[mytool1985]

hey there,

Sooo these popups are still appearing regardless of wheter or not my browser is open. I've already taken the steps specified when I signed up. Sadley it hasn't solved my problem. The majority of the pop ups say "adyeildmanager" at the top of the window, but some are random casino or anit virus ads. I've attached my Hi jack this log. I really have no clue if these are related? I'm completely clueless about what to do next.
pleaaaaase help me out here.

Thanks


Logfile of HijackThis v1.99.1
Scan saved at 3:08:57 AM, on 9/15/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\WINDOWS\GWMDMMSG.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\d?dplay.exe
C:\Program Files\acai\weaa.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\crypserv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimt.../aimtoolbar.jsp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://rd.yahoo.com/...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bestbuy.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://channels.aimt.../aimtoolbar.jsp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://rd.yahoo.com/...//www.yahoo.com
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\YAHOO!\COMPAN~1\INSTALLS\cpn\ycomp5_3_12_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5468E69A-5955-7388-28A5-54879BD6B99D} - blank (file missing)
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O2 - BHO: (no name) - {C85508E6-EF08-CCD1-7454-CE0982162397} - C:\WINDOWS\system32\uhijhoqh.dll (file missing)
O2 - BHO: (no name) - {CBC7D558-61C8-4A15-B03C-3D01339F2FC1} - C:\WINDOWS\system32\isds.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\YAHOO!\COMPAN~1\INSTALLS\cpn\ycomp5_3_12_0.dll
O3 - Toolbar: (no name) - {4CD70316-AB1F-4DBD-917A-4C227E7AA4C5} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O3 - Toolbar: (no name) - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [GWMDMMSG] GWMDMMSG.exe
O4 - HKLM\..\Run: [GWMDMpi] C:\WINDOWS\GWMDMpi.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKCU\..\Run: [pstorec] C:\WINDOWS\System32\pstorec.exe
O4 - HKCU\..\Run: [Oqosb] C:\WINDOWS\system32\d?dplay.exe
O4 - HKCU\..\Run: [196_150_ni] C:\WINDOWS\System32\196_150_ni.exe
O4 - HKCU\..\Run: [Rcsh] C:\Program Files\acai\weaa.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.bestbuy.msn.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akama...meInstaller.exe
O16 - DPF: {F919FBD3-A96B-4679-AF26-F551439BB5FD} - http://winfixer.com/...scanner/WFI.cab
O20 - Winlogon Notify: tapiexec - tapiexec.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

[Advertisements]

Please print out these instructions or copy them into a text file on your Desktop for easy access.

During the fix, u will be asked to fix some entries, delete some files or uninstall some programs. If in case, you do not see those entries / files / programs, please make a note of it. Continue with the fix and in your next post please inform me of all deviations from the fix prescribed.

1. Download Programs

Please download these programs and save them in a new folder on your desktop -

CleanUp
Ewido Security Suite

Install Ewido, and update the definitions to the newest files. Do NOT run a scan yet.


2. Run Hijack This

Run Hijack This and click on scan. The following items need to be fixed -

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://rd.yahoo.com/...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://rd.yahoo.com/...//www.yahoo.com
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {5468E69A-5955-7388-28A5-54879BD6B99D} - blank (file missing)
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {C85508E6-EF08-CCD1-7454-CE0982162397} - C:\WINDOWS\system32\uhijhoqh.dll (file missing)
O2 - BHO: (no name) - {CBC7D558-61C8-4A15-B03C-3D01339F2FC1} - C:\WINDOWS\system32\isds.dll
O3 - Toolbar: (no name) - {4CD70316-AB1F-4DBD-917A-4C227E7AA4C5} - (no file)
O3 - Toolbar: (no name) - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - (no file)
O4 - HKCU\..\Run: [pstorec] C:\WINDOWS\System32\pstorec.exe
O4 - HKCU\..\Run: [Oqosb] C:\WINDOWS\system32\d?dplay.exe
O4 - HKCU\..\Run: [196_150_ni] C:\WINDOWS\System32\196_150_ni.exe
O4 - HKCU\..\Run: [Rcsh] C:\Program Files\acai\weaa.exe
O16 - DPF: {F919FBD3-A96B-4679-AF26-F551439BB5FD} - http://winfixer.com/...scanner/WFI.cab

Close all windows other than Hijack This. Check the boxes next to above items and click on Fix checked.

Restart the PC in Safe Mode (repeatedly tap the F8 key when the PC is starting up).

3. Delete Rogue files

Run CleanUp and delete all temp files including temporary internet files

Run Ewido full scan. Let it fix any items it finds.

Open Windows Explorer (right click on Start and then click on explore). Locate and delete the following folders and files -

Folders
C:\Program Files\acai

Files
C:\WINDOWS\system32\isds.dll
C:\WINDOWS\System32\pstorec.exe
C:\WINDOWS\System32\196_150_ni.exe

C:\WINDOWS\system32\d?dplay.exe
(Search for this file using the Windows Search function). Please donot delete the file dvdplay.exe. In case you find multiple instances of this name, then please make a note of the respective file sizes and the dates of creation of the files and let me know in your next reply.


Reboot the PC in Normal Mode.

Run Hijack This and post a fresh HJT log along with Ewido scan report.

[tampabelle]

Please print out these instructions or copy them into a text file on your Desktop for easy access.

During the fix, u will be asked to fix some entries, delete some files or uninstall some programs. If in case, you do not see those entries / files / programs, please make a note of it. Continue with the fix and in your next post please inform me of all deviations from the fix prescribed.

1. Download Programs

Please download these programs and save them in a new folder on your desktop -

CleanUp
Ewido Security Suite

Install Ewido, and update the definitions to the newest files. Do NOT run a scan yet.


2. Run Hijack This

Run Hijack This and click on scan. The following items need to be fixed -

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://rd.yahoo.com/...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://rd.yahoo.com/...//www.yahoo.com
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {5468E69A-5955-7388-28A5-54879BD6B99D} - blank (file missing)
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {C85508E6-EF08-CCD1-7454-CE0982162397} - C:\WINDOWS\system32\uhijhoqh.dll (file missing)
O2 - BHO: (no name) - {CBC7D558-61C8-4A15-B03C-3D01339F2FC1} - C:\WINDOWS\system32\isds.dll
O3 - Toolbar: (no name) - {4CD70316-AB1F-4DBD-917A-4C227E7AA4C5} - (no file)
O3 - Toolbar: (no name) - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - (no file)
O4 - HKCU\..\Run: [pstorec] C:\WINDOWS\System32\pstorec.exe
O4 - HKCU\..\Run: [Oqosb] C:\WINDOWS\system32\d?dplay.exe
O4 - HKCU\..\Run: [196_150_ni] C:\WINDOWS\System32\196_150_ni.exe
O4 - HKCU\..\Run: [Rcsh] C:\Program Files\acai\weaa.exe
O16 - DPF: {F919FBD3-A96B-4679-AF26-F551439BB5FD} - http://winfixer.com/...scanner/WFI.cab

Close all windows other than Hijack This. Check the boxes next to above items and click on Fix checked.

