EE59F9CCB77F2 . 659456 . . [6.00.2900.3231] . . c:\windows\system32\wininet.dll
[-] 2007-10-11 . 2005AD86A22AEE68E21EE59F9CCB77F2 . 659456 . . [6.00.2900.3231] . . c:\windows\system32\dllcache\wininet.dll
[-] 2007-10-11 . 80D660A49E0D118144423099B2A9F5DA . 666112 . . [6.00.2900.3231] . . c:\windows\$hf_mig$\KB942615\SP2QFE\wininet.dll
[-] 2007-08-22 . 1901AD51DA8BE9F8B38D5D526E5D1788 . 658944 . . [6.00.2900.3199] . . c:\windows\$NtUninstallKB942615$\wininet.dll
[-] 2007-08-22 . A1BC17EB3758D73C3938B2318820F5B4 . 665600 . . [6.00.2900.3199] . . c:\windows\$hf_mig$\KB939653\SP2QFE\wininet.dll
[-] 2007-06-26 . E1A3DD68B5380B360A7310A64D9BB188 . 665600 . . [6.00.2900.3164] . . c:\windows\$hf_mig$\KB937143\SP2QFE\wininet.dll
[-] 2007-06-26 . 184E47C8F7B331025E6DC92740DB188F . 658944 . . [6.00.2900.3164] . . c:\windows\$NtUninstallKB939653$\wininet.dll
[-] 2007-04-18 . 4261BA03AFD659DE04F0A17DFBDD454D . 665600 . . [6.00.2900.3121] . . c:\windows\$hf_mig$\KB933566\SP2QFE\wininet.dll
[-] 2007-04-18 . B7156CD97E739F3014BC4D61758F868A . 658944 . . [6.00.2900.3121] . . c:\windows\$NtUninstallKB937143$\wininet.dll
[-] 2006-09-14 . 621AF3F6174A3F60677F5230E28BCC07 . 658944 . . [6.00.2900.2995] . . c:\windows\ie7\wininet.dll
[-] 2006-09-14 . D207370287CF769AEBEBF03837784963 . 664576 . . [6.00.2900.2995] . . c:\windows\$hf_mig$\KB922760\SP2QFE\wininet.dll
[-] 2006-06-23 . 64CE26DB72810B30F7855EA51E1DF836 . 664576 . . [6.00.2900.2937] . . c:\windows\$hf_mig$\KB918899\SP2QFE\wininet.dll
[-] 2006-06-23 . 2B4DB890936430C71419037039502752 . 658944 . . [6.00.2900.2937] . . c:\windows\$NtUninstallKB922760$\wininet.dll
[-] 2006-05-10 . D94CFFDB53E7AC867438E2DFD50E7CBC . 663552 . . [6.00.2900.2904] . . c:\windows\$hf_mig$\KB916281\SP2QFE\wininet.dll
[-] 2006-05-10 . 38AB7A56F566D9AAAD31812494944824 . 658432 . . [6.00.2900.2904] . . c:\windows\$NtUninstallKB918899$\wininet.dll
[-] 2006-03-04 . C0845ECBF4F9164E618EE381B79C9032 . 663552 . . [6.00.2900.2861] . . c:\windows\$hf_mig$\KB912812\SP2QFE\wininet.dll
[-] 2006-03-04 . 1C0979C7A489BEE573CD0BF4AD94BB06 . 658432 . . [6.00.2900.2861] . . c:\windows\$NtUninstallKB916281$\wininet.dll
[-] 2005-10-21 . E7B27B6B6E06CE34EA019FD8B858C613 . 658432 . . [6.00.2900.2781] . . c:\windows\$NtUninstallKB912812$\wininet.dll
[-] 2005-10-21 . AF785C4947676A7FC1673FDC5C8D0B5B . 661504 . . [6.00.2900.2781] . . c:\windows\$hf_mig$\KB905915\SP2QFE\wininet.dll
[-] 2005-09-02 . 97A6FD7CAFD688CF2C78939EBAF0CD0C . 660480 . . [6.00.2900.2753] . . c:\windows\$hf_mig$\KB896688\SP2QFE\wininet.dll
[-] 2005-09-02 . AF61EBB1F550175EFF406D545D6AB086 . 658432 . . [6.00.2900.2753] . . c:\windows\$NtUninstallKB905915$\wininet.dll
[-] 2005-07-03 . 5B5FF992C0FA762CCF8655FC290E6E52 . 658432 . . [6.00.2900.2713] . . c:\windows\$NtUninstallKB896688$\wininet.dll
[-] 2005-07-03 . 6E533D155B259EB2363D3E04B5BE309F . 659456 . . [6.00.2900.2713] . . c:\windows\$hf_mig$\KB896727\SP2QFE\wininet.dll
[-] 2005-05-02 . E1E18136F9DD3DF1AD9C82193A5898A6 . 658944 . . [6.00.2900.2668] . . c:\windows\$hf_mig$\KB883939\SP2QFE\wininet.dll
[-] 2005-05-02 . 1A078AF3F85D10BA56444C23B3A18E74 . 657920 . . [6.00.2900.2668] . . c:\windows\$NtUninstallKB896727$\wininet.dll
[-] 2005-03-10 . 6F018D6319BE4F96426EA829B79E05D5 . 656896 . . [6.00.2900.2627] . . c:\windows\$NtUninstallKB883939$\wininet.dll
[-] 2005-03-10 . C8663B488996E89A84C3D17C1D12B79E . 657920 . . [6.00.2900.2627] . . c:\windows\$hf_mig$\KB890923\SP2QFE\wininet.dll
[-] 2005-01-27 . B5E043E440B210014E021B24CF0A72E3 . 656896 . . [6.00.2900.2577] . . c:\windows\$NtUninstallKB890923$\wininet.dll
[-] 2005-01-27 . A8EAC5330876548E9966A7D13025D196 . 657920 . . [6.00.2900.2598] . . c:\windows\$hf_mig$\KB867282\SP2QFE\wininet.dll
[-] 2004-09-29 . CBA65B573C66FE23F647FF96E3A10994 . 656896 . . [6.00.2900.2518] . . c:\windows\$NtUninstallKB867282$\wininet.dll
[-] 2004-09-29 . 2C07195588D69A067C2AFDAA31759295 . 656896 . . [6.00.2900.2518] . . c:\windows\$hf_mig$\KB834707\SP2QFE\wininet.dll
[-] 2004-08-04 . C0823FC5469663BA63E7DB88F9919D70 . 656384 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB834707$\wininet.dll
[-] 2004-08-04 . C0823FC5469663BA63E7DB88F9919D70 . 656384 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB933566$\wininet.dll

