Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Hello! help. Local settings temp folder flooding w tmp's


  • Please log in to reply

#16
Buckeye_Sam

Buckeye_Sam

    Malware Expert

  • Member
  • PipPipPipPipPipPipPipPip
  • 10,019 posts
I spotted a few things we can fix, but nothing that will resolve your issue yet.

Please click Start -> Control Panel -> Add/Remove Programs and uninstall these programs:


Viewpoint Media Player
Spybot - Search & Destroy 1.3 <-- this is an older version



Delete these files.

C:\WINDOWS\SYSTEM32\96gvtg12.ini
C:\Documents and Settings\Don\Application Data\GDIPFONTCACHEV1.DAT



Once you have Spybot uninstalled, check IE settings again and see if there's any change. It's a possibility that Spybot was blocking your attempted changes.


You can get the current version of Spybot from here.
http://www.safer-net...rg/en/download/



A few questions...

Are you logged in as the administrator?
Is this Windows Home or Pro?
  • 0

Advertisements


#17
Buckeye_Sam

Buckeye_Sam

    Malware Expert

  • Member
  • PipPipPipPipPipPipPipPip
  • 10,019 posts
One other thing. I'd like to get an idea of the temp files that you're getting. Please download the attached file and extract it to your desktop. Double click on temp.bat and wait until notepad opens up with a log. Please copy and paste that text here in your next reply.
  • 0

#18
ppbsa

ppbsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts

One other thing. I'd like to get an idea of the temp files that you're getting. Please download the attached file and extract it to your desktop. Double click on temp.bat and wait until notepad opens up with a log. Please copy and paste that text here in your next reply.


Yes, I'm admim on the PC, It's Windows XP Home and after the lastest recomendations, I still can't change the IE security settings.

Here's the temp folder info from your zip application:

Folders found in C:\WINDOWS\Temp
-------------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is CCD7-9337

Directory of C:\WINDOWS\Temp

01/26/2006 06:07 PM <DIR> ASHeuristic
01/31/2006 05:40 PM <DIR> ..
01/31/2006 05:40 PM <DIR> .
0 File(s) 0 bytes

Directory of C:\WINDOWS\Temp\ASHeuristic

01/26/2006 06:07 PM <DIR> ..
01/26/2006 06:07 PM <DIR> .
0 File(s) 0 bytes

Total Files Listed:
0 File(s) 0 bytes
5 Dir(s) 48,710,512,640 bytes free


Folders found in C:\Documents and Settings\Don\Local Settings\Temp
-------------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is CCD7-9337