Restart the PC in Safe Mode (repeatedly tap the F8 key when the PC is starting up).

3. Delete Rogue files

Run CleanUp and delete all temp files including temporary internet files

Run Ewido full scan. Let it fix any items it finds.

Open Windows Explorer (right click on Start and then click on explore). Locate and delete the following folders and files -

Folders
C:\Program Files\acai

Files
C:\WINDOWS\system32\isds.dll
C:\WINDOWS\System32\pstorec.exe
C:\WINDOWS\System32\196_150_ni.exe

C:\WINDOWS\system32\d?dplay.exe
(Search for this file using the Windows Search function). Please donot delete the file dvdplay.exe. In case you find multiple instances of this name, then please make a note of the respective file sizes and the dates of creation of the files and let me know in your next reply.


Reboot the PC in Normal Mode.

Run Hijack This and post a fresh HJT log along with Ewido scan report.

[tampabelle]

BTW,

you have a "Keylogger" on your PC. So dont access your bank account thru this PC or do any online shopping where you give critical details of your bank account or credit / debit cards.

Please make sure that there are everything is ok in these accounts. In case of any problem, please bring it to the notice of the concerned people.

[mytool1985]

Heya,

Thanks for the reply! I did have to deviate from the fix a bit. I had already ran ewido and clean up after the initial hijackthis log I posted. I tried to post a new one but I ended up bumping and posting the SAME log as before. Sorry about that
So none of the files you specified were there. The folder was there and taken care of. The win32 file d?dplayer.exe wasn't anywhere to be found either. The ewido scan was clean i'm assuming because I ran it yesterday... ALTHOUGH! I'm happy to report I have YET to see an adyieldmanager pop up OR winfixer pop up since the fix! I don't know much about "keyloggers" so i'll just ask, is there any way to disable it or delete it? Doesn't sound like something I'd want on my computer.
Heres my new HJT log, hope its looking a little better. Again, THANKS SoOoOoOOoOO MUCh for tha help your awesome!

Logfile of HijackThis v1.99.1
Scan saved at 11:23:56 AM, on 9/21/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\WINDOWS\GWMDMMSG.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimt.../aimtoolbar.jsp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bestbuy.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://channels.aimt.../aimtoolbar.jsp
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\YAHOO!\COMPAN~1\INSTALLS\cpn\ycomp5_3_12_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\YAHOO!\COMPAN~1\INSTALLS\cpn\ycomp5_3_12_0.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [GWMDMMSG] GWMDMMSG.exe
O4 - HKLM\..\Run: [GWMDMpi] C:\WINDOWS\GWMDMpi.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.bestbuy.msn.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akama...meInstaller.exe
O20 - Winlogon Notify: tapiexec - tapiexec.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

[tampabelle]

lease RIGHT-CLICK HERE to download Silent Runner's.

• Save it to the desktop.
• Run Silent Runner's by doubleclicking the "Silent Runners" icon on your desktop.
• You will see a text file appear on the desktop - it's not done, let it run (it won't appear to be doing anything!)
• Once you receive the prompt All Done!, open the text file on the desktop, copy that entire log, and paste it here.

*NOTE* If you receive any warning message about scripts, please choose to allow the script to run.


Also download RootKitRevealer from here:
http://www.sysintern...kitrevealer.zip
Unzip it to the desktop, run it, and click Scan. This will generate a log file; please post the entire contents of the log file here for me to see.

[mytool1985]

The whole rootkitreveal log doesn't fit copy pasted OR attched. Heres the Silent runner log though.


"Silent Runners.vbs", revision 40.1, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"(Default)" = (empty string)
"NvMediaCenter" = "RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit" [MS]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"zBrowser Launcher" = "C:\Program Files\Logitech\iTouch\iTouch.exe" ["Logitech Inc. "]
"EM_EXEC" = "C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE" ["Logitech Inc. "]
"GWMDMMSG" = "GWMDMMSG.exe" ["GTW"]
"GWMDMpi" = "C:\WINDOWS\GWMDMpi.exe" [null data]
"QuickTime Task" = ""C:\Program Files\QuickTime\qttask.exe" -atboottime" ["Apple Computer, Inc."]
"Memory Check" = (value not set)
"TkBellExe" = ""C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot" ["RealNetworks, Inc."]
"AVG7_CC" = "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP" ["GRISOFT, s.r.o."]
"AVG7_EMC" = "C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe" ["GRISOFT, s.r.o."]
"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS]
"nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{02478D38-C3F9-4efb-9B51-7695ECA05670}\(Default) = "Yahoo! Companion BHO" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\YAHOO!\COMPAN~1\INSTALLS\cpn\ycomp5_3_12_0.dll" ["Yahoo! Inc."]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]
{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\SPYBOT~1\SDHelper.dll" ["Safer Networking Limited"]
{9394EDE7-C8B5-483E-8773-474BF36AF6E4}\(Default) = "ST" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll" [MS]
{AA58ED58-01DD-4d91-8333-CF10577473F7}\(Default) = "Google Toolbar Helper" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "c:\program files\google\googletoolbar1.dll" ["Google Inc."]
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}\(Default) = "MSNToolBandBHO" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "HyperTerminal Icon Ext"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]
"{5464D816-CF16-4784-B9F3-75C0DB52B499}" = "Yahoo! Mail"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\YAHOO!\COMMON\ymmapi.dll" ["Yahoo! Inc."]
"{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}" = "Shell Extensions for RealOne Player"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Real\RealPlayer\rpshell.dll" ["RealNetworks, Inc."]
"{640167b4-59b0-47a6-b335-a6b3c0695aea}" = "Portable Media Devices"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS]
"{cc86590a-b60a-48e6-996b-41d25ed39a1e}" = "Portable Media Devices Menu"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS]
"{8FF88D21-7BD0-11D1-BFB7-00AA00262A11}" = "WinAce Archiver 2.5 Context Menu Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinAce\arcext.dll" ["e-merge GmbH"]
"{8FF88D25-7BD0-11D1-BFB7-00AA00262A11}" = "WinAce Archiver 2.5 DragDrop Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinAce\arcext.dll" ["e-merge GmbH"]
"{8FF88D27-7BD0-11D1-BFB7-00AA00262A11}" = "WinAce Archiver 2.5 Context Menu Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinAce\arcext.dll" ["e-merge GmbH"]
"{8FF88D23-7BD0-11D1-BFB7-00AA00262A11}" = "WinAce Archiver 2.5 Property Sheet Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinAce\arcext.dll" ["e-merge GmbH"]
"{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}" = "AVG7 Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Free\avgse.dll" ["GRISOFT, s.r.o."]
"{9F97547E-460A-42C5-AE0C-81C61FFAEBC3}" = "AVG7 Find Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Free\avgse.dll" ["GRISOFT, s.r.o."]
"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\
INFECTION WARNING! "{54D9498B-CF93-414F-8984-8CE7FDE0D391}" = "ewido shell guard"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido\security suite\shellhook.dll" ["TODO: <Firmenname>"]

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\
"AppInit_DLLs" = (value not set)

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
INFECTION WARNING! tapiexec\DLLName = "tapiexec.dll" [file not found]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
AVG7 Shell Extension\(Default) = "{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Free\avgse.dll" ["GRISOFT, s.r.o."]
Yahoo! Mail\(Default) = "{5464D816-CF16-4784-B9F3-75C0DB52B499}"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\YAHOO!\COMMON\ymmapi.dll" ["Yahoo! Inc."]
ZFAdd\(Default) = "{8FF88D27-7BD0-11D1-BFB7-00AA00262A11}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinAce\arcext.dll" ["e-merge GmbH"]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
ZFAdd\(Default) = "{8FF88D27-7BD0-11D1-BFB7-00AA00262A11}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinAce\arcext.dll" ["e-merge GmbH"]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
AVG7 Shell Extension\(Default) = "{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Free\avgse.dll" ["GRISOFT, s.r.o."]