[-] 2004-08-04 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180] . . c:\windows\system32\ws2_32.dll
[-] 2004-08-04 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ws2_32.dll

[-] 2007-06-13 . 7712DF0CDDE3A5AC89843E61CD5B3658 . 1033216 . . [6.00.2900.3156] . . c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
[-] 2007-06-13 . 97BD6515465659FF8F3B7BE375B2EA87 . 1033216 . . [6.00.2900.3156] . . c:\windows\explorer.exe
[-] 2007-06-13 . 97BD6515465659FF8F3B7BE375B2EA87 . 1033216 . . [6.00.2900.3156] . . c:\windows\system32\dllcache\explorer.exe
[-] 2004-08-04 . A0732187050030AE399B241436565E64 . 1032192 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB938828$\explorer.exe

[-] 2004-08-04 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\system32\srsvc.dll
[-] 2004-08-04 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\srsvc.dll

[-] 2004-08-04 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180] . . c:\windows\system32\wscntfy.exe
[-] 2004-08-04 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\wscntfy.exe

[-] 2004-08-04 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180] . . c:\windows\system32\xmlprov.dll
[-] 2004-08-04 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\xmlprov.dll

[-] 2004-08-04 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180] . . c:\windows\system32\eventlog.dll
[-] 2004-08-04 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\eventlog.dll

[-] 2004-08-04 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180] . . c:\windows\system32\sfcfiles.dll
[-] 2004-08-04 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\sfcfiles.dll

[-] 2004-08-04 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180] . . c:\windows\system32\ctfmon.exe
[-] 2004-08-04 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ctfmon.exe

[-] 2006-12-19 . 6815DEF9B810AEFAC107EEAF72DA6F82 . 134656 . . [6.00.2900.3051] . . c:\windows\system32\shsvcs.dll
[-] 2006-12-19 . 6815DEF9B810AEFAC107EEAF72DA6F82 . 134656 . . [6.00.2900.3051] . . c:\windows\system32\dllcache\shsvcs.dll
[-] 2006-12-19 . 53D9184A21C5CBF600D918E51EF3A7E5 . 135168 . . [6.00.2900.3051] . . c:\windows\$hf_mig$\KB928255\SP2QFE\shsvcs.dll
[-] 2004-08-04 . E7518DC542D3EBDCB80EDD98462C7821 . 134656 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB928255$\shsvcs.dll

[-] 2004-08-04 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180] . . c:\windows\system32\regsvc.dll
[-] 2004-08-04 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\regsvc.dll

[-] 2004-08-04 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180] . . c:\windows\system32\schedsvc.dll
[-] 2004-08-04 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\schedsvc.dll

[-] 2004-08-04 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180] . . c:\windows\system32\ssdpsrv.dll
[-] 2004-08-04 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ssdpsrv.dll

[-] 2004-08-04 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180] . . c:\windows\system32\termsrv.dll
[-] 2004-08-04 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\termsrv.dll

[-] 2004-08-04 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys

[-] 2004-08-04 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ip6fw.sys
[-] 2004-08-04 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\system32\drivers\ip6fw.sys

[-] 2006-11-01 19:17 . 925F8B61ED301A317BA850EBEECBDAA0 . 927504 . . [4.1.0.61] . . c:\windows\system32\mfc40u.dll
[-] 2006-11-01 19:17 . 925F8B61ED301A317BA850EBEECBDAA0 . 927504 . . [4.1.0.61] . . c:\windows\system32\dllcache\mfc40u.dll
[-] 2004-08-04 12:00 . DDF8D47ACF8FC3FE5F7F2B95C4D4D136 . 924432 . . [4.1.6140] . . c:\windows\$NtUninstallKB924667$\mfc40u.dll

[-] 2004-08-04 . 95FD808E4AC22ABA025A7B3EAC0375D2 . 33792 . . [5.1.2600.2180] . . c:\windows\system32\msgsvc.dll
[-] 2004-08-04 . 95FD808E4AC22ABA025A7B3EAC0375D2 . 33792 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\msgsvc.dll

[-] 2006-10-19 02:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
[-] 2006-10-19 02:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\dllcache\mspmsnsv.dll
[-] 2004-08-04 12:00 . C086483E3DBA8C1C0A687EC8D5B3D4C1 . 52224 . . [9.0.1.56] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll

[-] 2007-02-28 . 4D3DBDCCBF97F5BA1E74F322B155C3BA . 2059392 . . [5.1.2600.3093] . . c:\windows\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe
[-] 2007-02-28 . 515D30E2C90A3665A2739309334C9283 . 2057600 . . [5.1.2600.3093] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2007-02-28 . 515D30E2C90A3665A2739309334C9283 . 2057600 . . [5.1.2600.3093] . . c:\windows\system32\ntkrnlpa.exe
[-] 2007-02-28 . 515D30E2C90A3665A2739309334C9283 . 2057600 . . [5.1.2600.3093] . . c:\windows\system32\dllcache\ntkrnlpa.exe
[-] 2005-03-02 . D8ABA3EAB509627E707A3B14F00FBB6B . 2056832 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
[-] 2005-03-02 . 81013F36B21C7F72CF784CC6731E0002 . 2056832 . . [5.1.2600.2622] . . c:\windows\$NtUninstallKB931784$\ntkrnlpa.exe
[-] 2004-08-04 . 947FB1D86D14AFCFFDB54BF837EC25D0 . 2056832 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\ntkrnlpa.exe