Directory of C:\Documents and Settings\Don\Local Settings\Temp

02/20/2004 02:45 PM 61,440 vmpremov.exe
07/04/2005 07:31 PM 70,425 A~NSISu_.exe
01/28/2006 10:12 PM <DIR> hsperfdata_Don
01/29/2006 11:28 AM 4,096 hqgrfyzm.zsq
01/29/2006 02:17 PM 2,667 ver8.tmp
01/29/2006 02:17 PM 2,667 ver9.tmp
01/29/2006 02:17 PM 2,667 verA.tmp
01/29/2006 02:17 PM 2,667 verB.tmp
01/29/2006 02:25 PM <DIR> F-Secure
01/29/2006 02:31 PM 2,667 verF.tmp
01/29/2006 02:31 PM 2,667 ver10.tmp
01/29/2006 02:31 PM 2,667 ver11.tmp
01/29/2006 02:31 PM 2,667 ver12.tmp
01/29/2006 03:08 PM 5,036 h2r1E.tmp
01/29/2006 03:09 PM 2,923,520 ~WRD0005.tmp
01/29/2006 03:09 PM 779,109 ~WRD3235.doc
01/29/2006 03:10 PM 664,654 ~WRS0001.tmp
01/29/2006 03:15 PM 2,667 ver20.tmp
01/29/2006 03:15 PM 2,667 ver21.tmp
01/29/2006 03:15 PM 2,667 ver22.tmp
01/29/2006 03:15 PM 2,667 ver23.tmp
01/29/2006 03:35 PM 5,036 h2r2F.tmp
01/29/2006 06:31 PM 2,667 ver41.tmp
01/29/2006 06:31 PM 2,667 ver42.tmp
01/29/2006 06:31 PM 2,667 ver43.tmp
01/29/2006 06:31 PM 2,667 ver44.tmp
01/29/2006 07:15 PM 2,667 ver48.tmp
01/29/2006 07:15 PM 2,667 ver49.tmp
01/29/2006 07:15 PM 2,667 ver4A.tmp
01/29/2006 07:15 PM 2,667 ver4B.tmp
01/29/2006 07:29 PM 2,667 ver4D.tmp
01/29/2006 07:29 PM 2,667 ver4E.tmp
01/29/2006 07:29 PM 2,667 ver4F.tmp
01/29/2006 07:29 PM 2,667 ver50.tmp
01/29/2006 08:28 PM 2,667 ver56.tmp
01/29/2006 08:28 PM 2,667 ver57.tmp
01/29/2006 08:28 PM 2,667 ver58.tmp
01/29/2006 08:28 PM 2,667 ver59.tmp
01/29/2006 09:11 PM 2,667 ver5D.tmp
01/29/2006 09:11 PM 2,667 ver5E.tmp
01/29/2006 09:11 PM 2,667 ver5F.tmp
01/29/2006 09:11 PM 2,667 ver60.tmp
01/29/2006 09:28 PM 2,667 ver62.tmp
01/29/2006 09:28 PM 2,667 ver63.tmp
01/29/2006 09:28 PM 2,667 ver64.tmp
01/29/2006 09:28 PM 2,667 ver65.tmp
01/29/2006 09:51 PM 2,667 ver68.tmp
01/29/2006 09:51 PM 2,667 ver69.tmp
01/29/2006 09:51 PM 2,667 ver6A.tmp
01/29/2006 09:51 PM 2,667 ver6B.tmp
01/29/2006 11:15 PM 2,667 ver71.tmp
01/29/2006 11:15 PM 2,667 ver72.tmp
01/29/2006 11:15 PM 2,667 ver73.tmp
01/29/2006 11:15 PM 2,667 ver74.tmp
01/30/2006 01:51 AM 2,667 ver81.tmp
01/30/2006 01:51 AM 2,667 ver82.tmp
01/30/2006 01:51 AM 2,667 ver83.tmp
01/30/2006 01:51 AM 2,667 ver84.tmp
01/30/2006 02:38 AM 2,667 ver88.tmp
01/30/2006 02:38 AM 2,667 ver89.tmp
01/30/2006 02:38 AM 2,667 ver8A.tmp
01/30/2006 02:38 AM 2,667 ver8B.tmp
01/30/2006 02:43 AM 2,667 ver8C.tmp
01/30/2006 02:43 AM 2,667 ver8D.tmp
01/30/2006 02:43 AM 2,667 ver8E.tmp
01/30/2006 02:43 AM 2,667 ver8F.tmp
01/30/2006 03:14 AM 2,667 ver92.tmp
01/30/2006 03:14 AM 2,667 ver93.tmp
01/30/2006 03:14 AM 2,667 ver94.tmp
01/30/2006 03:14 AM 2,667 ver95.tmp
01/30/2006 03:15 AM 2,667 ver96.tmp
01/30/2006 03:15 AM 2,667 ver97.tmp
01/30/2006 03:15 AM 2,667 ver98.tmp
01/30/2006 03:15 AM 2,667 ver99.tmp
01/30/2006 03:43 AM 2,667 ver9C.tmp
01/30/2006 03:43 AM 2,667 ver9D.tmp
01/30/2006 03:43 AM 2,667 ver9E.tmp
01/30/2006 03:43 AM 2,667 ver9F.tmp
01/30/2006 03:45 AM 2,667 verA0.tmp
01/30/2006 03:45 AM 2,667 verA1.tmp
01/30/2006 03:45 AM 2,667 verA2.tmp
01/30/2006 03:45 AM 2,667 verA3.tmp
01/30/2006 04:45 AM 2,667 verA8.tmp
01/30/2006 04:45 AM 2,667 verA9.tmp
01/30/2006 04:45 AM 2,667 verAA.tmp
01/30/2006 04:45 AM 2,667 verAB.tmp
01/30/2006 05:01 AM 2,667 verB0.tmp
01/30/2006 05:01 AM 2,667 verB1.tmp
01/30/2006 05:01 AM 2,667 verB2.tmp
01/30/2006 05:01 AM 2,667 verB3.tmp
01/30/2006 05:26 AM 2,667 verB4.tmp
01/30/2006 05:26 AM 2,667 verB5.tmp
01/30/2006 05:26 AM 2,667 verB6.tmp
01/30/2006 05:26 AM 2,667 verB7.tmp
01/30/2006 06:23 AM 2,667 verBA.tmp
01/30/2006 06:23 AM 2,667 verBB.tmp
01/30/2006 06:23 AM 2,667 verBC.tmp
01/30/2006 06:23 AM 2,667 verBD.tmp
01/30/2006 07:08 AM 2,667 verBE.tmp
01/30/2006 07:08 AM 2,667 verBF.tmp
01/30/2006 07:08 AM 2,667 verC0.tmp
01/30/2006 07:08 AM 2,667 verC1.tmp
01/30/2006 07:15 AM 2,667 verC2.tmp
01/30/2006 07:15 AM 2,667 verC3.tmp
01/30/2006 07:15 AM 2,667 verC4.tmp
01/30/2006 07:15 AM 2,667 verC5.tmp
01/30/2006 08:05 AM 2,667 verC6.tmp
01/30/2006 08:05 AM 2,667 verC7.tmp
01/30/2006 08:05 AM 2,667 verC8.tmp
01/30/2006 08:05 AM 2,667 verC9.tmp
01/30/2006 08:50 AM 2,667 verCA.tmp
01/30/2006 08:50 AM 2,667 verCB.tmp
01/30/2006 08:50 AM 2,667 verCC.tmp
01/30/2006 08:50 AM 2,667 verCD.tmp
01/30/2006 09:21 AM 2,667 verCF.tmp
01/30/2006 09:21 AM 2,667 verD0.tmp
01/30/2006 09:21 AM 2,667 verD1.tmp
01/30/2006 09:21 AM 2,667 verD2.tmp
01/30/2006 10:02 AM 2,667 verD3.tmp
01/30/2006 10:02 AM 2,667 verD4.tmp
01/30/2006 10:02 AM 2,667 verD5.tmp
01/30/2006 10:02 AM 2,667 verD6.tmp
01/30/2006 10:20 AM 2,667 verD7.tmp
01/30/2006 10:20 AM 2,667 verD8.tmp
01/30/2006 10:20 AM 2,667 verD9.tmp
01/30/2006 10:20 AM 2,667 verDA.tmp
01/30/2006 10:26 AM 2,667 verDB.tmp
01/30/2006 10:26 AM 2,667 verDC.tmp
01/30/2006 10:26 AM 2,667 verDD.tmp
01/30/2006 10:26 AM 2,667 verDE.tmp
01/30/2006 11:09 AM 2,667 verDF.tmp
01/30/2006 11:09 AM 2,667 verE0.tmp
01/30/2006 11:09 AM 2,667 verE1.tmp
01/30/2006 11:09 AM 2,667 verE2.tmp
01/30/2006 11:15 AM 2,667 verE3.tmp
01/30/2006 11:15 AM 2,667 verE4.tmp
01/30/2006 11:15 AM 2,667 verE5.tmp
01/30/2006 11:15 AM 2,667 verE6.tmp
01/30/2006 11:42 AM 2,667 verE7.tmp
01/30/2006 11:42 AM 2,667 verE8.tmp
01/30/2006 11:42 AM 2,667 verE9.tmp
01/30/2006 11:42 AM 2,667 verEA.tmp
01/30/2006 11:50 AM 2,667 verEB.tmp
01/30/2006 11:50 AM 2,667 verEC.tmp
01/30/2006 11:50 AM 2,667 verED.tmp
01/30/2006 11:50 AM 2,667 verEE.tmp
01/30/2006 12:31 PM 2,667 verEF.tmp
01/30/2006 12:31 PM 2,667 verF0.tmp
01/30/2006 12:31 PM 2,667 verF1.tmp
01/30/2006 12:31 PM 2,667 verF2.tmp
01/30/2006 12:45 PM 2,667 verF3.tmp
01/30/2006 12:45 PM 2,667 verF4.tmp
01/30/2006 12:45 PM 2,667 verF5.tmp
01/30/2006 12:45 PM 2,667 verF6.tmp
01/30/2006 01:45 PM 2,667 verF7.tmp
01/30/2006 01:45 PM 2,667 verF8.tmp
01/30/2006 01:45 PM 2,667 verF9.tmp
01/30/2006 01:45 PM 2,667 verFA.tmp
01/30/2006 02:31 PM 2,667 verFC.tmp
01/30/2006 02:31 PM 2,667 verFD.tmp
01/30/2006 02:31 PM 2,667 verFE.tmp
01/30/2006 02:31 PM 2,667 verFF.tmp
01/30/2006 03:15 PM 2,667 ver100.tmp
01/30/2006 03:15 PM 2,667 ver101.tmp
01/30/2006 03:15 PM 2,667 ver102.tmp
01/30/2006 03:15 PM 2,667 ver103.tmp
01/30/2006 03:15 PM 2,667 ver104.tmp
01/30/2006 03:15 PM 2,667 ver105.tmp
01/30/2006 03:15 PM 2,667 ver106.tmp
01/30/2006 03:15 PM 2,667 ver107.tmp
01/30/2006 04:00 PM 2,667 ver108.tmp
01/30/2006 04:00 PM 2,667 ver109.tmp
01/30/2006 04:00 PM 2,667 ver10A.tmp
01/30/2006 04:00 PM 2,667 ver10B.tmp
01/30/2006 04:00 PM 2,667 ver111.tmp
01/30/2006 04:00 PM 2,667 ver112.tmp
01/30/2006 04:25 PM 2,667 ver113.tmp
01/30/2006 04:25 PM 2,667 ver114.tmp
01/30/2006 04:25 PM 2,667 ver115.tmp
01/30/2006 04:25 PM 2,667 ver116.tmp
01/30/2006 05:00 PM 2,667 ver117.tmp
01/30/2006 05:00 PM 2,667 ver118.tmp
01/30/2006 05:00 PM 2,667 ver119.tmp
01/30/2006 05:00 PM 2,667 ver11A.tmp
01/30/2006 05:55 PM 2,667 ver11B.tmp
01/30/2006 05:55 PM 2,667 ver11C.tmp
01/30/2006 05:55 PM 2,667 ver11D.tmp
01/30/2006 05:55 PM 2,667 ver11E.tmp
01/30/2006 06:21 PM 2,667 ver11F.tmp
01/30/2006 06:21 PM 2,667 ver120.tmp
01/30/2006 06:21 PM 2,667 ver121.tmp
01/30/2006 06:21 PM 2,667 ver122.tmp
01/30/2006 07:15 PM 2,667 ver127.tmp
01/30/2006 07:15 PM 2,667 ver128.tmp
01/30/2006 07:15 PM 2,667 ver129.tmp
01/30/2006 07:15 PM 2,667 ver12A.tmp
01/30/2006 07:18 PM 2,667 ver12B.tmp
01/30/2006 07:18 PM 2,667 ver12C.tmp
01/30/2006 07:18 PM 2,667 ver12D.tmp
01/30/2006 07:18 PM 2,667 ver12E.tmp
01/30/2006 07:31 PM 2,667 ver12F.tmp
01/30/2006 07:31 PM 2,667 ver130.tmp
01/30/2006 07:31 PM 2,667 ver131.tmp
01/30/2006 07:31 PM 2,667 ver132.tmp
01/30/2006 08:18 PM 2,667 ver133.tmp
01/30/2006 08:18 PM 2,667 ver134.tmp
01/30/2006 08:18 PM 2,667 ver135.tmp
01/30/2006 08:18 PM 2,667 ver136.tmp
01/30/2006 09:09 PM 2,667 ver13B.tmp
01/30/2006 09:09 PM 2,667 ver13C.tmp
01/30/2006 09:09 PM 2,667 ver13D.tmp
01/30/2006 09:09 PM 2,667 ver13E.tmp
01/30/2006 09:27 PM 2,667 ver13F.tmp
01/30/2006 09:27 PM 2,667 ver140.tmp
01/30/2006 09:27 PM 2,667 ver141.tmp
01/30/2006 09:27 PM 2,667 ver142.tmp
01/30/2006 09:31 PM 2,667 ver143.tmp
01/30/2006 09:31 PM 2,667 ver144.tmp