Active Desktop and Wallpaper:
-----------------------------

Active Desktop is enabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Wallpaper1.bmp"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\

HKCU\Software\Microsoft\Internet Explorer\Desktop\Components\0\
"SCRNSAVE.EXE" = "C:\WINDOWS\System32\ssbezier.scr" [MS]


Enabled Scheduled Tasks:
------------------------

"Symantec NetDetect" -> launches: "C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE" ["Symantec Corporation"]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 15
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Toolbars

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" = "&Yahoo! Companion" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\YAHOO!\COMPAN~1\INSTALLS\cpn\ycomp5_3_12_0.dll" ["Yahoo! Inc."]

"{22BF0C20-6DA7-11D0-B373-00A0C9034938}" = "Download Status" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\browseui.dll" [MS]

"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}" = "MSN" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll" [MS]

"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" = "&Google" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "c:\program files\google\googletoolbar1.dll" ["Google Inc."]

HKLM\Software\Microsoft\Internet Explorer\Toolbar\
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" = "&Yahoo! Companion" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\YAHOO!\COMPAN~1\INSTALLS\cpn\ycomp5_3_12_0.dll" ["Yahoo! Inc."]

"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}" = "0"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll" [MS]

"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" = "&Google" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "c:\program files\google\googletoolbar1.dll" ["Google Inc."]

Explorer Bars

HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\
{4528BBE0-4E08-11D5-AD55-00010333D0AD}\ = "&Yahoo! Messenger" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll" ["Yahoo! Inc."]

HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\
{4528BBE0-4E08-11D5-AD55-00010333D0AD}\ = "&Yahoo! Messenger" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll" ["Yahoo! Inc."]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{4528BBE0-4E08-11D5-AD55-00010333D0AD}\
"ButtonText" = "Messenger"
"MenuText" = "Yahoo! Messenger"
"CLSIDExtension" = "{4C171D40-8277-11D5-AD55-00010333D0AD}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll" ["Yahoo! Inc."]

{AC9E2541-2814-11D5-BC6D-00B0D0A1DE45}\
"ButtonText" = "AIM"
"Exec" = "C:\Program Files\AIM95\aim.exe" ["America Online, Inc."]

{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Miscellaneous IE Hijack Points
------------------------------

C:\WINDOWS\INF\IERESET.INF (used to "Reset Web Settings")

Added lines (compared with English-language version):
[Strings]: START_PAGE_URL=http://www.bestbuy.msn.com

Missing lines (compared with English-language version):
[Strings]: 1 line

HKLM\Software\Microsoft\Internet Explorer\AboutURLs\
HIJACK WARNING! "TuneUp" = "file://C|/Documents and Settings/All Users/Application Data/TuneUp Software/Common/base.css" [file not found]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

AVG7 Alert Manager Server, Avg7Alrt, "C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe" ["GRISOFT, s.r.o."]
AVG7 Update Service, Avg7UpdSvc, "C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe" ["GRISOFT, s.r.o."]
C-DillaCdaC11BA, C-DillaCdaC11BA, "C:\WINDOWS\System32\drivers\CDAC11BA.EXE" ["Macrovision"]
Crypkey License, Crypkey License, "crypserv.exe" ["Kenonic Controls Ltd."]
ewido security suite control, ewido security suite control, "C:\Program Files\ewido\security suite\ewidoctrl.exe" ["ewido networks"]
NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\system32\nvsvc32.exe" ["NVIDIA Corporation"]
Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\system32\wdfmgr.exe" [MS]


Keyboard Driver Filters:
------------------------

HKLM\System\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}\
"UpperFilters" = INFECTION WARNING! "Lkbdflt2" ["Logitech"]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ To search all directories of local fixed drives for DESKTOP.INI
DLL launch points and all Registry CLSIDs for dormant Explorer Bars,
use the -supp parameter or answer "No" at the first message box.
---------- (total run time: 50 seconds, including 18 seconds for message boxes)

Edited by mytool1985, 21 September 2005 - 12:17 PM.

[tampabelle]

Hi,

Can you post the rootkitrevealer log also please ??

[mytool1985]