[-] 2004-08-04 12:00 . B62F29C00AC55A761B2E45877D85EA0F . 435200 . . [5.1.2400.2180] . . c:\windows\system32\ntmssvc.dll
[-] 2004-08-04 12:00 . B62F29C00AC55A761B2E45877D85EA0F . 435200 . . [5.1.2400.2180] . . c:\windows\system32\dllcache\ntmssvc.dll

[-] 2007-02-05 . 36ACA6CDC19C95FF468A1426EB7F32F0 . 185344 . . [5.1.2600.3077] . . c:\windows\$hf_mig$\KB931261\SP2QFE\upnphost.dll
[-] 2007-02-05 . ACA5D98663D879C6BAAFCEA7E2F1B710 . 185344 . . [5.1.2600.3077] . . c:\windows\system32\upnphost.dll
[-] 2007-02-05 . ACA5D98663D879C6BAAFCEA7E2F1B710 . 185344 . . [5.1.2600.3077] . . c:\windows\system32\dllcache\upnphost.dll
[-] 2004-08-04 . 0546477BDE979E33294FE97F6B3DE84A . 185344 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB931261$\upnphost.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080]

[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2009-11-25 18:01 1230080 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-16 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2009-12-31 2033432]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Quicken Scheduled Updates.lnk - c:\program files\Quicken\bagent.exe [2004-1-28 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-12-29 19:53 12464 ----a-w- c:\windows\system32\avgrsstx.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Kodak EasyShare software.lnk
backup=c:\windows\pss\Kodak EasyShare software.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^KODAK Software Updater.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\KODAK Software Updater.lnk
backup=c:\windows\pss\KODAK Software Updater.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Service Manager.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Service Manager.lnk
backup=c:\windows\pss\Service Manager.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Updates from HP.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Updates from HP.lnk
backup=c:\windows\pss\Updates from HP.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
backup=c:\windows\pss\WinZip Quick Pick.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ymetray.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\ymetray.lnk
backup=c:\windows\pss\ymetray.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^HP_Owner^Start Menu^Programs^Startup^iWin Desktop Alerts.lnk]
path=c:\documents and settings\HP_Owner\Start Menu\Programs\Startup\iWin Desktop Alerts.lnk
backup=c:\windows\pss\iWin Desktop Alerts.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
2004-06-30 00:06 88363 ----a-w- c:\windows\AGRSMMSG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2004-08-04 12:00 15360 ----a-w- c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTSyncU.exe]
2006-09-29 00:09 700416 ------w- c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FaxCenterServer]
2007-06-11 19:28 312240 ----a-w- c:\program files\Lexmark Fax Solutions\fm3032.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHmon06]
2004-06-08 01:42 659456 ----a-w- c:\windows\system32\hphmon06.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHUPD06]
2004-06-08 01:53 49152 ----a-w- c:\program files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpsysdrv]
1998-05-07 23:04 52736 ----a-w- c:\windows\system\hpsysdrv.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2007-12-11 17:10 267048 ----a-w- c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KBD]
2003-02-12 03:02 61440 ----a-w- c:\hp\KBD\kbd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxddamon]
2007-04-30 08:19 20480 ----a-w- c:\program files\Lexmark 2500 Series\lxddamon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxddmon.exe]
2007-06-11 19:27 291760 ----a-w- c:\program files\Lexmark 2500 Series\lxddmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Messenger (Yahoo!)]
2009-11-10 20:39 5244216 ----a-w- c:\progra~1\Yahoo!\MESSEN~1\YahooMessenger.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2007-01-19 17:54 5674352 ----a-w- c:\program files\MSN Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PS2]
2002-10-16 23:57 81920 ----a-w- c:\windows\system32\ps2.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2008-03-29 03:37 413696 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Recguard]
2004-04-15 03:43 233472 ----a-w- c:\windows\SMINST\Recguard.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2007-11-16 23:35 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2004-08-12 03:52 180269 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTimer]
2004-10-22 15:53 53248 ----a-w- c:\windows\system32\VTTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zune Launcher]
2007-11-16 02:51 166304 ----a-w- c:\program files\Zune\ZuneLauncher.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Updates from HP\\309731\\Program\\Updates from HP.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Yahoo!\\Yahoo! Music Jukebox\\YahooMusicEngine.exe"=
"c:\\WINDOWS\\system32\\lxddcoms.exe"=
"c:\\Program Files\\Lexmark 2500 Series\\lxddamon.exe"=
"c:\\Program Files\\Lexmark 2500 Series\\App4R.exe"=
"c:\\Program Files\\iWin Games\\iWinGames.exe"=
"c:\\Program Files\\iWin Games\\WebUpdater.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxddjswx.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxddpswx.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxddtime.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxddwbgw.exe"=
"c:\\Program Files\\Lexmark 2500 Series\\lxddmon.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [3/25/2009 9:07 PM 333192]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [3/25/2009 9:07 PM 360584]
R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [12/29/2009 2:52 PM 285392]
R2 iWinTrusted;iWinTrusted;c:\program files\iWin Games\iWinTrusted.exe [4/27/2009 8:49 AM 78104]
R2 lxdd_device;lxdd_device;c:\windows\system32\lxddcoms.exe -service --> c:\windows\system32\lxddcoms.exe -service [?]
R2 lxddCATSCustConnectService;lxddCATSCustConnectService;c:\windows\system32\spool\drivers\w32x86\3\lxddserv.exe [5/25/2007 4:41 AM 99248]
S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe --> c:\progra~1\AVG\AVG8\avgwdsvc.exe [?]
.
Contents of the 'Scheduled Tasks' folder

2010-01-05 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]

2010-01-11 c:\windows\Tasks\Check Updates for Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2006-09-27 22:39]