01/30/2006 09:31 PM 2,667 ver145.tmp
01/30/2006 09:31 PM 2,667 ver146.tmp
01/30/2006 09:45 PM 2,667 ver147.tmp
01/30/2006 09:45 PM 2,667 ver148.tmp
01/30/2006 09:45 PM 2,667 ver149.tmp
01/30/2006 09:45 PM 2,667 ver14A.tmp
01/30/2006 09:55 PM 2,667 ver14B.tmp
01/30/2006 09:55 PM 2,667 ver14C.tmp
01/30/2006 09:55 PM 2,667 ver14D.tmp
01/30/2006 09:55 PM 2,667 ver14E.tmp
01/30/2006 10:08 PM 2,667 ver14F.tmp
01/30/2006 10:08 PM 2,667 ver150.tmp
01/30/2006 10:08 PM 2,667 ver151.tmp
01/30/2006 10:08 PM 2,667 ver152.tmp
01/30/2006 10:08 PM 2,667 ver153.tmp
01/30/2006 10:08 PM 2,667 ver154.tmp
01/30/2006 10:08 PM 2,667 ver155.tmp
01/30/2006 10:08 PM 2,667 ver156.tmp
01/30/2006 10:33 PM 2,667 ver157.tmp
01/30/2006 10:33 PM 2,667 ver158.tmp
01/30/2006 10:33 PM 2,667 ver159.tmp
01/30/2006 10:33 PM 2,667 ver15A.tmp
01/30/2006 11:05 PM 2,667 ver15C.tmp
01/30/2006 11:05 PM 2,667 ver15D.tmp
01/30/2006 11:05 PM 2,667 ver15E.tmp
01/30/2006 11:05 PM 2,667 ver15F.tmp
01/30/2006 11:15 PM 2,667 ver160.tmp
01/30/2006 11:15 PM 2,667 ver161.tmp
01/30/2006 11:15 PM 2,667 ver162.tmp
01/30/2006 11:15 PM 2,667 ver163.tmp
01/30/2006 11:24 PM 2,667 ver164.tmp
01/30/2006 11:24 PM 2,667 ver165.tmp
01/30/2006 11:24 PM 2,667 ver166.tmp
01/30/2006 11:24 PM 2,667 ver167.tmp
01/30/2006 11:31 PM 2,667 ver168.tmp
01/30/2006 11:31 PM 2,667 ver169.tmp
01/30/2006 11:31 PM 2,667 ver16A.tmp
01/30/2006 11:31 PM 2,667 ver16B.tmp
01/30/2006 11:37 PM 2,667 ver16C.tmp
01/30/2006 11:37 PM 2,667 ver16D.tmp
01/30/2006 11:37 PM 2,667 ver16E.tmp
01/30/2006 11:37 PM 2,667 ver16F.tmp
01/30/2006 11:42 PM 2,667 ver170.tmp
01/30/2006 11:42 PM 2,667 ver171.tmp
01/30/2006 11:42 PM 2,667 ver172.tmp
01/30/2006 11:42 PM 2,667 ver173.tmp
01/31/2006 12:03 AM 2,667 ver174.tmp
01/31/2006 12:03 AM 2,667 ver175.tmp
01/31/2006 12:03 AM 2,667 ver176.tmp
01/31/2006 12:03 AM 2,667 ver177.tmp
01/31/2006 12:15 AM 2,667 ver178.tmp
01/31/2006 12:15 AM 2,667 ver179.tmp
01/31/2006 12:15 AM 2,667 ver17A.tmp
01/31/2006 12:15 AM 2,667 ver17B.tmp
01/31/2006 12:55 AM 2,667 ver17C.tmp
01/31/2006 12:55 AM 2,667 ver17D.tmp
01/31/2006 12:55 AM 2,667 ver17E.tmp
01/31/2006 12:55 AM 2,667 ver17F.tmp
01/31/2006 01:26 AM 2,667 ver180.tmp
01/31/2006 01:26 AM 2,667 ver181.tmp
01/31/2006 01:26 AM 2,667 ver182.tmp
01/31/2006 01:26 AM 2,667 ver183.tmp
01/31/2006 02:18 AM 2,667 ver184.tmp
01/31/2006 02:18 AM 2,667 ver185.tmp
01/31/2006 02:18 AM 2,667 ver186.tmp
01/31/2006 02:18 AM 2,667 ver187.tmp
01/31/2006 02:49 AM 2,667 ver188.tmp
01/31/2006 02:49 AM 2,667 ver189.tmp
01/31/2006 02:49 AM 2,667 ver18A.tmp
01/31/2006 02:49 AM 2,667 ver18B.tmp
01/31/2006 02:56 AM 2,667 ver18C.tmp
01/31/2006 02:56 AM 2,667 ver18D.tmp
01/31/2006 02:56 AM 2,667 ver18E.tmp
01/31/2006 02:56 AM 2,667 ver18F.tmp
01/31/2006 03:15 AM 2,667 ver190.tmp
01/31/2006 03:15 AM 2,667 ver191.tmp
01/31/2006 03:15 AM 2,667 ver192.tmp
01/31/2006 03:15 AM 2,667 ver193.tmp
01/31/2006 03:27 AM 2,667 ver195.tmp
01/31/2006 03:27 AM 2,667 ver196.tmp
01/31/2006 03:27 AM 2,667 ver197.tmp
01/31/2006 03:27 AM 2,667 ver198.tmp
01/31/2006 04:19 AM 2,667 ver199.tmp
01/31/2006 04:19 AM 2,667 ver19A.tmp
01/31/2006 04:19 AM 2,667 ver19B.tmp
01/31/2006 04:19 AM 2,667 ver19C.tmp
01/31/2006 04:20 AM 2,667 ver19D.tmp
01/31/2006 04:20 AM 2,667 ver19E.tmp
01/31/2006 04:20 AM 2,667 ver19F.tmp
01/31/2006 04:20 AM 2,667 ver1A0.tmp
01/31/2006 04:56 AM 2,667 ver1A1.tmp
01/31/2006 04:56 AM 2,667 ver1A2.tmp
01/31/2006 04:56 AM 2,667 ver1A3.tmp
01/31/2006 04:56 AM 2,667 ver1A4.tmp
01/31/2006 05:27 AM 2,667 ver1A7.tmp
01/31/2006 05:27 AM 2,667 ver1A8.tmp
01/31/2006 05:27 AM 2,667 ver1A9.tmp
01/31/2006 05:27 AM 2,667 ver1AA.tmp
01/31/2006 05:36 AM 2,667 ver1AB.tmp
01/31/2006 05:36 AM 2,667 ver1AC.tmp
01/31/2006 05:36 AM 2,667 ver1AD.tmp
01/31/2006 05:36 AM 2,667 ver1AE.tmp
01/31/2006 05:46 AM 2,667 ver1AF.tmp
01/31/2006 05:46 AM 2,667 ver1B0.tmp
01/31/2006 05:46 AM 2,667 ver1B1.tmp
01/31/2006 05:46 AM 2,667 ver1B2.tmp
01/31/2006 05:58 AM 2,667 ver1B3.tmp
01/31/2006 05:58 AM 2,667 ver1B4.tmp
01/31/2006 05:58 AM 2,667 ver1B5.tmp
01/31/2006 05:58 AM 2,667 ver1B6.tmp
01/31/2006 06:03 AM 2,667 ver1B7.tmp
01/31/2006 06:03 AM 2,667 ver1B8.tmp
01/31/2006 06:03 AM 2,667 ver1B9.tmp
01/31/2006 06:03 AM 2,667 ver1BA.tmp
01/31/2006 06:51 AM 2,667 ver1BB.tmp
01/31/2006 06:51 AM 2,667 ver1BC.tmp
01/31/2006 06:51 AM 2,667 ver1BD.tmp
01/31/2006 06:51 AM 2,667 ver1BE.tmp
01/31/2006 06:53 AM 2,667 ver1BF.tmp
01/31/2006 06:53 AM 2,667 ver1C0.tmp
01/31/2006 06:53 AM 2,667 ver1C1.tmp
01/31/2006 06:53 AM 2,667 ver1C2.tmp
01/31/2006 07:15 AM 2,667 ver1C3.tmp
01/31/2006 07:15 AM 2,667 ver1C4.tmp
01/31/2006 07:15 AM 2,667 ver1C5.tmp
01/31/2006 07:15 AM 2,667 ver1C6.tmp
01/31/2006 07:41 AM 2,667 ver1C8.tmp
01/31/2006 07:41 AM 2,667 ver1C9.tmp
01/31/2006 07:41 AM 2,667 ver1CA.tmp
01/31/2006 07:41 AM 2,667 ver1CB.tmp
01/31/2006 08:16 AM 2,667 ver1CC.tmp
01/31/2006 08:16 AM 2,667 ver1CD.tmp
01/31/2006 08:16 AM 2,667 ver1CE.tmp
01/31/2006 08:16 AM 2,667 ver1CF.tmp
01/31/2006 08:23 AM 2,667 ver1D0.tmp
01/31/2006 08:23 AM 2,667 ver1D1.tmp
01/31/2006 08:23 AM 2,667 ver1D2.tmp
01/31/2006 08:23 AM 2,667 ver1D3.tmp
01/31/2006 08:52 AM 2,667 ver1D4.tmp
01/31/2006 08:52 AM 2,667 ver1D5.tmp
01/31/2006 08:52 AM 2,667 ver1D6.tmp
01/31/2006 08:52 AM 2,667 ver1D7.tmp
01/31/2006 09:39 AM 2,667 ver1D8.tmp
01/31/2006 09:39 AM 2,667 ver1D9.tmp
01/31/2006 09:39 AM 2,667 ver1DA.tmp
01/31/2006 09:39 AM 2,667 ver1DB.tmp
01/31/2006 10:23 AM 2,667 ver1DC.tmp
01/31/2006 10:23 AM 2,667 ver1DD.tmp
01/31/2006 10:23 AM 2,667 ver1DE.tmp
01/31/2006 10:23 AM 2,667 ver1DF.tmp
01/31/2006 11:10 AM 2,667 ver1E0.tmp
01/31/2006 11:10 AM 2,667 ver1E1.tmp
01/31/2006 11:10 AM 2,667 ver1E2.tmp
01/31/2006 11:10 AM 2,667 ver1E3.tmp
01/31/2006 11:15 AM 2,667 ver1E4.tmp
01/31/2006 11:15 AM 2,667 ver1E5.tmp
01/31/2006 11:15 AM 2,667 ver1E6.tmp
01/31/2006 11:15 AM 2,667 ver1E7.tmp
01/31/2006 11:16 AM 2,667 ver1E8.tmp
01/31/2006 11:16 AM 2,667 ver1E9.tmp
01/31/2006 11:16 AM 2,667 ver1EA.tmp
01/31/2006 11:16 AM 2,667 ver1EB.tmp
01/31/2006 12:11 PM 2,667 ver1EC.tmp
01/31/2006 12:11 PM 2,667 ver1ED.tmp
01/31/2006 12:11 PM 2,667 ver1EE.tmp
01/31/2006 12:11 PM 2,667 ver1EF.tmp
01/31/2006 01:03 PM 2,667 ver1F1.tmp
01/31/2006 01:03 PM 2,667 ver1F2.tmp
01/31/2006 01:03 PM 2,667 ver1F3.tmp
01/31/2006 01:03 PM 2,667 ver1F4.tmp
01/31/2006 01:53 PM 2,667 ver1F5.tmp
01/31/2006 01:53 PM 2,667 ver1F6.tmp
01/31/2006 01:53 PM 2,667 ver1F7.tmp
01/31/2006 01:53 PM 2,667 ver1F8.tmp
01/31/2006 02:35 PM 2,667 ver1F9.tmp
01/31/2006 02:35 PM 2,667 ver1FA.tmp
01/31/2006 02:35 PM 2,667 ver1FB.tmp
01/31/2006 02:35 PM 2,667 ver1FC.tmp
01/31/2006 03:00 PM 2,667 ver1FD.tmp
01/31/2006 03:00 PM 2,667 ver1FE.tmp
01/31/2006 03:00 PM 2,667 ver1FF.tmp
01/31/2006 03:00 PM 2,667 ver200.tmp
01/31/2006 03:15 PM 2,667 ver206.tmp
01/31/2006 03:15 PM 2,667 ver207.tmp
01/31/2006 03:15 PM 2,667 ver208.tmp
01/31/2006 03:15 PM 2,667 ver209.tmp
01/31/2006 03:45 PM 2,667 ver20A.tmp
01/31/2006 03:45 PM 2,667 ver20B.tmp
01/31/2006 03:45 PM 2,667 ver20C.tmp
01/31/2006 03:45 PM 2,667 ver20D.tmp
01/31/2006 04:37 PM 2,667 ver20E.tmp
01/31/2006 04:37 PM 2,667 ver20F.tmp
01/31/2006 04:37 PM 2,667 ver210.tmp
01/31/2006 04:37 PM 2,667 ver211.tmp
01/31/2006 05:03 PM 2,667 ver212.tmp
01/31/2006 05:03 PM 2,667 ver213.tmp
01/31/2006 05:03 PM 2,667 ver214.tmp
01/31/2006 05:03 PM 2,667 ver215.tmp
01/31/2006 05:17 PM 2,667 ver217.tmp
01/31/2006 05:17 PM 2,667 ver218.tmp
01/31/2006 05:17 PM 2,667 ver219.tmp
01/31/2006 05:17 PM 2,667 ver21A.tmp
01/31/2006 05:18 PM 159 qdiagd_2.log
01/31/2006 05:41 PM 4 PMShared
01/31/2006 05:42 PM 2,667 ver6.tmp
01/31/2006 05:43 PM 2,667 ver7.tmp
01/31/2006 05:43 PM 2,667 verC.tmp
01/31/2006 05:43 PM 2,667 verD.tmp
01/31/2006 05:49 PM 2,667 ver13.tmp
01/31/2006 05:49 PM 2,667 ver14.tmp
01/31/2006 05:49 PM 2,667 ver15.tmp
01/31/2006 05:49 PM 2,667 ver16.tmp
01/31/2006 05:50 PM 404 jusched.log
01/31/2006 05:51 PM 159 qdiagd.log
01/31/2006 06:05 PM <DIR> .
01/31/2006 06:05 PM <DIR> ..
430 File(s) 5,628,848 bytes