SOFTWARE 0 bytes Error dumping hive: Internal error.
HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_IPNEMES 9/1/2005 8:06 AM 0 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet001\Services\IpNemes 9/21/2005 10:53 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx 9/1/2005 8:06 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\ACE.DLL 9/1/2005 8:06 AM 568.00 KB Hidden from Windows API.
C:\Program Files\Javrectx\AI_15-09-2005.log 9/15/2005 1:18 AM 3 bytes Hidden from Windows API.
C:\Program Files\Javrectx\AI_16-09-2005.log 9/17/2005 5:15 AM 3 bytes Hidden from Windows API.
C:\Program Files\Javrectx\AI_17-09-2005.log 9/17/2005 2:28 PM 3 bytes Hidden from Windows API.
C:\Program Files\Javrectx\AI_18-09-2005.log 9/19/2005 4:15 AM 3 bytes Hidden from Windows API.
C:\Program Files\Javrectx\AI_19-09-2005.log 9/19/2005 11:08 PM 3 bytes Hidden from Windows API.
C:\Program Files\Javrectx\AI_20-09-2005.log 9/20/2005 9:17 AM 3 bytes Hidden from Windows API.
C:\Program Files\Javrectx\AI_21-09-2005.log 9/21/2005 10:52 AM 3 bytes Hidden from Windows API.
C:\Program Files\Javrectx\ATL.DLL 9/1/2005 8:06 AM 73.06 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache 9/1/2005 8:06 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000001c_4324484f_00088045 9/11/2005 10:12 AM 43.77 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000001c_432ed179_00031975 9/19/2005 9:55 AM 842 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000001c_432efe9c_0002dc6c 9/19/2005 1:08 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_43170685_0006acfc 9/21/2005 10:54 AM 30.80 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_4317af17_00016e36 9/1/2005 8:47 PM 3.98 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_4317c965_000c65d4 9/1/2005 10:39 PM 14.50 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_4318d096_00057bcf 9/3/2005 12:45 PM 5 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_4318d238_000aba95 9/2/2005 5:29 PM 370 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_43195ecc_000dd40a 9/3/2005 3:29 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_4319cbca_00039387 9/3/2005 11:14 AM 5 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_4319e14c_000e1113 9/3/2005 12:45 PM 370 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_431a1faf_00053ec6 9/3/2005 5:12 PM 410 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_431b71bf_00016e36 9/4/2005 5:14 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_431cc7c4_0008d24d 9/5/2005 5:33 PM 370 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_431cd7d3_0006ea05 9/5/2005 6:42 PM 370 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_431ce352_000e1113 9/5/2005 7:31 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_431e46ce_00007a12 9/6/2005 8:48 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_4320cc8c_0007c92a 9/8/2005 6:43 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_432266d7_0000df25 9/9/2005 11:53 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_43280fdc_000472ac 9/14/2005 6:56 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_4328fd7d_00070347 9/14/2005 11:50 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_432912b0_000e1113 9/15/2005 1:20 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_4329136f_0004c4b4 9/15/2005 1:23 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_432919ba_0005b8d8 9/15/2005 1:50 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_4329290d_0000f424 9/15/2005 2:55 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_43297307_0003567e 9/15/2005 8:11 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_432979cc_0007de29 9/15/2005 8:40 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_43297b87_0008583b 9/15/2005 8:47 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_43297c31_000d59f8 9/16/2005 4:46 PM 5 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_43297c78_0004c4b4 9/15/2005 8:51 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_432c6e9b_000487ab 9/17/2005 2:29 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_43301a16_000e4e1c 9/20/2005 9:18 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_43301ccb_00094c5f 9/20/2005 9:29 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_43304ebd_000b34a7 9/20/2005 1:02 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_4331823c_000ca2dd 9/21/2005 10:54 AM 14.63 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_4331867d_00098968 9/21/2005 11:12 AM 7.16 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000029_43318d25_00016e36 9/21/2005 11:41 AM 7.15 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000035_431acf4e_000e4e1c 9/19/2005 10:44 PM 37.00 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000035_431dc761_00057bcf 9/6/2005 11:44 AM 21.89 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000035_431e543a_0009c671 9/6/2005 9:45 PM 20.59 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000035_43217199_000d44f9 9/9/2005 6:27 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000035_43293851_00066ff3 9/15/2005 4:01 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000035_432a268d_000e4e1c 9/15/2005 8:57 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000035_432c9d11_000e1113 9/19/2005 7:26 PM 20.93 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000035_43302d44_0001312d 9/20/2005 10:49 AM 406 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000035_4330bba3_000ca2dd 9/20/2005 8:49 PM 831 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000003a_432efd6d_000632ea 9/19/2005 1:03 PM 6.07 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000049_4325de2f_00021052 9/12/2005 2:59 PM 39.81 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000007b_432b0322_00053ec6 9/16/2005 12:38 PM 1.11 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000007b_432ca8ea_0000b71b 9/17/2005 6:38 PM 6 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000008c_432402a9_000ccae7 9/11/2005 5:10 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000008e_43240206_000a688d 9/11/2005 5:08 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000008e_432ac113_000a7d8c 9/16/2005 7:56 AM 345 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000094_43244612_000c13cc 9/11/2005 9:58 AM 5.91 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000094_432efc4e_000a037a 9/19/2005 12:58 PM 1 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_4317b187_00016e36 9/1/2005 8:57 PM 15.50 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_431875de_000dd40a 9/2/2005 10:55 AM 942 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_4319cc54_0008583b 9/3/2005 11:16 AM 7.40 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_431a8f83_00094c5f 9/4/2005 1:09 AM 3.00 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_431b83fb_0000b71b 9/4/2005 6:32 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_431cfdaa_00090f56 9/19/2005 5:47 PM 20.89 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_431e4eba_0003567e 9/6/2005 9:21 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_4320f477_00074f18 9/8/2005 9:33 PM 3.53 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_43238086_0005a3d9 9/10/2005 7:55 PM 762 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_43282a81_0009c671 9/14/2005 8:49 AM 24.56 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_43290bdf_00074050 9/15/2005 12:51 AM 72.26 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_432916a2_000b34a7 9/15/2005 1:37 AM 262 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_43291d77_0007270e 9/15/2005 2:06 AM 4.98 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_43292a4a_00016e36 9/15/2005 3:01 AM 21.24 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_432978c2_0005f5e1 9/15/2005 8:42 AM 22.88 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_432c6f43_000a037a 9/17/2005 2:32 PM 435 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_43301b5c_000e4e1c 9/20/2005 9:23 AM 4.32 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_43301eca_00057bcf 9/20/2005 9:38 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000099_4330614f_0008583b 9/20/2005 2:21 PM 1.78 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000009f_4325de71_00080633 9/12/2005 3:00 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000000aa_432605e2_000d8202 9/14/2005 8:49 AM 5.26 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000000bd_4325dc7a_000bd6c3 9/12/2005 2:52 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000000c1_431fb903_0006d584 9/7/2005 11:07 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000000c1_432843a2_00007a12 9/14/2005 10:37 AM 44.86 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000000c1_43294ca5_0007270e 9/15/2005 5:27 AM 2.08 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000000c1_432aba55_000aba95 9/16/2005 7:28 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000000c1_432ca2ae_000a037a 9/17/2005 6:11 PM 712 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000000e5_43251b15_000697fd 9/12/2005 1:07 AM 14.74 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000000eb_432ac12f_0006acfc 9/16/2005 7:57 AM 16.54 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000000eb_432ca771_0001ab3f 9/17/2005 6:32 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000000ec_4325fd2a_0008fa57 9/14/2005 9:11 AM 767 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000000f8_432eff41_000baeb9 9/19/2005 1:11 PM 1 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_4317b682_00040d99 9/17/2005 6:21 PM 345 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_4317f0f0_0003d090 9/2/2005 1:28 AM 545 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_431942bd_00040d99 9/3/2005 1:29 AM 5 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_431a910b_000af79e 9/4/2005 1:15 AM 534 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_431b8695_00022551 9/4/2005 6:43 PM 1.86 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_431d0897_000487ab 9/19/2005 9:42 PM 20.92 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_431e523f_0002625a 9/6/2005 9:36 PM 16.93 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_432101da_000bd6c3 9/8/2005 10:30 PM 6.34 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_43290e58_000ee170 9/15/2005 1:02 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_43292d5d_00040d99 9/15/2005 3:14 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_432c7be3_000bebc2 9/17/2005 3:26 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_433020d6_000487ab 9/20/2005 9:46 AM 7.96 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000120_433065a0_000632ea 9/20/2005 2:40 PM 10.27 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_4317b187_0008d24d 9/1/2005 8:57 PM 710 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_4317cf88_00016e36 9/1/2005 11:05 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_431875df_0007a120 9/2/2005 10:55 AM 673 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_4319cc56_0008d24d 9/3/2005 11:16 AM 406 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_431a8f83_000d9701 9/4/2005 1:09 AM 2.42 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_431b83fd_000e8b25 