2004-08-12 c:\windows\Tasks\Symantec NetDetect.job
- c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2004-08-12 08:38]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://m.www.yahoo.com/?r741=1260762668
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q404&bd=pavilion&pf=desktop
uInternet Settings,ProxyServer = http=127.0.0.1:5555
uInternet Settings,ProxyOverride = <local>
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Block this popup - c:\program files\Charter High-Speed Security Suite\Anti-Spyware\blockpopups.htm
IE: &Yahoo! Search - file:///c:\program files\Yahoo!\Common/ycsrch.htm
IE: Add To HP Organize... - c:\progra~1\HEWLET~1\HPORGA~1\bin\core.hp.main\SendTo.html
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
IE: Yahoo! &Dictionary - file:///c:\program files\Yahoo!\Common/ycdict.htm
IE: Yahoo! &Maps - file:///c:\program files\Yahoo!\Common/ycmap.htm
IE: Yahoo! &SMS - file:///c:\program files\Yahoo!\Common/ycsms.htm
Trusted Zone: turbotax.com
FF - ProfilePath - c:\documents and settings\HP_Owner\Application Data\Mozilla\Firefox\Profiles\ud51zg38.default\
FF - prefs.js: browser.startup.homepage - www.yahoo.com
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\xpavgtbapi.dll
FF - plugin: c:\program files\Java\jre1.5.0_12\bin\NPJava11.dll
FF - plugin: c:\program files\Java\jre1.5.0_12\bin\NPJava12.dll
FF - plugin: c:\program files\Java\jre1.5.0_12\bin\NPJava13.dll
FF - plugin: c:\program files\Java\jre1.5.0_12\bin\NPJava14.dll
FF - plugin: c:\program files\Java\jre1.5.0_12\bin\NPJava32.dll
FF - plugin: c:\program files\Java\jre1.5.0_12\bin\NPJPI150_12.dll
FF - plugin: c:\program files\Java\jre1.5.0_12\bin\NPOJI610.dll
FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.
- - - - ORPHANS REMOVED - - - -

MSConfigStartUp-AdobeUpdater - c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe
MSConfigStartUp-AlcxMonitor - ALCXMNTR.EXE
MSConfigStartUp-AVG8_TRAY - c:\progra~1\AVG\AVG8\avgtray.exe
MSConfigStartUp-F-Secure Manager - c:\program files\Charter High-Speed Security Suite\Common\FSM32.EXE
MSConfigStartUp-F-Secure Startup Wizard - c:\program files\Charter High-Speed Security Suite\FSGUI\FSSW.EXE
MSConfigStartUp-F-Secure TNB - c:\program files\Charter High-Speed Security Suite\TNB\TNBUtil.exe
MSConfigStartUp-IS CfgWiz - c:\program files\Common Files\Symantec Shared\cfgwiz.exe
MSConfigStartUp-News Service - c:\program files\Charter High-Speed Security Suite\FSGUI\ispnews.exe
MSConfigStartUp-poolsv - c:\windows\poolsv.exe
MSConfigStartUp-Winmplayer - c:\windows\system32\KB_963493.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-11 14:32
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x84EA9841]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf7634fc3
\Driver\ACPI -> ACPI.sys @ 0xf75a7cb8
\Driver\atapi -> atapi.sys @ 0xf755f7b4
IoDeviceObjectType -> ParseProcedure -> ntoskrnl.exe @ 0x8056f00e
\Device\Harddisk0\DR0 -> ParseProcedure -> ntoskrnl.exe @ 0x8056f00e
NDIS: VIA Rhine II Fast Ethernet Adapter -> SendCompleteHandler -> NDIS.sys @ 0xf7458ba0
PacketIndicateHandler -> NDIS.sys @ 0xf7465b21
SendHandler -> NDIS.sys @ 0xf744387b
user & kernel MBR OK

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(508)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\AVG\AVG9\avgchsvx.exe
c:\program files\AVG\AVG9\avgrsx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\windows\system32\LEXBCES.EXE
c:\windows\system32\LEXPPS.EXE
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\windows\system32\CTsvcCDA.exe
c:\windows\system32\lxddcoms.exe
c:\program files\AVG\AVG9\avgnsx.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\ZuneBusEnum.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2010-01-11 14:53:19 - machine was rebooted
ComboFix-quarantined-files.txt 2010-01-11 19:53

Pre-Run: 26,943,131,648 bytes free
Post-Run: 26,844,774,400 bytes free

- - End Of File - - 070ED366CB8F72F492A7B46D4255DD36

and from the "Catchme" file on Notepad:

File "C:\ComboFix\MT_atapi.sys.tmp" added successfully

#7 cherdeb224

Group: Member
Posts: 12
Joined: 10-January 10

Posted 11 January 2010 - 02:24 PM

problem still exists

#8 Rorschach112

Group: Retired Staff
Posts: 47,710
Joined: 23-March 07

Posted 11 January 2010 - 07:38 PM

hi

Download TFC to your desktop

Open the file and close any other windows.
It will close all programs itself when run, make sure to let it run uninterrupted.
Click the Start button to begin the process. The program should not take long to finish its job
Once its finished it should reboot your machine, if not, do this yourself to ensure a complete clean

Please download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.

Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

Go to Kaspersky website and perform an online antivirus scan.

Read through the requirements and privacy statement and click on Accept button.
It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
When the downloads have finished, click on Settings.
Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
Click on My Computer under Scan.
Once the scan is complete, it will display the results. Click on View Scan Report.
You will see a list of infected items there. Click on Save Report As....
Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button. Then post it here.