Directory of C:\Documents and Settings\Don\Local Settings\Temp\Cookies

01/29/2006 12:28 PM 32,768 index.dat
01/29/2006 12:29 PM 199 don@microsoft[2].txt
01/29/2006 12:29 PM 143 [email protected][1].txt
01/29/2006 12:30 PM 120 [email protected][1].txt
01/29/2006 12:30 PM 103 [email protected][1].txt
01/29/2006 01:24 PM 597 don@geekstogo[2].txt
6 File(s) 33,930 bytes

Directory of C:\Documents and Settings\Don\Local Settings\Temp\F-Secure

01/29/2006 02:25 PM <DIR> ..
01/29/2006 02:25 PM <DIR> .
01/29/2006 02:27 PM <DIR> BlackLight
0 File(s) 0 bytes

Directory of C:\Documents and Settings\Don\Local Settings\Temp\F-Secure\BlackLight

01/29/2006 02:27 PM <DIR> ..
01/29/2006 02:27 PM <DIR> .
0 File(s) 0 bytes

Directory of C:\Documents and Settings\Don\Local Settings\Temp\History\History.IE5

01/29/2006 12:28 PM 32,768 index.dat
1 File(s) 32,768 bytes

Directory of C:\Documents and Settings\Don\Local Settings\Temp\hsperfdata_Don

01/28/2006 10:12 PM <DIR> ..
01/28/2006 10:12 PM <DIR> .
0 File(s) 0 bytes

Directory of C:\Documents and Settings\Don\Local Settings\Temp\Temporary Internet Files\Content.IE5

01/29/2006 01:16 PM 262,144 index.dat
1 File(s) 262,144 bytes

Directory of C:\Documents and Settings\Don\Local Settings\Temp\Temporary Internet Files\Content.IE5\CTMX0LCD

01/29/2006 12:29 PM 2,235 hp[1].js
01/29/2006 12:29 PM 22,352 microsoft[1].htm
01/29/2006 12:29 PM 712 popular_searches[1].gif
01/29/2006 12:29 PM 374 for_your_job[1].gif
01/29/2006 12:29 PM 295 for_ITpros[1].gif
01/29/2006 12:29 PM 30,684 play_win_media_4_10[1].jpg
01/29/2006 12:29 PM 45,036 one_care_2_10[1].jpg
01/29/2006 12:29 PM 817 logostrip_bg[1].gif
01/29/2006 12:29 PM 6,872 show_ads[2].js
01/29/2006 12:29 PM 258 submenu_bg[1].gif
01/29/2006 12:29 PM 1,171 foruicon[1].gif
01/29/2006 12:29 PM 3,521 trust[1].gif
01/29/2006 12:29 PM 2,728 parasite[1].js
01/29/2006 12:29 PM 3,793 windows-vista[1].gif
01/29/2006 12:29 PM 25,839 parasite-data[1].js
01/29/2006 12:29 PM 1,946 dell_desktop[1].jpg
01/29/2006 12:29 PM 2,337 ultradvd[1].jpg
01/29/2006 12:29 PM 2,637 Firefox[1].gif
01/29/2006 12:30 PM 55,486 func_023[1].js
01/29/2006 12:30 PM 5,465 CA2F412V.htm
01/29/2006 12:30 PM 3,846 CAABKTMF.htm
01/29/2006 12:30 PM 632 submit[1].gif
01/29/2006 12:30 PM 3 CA49MZ85.jsp
01/29/2006 12:30 PM 918 user[1].htm
01/29/2006 12:30 PM 5,324 CAA3SH2P.htm
01/29/2006 12:30 PM 0 CA496RA7.HTM
01/29/2006 12:30 PM 0 CACNW3U7.HTM
01/29/2006 12:30 PM 0 CAWXMFSL.HTM
01/29/2006 12:30 PM 0 CAKHMBSH.HTM
01/29/2006 12:30 PM 0 CA997WIP.HTM
01/29/2006 12:30 PM 0 CADTOBPT.HTM
01/29/2006 12:30 PM 0 CA4TAZC1.HTM
01/29/2006 12:30 PM 0 CAOPIB45.HTM
01/29/2006 12:30 PM 0 CASLI7OP.HTM
01/29/2006 12:30 PM 0 CAUHUPOR.HTM
01/29/2006 12:30 PM 0 CALH5KS8.HTM
01/29/2006 12:30 PM 0 CACB4Z0L.HTM
01/29/2006 12:30 PM 0 CACLQBU9.HTM
01/29/2006 12:30 PM 0 CAYL0L6L.HTM
01/29/2006 12:30 PM 0 CAWFE0RM.HTM
01/29/2006 12:30 PM 0 CAQLQ4QQ.HTM
01/29/2006 12:30 PM 0 CAIFNUNT.HTM
01/29/2006 12:30 PM 0 CAXHKIEA.HTM
01/29/2006 12:30 PM 0 CAB8PDZH.HTM
01/29/2006 12:30 PM 0 CAQOAF4U.HTM
01/29/2006 12:30 PM 0 CAGHYDE9.HTM
01/29/2006 12:30 PM 0 CAJSUP6V.HTM
01/29/2006 12:30 PM 0 CAE74PIR.HTM
01/29/2006 12:30 PM 0 CA6BOXAV.HTM
01/29/2006 12:30 PM 0 CAYF016N.HTM
01/29/2006 12:30 PM 0 CA4FKN7X.HTM
01/29/2006 12:30 PM 0 CAKJCP41.HTM
01/29/2006 12:30 PM 0 CAN1Y0DW.HTM
01/29/2006 12:30 PM 3 CAAJSH6Z.jsp
01/29/2006 12:30 PM 3 CA6JGPI7.jsp
01/29/2006 12:30 PM 3 CAO5MZW9.jsp
01/29/2006 12:30 PM 3 CAKFU1MV.jsp
01/29/2006 12:30 PM 3 CAWTAVWP.jsp
01/29/2006 12:30 PM 3 CA2U288U.jsp
01/29/2006 12:30 PM 3 CAV31469.jsp
01/29/2006 12:30 PM 3 CAO9636H.jsp
01/29/2006 12:30 PM 3 CAU5S7C3.jsp
01/29/2006 12:30 PM 3 chunks[1].jsp
01/29/2006 12:30 PM 35 CACX67G9.gif
01/29/2006 12:30 PM 2,846 ips_menu_html[1].js
01/29/2006 12:30 PM 6,120 dom-drag[1].js
01/29/2006 12:30 PM 6,229 CAOX851A.htm
01/29/2006 12:30 PM 1,104 icon13[1].gif
01/29/2006 12:30 PM 643 tile_sub[1].gif
01/29/2006 12:30 PM 1,104 icon14[1].gif
01/29/2006 12:30 PM 169 f_norm[1].gif
01/29/2006 12:30 PM 169 f_hot_no[1].gif
01/29/2006 12:30 PM 782 rss[1].png
01/29/2006 12:30 PM 2,198 footer_l[1].gif
01/29/2006 12:30 PM 1,009 pip[1].gif
01/29/2006 12:30 PM 81,675 index[1].htm
01/29/2006 12:30 PM 35 CACD52FM.gif
01/29/2006 12:30 PM 982 p_quote[1].gif
01/29/2006 12:30 PM 907 p_edit[1].gif
01/29/2006 12:30 PM 603 p_offline[1].gif
01/29/2006 12:30 PM 574 x-click-but21[1].gif
01/29/2006 12:38 PM 3,114 CA8CJQBL.htm
01/29/2006 12:38 PM 698 sad[1].gif
01/29/2006 12:38 PM 696 cool[1].gif
01/29/2006 12:38 PM 345 confused1[1].gif
01/29/2006 12:38 PM 486 thumbsup[1].gif
01/29/2006 12:38 PM 3,692 whistling[1].gif
01/29/2006 12:38 PM 7,280 ipb_editor[1].js
01/29/2006 12:38 PM 60 rte_dots[1].gif
01/29/2006 12:38 PM 81 bold[1].gif
01/29/2006 12:38 PM 878 strike[1].gif
01/29/2006 12:38 PM 374 email[1].gif
01/29/2006 12:38 PM 76 left_just[1].gif
01/29/2006 12:38 PM 88 list[1].gif
01/29/2006 12:38 PM 672 icon7[1].gif
01/29/2006 12:38 PM 888 icon9[1].gif
01/29/2006 12:38 PM 1,104 icon13[2].gif
01/29/2006 12:49 PM 3,111 CANZDERO.htm
01/29/2006 12:53 PM 35 CA85QR0H.gif
01/29/2006 12:53 PM 3,111 CAT39YWZ.htm
01/29/2006 01:15 PM 35 CAWSWQQC.gif
01/29/2006 01:16 PM 1,134 index[1].php
01/29/2006 01:16 PM 35 CAH4K3HD.gif
01/29/2006 01:16 PM 98,036 index[2].htm
01/29/2006 01:32 PM 87 nav[1].gif
105 File(s) 458,611 bytes

Directory of C:\Documents and Settings\Don\Local Settings\Temp\Temporary Internet Files\Content.IE5\E7AHMLGV