9/4/2005 6:32 PM 15.20 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_431cff0c_000bebc2 9/5/2005 9:29 PM 415 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_431e4eba_0006ea05 9/6/2005 9:21 PM 1.25 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_4320f478_0002c76d 9/8/2005 9:33 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_43238087_0001d349 9/10/2005 7:55 PM 6 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_43282a82_00007a12 9/14/2005 8:49 AM 128 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_43290c1c_0000564b 9/15/2005 12:52 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_432916b1_000a7d8c 9/15/2005 1:37 AM 4.35 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_43291d78_000b71b0 9/15/2005 2:06 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_432978c3_000baeb9 9/15/2005 8:36 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_43299ae9_0001e848 9/15/2005 11:01 AM 234 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_432c6f44_000baeb9 9/17/2005 2:32 PM 12.59 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_43301ecf_00089544 9/20/2005 9:38 AM 115.48 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000124_43306152_00000000 9/20/2005 2:21 PM 14.63 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000012c_432dfa14_00000000 9/18/2005 6:36 PM 1.33 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000012f_432eca5c_0009c671 9/19/2005 9:25 AM 769 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000014a_432f74fb_000e8b25 9/19/2005 9:33 PM 47.69 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000014f_432e9324_00094c5f 9/19/2005 5:29 AM 14.63 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000151_43264319_000a2b84 9/12/2005 10:10 PM 3.13 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000196_43264327_0002c76d 9/12/2005 10:10 PM 11.44 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001d3_431ad4b6_0003567e 9/19/2005 5:08 PM 37.08 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001d3_431dc7b3_00081b32 9/6/2005 11:45 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001d3_431e544d_0009c671 9/16/2005 12:40 PM 37.30 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001d3_432171a7_00097469 9/9/2005 6:27 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001d3_43293880_0008583b 9/15/2005 4:01 AM 1.43 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001d3_432a271c_00090f56 9/15/2005 8:59 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001d3_432c9d83_0001312d 9/17/2005 5:49 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001da_4325b6fa_0005e0e2 9/12/2005 12:12 PM 690 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001da_432f85de_00053ec6 9/19/2005 10:45 PM 127.10 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001db_4325b1b3_0008433c 9/12/2005 11:49 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001df_43279d78_00080633 9/13/2005 10:48 PM 71.56 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001e1_43208ea3_0000df25 9/8/2005 2:19 PM 16.72 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001e1_432abd3c_000487ab 9/16/2005 7:40 AM 6.73 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001e1_432ca4f6_0005b8d8 9/17/2005 6:21 PM 345 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_4317b080_000d9701 9/20/2005 2:30 PM 33.82 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_4317cd78_00057bcf 9/1/2005 10:56 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_431875b0_00039387 9/2/2005 10:54 AM 223 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_431902f3_00053ec6 9/2/2005 8:57 PM 544 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_4319cc0d_000501bd 9/3/2005 11:15 AM 974 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_4319e155_0008583b 9/3/2005 12:45 PM 1.19 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_431a8cb4_0005f5e1 9/4/2005 12:57 AM 580 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_431b83cc_000bebc2 9/4/2005 6:31 PM 36 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_431cc7cc_000a7d8c 9/5/2005 5:33 PM 19 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_431cd801_000dd40a 9/5/2005 6:42 PM 1.51 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_431cf605_0003d090 9/19/2005 8:07 PM 38.02 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_431e4e70_00089544 9/6/2005 9:20 PM 714 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_4320caa6_0005a3d9 9/8/2005 6:35 PM 1.44 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_43228220_00011c2e 9/10/2005 1:50 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_43282988_00057bcf 9/14/2005 8:45 AM 1.36 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_43290bb7_0008ae86 9/15/2005 12:50 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_432915e3_0005b8d8 9/15/2005 1:34 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_43291d3c_0007270e 9/21/2005 11:12 AM 60.50 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_432929bf_0008583b 9/15/2005 2:58 AM 355 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_43297774_000aba95 9/15/2005 8:30 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_43297c48_0002dc6c 9/15/2005 8:51 AM 706 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_432c6f1d_000d9701 9/17/2005 2:31 PM 3.47 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_43301a6d_000c28cb 9/21/2005 12:47 PM 8.11 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001eb_43301e4d_00022551 9/20/2005 9:35 AM 144.30 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001ef_4326a6e0_0000df25 9/13/2005 5:16 AM 69 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001f7_432441dd_000b1fa8 9/11/2005 9:40 AM 10.19 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000001f7_432eca29_000d9701 9/19/2005 9:24 AM 26.34 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000021c_432f2514_000dd40a 9/19/2005 3:52 PM 118.94 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000260_4324444a_00037e88 9/11/2005 9:50 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000260_432ed1dd_000aba95 9/19/2005 9:57 AM 407 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000262_432435ea_0005e0e2 9/11/2005 8:49 AM 8.11 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000262_432dfc6b_00022551 9/18/2005 6:46 PM 30.15 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000292_43251b14_000ef038 9/12/2005 1:07 AM 38.54 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000002b2_43244455_00061deb 9/11/2005 9:51 AM 8.26 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000002be_4325dac5_000566d0 9/12/2005 2:45 PM 2.28 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000002ec_43244458_0006d506 9/11/2005 9:51 AM 7.78 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000002ec_432ee17a_00066ff3 9/19/2005 11:04 AM 521 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000002ee_4324429e_000c50d5 9/11/2005 9:43 AM 16.75 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000002ee_432eca54_000baeb9 9/19/2005 9:25 AM 2.65 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000002f2_4325d7aa_0009ee7b 9/12/2005 2:31 PM 23.38 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_43179561_0005f5e1 9/21/2005 12:30 PM 294 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_4317f083_000a4083 9/2/2005 1:26 AM 277 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_4319269d_000632ea 9/2/2005 11:29 PM 5 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_431a9102_0004c4b4 9/4/2005 1:15 AM 50.24 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_431b8693_000f0537 9/4/2005 6:43 PM 24 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_431d03b4_00098968 9/9/2005 6:13 AM 35.06 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_4320f681_000435a3 9/8/2005 9:42 PM 4.36 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_4323d8de_0008bd4e 9/11/2005 2:41 AM 3.76 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_43290e3a_0003e9d2 9/15/2005 1:01 AM 6.87 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_43292cae_00044aa2 9/15/2005 3:11 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_432c7bb8_000b71b0 9/17/2005 3:25 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_4330202b_000632ea 9/20/2005 9:43 AM 7.82 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000030a_43306565_0003567e 9/20/2005 2:39 PM 6.41 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000314_432efe69_000baeb9 9/19/2005 1:07 PM 19.29 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000318_43259748_000dfc14 9/12/2005 9:57 AM 298 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000036a_432f85ba_00000000 9/19/2005 10:44 PM 222.69 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000036b_432435e7_0000a21c 9/11/2005 8:49 AM 113.05 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000036b_432dfc68_000ca2dd 9/18/2005 6:46 PM 14.63 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000037d_43279ba8_000c13cc 9/13/2005 10:47 PM 9.51 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000383_4325dca9_0006d506 9/12/2005 2:53 PM 24.79 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000384_43182c65_00076417 9/2/2005 5:41 AM 16.43 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000384_431abacf_0003567e 9/19/2005 6:03 PM 36.69 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000384_431c2d88_000af79e 9/15/2005 10:57 AM 36.08 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000384_431d7ac7_00031975 9/16/2005 2:28 PM 37.11 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000384_43216fb1_000435a3 9/9/2005 6:19 AM 6.67 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000384_43283b44_00066ff3 9/14/2005 10:01 AM 106.86 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000384_432936e5_000b71b0 9/15/2005 3:55 AM 88.31 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000384_432a245b_000a4083 9/15/2005 8:48 PM 63.15 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000384_432c7f65_000b34a7 9/17/2005 3:41 PM 4.37 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000384_43302c78_00022551 9/20/2005 10:36 AM 2.56 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000384_433071d3_0001312d 9/20/2005 3:32 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000389_4325b1c1_000bd6c3 9/12/2005 11:50 AM 890 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000389_432f74d6_000a037a 9/19/2005 9:32 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000038f_43241dab_000b5cb1 9/11/2005 7:06 AM 22 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000038f_432c2d80_0001ab3f 9/17/2005 5:47 PM 37.14 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000038f_432d6ac5_00066ff3 9/18/2005 8:25 AM 3.46 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000390_43208e6a_000dfc14 9/8/2005 2:18 PM 6.96 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000390_432847b5_000a037a 9/14/2005 10:54 AM 4.66 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000390_432abcf1_000e4e1c 9/16/2005 7:39 AM 13.69 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000390_432ca3be_0005f5e1 9/17/2005 6:16 PM 714 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000003af_4325b437_000472ac 9/12/2005 