#9 cherdeb224

Group: Member
Posts: 12
Joined: 10-January 10

Posted 11 January 2010 - 10:31 PM

Malwarebytes' Anti-Malware 1.44
Database version: 3510
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

1/11/2010 11:29:55 PM
mbam-log-2010-01-11 (23-29-55).txt

Scan type: Quick Scan
Objects scanned: 168745
Time elapsed: 8 minute(s), 39 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#10 Rorschach112

Group: Retired Staff
Posts: 47,710
Joined: 23-March 07

Posted 12 January 2010 - 08:21 AM

and kaspersky

#11 cherdeb224

Group: Member
Posts: 12
Joined: 10-January 10

Posted 13 January 2010 - 05:52 PM

sorry for the delay, but Kapersky took many hours to run, and then kept crashing at about 90%, plus kept getting the debugger popup. finally got a complete scan. Here is the log:

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Wednesday, January 13, 2010
Operating system: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Wednesday, January 13, 2010 15:20:35
Records in database: 3307213
--------------------------------------------------------------------------------

Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - Folder:
C:\

Scan statistics:
Objects scanned: 183070
Threats found: 1
Infected objects found: 1
Suspicious objects found: 0
Scan duration: 07:53:05

File name / Threat / Threats count
C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\atapi.sys.vir Infected: Rootkit.Win32.TDSS.y 1

Selected area has been scanned.

Thanks!

#12 Rorschach112

Group: Retired Staff
Posts: 47,710
Joined: 23-March 07

Posted 14 January 2010 - 08:11 AM

[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

#13 cherdeb224

Group: Member
Posts: 12
Joined: 10-January 10

Posted 14 January 2010 - 09:27 AM

OTL logfile created on: 1/14/2010 9:53:05 AM - Run 2
OTL by OldTimer - Version 3.1.23.0 Folder = C:\Documents and Settings\HP_Owner\My Documents\Downloads
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

447.00 Mb Total Physical Memory | 121.00 Mb Available Physical Memory | 27.00% Memory free
1.00 Gb Paging File | 0.00 Gb Available in Paging File | 26.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 68.93 Gb Total Space | 24.76 Gb Free Space | 35.92% Space Free | Partition Type: NTFS
Drive D: | 5.58 Gb Total Space | 0.76 Gb Free Space | 13.67% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: YOUR-86339EB2BF
Current User Name: HP_Owner
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010/01/11 10:50:03 | 00,543,744 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Owner\My Documents\Downloads\OTL.exe
PRC - [2010/01/06 21:00:24 | 00,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009/12/31 09:34:42 | 02,033,432 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exe
PRC - [2009/12/29 14:52:59 | 01,055,000 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe
PRC - [2009/12/29 14:52:59 | 00,600,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exe
PRC - [2009/12/29 14:52:59 | 00,503,576 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exe
PRC - [2009/12/29 14:52:58 | 00,702,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exe
PRC - [2009/12/29 14:52:47 | 00,285,392 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe
PRC - [2009/04/27 08:49:14 | 00,078,104 | ---- | M] (iWin Inc.) -- C:\Program Files\iWin Games\iWinTrusted.exe
PRC - [2007/11/16 18:35:28 | 00,068,856 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2007/11/15 21:51:42 | 00,059,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ZuneBusEnum.exe
PRC - [2007/10/31 14:09:16 | 00,110,592 | ---- | M] (Apple, Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2007/06/13 05:23:07 | 01,033,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/05/25 04:41:53 | 00,099,248 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddserv.exe
PRC - [2007/05/25 04:41:37 | 00,537,520 | ---- | M] ( ) -- C:\WINDOWS\system32\lxddcoms.exe
PRC - [2004/12/14 03:44:30 | 00,065,536 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
PRC - [2004/08/04 07:00:00 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe
PRC - [2004/02/26 08:55:50 | 00,174,592 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\system32\LEXPPS.EXE
PRC - [2004/02/26 08:55:20 | 00,307,200 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\system32\LEXBCES.EXE
PRC - [2002/08/21 14:13:12 | 00,189,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WISPTIS.EXE
PRC - [1999/12/12 12:01:00 | 00,044,032 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\CTSVCCDA.EXE

========== Modules (SafeList) ==========

MOD - [2010/01/11 10:50:03 | 00,543,744 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Owner\My Documents\Downloads\OTL.exe
MOD - [2006/08/25 10:45:55 | 01,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (Bonjour Service)
SRV - File not found [Auto | Stopped] -- -- (avg8wd)
SRV - [2009/12/29 14:52:47 | 00,285,392 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2009/04/27 08:49:14 | 00,078,104 | ---- | M] (iWin Inc.) [Auto | Running] -- C:\Program Files\iWin Games\iWinTrusted.exe -- (iWinTrusted)
SRV - [2007/12/11 12:10:16 | 00,504,104 | ---- | M] (Apple Inc.) [On_Demand | Stopped] -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service)
SRV - [2007/11/15 21:52:24 | 02,124,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\ZuneNss.exe -- (ZuneNetworkSvc)
SRV - [2007/11/15 21:51:56 | 00,245,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\ZuneWlanCfgSvc.exe -- (ZuneWlanCfgSvc)
SRV - [2007/11/15 21:51:42 | 00,059,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\ZuneBusEnum.exe -- (ZuneBusEnum)
SRV - [2007/10/31 14:09:16 | 00,110,592 | ---- | M] (Apple, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2007/10/11 16:44:45 | 00,138,168 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
SRV - [2007/05/25 04:41:53 | 00,099,248 | ---- | M] () [Auto | Running] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxddserv.exe -- (lxddCATSCustConnectService)
SRV - [2007/05/25 04:41:37 | 00,537,520 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\lxddcoms.exe -- (lxdd_device)
SRV - [2007/01/19 12:54:14 | 00,097,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\MSN Messenger\usnsvc.exe -- (usnjsvc)
SRV - [2004/02/26 08:55:20 | 00,307,200 | ---- | M] (Lexmark International, Inc.) [Auto | Running] -- C:\WINDOWS\system32\LEXBCES.EXE -- (LexBceS)
SRV - [2003/07/28 21:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [1999/12/12 12:01:00 | 00,044,032 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\WINDOWS\system32\CTSVCCDA.EXE -- (Creative Service for CDROM Access)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://m.www.yahoo.c...r741=1260762668
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "www.yahoo.com"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.716
FF - prefs.js..extensions.enabledItems: avg@igeared:3.011.025.005

FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2009/12/29 14:52:46 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG9\Toolbar\Firefox\avg@igeared [2009/12/29 14:53:11 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/01/13 10:32:26 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/01/06 21:00:31 | 00,000,000 | ---D | M]

[2009/12/14 14:26:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\HP_Owner\Application Data\Mozilla\Extensions
[2010/01/09 13:14:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\HP_Owner\Application Data\Mozilla\Firefox\Profiles\ud51zg38.default\extensions
[2009/12/14 14:25:08 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions

O1 HOSTS File: (27 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Yahoo! IE Services Button) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_12\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL File not found
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL File not found
O3 - HKLM\..\Toolbar: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKCU\..\Toolbar\WebBrowser: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL File not found
O3 - HKCU\..\Toolbar\WebBrowser: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe (Intuit Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: &Yahoo! Search - C:\Program Files\Yahoo!\Common [2008/12/27 11:08:11 | 00,000,000 | ---D | M]
O8 - Extra context menu item: Add To HP Organize... - C:\Program Files\Hewlett-Packard\HP Organize\bin\core.hp.main\SendTo.html ()
O8 - Extra context menu item: Yahoo! &Dictionary - C:\Program Files\Yahoo!\Common [2008/12/27 11:08:11 | 00,000,000 | ---D | M]
O8 - Extra context menu item: Yahoo! &Maps - C:\Program Files\Yahoo!\Common [2008/12/27 11:08:11 | 00,000,000 | ---D | M]
O8 - Extra context menu item: Yahoo! &SMS - C:\Program Files\Yahoo!\Common [2008/12/27 11:08:11 | 00,000,000 | ---D | M]
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_12\bin\NPJPI150_12.dll (Sun Microsystems, Inc.)
O9 - Extra Button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - Reg Error: Key error. File not found
O9 - Extra 'Tools' menuitem : IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - Reg Error: Key error. File not found
O9 - Extra Button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: turbotax.com ([]https in Trusted sites)
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} http://go.microsoft....k/?linkid=58813 (Office Genuine Advantage Validation Tool)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/Facebo...toUploader5.cab (Facebook Photo Uploader 5)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\yinsthelper.dll (YInstStarter Class)
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} http://lads.myspace....ploader1006.cab (MySpace Uploader Control)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://groups.msn.co...UC/MsnPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/microsoftu...b?1182732857406 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu...b?1182732816765 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab (Java Plug-in 1.5.0_12)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash...r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} http://sc.groups.msn...eUC/MsnUpld.cab (MSN File Upload Control)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl...indows-i586.cab (Java Plug-in 1.4.2_03)
O16 - DPF: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab (Java Plug-in 1.5.0_12)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab (Java Plug-in 1.5.0_12)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/04/03 12:58:07 | 00,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

========== Files/Folders - Created Within 14 Days ==========

[2010/01/12 03:09:42 | 00,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2010/01/11 23:04:03 | 00,000,000 | -HSD | C] -- C:\RECYCLER
[2010/01/11 14:53:26 | 00,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010/01/11 13:39:40 | 00,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/01/11 13:39:40 | 00,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/01/11 13:39:40 | 00,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/01/11 13:39:40 | 00,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/01/11 13:39:02 | 00,000,000 | ---D | C] -- C:\Qoobox
[2010/01/11 13:36:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\HP_Owner\Application Data\AVG9
[2010/01/11 11:59:29 | 00,000,000 | ---D | C] -- C:\_OTL
[2010/01/10 19:05:14 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\HP_Owner\Recent
[2010/01/10 12:12:08 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/01/10 12:10:14 | 00,000,000 | ---D | C] -- C:\desktop
[2010/01/09 10:42:30 | 00,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010/01/08 18:16:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\HP_Owner\Application Data\Malwarebytes
[2010/01/08 17:46:06 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/01/08 17:46:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/01/08 17:46:02 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/01/08 17:46:01 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/01/06 12:40:25 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Palo Alto Software
[2010/01/06 12:39:19 | 00,000,000 | ---D | C] -- C:\Program Files\Quicken
[2009/12/29 14:51:44 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2009/12/29 14:51:44 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2009/12/29 14:51:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2009/12/26 22:00:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\F-Secure
[2009/12/26 10:50:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2008/09/01 20:09:38 | 00,323,584 | ---- | C] ( ) -- C:\WINDOWS\System32\LXDDhcp.dll
[2007/10/13 17:17:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2007/05/17 09:19:57 | 00,643,072 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddpmui.dll
[2007/05/17 09:17:22 | 01,232,896 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddserv.dll
[2007/05/17 09:11:47 | 00,425,984 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddcomm.dll
[2007/05/17 09:10:16 | 00,585,728 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddlmpm.dll
[2007/05/17 09:08:43 | 00,397,312 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddiesc.dll
[2007/05/17 09:07:51 | 00,094,208 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddpplc.dll
[2007/05/17 09:07:02 | 00,684,032 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddcomc.dll
[2007/05/17 09:06:32 | 00,163,840 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddprox.dll
[2007/05/17 08:59:50 | 00,413,696 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddinpa.dll
[2007/05/17 08:58:46 | 00,999,424 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddusb1.dll
[2007/05/17 08:53:19 | 00,700,416 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddhbn3.dll
[2007/01/08 08:35:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Google
[2006/08/26 06:58:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Macromedia
[2005/08/12 10:05:16 | 00,774,144 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\RngInterstitial.dll
[2004/12/17 13:22:54 | 00,036,963 | R--- | C] (Cypress Semiconductor) -- C:\Program Files\Common Files\SM1updtr.dll
[2004/12/10 13:03:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Symantec
[2 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ]