01/29/2006 12:29 PM 7,708 hp[1].css
01/29/2006 12:29 PM 1,311 msnlogo[1].gif
01/29/2006 12:29 PM 768 popular_destinations[1].gif
01/29/2006 12:29 PM 565 for_your_organization[1].gif
01/29/2006 12:29 PM 13,795 FreeUpSpace_4_10[1].jpg
01/29/2006 12:29 PM 17,108 urchin[2].js
01/29/2006 12:29 PM 449 recenticon[1].gif
01/29/2006 12:29 PM 5,323 CA6NS9UF.htm
01/29/2006 12:29 PM 662 menuicon[1].gif
01/29/2006 12:29 PM 858 comments_lock[1].gif
01/29/2006 12:29 PM 481 source[1].gif
01/29/2006 12:29 PM 474 software[1].gif
01/29/2006 12:29 PM 977 comments[1].gif
01/29/2006 12:29 PM 1,919 mac_apple[1].gif
01/29/2006 12:29 PM 4,204 google[1].gif
01/29/2006 12:29 PM 11,223 alliance[1].jpg
01/29/2006 12:30 PM 19,933 user[1].htm
01/29/2006 12:30 PM 3 CAK1YTX2.jsp
01/29/2006 12:30 PM 4,628 CA0F6NQJ.jsp
01/29/2006 12:30 PM 35 CAO1Y70P.gif
01/29/2006 12:30 PM 72,765 geekstogo[2].htm
01/29/2006 12:30 PM 0 CA2BCLE7.HTM
01/29/2006 12:30 PM 0 CAEMH7PG.HTM
01/29/2006 12:30 PM 0 CAYZCXA3.HTM
01/29/2006 12:30 PM 0 CAEFC9Q3.HTM
01/29/2006 12:30 PM 0 CADSQZX0.HTM
01/29/2006 12:30 PM 0 CA27IDE7.HTM
01/29/2006 12:30 PM 0 CAQN89UN.HTM
01/29/2006 12:30 PM 0 CAIZWLYR.HTM
01/29/2006 12:30 PM 0 CAY7K5AB.HTM
01/29/2006 12:30 PM 0 CAM8HQJ8.HTM
01/29/2006 12:30 PM 0 CAMG7IKN.HTM
01/29/2006 12:30 PM 0 CACBMB6P.HTM
01/29/2006 12:30 PM 0 CAUP6DWH.HTM
01/29/2006 12:30 PM 0 CA2P29ET.HTM
01/29/2006 12:30 PM 0 CA1J8NBM.HTM
01/29/2006 12:30 PM 0 CA2FTQN5.HTM
01/29/2006 12:30 PM 0 CAIB89YR.HTM
01/29/2006 12:30 PM 0 CAKANA0P.HTM
01/29/2006 12:30 PM 0 CATS8APY.HTM
01/29/2006 12:30 PM 0 CA3YLF7N.HTM
01/29/2006 12:30 PM 0 CA4FUNKW.HTM
01/29/2006 12:30 PM 0 CAWN8H60.HTM
01/29/2006 12:30 PM 0 CA81E7CT.HTM
01/29/2006 12:30 PM 0 CA896VOX.HTM
01/29/2006 12:30 PM 0 CAGH67SX.HTM
01/29/2006 12:30 PM 0 CA2HKFIN.HTM
01/29/2006 12:30 PM 0 CAEX2PQF.HTM
01/29/2006 12:30 PM 0 CACXYRG9.HTM
01/29/2006 12:30 PM 3 CACVYJGX.jsp
01/29/2006 12:30 PM 3 CAN9L3IE.jsp
01/29/2006 12:30 PM 3 CA65OZ8V.jsp
01/29/2006 12:30 PM 3 CA2TGPG5.jsp
01/29/2006 12:30 PM 3 CAIT2JAB.jsp
01/29/2006 12:30 PM 3 CAY7G52R.jsp
01/29/2006 12:30 PM 3 CA4967GD.jsp
01/29/2006 12:30 PM 3 CAWGUO1C.jsp
01/29/2006 12:30 PM 3 CARP5G81.jsp
01/29/2006 12:30 PM 3 CA4C9CQA.jsp
01/29/2006 12:30 PM 5,418 CAENW1IV.jsp
01/29/2006 12:30 PM 17,844 ipb_global[1].js
01/29/2006 12:30 PM 7,947 ips_xmlhttprequest[1].js
01/29/2006 12:30 PM 480 tile_cat[1].gif
01/29/2006 12:30 PM 689 icon11[1].gif
01/29/2006 12:30 PM 1,277 t_new[1].gif
01/29/2006 12:30 PM 94 pages_icon[1].gif
01/29/2006 12:30 PM 169 f_hot[1].gif
01/29/2006 12:30 PM 169 f_poll_no[1].gif
01/29/2006 12:30 PM 169 f_norm_no[1].gif
01/29/2006 12:30 PM 85 f_moved[1].gif
01/29/2006 12:30 PM 43 spacer[1].gif
01/29/2006 12:30 PM 1,322 t_reply[1].gif
01/29/2006 12:30 PM 8,385 CALZDD27.htm
01/29/2006 12:30 PM 1,456 p_up[1].gif
01/29/2006 12:30 PM 3,907 am175[1].gif
01/29/2006 12:30 PM 61 exp_plus[1].gif
01/29/2006 12:38 PM 63,228 index[1].htm
01/29/2006 12:38 PM 465 angry[1].gif
01/29/2006 12:38 PM 699 happy[1].gif
01/29/2006 12:38 PM 708 huh[1].gif
01/29/2006 12:38 PM 1,950 surrender[1].gif
01/29/2006 12:38 PM 946 wacko[1].gif
01/29/2006 12:38 PM 8,536 CAQ1GYOQ.htm
01/29/2006 12:38 PM 259 rte_tile[1].gif
01/29/2006 12:38 PM 351 closeall[1].gif
01/29/2006 12:38 PM 109 textcolor[1].gif
01/29/2006 12:38 PM 203 image[1].gif
01/29/2006 12:38 PM 76 centre[1].gif
01/29/2006 12:38 PM 673 icon3[1].gif
01/29/2006 12:38 PM 666 icon6[1].gif
01/29/2006 12:38 PM 672 icon5[1].gif
01/29/2006 12:56 PM 35 CA6BKTQZ.gif
01/29/2006 12:56 PM 7,795 CAIZCHQR.htm
01/29/2006 01:16 PM 35 CAOH4HC3.gif
01/29/2006 01:16 PM 4,118 CABW0QUE.htm
01/29/2006 01:16 PM 140,528 index[2].htm
01/29/2006 01:16 PM 8,384 CA67E5YD.htm
01/29/2006 01:24 PM 35 CA636FUH.gif
01/29/2006 01:24 PM 8,380 CAI7DX90.htm
01/29/2006 01:24 PM 147,944 index[3].htm
01/29/2006 01:32 PM 8,711 CAFAU5NZ.htm
101 File(s) 620,240 bytes

Directory of C:\Documents and Settings\Don\Local Settings\Temp\Temporary Internet Files\Content.IE5\ENAN43WX

01/29/2006 12:29 PM 5,069 SiteRecruit_PageConfiguration_HomePage_Page[1].js
01/29/2006 12:29 PM 46 b[1].gif
01/29/2006 12:29 PM 400 for_your_home[1].gif
01/29/2006 12:29 PM 440 for_developers[1].gif
01/29/2006 12:29 PM 15,075 0000053432_000000000000000265311[1].swf
01/29/2006 12:29 PM 35 CAEVIZUH.gif
01/29/2006 12:29 PM 736 style[1].css
01/29/2006 12:29 PM 56 background[1].gif
01/29/2006 12:29 PM 6,243 geeks[1].jpg
01/29/2006 12:29 PM 8,643 logostrip_l[1].gif
01/29/2006 12:29 PM 3,714 spyware[1].gif
01/29/2006 12:29 PM 498 view[1].gif
01/29/2006 12:29 PM 3,816 spyware2[1].gif
01/29/2006 12:29 PM 3,578 ms_stop[1].gif
01/29/2006 12:29 PM 6,216 moz_tb[1].gif
01/29/2006 12:29 PM 2,333 microsoft[1].gif
01/29/2006 12:30 PM 3 CA05QJ4D.jsp
01/29/2006 12:30 PM 3 CAQVKDEV.jsp
01/29/2006 12:30 PM 0 al[1].htm
01/29/2006 12:30 PM 35 CAGQJDDK.gif
01/29/2006 12:30 PM 11,205 front[1].asp
01/29/2006 12:30 PM 0 CAA9QDC3.HTM
01/29/2006 12:30 PM 0 CA8HI174.HTM
01/29/2006 12:30 PM 0 CASPMFG1.HTM
01/29/2006 12:30 PM 0 CATWZZDD.HTM
01/29/2006 12:30 PM 0 CAKHEZ8T.HTM
01/29/2006 12:30 PM 0 CAK5U3S5.HTM
01/29/2006 12:30 PM 0 CAI61F9T.HTM
01/29/2006 12:30 PM 0 CAC1QFCX.HTM
01/29/2006 12:30 PM 0 CAO5IBS9.HTM
01/29/2006 12:30 PM 0 CA01IJGH.HTM
01/29/2006 12:30 PM 0 CAS523KX.HTM
01/29/2006 12:30 PM 0 CAX6Q1XD.HTM
01/29/2006 12:30 PM 0 CAAZRC9X.HTM
01/29/2006 12:30 PM 0 CAM9MJ8L.HTM
01/29/2006 12:30 PM 0 CAIBS52L.HTM
01/29/2006 12:30 PM 0 CA2BG1QT.HTM
01/29/2006 12:30 PM 0 CAMKG9ZC.HTM
01/29/2006 12:30 PM 0 CA5S5500.HTM
01/29/2006 12:30 PM 0 CA4TMBKD.HTM
01/29/2006 12:30 PM 0 CAM7DRY2.HTM
01/29/2006 12:30 PM 0 CAD6QMM3.HTM
01/29/2006 12:30 PM 0 CA6962VI.HTM
01/29/2006 12:30 PM 0 CACDBZQA.HTM
01/29/2006 12:30 PM 0 CAMVJGL1.HTM
01/29/2006 12:30 PM 0 CAARK1U7.HTM
01/29/2006 12:30 PM 0 CA2N8H67.HTM
01/29/2006 12:30 PM 0 CA808ZL4.HTM
01/29/2006 12:30 PM 0 CAQ7K1M1.HTM
01/29/2006 12:30 PM 0 CAE5MN49.HTM
01/29/2006 12:30 PM 3 CA18DSH5.jsp
01/29/2006 12:30 PM 3 CAEDWDGM.jsp
01/29/2006 12:30 PM 3 CAQJSPAN.jsp
01/29/2006 12:30 PM 3 CAIJB8LS.jsp
01/29/2006 12:30 PM 3 CAC812RF.jsp
01/29/2006 12:30 PM 3 CA238LIB.jsp
01/29/2006 12:30 PM 3 CAYFCP69.jsp
01/29/2006 12:30 PM 3 CA6LO5OM.jsp
01/29/2006 12:30 PM 3 CA4TXDCJ.jsp
01/29/2006 12:30 PM 3 CAKDJ8SC.jsp
01/29/2006 12:30 PM 3 CA2ZG5QV.jsp
01/29/2006 12:30 PM 0 al[2].htm
01/29/2006 12:30 PM 10,350 ips_menu[1].js
01/29/2006 12:30 PM 4,169 CA0JWF4F.htm
01/29/2006 12:30 PM 1,827 loading[1].gif
01/29/2006 12:30 PM 53 nav_m[1].gif
01/29/2006 12:30 PM 15,901 ipb_forum[1].js
01/29/2006 12:30 PM 87 menu_item[1].gif
01/29/2006 12:30 PM 91 f_closed[1].gif
01/29/2006 12:30 PM 59 attachicon[1].gif
01/29/2006 12:30 PM 492 stat_time[1].gif
01/29/2006 12:30 PM 391 stat_sql[1].gif
01/29/2006 12:30 PM 887 footer_bg[1].gif
01/29/2006 12:30 PM 35 CA9RE1NN.gif
01/29/2006 12:30 PM 518 p_card[1].gif
01/29/2006 12:30 PM 594 p_online[1].gif
01/29/2006 12:30 PM 1,552 HJTstaff[1].png
01/29/2006 12:30 PM 1,337 t_qr[1].gif
01/29/2006 12:38 PM 35 CAVHWPW5.gif
01/29/2006 12:38 PM 696 biggrin[1].gif
01/29/2006 12:38 PM 1,088 blink[1].gif
01/29/2006 12:38 PM 931 helpsmilie[1].gif
01/29/2006 12:38 PM 698 ohmy[1].gif
01/29/2006 12:38 PM 897 lookaround[1].gif
01/29/2006 12:38 PM 1,410 wub[1].gif
01/29/2006 12:38 PM 807 blackdot[1].gif
01/29/2006 12:38 PM 84 italic[1].gif
01/29/2006 12:38 PM 7,562 palette[1].htm
01/29/2006 12:38 PM 139 code[1].gif
01/29/2006 12:38 PM 76 right_just[1].gif
01/29/2006 12:38 PM 676 icon2[1].gif
01/29/2006 12:38 PM 671 icon4[1].gif
01/29/2006 12:38 PM 672 icon10[1].gif
01/29/2006 12:49 PM 35 CA2RSPAV.gif
01/29/2006 12:53 PM 8,615 CAW4VHI3.htm
01/29/2006 01:15 PM 8,509 CAE0IWU1.htm
01/29/2006 01:16 PM 35 CACVIVIB.gif
01/29/2006 01:32 PM 8,947 css[1].css
01/29/2006 01:32 PM 19,110 winpfind[1].htm
01/29/2006 01:32 PM 53 nav_m[2].gif
01/29/2006 01:32 PM 940 tile_back[1].gif
101 File(s) 169,206 bytes