12:00 PM 434 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000003af_432f7601_00076417 9/19/2005 9:37 PM 858 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000003be_4325d7ee_000f2d41 9/12/2005 2:33 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000003f4_43244aa5_0001d349 9/11/2005 10:17 AM 777 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000003f4_4325d7ac_000bd6c3 9/12/2005 2:31 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000003f4_432eff1e_000a7d8c 9/19/2005 1:10 PM 13.58 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000003f9_432436c7_0007120f 9/11/2005 8:53 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000003f9_432dfc70_000e1113 9/18/2005 6:46 PM 8.97 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000003fa_4324043f_0007c92a 9/11/2005 5:17 AM 22 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000003fa_432ca823_0003567e 9/17/2005 6:35 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000003ff_43272373_0004afb5 9/13/2005 2:07 PM 18.09 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000041c_43244bd4_000eb32f 9/11/2005 10:23 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000041e_432eff37_00089544 9/19/2005 1:11 PM 496 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000042f_432448c7_0006d506 9/11/2005 10:10 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000042f_432efeaf_0005b8d8 9/19/2005 1:08 PM 5.14 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000046b_432efc28_0007de29 9/19/2005 12:58 PM 6.08 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047a_432f0f34_0002625a 9/19/2005 2:19 PM 47.69 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047e_4317c155_0007de29 9/1/2005 10:04 PM 15.65 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047e_43181c5e_000d1cef 9/2/2005 4:33 AM 76.19 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047e_431aa409_0003567e 9/19/2005 8:51 PM 20.93 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047e_431c18f4_0000f424 9/5/2005 5:07 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047e_431d4c6d_000a4083 9/6/2005 2:59 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047e_431e5370_000baeb9 9/6/2005 9:41 PM 466 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047e_43216f3d_0003f89a 9/9/2005 6:17 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047e_4323de39_0005a3d9 9/11/2005 2:35 AM 5.73 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047e_4329351b_0009c671 9/15/2005 3:47 AM 57.90 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047e_432a226c_0000f424 9/15/2005 8:39 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047e_432c7d7d_00076417 9/17/2005 3:33 PM 354 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000047e_43302c40_00007a12 9/20/2005 10:35 AM 56.73 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000049d_43263383_0000280a 9/12/2005 9:03 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000004b0_432c18c5_000487ab 9/17/2005 2:39 PM 11 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000004f0_4324095c_0008433c 9/11/2005 5:39 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000004f0_432b0379_000501bd 9/16/2005 12:40 PM 1.06 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000004f0_432ca8f2_000a7d8c 9/17/2005 6:38 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000004fe_4325b201_0002c76d 9/12/2005 11:51 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000004fe_432f7532_000af79e 9/19/2005 9:34 PM 231.17 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000502_432446f5_000c8dde 9/11/2005 10:02 AM 6.34 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000502_432efd26_000cdfe6 9/19/2005 1:02 PM 6.08 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000533_432640b5_000ccae7 9/12/2005 10:00 PM 69 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000053c_43244a2c_0008433c 9/11/2005 10:15 AM 42.12 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000053c_432efef8_0002dc6c 9/19/2005 1:10 PM 5.55 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000054b_4324456b_00011c2e 9/11/2005 9:57 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000054b_432efc27_000f0537 9/19/2005 12:58 PM 51 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000554_432f85c3_0001e848 9/19/2005 10:45 PM 232.78 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000588_432246c8_0004afb5 9/9/2005 9:36 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000588_4323f31a_0006d506 9/11/2005 4:04 AM 5.31 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000588_432948b6_0007270e 9/15/2005 5:11 AM 372.84 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000588_432ab87a_000d9701 9/16/2005 7:20 AM 8.31 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000588_43302f6c_000b71b0 9/20/2005 10:49 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000005b1_43265eb3_000b99ba 9/13/2005 12:08 AM 22 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000005f8_432efed8_00040d99 9/19/2005 1:09 PM 5.60 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000603_432eca5c_0000b71b 9/19/2005 9:25 AM 876 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000607_4324018c_0003417f 9/11/2005 5:06 AM 48.59 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000607_432ac0c8_000b34a7 9/16/2005 7:55 AM 3.55 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000618_4325dcb3_000d8202 9/12/2005 2:53 PM 11.25 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000061b_4327fd05_0009b172 9/14/2005 5:35 AM 474 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000633_4321a2c4_000ccae7 9/9/2005 9:57 AM 19.17 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000633_4323f0d0_000ae29f 9/11/2005 3:54 AM 6.60 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000633_432943bd_00081b32 9/15/2005 4:49 AM 3.34 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000633_432aa0d3_000dd40a 9/16/2005 5:39 AM 11 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000633_432c9e2d_000f0537 9/17/2005 5:52 PM 345 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000633_43302e38_00031975 9/20/2005 10:43 AM 4.67 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000633_43317f4d_000aba95 9/21/2005 10:42 AM 906 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000634_43244446_00015937 9/11/2005 9:50 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000634_432ed1dc_00090f56 9/19/2005 9:57 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000063a_43265462_000f2d41 9/12/2005 11:24 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000648_4326b99f_000d8202 9/13/2005 6:36 AM 69 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000064f_4325b4e4_000d44f9 9/12/2005 12:03 PM 32.86 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000654_4325de3a_00061deb 9/12/2005 2:59 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000065a_43241210_000c50d5 9/11/2005 6:16 AM 22 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000065a_432c1b03_0001ab3f 9/17/2005 8:32 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000065a_432d5be7_000d9701 9/18/2005 7:22 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000065a_432de096_00007a12 9/18/2005 4:48 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000665_432df990_00044aa2 9/18/2005 6:34 PM 72.26 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000066b_43262d4a_000472ac 9/12/2005 8:37 PM 229.49 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000672_432efc32_00000000 9/19/2005 12:58 PM 1 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000677_43182db2_00022551 9/2/2005 5:47 AM 712 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000677_431abda7_00089544 9/8/2005 7:52 AM 18.13 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000677_431c3044_000ec82e 9/9/2005 5:39 AM 18.08 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000677_431e5416_00057bcf 9/6/2005 9:44 PM 992 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000677_43216feb_000ccae7 9/9/2005 6:20 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000677_4323e06a_00097469 9/11/2005 2:44 AM 158.49 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000677_43259747_000697fd 9/12/2005 9:57 AM 263 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000677_43283b45_00007a12 9/14/2005 10:01 AM 349 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000677_43293787_0002dc6c 9/15/2005 3:57 AM 110.94 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000677_432a24a0_00039387 9/15/2005 8:49 PM 36.08 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000677_432c7f66_0007a120 9/17/2005 3:41 PM 4.48 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000677_43302c79_000c28cb 9/20/2005 10:36 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000067e_43280e1b_000dbf0b 9/14/2005 6:48 AM 109.65 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000686_4325db97_000435a3 9/12/2005 2:48 PM 2.68 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000068f_432efe3a_000af79e 9/19/2005 1:06 PM 67.82 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000069f_4327173a_00030476 9/13/2005 1:15 PM 18.08 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000006bb_43244830_0000df25 9/11/2005 10:07 AM 4.13 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000006bb_432efe96_0002625a 9/19/2005 1:08 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000006c7_4325dc50_0005a3d9 9/12/2005 2:51 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000006d8_432dfc36_00039387 9/18/2005 6:46 PM 8.32 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000006de_4324444f_000aa596 9/11/2005 9:50 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000006e3_432ac020_0002625a 9/16/2005 7:52 AM 3.55 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000006e9_432ed102_000632ea 9/19/2005 9:53 AM 52.05 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000006ee_43262d2a_00015937 9/12/2005 8:36 PM 194.73 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000006ef_43279b5b_00093760 9/13/2005 10:39 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000728_432847be_00039387 9/14/2005 10:54 AM 1.30 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000728_432abcfa_00089544 9/16/2005 7:39 AM 19.00 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000728_432ca3c0_00044aa2 9/17/2005 6:16 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000730_4325dcb9_000eb32f 9/12/2005 2:53 PM 173 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_4317b682_00031975 9/1/2005 9:18 PM 3.47 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_4317f0de_00031975 9/2/2005 1:29 AM 276 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_431934ad_0001ab3f 9/3/2005 12:29 AM 5 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_431a910b_00057bcf 9/4/2005 1:15 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_431b8695_0000f424 9/4/2005 6:43 PM 387 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_431d07e4_000ec82e 9/7/2005 1:28 AM 35.21 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_431e523d_0007de29 9/6/2005 9:36 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_432101c9_000529c7 9/8/2005 10:30 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_4323d91d_0005e0e2 9/11/2005 