========== Files - Modified Within 14 Days ==========

[2010/01/14 09:33:00 | 00,000,362 | ---- | M] () -- C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
[2010/01/14 09:03:56 | 47,806,987 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/01/14 09:03:27 | 00,139,041 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010/01/13 19:35:12 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\prvlcl.dat
[2010/01/12 13:08:41 | 00,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010/01/11 23:05:17 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/01/11 23:05:12 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/01/11 23:04:12 | 06,778,880 | ---- | M] () -- C:\Documents and Settings\HP_Owner\ntuser.dat
[2010/01/11 23:04:12 | 00,000,278 | -HS- | M] () -- C:\Documents and Settings\HP_Owner\ntuser.ini
[2010/01/11 14:32:30 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/01/11 14:31:41 | 00,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/01/10 12:10:44 | 00,000,574 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\NTREGOPT.lnk
[2010/01/10 12:10:43 | 00,000,555 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\ERUNT.lnk
[2010/01/09 10:42:36 | 00,001,559 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\CCleaner.lnk
[2010/01/09 00:10:02 | 00,000,376 | ---- | M] () -- C:\WINDOWS\ODBC.INI
[2010/01/08 18:15:54 | 00,000,707 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/01/07 16:07:14 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/01/07 16:07:04 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/01/06 12:43:07 | 00,001,478 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Quicken 2004.lnk
[2010/01/06 12:43:07 | 00,000,910 | ---- | M] () -- C:\WINDOWS\QUICKEN.INI
[2010/01/06 12:41:09 | 00,000,686 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Quicken Scheduled Updates.lnk
[2010/01/04 22:00:07 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/01/11 13:39:40 | 00,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/01/11 13:39:40 | 00,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/01/11 13:39:40 | 00,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/01/11 13:39:40 | 00,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/01/11 13:39:40 | 00,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/01/10 12:10:44 | 00,000,574 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\NTREGOPT.lnk
[2010/01/10 12:10:43 | 00,000,555 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\ERUNT.lnk
[2010/01/09 10:42:35 | 00,001,559 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\CCleaner.lnk
[2010/01/08 17:46:10 | 00,000,707 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/01/06 12:41:59 | 00,000,910 | ---- | C] () -- C:\WINDOWS\QUICKEN.INI
[2010/01/06 12:41:09 | 00,000,686 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Quicken Scheduled Updates.lnk
[2010/01/06 12:41:08 | 00,001,478 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Quicken 2004.lnk
[2009/12/29 15:34:28 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\prvlcl.dat
[2009/12/26 10:38:40 | 00,000,036 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\housecall.guid.cache
[2008/09/01 20:13:17 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMON.DLL
[2008/09/01 20:13:17 | 00,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXF3FXPU.DLL
[2008/09/01 20:13:16 | 00,036,864 | ---- | C] () -- C:\WINDOWS\System32\lxf3oem.dll
[2008/09/01 20:13:16 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMRC.DLL
[2008/09/01 20:10:47 | 00,000,044 | ---- | C] () -- C:\WINDOWS\System32\lxddrwrd.ini
[2008/09/01 20:09:38 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\LXDDinst.dll
[2008/09/01 20:08:15 | 00,344,064 | R--- | C] () -- C:\WINDOWS\System32\lxddcoin.dll
[2008/03/24 18:50:08 | 00,038,474 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Application Data\Comma Separated Values (Windows).ADR
[2008/01/19 17:17:55 | 00,002,016 | ---- | C] () -- C:\WINDOWS\Stella.ini
[2008/01/17 08:51:19 | 00,000,053 | ---- | C] () -- C:\WINDOWS\TassWin.INI
[2008/01/17 08:44:42 | 00,149,504 | ---- | C] () -- C:\WINDOWS\System32\CETNUASM.DLL
[2008/01/17 08:44:39 | 00,766,026 | ---- | C] () -- C:\WINDOWS\System32\ActiveTerra2.dll
[2007/10/09 20:32:51 | 00,000,021 | ---- | C] () -- C:\WINDOWS\atid.ini
[2007/07/10 12:17:54 | 00,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2007/05/23 23:04:56 | 00,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxddgrd.dll
[2007/05/13 20:40:01 | 00,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2007/05/13 20:40:01 | 00,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2007/05/13 20:40:01 | 00,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2007/04/03 13:00:36 | 00,000,131 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\fusioncache.dat
[2007/04/03 12:56:07 | 00,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2007/04/03 12:56:06 | 00,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2007/04/03 12:56:06 | 00,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2007/04/03 12:56:06 | 00,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2007/04/03 12:56:06 | 00,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2007/04/03 12:56:06 | 00,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2007/03/17 16:26:08 | 00,000,075 | ---- | C] () -- C:\WINDOWS\iltwain.ini
[2007/03/05 12:34:28 | 00,676,224 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.DLL
[2006/05/17 21:47:12 | 00,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxddvs.dll
[2006/04/02 18:22:07 | 00,000,000 | ---- | C] () -- C:\WINDOWS\ATIMMC.INI
[2006/01/19 18:15:21 | 00,003,407 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2005/09/24 16:15:40 | 00,000,000 | ---- | C] () -- C:\WINDOWS\PictConv.INI
[2005/08/03 10:14:38 | 00,000,074 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2005/07/16 09:54:25 | 00,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini
[2005/05/07 13:49:23 | 00,001,611 | ---- | C] () -- C:\WINDOWS\yahtzee.ini
[2005/04/29 11:12:30 | 00,003,012 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2005/04/03 13:43:15 | 00,000,082 | ---- | C] () -- C:\WINDOWS\MPLAYER.INI
[2005/01/28 17:24:59 | 00,000,692 | ---- | C] () -- C:\WINDOWS\hegames.ini
[2005/01/21 18:59:18 | 00,000,048 | ---- | C] () -- C:\WINDOWS\PerWin.ini
[2005/01/14 11:22:58 | 00,000,755 | ---- | C] () -- C:\WINDOWS\pi2000.ini
[2005/01/14 11:22:58 | 00,000,053 | ---- | C] () -- C:\WINDOWS\photoprn.ini
[2005/01/03 21:00:17 | 00,000,289 | ---- | C] () -- C:\WINDOWS\muveeapp.INI
[2004/12/18 11:03:51 | 00,000,000 | ---- | C] () -- C:\WINDOWS\Setup32.INI
[2004/12/10 23:53:52 | 00,044,544 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2004/12/10 13:09:47 | 00,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2004/12/10 12:34:45 | 00,000,510 | ---- | C] () -- C:\WINDOWS\LEXSTAT.INI
[2004/09/17 16:37:42 | 00,061,440 | ---- | C] () -- C:\WINDOWS\System32\vuins32.dll
[2004/08/18 18:10:11 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2004/08/12 01:30:03 | 00,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004/08/11 23:21:02 | 00,167,936 | ---- | C] () -- C:\WINDOWS\System32\PCDrJNI_1_1.dll
[2004/08/11 23:14:51 | 00,026,941 | ---- | C] () -- C:\WINDOWS\System32\CHODDI.SYS
[2004/08/11 23:14:13 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll
[2004/08/11 23:05:12 | 00,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2004/08/11 22:20:19 | 00,001,410 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2004/08/11 22:14:18 | 00,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2004/08/11 21:25:38 | 00,299,073 | ---- | C] () -- C:\WINDOWS\System32\PythonCOM22.dll
[2004/08/11 21:25:38 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\PyWinTypes22.dll
[2004/08/11 21:25:16 | 00,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll
[2004/08/11 20:16:20 | 00,000,802 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/08/11 20:00:08 | 00,000,549 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2004/06/29 07:58:50 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2003/09/17 09:12:00 | 00,540,672 | ---- | C] () -- C:\WINDOWS\System32\TX32.DLL
[2003/03/07 00:53:16 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\hpnvr82.dll
[2003/01/08 00:05:08 | 00,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002/09/17 15:46:30 | 00,229,376 | ---- | C] () -- C:\WINDOWS\System32\ISP2000.dll
[1997/09/12 15:41:00 | 00,063,488 | ---- | C] () -- C:\WINDOWS\System32\Eztw32.dll