Directory of C:\Documents and Settings\Don\Local Settings\Temp\Temporary Internet Files\Content.IE5\QRABSH0V

01/29/2006 12:29 PM 3,283 ms_masthead_10x7a_ltr[1].jpg
01/29/2006 12:29 PM 781 popular_downloads[1].gif
01/29/2006 12:29 PM 493 support[1].gif
01/29/2006 12:29 PM 571 company_info[1].gif
01/29/2006 12:29 PM 8,706 webtrends[1].js
01/29/2006 12:29 PM 35 CAW1U1BS.gif
01/29/2006 12:29 PM 5,933 logostrip_r[1].gif
01/29/2006 12:29 PM 27,983 css_16[1].css
01/29/2006 12:29 PM 495 annoicon[1].gif
01/29/2006 12:29 PM 172 subsubmenu_bg[1].gif
01/29/2006 12:29 PM 3,778 CAMFSH2Z.htm
01/29/2006 12:29 PM 600 microsoft[1].gif
01/29/2006 12:29 PM 4,545 ms_vista1[1].gif
01/29/2006 12:29 PM 4,758 computer[1].gif
01/29/2006 12:29 PM 3,765 security[1].gif
01/29/2006 12:29 PM 3,738 news[1].gif
01/29/2006 12:29 PM 2,304 symantec[1].gif
01/29/2006 12:30 PM 3 CAA97TK0.jsp
01/29/2006 12:30 PM 561 user[1].php
01/29/2006 12:30 PM 64 CAYBSXIV.htm
01/29/2006 12:30 PM 0 CA0WILT7.HTM
01/29/2006 12:30 PM 0 CAWPLNT6.HTM
01/29/2006 12:30 PM 0 CAMBOHCH.HTM
01/29/2006 12:30 PM 0 CAMFSTI7.HTM
01/29/2006 12:30 PM 0 CAUBCLEB.HTM
01/29/2006 12:30 PM 0 CA630L6V.HTM
01/29/2006 12:30 PM 0 CASUXQ9N.HTM
01/29/2006 12:30 PM 0 CAMRGXYN.HTM
01/29/2006 12:30 PM 0 CAM70LIZ.HTM
01/29/2006 12:30 PM 0 CAUR4TAR.HTM
01/29/2006 12:30 PM 0 CA9E8DE0.HTM
01/29/2006 12:30 PM 0 CAUTVNS5.HTM
01/29/2006 12:30 PM 0 CA7DIU88.HTM
01/29/2006 12:30 PM 0 CA2T4TGL.HTM
01/29/2006 12:30 PM 0 CAGFQVMJ.HTM
01/29/2006 12:30 PM 0 CA01M7QX.HTM
01/29/2006 12:30 PM 0 CAQOU985.HTM
01/29/2006 12:30 PM 0 CANBD7D1.HTM
01/29/2006 12:30 PM 0 CAGSCHL0.HTM
01/29/2006 12:30 PM 0 CACOK80A.HTM
01/29/2006 12:30 PM 0 CAIDGK9L.HTM
01/29/2006 12:30 PM 0 CAITQJ47.HTM
01/29/2006 12:30 PM 0 CA9LD13D.HTM
01/29/2006 12:30 PM 0 CAKX2RO9.HTM
01/29/2006 12:30 PM 0 CAWPI7OP.HTM
01/29/2006 12:30 PM 0 CAKX230D.HTM
01/29/2006 12:30 PM 0 CANEV2S1.HTM
01/29/2006 12:30 PM 0 CAE3KDWH.HTM
01/29/2006 12:30 PM 0 CA8FCZ0Z.HTM
01/29/2006 12:30 PM 3 CAMYCTY2.jsp
01/29/2006 12:30 PM 3 CAAXSNET.jsp
01/29/2006 12:30 PM 3 CAARC12V.jsp
01/29/2006 12:30 PM 3 CAO9IFG5.jsp
01/29/2006 12:30 PM 3 CABOTLJT.jsp
01/29/2006 12:30 PM 3 CAYTMDGH.jsp
01/29/2006 12:30 PM 3 CA0VA7SZ.jsp
01/29/2006 12:30 PM 3 CAOL2RCX.jsp
01/29/2006 12:30 PM 3 CA2VCLSL.jsp
01/29/2006 12:30 PM 3 CAKGVJI6.jsp
01/29/2006 12:30 PM 78,347 Malware_Removal_HiJackThis_Logs-f37[1].htm
01/29/2006 12:30 PM 9,386 ipb_global_xmlenhanced[1].js
01/29/2006 12:30 PM 1,104 icon14[1].gif
01/29/2006 12:30 PM 100 menu_action_down[1].gif
01/29/2006 12:30 PM 82 newpost[1].gif
01/29/2006 12:30 PM 689 icon11[1].gif
01/29/2006 12:30 PM 169 f_poll[1].gif
01/29/2006 12:30 PM 515 stat_load[1].gif
01/29/2006 12:30 PM 460 stat_gzip[1].gif
01/29/2006 12:30 PM 1,134 index[1].php
01/29/2006 12:30 PM 11,034 ipb_topic[1].js
01/29/2006 12:30 PM 64 to_post_off[1].gif
01/29/2006 12:30 PM 3,791 CAD2P51W.htm
01/29/2006 12:30 PM 691 p_pm[1].gif
01/29/2006 12:30 PM 977 p_mq_add[1].gif
01/29/2006 12:30 PM 699 smile[1].gif
01/29/2006 12:30 PM 59 exp_minus[1].gif
01/29/2006 12:38 PM 698 tongue[1].gif
01/29/2006 12:38 PM 1,136 blushing[1].gif
01/29/2006 12:38 PM 515 laughing[1].gif
01/29/2006 12:38 PM 705 ph34r[1].gif
01/29/2006 12:38 PM 679 upset[1].gif
01/29/2006 12:38 PM 698 wink[1].gif
01/29/2006 12:38 PM 19,323 ipb_editor_std[1].js
01/29/2006 12:38 PM 96 indent[1].gif
01/29/2006 12:38 PM 93 underline[1].gif
01/29/2006 12:38 PM 196 hyperlink[1].gif
01/29/2006 12:38 PM 133 quote[1].gif
01/29/2006 12:38 PM 90 numbered_list[1].gif
01/29/2006 12:38 PM 672 icon1[1].gif
01/29/2006 12:38 PM 677 icon8[1].gif
01/29/2006 12:38 PM 1,067 icon12[1].gif
01/29/2006 12:49 PM 8,638 CAFQMWKC.htm
01/29/2006 12:56 PM 4,118 CAEHQE7G.htm
01/29/2006 01:15 PM 4,118 CA2L5NUM.htm
01/29/2006 01:16 PM 8,573 CATSKVLI.htm
01/29/2006 01:16 PM 3,791 CA0DMNC9.htm
01/29/2006 01:24 PM 3,791 CACLXGF1.htm
01/29/2006 01:32 PM 4,491 home-navbar[1].gif
01/29/2006 01:32 PM 1,189 dropdown[1].css
99 File(s) 247,386 bytes

Total Files Listed:
844 File(s) 7,453,133 bytes
11 Dir(s) 48,710,447,104 bytes free
  • 0

#19
Buckeye_Sam

Buckeye_Sam

    Malware Expert

  • Member
  • PipPipPipPipPipPipPipPip
  • 10,019 posts
One of the files in your temp folder is malicious so let's run this tool just to be sure you don't have a rootkit present.

You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download AproposFix from here:
http://swandog46.gee.../aproposfix.exe

Save it to your desktop but do NOT run it yet.

Then please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.


Once in Safe Mode, please double-click aproposfix.exe and unzip it to the desktop. Open the aproposfix folder on your desktop and run RunThis.bat. Follow the prompts.

When the tool is finished, please reboot back into normal mode, and post a new HijackThis log, along with the entire contents of the log.txt file in the aproposfix folder.




Please open this file with notepad.

qdiagd.log

Copy and paste the text here in your next reply.
  • 0

#20
ppbsa

ppbsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
Here you are:

Log.txt:

Log of AproposFix v1.1

************

Running from directory:
C:\Documents and Settings\Don\Desktop\aproposfix

************

Registry entries found:

************

No service found!

Removing hidden folder:
No folder found!

Deleting files:

Backing up files:
Done!

Removing registry entries:

REGEDIT4

Done!

Finished!
========================

file qdiagd.log contents:

ERRORS_ONLY=1
MAX_SIZE=100
APPEND=0
-------------------------------------------------
START 2006/02/01 18:33:44:750

FINISH 2006/02/01 18:33:53:843

========================

file qdiagd_2.log contents:

ERRORS_ONLY=1
MAX_SIZE=100
APPEND=0
-------------------------------------------------
START 2006/01/31 12:18:57:015

FINISH 2006/01/31 17:18:15:281

========================

Thanks

Edited by ppbsa, 01 February 2006 - 09:44 PM.