2:13 AM 4.59 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_43290e58_00001942 9/15/2005 1:02 AM 19 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_43292d10_000a4083 9/15/2005 3:13 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_432a1ce4_00089544 9/15/2005 8:16 PM 113.57 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_432c7bca_00003d09 9/17/2005 3:25 PM 2.47 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000732_433020d5_0003d090 9/20/2005 9:46 AM 109.52 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000737_4327c571_000472ac 9/14/2005 1:38 AM 4.86 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_43177f71_00053ec6 9/1/2005 5:23 PM 276 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_4317b1d6_00089544 9/1/2005 8:58 PM 475 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_4317d8bc_000632ea 9/1/2005 11:44 PM 13.04 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_43187682_0006ea05 9/2/2005 10:57 AM 681 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_43190a7d_0000f424 9/2/2005 9:29 PM 5 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_431a8f99_000a037a 9/4/2005 1:09 AM 435 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_431b865f_000d59f8 9/4/2005 6:42 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_431e4fbf_0008583b 9/15/2005 11:05 AM 327 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_4320cad5_0001d349 9/8/2005 6:35 PM 638 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_4320f655_0007120f 9/8/2005 9:41 PM 106.03 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_4323d75a_000aa596 9/11/2005 2:06 AM 352 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_43282ff6_00003d09 9/14/2005 9:13 AM 8.60 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_43290cb5_0008ae86 9/15/2005 12:55 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_43291779_00040d99 9/15/2005 1:40 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_43291e27_000d1cef 9/15/2005 2:09 AM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_43292a9c_000632ea 9/15/2005 3:02 AM 6.56 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_43299be5_000c65d4 9/15/2005 11:05 AM 5.69 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_432c6f8e_0008d24d 9/17/2005 2:33 PM 4.50 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_43301f1f_000ca2dd 9/20/2005 9:39 AM 415.56 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000074d_43306166_0009c671 9/20/2005 2:22 PM 4.34 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000759_4325dc0a_0008433c 9/12/2005 2:50 PM 877 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000774_4325d7e1_000ef038 9/12/2005 2:32 PM 24.45 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000784_4324018d_000a688d 9/11/2005 5:06 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000784_432ac0c9_00022551 9/16/2005 7:55 AM 4.60 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000786_43240543_0009ee7b 9/11/2005 5:21 AM 22 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000786_432ac3dc_0008d24d 9/16/2005 8:08 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000786_432ca828_00016e36 9/17/2005 6:35 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000795_4325b441_0003f89a 9/12/2005 12:00 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000795_432f7604_00076417 9/19/2005 9:37 PM 354 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007a2_432efde3_000a4083 9/19/2005 1:05 PM 7.87 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007c9_432dfa0e_0006acfc 9/18/2005 6:36 PM 50.24 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007cf_431ad035_000ca2dd 9/8/2005 5:14 AM 34.84 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007cf_431dc766_000a037a 9/15/2005 12:55 AM 2.77 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007cf_431e543b_00057bcf 9/6/2005 9:45 PM 583 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007cf_4321719b_0000280a 9/9/2005 6:27 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007cf_43293853_00057bcf 9/15/2005 4:01 AM 435 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007cf_432a269a_0005f5e1 9/15/2005 8:57 PM 14.86 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007cf_432c9d24_000b34a7 9/17/2005 5:48 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007cf_43302d44_00066ff3 9/20/2005 10:39 AM 3.83 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007cf_4330bba3_000e4e1c 9/20/2005 8:49 PM 5.28 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007db_43244579_000ae29f 9/11/2005 9:55 AM 859 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000007ec_43262bcb_000d07f0 9/12/2005 8:30 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_4317a5e6_000a037a 9/1/2005 8:07 PM 38.42 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_4317bbaa_000d1cef 9/1/2005 9:40 PM 710 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_4317f43c_00098968 9/2/2005 1:42 AM 260 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_431a9b5e_000e1113 9/4/2005 1:59 AM 30.58 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_431c088c_0005b8d8 9/5/2005 3:57 AM 421 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_431d3ef3_00039387 9/19/2005 5:52 PM 20.92 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_431e5326_000dd40a 9/6/2005 9:40 PM 16.02 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_4321681e_0004ecbe 9/9/2005 5:46 AM 19.47 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_4323da48_0003f89a 9/11/2005 2:18 AM 1.68 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_43293170_00053ec6 9/15/2005 3:31 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_432a2158_00076417 9/15/2005 8:35 PM 15.39 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_432c7d5c_000e4e1c 9/17/2005 3:32 PM 712 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000822_433023cf_00089544 9/20/2005 9:59 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000828_432ed18c_00053ec6 9/19/2005 9:56 AM 396 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000082f_432645ee_00080633 9/12/2005 10:22 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000083f_4325da16_0000a21c 9/12/2005 2:42 PM 305.96 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000840_4326342e_0003f89a 9/12/2005 9:06 PM 22.29 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000084d_43240302_0009b172 9/11/2005 5:12 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000084d_432ca804_000e4e1c 9/17/2005 6:34 PM 714 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000858_4326d1aa_00065af4 9/13/2005 8:18 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000860_4325ebfe_000472ac 9/12/2005 3:58 PM 69 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000086a_431effbd_000e4e1c 9/19/2005 9:44 PM 5.85 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000086a_43224f0a_00006513 9/9/2005 10:12 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000086a_4328433b_0008d24d 9/14/2005 10:35 AM 487 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000086a_43294ab8_000b71b0 9/15/2005 5:19 AM 428.24 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000086a_432ab91f_000e8b25 9/16/2005 7:22 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000871_43208ea6_0005a3d9 9/8/2005 2:19 PM 12.13 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000871_4323f7b5_0000df25 9/11/2005 4:24 AM 4.18 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000871_432abd88_000b71b0 9/16/2005 7:41 AM 457 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000878_432abde3_0004c4b4 9/16/2005 7:43 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000878_432ca527_0004c4b4 9/17/2005 6:22 PM 714 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000088b_432610fb_00028a64 9/12/2005 6:36 PM 4.77 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000089e_43263e80_00080633 9/12/2005 9:50 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000008ac_4324473c_000ef038 9/11/2005 10:03 AM 33.52 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000008ac_432efd44_0001312d 9/19/2005 1:02 PM 490 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000008af_432c2f8c_0003d090 9/17/2005 10:00 AM 20.96 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000008af_432dab32_00029f63 9/18/2005 1:00 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000008bd_4325db04_00030476 9/12/2005 2:46 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000008d2_4325dbce_000f2d41 9/12/2005 2:49 PM 5.62 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000008ff_432c1964_0000f424 9/17/2005 8:25 AM 7.08 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\000008ff_432ccfa8_000baeb9 9/17/2005 9:23 PM 202.13 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000902_4317bc6a_0007270e 9/1/2005 10:05 PM 11.40 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000902_4318038d_000f0537 9/2/2005 2:47 AM 76 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000902_431a9c8f_0006acfc 9/4/2005 2:04 AM 7.44 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000902_431c18ba_0007270e 9/5/2005 5:06 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000902_431d41b3_0006ea05 9/6/2005 2:13 AM 5.97 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000902_431e534a_00003d09 9/6/2005 9:41 PM 5.87 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000902_432168c6_0006d506 9/9/2005 5:49 AM 4.58 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000902_4323daa0_000e7626 9/11/2005 2:20 AM 101.11 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000902_43283861_000e4e1c 9/14/2005 9:49 AM 137.93 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000902_432a2180_00000000 9/15/2005 8:36 PM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000902_432c7d67_000cdfe6 9/17/2005 3:32 PM 223 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000902_4330242e_000a7d8c 9/20/2005 10:01 AM 1.56 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000914_43240a07_000435a3 9/11/2005 5:42 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000914_432c1987_00003d09 9/17/2005 8:26 AM 73.04 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000914_432ccfad_0003567e 9/17/2005 9:23 PM 232.57 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000917_4325db55_0003417f 9/12/2005 2:47 PM 5.61 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000093b_432441fb_000c50d5 9/11/2005 9:41 AM 29.76 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\0000093b_432eca37_000a7d8c 9/19/2005 9:24 AM 876 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000940_4322505a_00061deb 9/9/2005 10:17 PM 40 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000940_4323f421_000b99ba 9/11/2005 4:08 AM 24.97 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000940_43284342_0001ab3f 9/14/2005 10:35 AM 48.12 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000940_43294bc4_000487ab 9/15/2005 5:24 AM 0 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000940_432ab95c_000d59f8 9/16/2005 7:23 AM 53.80 KB Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000940_432ca03b_0001e848 9/17/2005 6:01 PM 714 bytes Hidden from Windows API.
C:\Program Files\Javrectx\Cache\00000948_4325d84a_000d44f9 9/12/2005 2:34 PM 537 by