========== LOP Check ==========

[2010/01/01 10:52:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2010/01/13 03:01:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9
[2009/12/29 14:03:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\F-Secure
[2009/12/26 21:51:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\fssg
[2008/09/13 20:41:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\iWin Games
[2005/01/01 18:55:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\muvee Technologies
[2005/01/03 18:04:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Napster
[2004/12/17 13:54:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nova Development
[2004/12/15 17:19:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PopCap
[2010/01/09 10:46:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2007/09/11 08:55:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WinZip
[2008/03/16 18:35:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Yahoo
[2010/01/14 09:33:00 | 00,000,362 | ---- | M] () -- C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job

========== Purity Check ==========

< End of report >

#14 Rorschach112

Group: Retired Staff
Posts: 47,710
Joined: 23-March 07

Posted 14 January 2010 - 05:28 PM

Your logs are clean

Follow these steps to uninstall Combofix and tools used in the removal of malware

Uninstall ComboFix

Remove Combofix now that we're done with it.

Please press the Windows Key and R on your keyboard. This will bring up the Run... command.
Now type in Combofix /Uninstall in the runbox and click OK. (Notice the space between the "x" and "/")
Please follow the prompts to uninstall Combofix.
You will then recieve a message saying Combofix was uninstalled successfully once it's done uninstalling itself.

Download OTC to your desktop and run it
Click Yes to beginning the Cleanup process and remove these components, including this application.
You will be asked to reboot the machine to finish the Cleanup process. Choose Yes.

Below I have included a number of recommendations for how to protect your computer against malware infections.

Keep Windows updated by regularly checking their website at :
http://windowsupdate.microsoft.com/
This will ensure your computer has always the latest security updates available installed on your computer.
SpywareBlaster protects against bad ActiveX, it immunizes your PC against them.
SpywareGuard offers realtime protection from spyware installation attempts. Make sure you are only running one real-time anti-spyware protection program ( eg : TeaTimer, Windows Defender ) or there will be a conflict.
Make Internet Explorer more secure
- Click Start > Run
- Type Inetcpl.cpl & click OK
- Click on the Security tab
- Click Reset all zones to default level
- Make sure the Internet Zone is selected & Click Custom level
- In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
- Next Click OK, then Apply button and then OK to exit the Internet Properties page.
TFC - Cleans temporary files from IE and Windows, empties the recycle bin and more. Great tool to help speed up your computer and knock out those nasties that like to reside in the temp folders.
MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.
Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more
secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in pop up
blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from
Here

If you choose to use Firefox, I highly recommend these add-ons to keep your PC even more secure.
- NoScript - for blocking ads and other potential website attacks
- McAfee SiteAdvisor - this tells you whether the sites you are about to visit are safe or not. A must if you do a lot of Googling
Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.
ERUNT (Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.
FileHippo Update Checker is an extremely helpful program that will tell you which of your programs need to be updated. Its important to keep programs up to date so that malware doesn't exploit any old security flaws.
Recovery Console - Recent trends appear to indicate that future infections will include attacks to the boot sector of the computer. The installation of the Recovery Console in the computer will be our only defense against this threat. For more information and steps to install the Recovery Console see This Article. Should you need assistance in installing the Recovery Console, please do not hesitate to ask.
Please read my guide on how to prevent malware and about safe computing here

Thank you for your patience, and performing all of the procedures requested.

#15 cherdeb224

Group: Member
Posts: 12
Joined: 10-January 10

Posted 14 January 2010 - 07:02 PM

I followed all steps, rebooted, added some of the recommended add-ons, and rebooted again. Guess what...search engine is still be redirected. I tried Google, Yahoo and Bing..it occurred on all three. Any other suggestions?

Back to Virus, Spyware, Malware Removal

Share this topic:

2 Pages
1
2
→

Please log in to reply

Search Engine Redirect Virus [Solved] - Geeks to Go Forums