  • 0

#21
Buckeye_Sam

Buckeye_Sam

    Malware Expert

  • Member
  • PipPipPipPipPipPipPipPip
  • 10,019 posts
I don't think that the ver***.tmp files are being created by anything malicious. It's probably a poorly written program that runs on your computer. But let's get rid of everything in there as there is one file that is bad.

Please make sure that you can View Hidden Files
  • Click Start -> My Computer
  • Select Tools -> Folder options
  • Select the View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled.
  • Also make sure that 'Display the contents of system folders' is checked.
  • Make sure "Hide extensions for known file types" is unchecked
  • Make sure "Hide protected operating system files (recommended)" is unchecked
  • For more info on how to show hidden files click here.



Please reboot your computer in SafeMode by doing the following:
  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
  • Instead of Windows loading as normal, a menu should appear
  • Select the first option, to run Windows in Safe Mode.
  • If you have trouble getting into Safe mode go here for more info.


Delete your temp files
  • Navigate to the C:\Windows\Temp folder.
    • Open the Temp folder
    • Select Edit -> Select All
    • Select Edit -> Delete(or press the delete button on your keyboard) to delete the entire contents of the Temp folder.
  • Navigate to the C:\Windows\Prefetch folder.
    • Open the Prefetch folder
    • Select Edit -> Select All
    • Select Edit -> Delete(or press the delete button on your keyboard) to delete the entire contents of the Temp folder.
  • Click Start -> Run and type %temp% in the Run box.
    • Select Edit -> Select All
    • Select Edit -> Delete(or press the delete button on your keyboard) to delete the entire contents of the Temp folder.
  • Click Start -> Control Panel -> Internet Options.
    • Select the General tab
    • Under "Temporary Internet Files" Click "Delete Files".
    • Put a check by "Delete Offline Content" and click OK.
    • Click on the Programs tab then click the "Reset Web Settings" button.
    • Click Apply then OK.
  • Empty the Recycle Bin.


Reboot back into normal mode.
Post a new log from temp.bat
  • 0

#22
ppbsa

ppbsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
The system was just a little slow after rebooting from safe mode and after my security center loaded (very slow opening this site) but here is the latest Temp.bat just after cleaning everything out a few minutes ago:

Folders found in C:\WINDOWS\Temp
-------------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is CCD7-9337

Directory of C:\WINDOWS\Temp

01/26/2006 06:07 PM <DIR> ASHeuristic
02/02/2006 05:28 PM <DIR> ..
02/02/2006 05:28 PM <DIR> .
0 File(s) 0 bytes

Directory of C:\WINDOWS\Temp\ASHeuristic

01/26/2006 06:07 PM <DIR> ..
01/26/2006 06:07 PM <DIR> .
0 File(s) 0 bytes

Total Files Listed:
0 File(s) 0 bytes
5 Dir(s) 48,742,834,176 bytes free


Folders found in C:\Documents and Settings\Don\Local Settings\Temp
-------------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is CCD7-9337

Directory of C:\Documents and Settings\Don\Local Settings\Temp

02/02/2006 05:28 PM 2,667 verE.tmp
02/02/2006 05:28 PM 2,667 ver10.tmp
02/02/2006 05:28 PM 2,667 ver11.tmp
02/02/2006 05:28 PM 2,667 ver12.tmp
02/02/2006 05:30 PM 2,667 ver14.tmp
02/02/2006 05:30 PM 2,667 ver15.tmp
02/02/2006 05:30 PM 2,667 ver16.tmp
02/02/2006 05:30 PM 2,667 ver17.tmp
02/02/2006 05:30 PM 159 qdiagd.log
02/02/2006 05:37 PM 206 jusched.log
02/02/2006 05:41 PM <DIR> .
02/02/2006 05:41 PM <DIR> ..
10 File(s) 21,701 bytes

Total Files Listed:
10 File(s) 21,701 bytes

===============================
Here's the contents of jusched.log:

Thu Feb 02 17:37:23 2006
:: nextSched=Wed Mar 01 17:00:00 2006
; sleeptime (sec=2330557, hours=647), actual sleep=2330886000 msecs

Thu Feb 02 17:37:23 2006
:: lastSchedTime= Wed Feb 01 17:00:00 2006

Edited by ppbsa, 02 February 2006 - 04:48 PM.

  • 0

#23
Buckeye_Sam

Buckeye_Sam

    Malware Expert

  • Member
  • PipPipPipPipPipPipPipPip
  • 10,019 posts
I haven't been able to confirm this, but I think that qdiagd.log and the ver***.tmp files are related to Quicken.
Please post a new hijackthis log.
  • 0

#24
ppbsa

ppbsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
Logfile of HijackThis v1.99.1
Scan saved at 6:04:44 PM, on 2/2/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Common Files\AOL\1133832770\ee\services\sscFirewallPlugin\ver1_10_3_1\aolavupd.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\PROGRA~1\mcafee.com\ANTIVI~1\mcshield.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\AOL\1133832770\ee\AOLSoftware.exe
C:\Program Files\Common Files\AOL\1133832770\ee\services\sscAntiSpywarePlugin\ver1_10_3_1\AOLSP Scheduler.exe
C:\Program Files\mcafee.com\antivirus\oasclnt.exe
C:\Program Files\mcafee.com\antivirus\mcvsescn.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\AOL\1133832770\ee\services\sscFirewallPlugin\ver1_10_3_1\SSCEvtHdlr.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\program files\common files\aol\1133832770\ee\aolssc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\unzipped\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
N4 - Mozilla: user_pref("browser.search.defaultengine", "http://www.google.com/"); (C:\Documents and Settings\Don\Application Data\Mozilla\Profiles\default\m2mh74y7.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1133832770\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AOLSPScheduler] C:\Program Files\Common Files\AOL\1133832770\ee\services\sscAntiSpywarePlugin\ver1_10_3_1\AOLSP Scheduler.exe
O4 - HKLM\..\Run: [sscRun] C:\Program Files\Common Files\AOL\1133832770\ee\services\sscFirewallPlugin\ver1_10_3_1\SSCRun.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\mcafee.com\antivirus\oasclnt.exe
O4 - HKLM\..\Run: [EmailScan] C:\Program Files\mcafee.com\antivirus\mcvsescn.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 3.0\resources\en-US\local\search.html
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Absolute Poker - {EFFF8D47-D060-4108-B761-E8EC86622E56} - C:\Documents and Settings\All Users\Start Menu\Programs\Absolute Poker\Absolute Poker.lnk
O9 - Extra 'Tools' menuitem: Absolute Poker - {EFFF8D47-D060-4108-B761-E8EC86622E56} - C:\Documents and Settings\All Users\Start Menu\Programs\Absolute Poker\Absolute Poker.lnk
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {37DF41B2-61DB-4CAC-A755-CFB3C7EE7F40} (AOL Content Update) - http://esupport.aol....oach_core_1.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.com...kup/qdiagcc.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg...l_v1-0-3-36.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.pw.a...77/mcinsctl.cab
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.kodakgall..._1/axofupld.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.pw.a...,18/mcgdmgr.cab
O18 - Protocol: x-atng - {7E8717B0-D862-11D5-8C9E-00010304F989} - C:\Program Files\Fidelity Investments\Fidelity Active Trader\System\atngprot.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: AOL Antivirus Update Service (aolavupd) - America Online - C:\Program Files\Common Files\AOL\1133832770\ee\services\sscFirewallPlugin\ver1_10_3_1\aolavupd.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: McAfee McShield (McShield) - McAfee Inc. - C:\PROGRA~1\mcafee.com\ANTIVI~1\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Networks Associates Technology, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
  • 0

#25
Buckeye_Sam

Buckeye_Sam

    Malware Expert

  • Member
  • PipPipPipPipPipPipPipPip
  • 10,019 posts
Did you just disable Quicken from running at startup? It showed up in your earlier logs.
Let's disable some other startup programs that aren't necessary. Maybe we'll get lucky.

Run Hijackthis again, click scan, and Put a checkmark next to each of these. Then close all other windows--you should only see HijackThis on your Desktop--and click the Fix Checked button.

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1133832770\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AOLSPScheduler] C:\Program Files\Common Files\AOL\1133832770\ee\services\sscAntiSpywarePlugin\ver1_10_3_1\AOLSP Scheduler.exe
O4 - HKLM\..\Run: [sscRun] C:\Program Files\Common Files\AOL\1133832770\ee\services\sscFirewallPlugin\ver1_10_3_1\SSCRun.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup



Reboot and post a new hijackthis log.
  • 0

Advertisements


#26
ppbsa

ppbsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
My AOL security center didn't start on reboot but I'm watching the temp folder and it appears as though we're still generating tmp files. :-( I was going post a temp.bat log at the bottom but when I ran it, it showed on files and I just saw one there. It looked like a dir file and I opened it with note pad and it was encrypted or something so I ran temp.bat again and the same thing; no files. I then went back to the local settings temp folder and it was gone?!?