[mytool1985]

can't post it all

Edited by mytool1985, 21 September 2005 - 02:56 PM.

[tampabelle]

Click on Start ---> Settings ---> Control panel.

Double click on Java.

Click on General tab ---> Delete Files. Check all the items / boxes and then click on OK.

Now run rootkit revealer and post its log here

[mytool1985]

After clicking on control panel the only option pertaining too java is "Java Plug-in 1.3.1_06". After clicking on it there are no options for "general tab" or for deleting files. I've searched the computer for the folders found in the log and poked around. I just can't seem to find what your talking about?

[tampabelle]

Double click on Java Plugin in Control Panel. Click on the Cache tab. Clear the cache (I am not sure about the layout of the screen here).

Now run rootkit revealer and post its log here

[mytool1985]

Rootkitrevealer log is unchanged. The ad yield manager pop ups are gone now that was my biggest issue. I appreciate the help thus far very much. I'll try and post half of the root kit revealer log in one post and the other half in another but thats about all I can come up with.
I did get an error message about important windows devices and to run scan disk after cleaning tha cache. Thats about as much as that did from what I see. Welp here goes the massive posting lemme know if you've any other ideas.

[mytool1985]

Or I could just post everything thats not a cache file? Lemme know

[tampabelle]

Since it is a text file, you can attach the file with your next reply.

In the screen where you type in your replies, at the bottom of the reply window (just above the Add Reply button), there is a facility for attaching the files. Upload the file and I will look at it.