Logfile of HijackThis v1.99.1
Scan saved at 6:35:08 PM, on 2/2/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Common Files\AOL\1133832770\ee\services\sscFirewallPlugin\ver1_10_3_1\aolavupd.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\PROGRA~1\mcafee.com\ANTIVI~1\mcshield.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\mcafee.com\antivirus\oasclnt.exe
C:\Program Files\mcafee.com\antivirus\mcvsescn.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\AOL\1133832770\ee\services\sscFirewallPlugin\ver1_10_3_1\SSCEvtHdlr.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\unzipped\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
N4 - Mozilla: user_pref("browser.search.defaultengine", "http://www.google.com/"); (C:\Documents and Settings\Don\Application Data\Mozilla\Profiles\default\m2mh74y7.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\mcafee.com\antivirus\oasclnt.exe
O4 - HKLM\..\Run: [EmailScan] C:\Program Files\mcafee.com\antivirus\mcvsescn.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 3.0\resources\en-US\local\search.html
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Absolute Poker - {EFFF8D47-D060-4108-B761-E8EC86622E56} - C:\Documents and Settings\All Users\Start Menu\Programs\Absolute Poker\Absolute Poker.lnk
O9 - Extra 'Tools' menuitem: Absolute Poker - {EFFF8D47-D060-4108-B761-E8EC86622E56} - C:\Documents and Settings\All Users\Start Menu\Programs\Absolute Poker\Absolute Poker.lnk
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {37DF41B2-61DB-4CAC-A755-CFB3C7EE7F40} (AOL Content Update) - http://esupport.aol....oach_core_1.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.com...kup/qdiagcc.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg...l_v1-0-3-36.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.pw.a...77/mcinsctl.cab
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.kodakgall..._1/axofupld.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.pw.a...,18/mcgdmgr.cab
O18 - Protocol: x-atng - {7E8717B0-D862-11D5-8C9E-00010304F989} - C:\Program Files\Fidelity Investments\Fidelity Active Trader\System\atngprot.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: AOL Antivirus Update Service (aolavupd) - America Online - C:\Program Files\Common Files\AOL\1133832770\ee\services\sscFirewallPlugin\ver1_10_3_1\aolavupd.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: McAfee McShield (McShield) - McAfee Inc. - C:\PROGRA~1\mcafee.com\ANTIVI~1\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Networks Associates Technology, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
==========================
  • 0

#27
ppbsa

ppbsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
now I have a new temp sub folder labeled msohtml1 with another sub folder labeled 01 both with no files?

here's a log:

Folders found in C:\WINDOWS\Temp
-------------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is CCD7-9337

Directory of C:\WINDOWS\Temp

01/26/2006 06:07 PM <DIR> ASHeuristic
02/02/2006 06:30 PM <DIR> ..
02/02/2006 06:30 PM <DIR> .
0 File(s) 0 bytes

Directory of C:\WINDOWS\Temp\ASHeuristic

01/26/2006 06:07 PM <DIR> ..
01/26/2006 06:07 PM <DIR> .
0 File(s) 0 bytes

Total Files Listed:
0 File(s) 0 bytes
5 Dir(s) 48,742,174,720 bytes free


Folders found in C:\Documents and Settings\Don\Local Settings\Temp
-------------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is CCD7-9337

Directory of C:\Documents and Settings\Don\Local Settings\Temp

02/02/2006 06:48 PM <DIR> msohtml1
02/02/2006 06:50 PM <DIR> ..
02/02/2006 06:50 PM <DIR> .
0 File(s) 0 bytes

Directory of C:\Documents and Settings\Don\Local Settings\Temp\msohtml1

02/02/2006 06:48 PM <DIR> ..
02/02/2006 06:48 PM <DIR> 01
02/02/2006 06:48 PM <DIR> .
0 File(s) 0 bytes

Directory of C:\Documents and Settings\Don\Local Settings\Temp\msohtml1\01

02/02/2006 06:48 PM <DIR> ..
02/02/2006 06:48 PM <DIR> .
0 File(s) 0 bytes

Total Files Listed:
0 File(s) 0 bytes
8 Dir(s) 48,742,170,624 bytes free

Edited by ppbsa, 02 February 2006 - 05:51 PM.

  • 0

#28
Buckeye_Sam

Buckeye_Sam

    Malware Expert

  • Member
  • PipPipPipPipPipPipPipPip
  • 10,019 posts
You should understand that as you use your computer, temp files are created by the programs you run. It's perfectly normal as long as it's not excessive like what you were having before. And that seemed to have stopped, so it appears that one of those programs that was running at startup was creating the tmp files.

Now I have a question for you. I see you are running Mcafee, both antivirus and firewall. So what exactly is the AOL security center?
  • 0

#29
ppbsa

ppbsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
I had purchased my own security package through McAfee when I signed up for RoadRunner. Just before I had to renew I found that because I was an AOL member and Time Warner owns both, I could keep AOL for free and get a 6 month discount on my RR fees. Keeping AOL gave me free McAfee security via AOL's Security Center. It includes spyware, virus, phishing, spampop-up protection including a computer check-up feature as well as network monitoring (if I were on a network) and money alert protection.

I removed Quicken and Quick Time but still the huge collection of temp files. I begining to think it's from the Security Center was going to send a note to AOl teck group for info. I'll post another log and Temp.bat so you can see what's generated since last night. Not what I would call normal unless there in a process to purge these after a certian time or volume.
  • 0

#30
ppbsa

ppbsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
Temp.bat log:



Folders found in C:\WINDOWS\Temp
-------------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is CCD7-9337

Directory of C:\WINDOWS\Temp

01/26/2006 06:07 PM <DIR> ASHeuristic
02/03/2006 04:43 PM <DIR> ..
02/03/2006 04:43 PM <DIR> .
0 File(s) 0 bytes

Directory of C:\WINDOWS\Temp\ASHeuristic

01/26/2006 06:07 PM <DIR> ..
01/26/2006 06:07 PM <DIR> .
0 File(s) 0 bytes

Total Files Listed:
0 File(s) 0 bytes
5 Dir(s) 48,800,706,560 bytes free


Folders found in C:\Documents and Settings\Don\Local Settings\Temp
-------------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is CCD7-9337

Directory of C:\Documents and Settings\Don\Local Settings\Temp

02/02/2006 09:27 PM 2,667 verD0.tmp
02/02/2006 09:27 PM 2,667 verD1.tmp
02/02/2006 09:27 PM 2,667 verD2.tmp
02/02/2006 09:27 PM 2,667 verD3.tmp
02/02/2006 09:27 PM 2,667 verD4.tmp
02/02/2006 09:27 PM 2,667 verD5.tmp
02/02/2006 09:27 PM 2,667 verD6.tmp
02/02/2006 09:27 PM 2,667 verD7.tmp
02/02/2006 09:34 PM 2,667 verD8.tmp
02/02/2006 09:34 PM 2,667 verD9.tmp
02/02/2006 09:34 PM 2,667 verDA.tmp
02/02/2006 09:34 PM 2,667 verDB.tmp
02/02/2006 09:34 PM 2,667 verDC.tmp
02/02/2006 09:34 PM 2,667 verDD.tmp
02/02/2006 09:34 PM 2,667 verDE.tmp
02/02/2006 09:34 PM 2,667 verDF.tmp
02/02/2006 09:36 PM 2,667 verE0.tmp
02/02/2006 09:36 PM 2,667 verE1.tmp
02/02/2006 09:36 PM 2,667 verE2.tmp
02/02/2006 09:36 PM 2,667 verE3.tmp
02/02/2006 09:41 PM 2,667 verE4.tmp
02/02/2006 09:41 PM 2,667 verE5.tmp
02/02/2006 09:41 PM 2,667 verE6.tmp
02/02/2006 09:41 PM 2,667 verE7.tmp
02/02/2006 09:41 PM 2,667 verE8.tmp
02/02/2006 09:41 PM 2,667 verE9.tmp
02/02/2006 09:41 PM 2,667 verEA.tmp
02/02/2006 09:41 PM 2,667 verEB.tmp
02/02/2006 09:46 PM 2,667 verEC.tmp
02/02/2006 09:46 PM 2,667 verED.tmp
02/02/2006 09:46 PM 2,667 verEE.tmp
02/02/2006 09:46 PM 2,667 verEF.tmp
02/02/2006 09:47 PM 2,667 verF0.tmp
02/02/2006 09:47 PM 2,667 verF1.tmp
02/02/2006 09:47 PM 2,667 verF2.tmp
02/02/2006 09:47 PM 2,667 verF3.tmp
02/02/2006 09:54 PM 2,667 verF4.tmp
02/02/2006 09:54 PM 2,667 verF5.tmp
02/02/2006 09:54 PM 2,667 verF6.tmp
02/02/2006 09:54 PM 2,667 verF7.tmp
02/02/2006 10:01 PM 2,667 verF8.tmp
02/02/2006 10:01 PM 2,667 verF9.tmp
02/02/2006 10:01 PM 2,667 verFA.tmp
02/02/2006 10:01 PM 2,667 verFB.tmp
02/02/2006 10:01 PM 2,667 verFC.tmp
02/02/2006 10:01 PM 2,667 verFD.tmp
02/02/2006 10:01 PM 2,667 verFE.tmp
02/02/2006 10:01 PM 2,667 verFF.tmp
02/02/2006 10:08 PM 2,667 ver100.tmp
02/02/2006 10:08 PM 2,667 ver101.tmp
02/02/2006 10:08 PM 2,667 ver102.tmp
02/02/2006 10:08 PM 2,667 ver103.tmp
02/02/2006 10:08 PM 2,667 ver104.tmp
02/02/2006 10:08 PM 2,667 ver105.tmp
02/02/2006 10:08 PM 2,667 ver106.tmp
02/02/2006 10:08 PM 2,667 ver107.tmp
02/02/2006 10:13 PM 2,667 ver108.tmp
02/02/2006 10:13 PM 2,667 ver109.tmp
02/02/2006 10:13 PM 2,667 ver10A.tmp
02/02/2006 10:13 PM 2,667 ver10B.tmp
02/02/2006 10:13 PM 2,667 ver10C.tmp
02/02/2006 10:13 PM 2,667 ver10D.tmp
02/02/2006 10:13 PM 2,667 ver10E.tmp
02/02/2006 10:13 PM 2,667 ver10F.tmp
02/02/2006 10:20 PM 2,667 ver110.tmp
02/02/2006 10:20 PM 2,667 ver111.tmp
02/02/2006 10:20 PM 2,667 ver112.tmp
02/02/2006 10:20 PM 2,667 ver113.tmp
02/02/2006 10:20 PM 2,667 ver114.tmp
02/02/2006 10:20 PM 2,667 ver115.tmp
02/02/2006 10:20 PM 2,667 ver116.tmp
02/02/2006 10:20 PM 2,667 ver117.tmp
02/02/2006 10:28 PM 2,667 ver119.tmp
02/02/2006 10:28 PM 2,667 ver11A.tmp
02/02/2006 10:28 PM 2,667 ver11B.tmp
02/02/2006 10:28 PM 2,667 ver11C.tmp
02/02/2006 10:28 PM 2,667 ver11D.tmp
02/02/2006 10:28 PM 2,667 ver11E.tmp
02/02/2006 10:28 PM 2,667 ver11F.tmp
02/02/2006 10:28 PM 2,667 ver120.tmp
02/02/2006 10:35 PM 2,667 ver121.tmp
02/02/2006 10:35 PM 2,667 ver122.tmp
02/02/2006 10:35 PM 2,667 ver123.tmp
02/02/2006 10:35 PM 2,667 ver124.tmp
02/02/2006 10:35 PM 2,667 ver125.tmp
02/02/2006 10:35 PM 2,667 ver126.tmp
02/02/2006 10:35 PM 2,667 ver127.tmp
02/02/2006 10:35 PM 2,667 ver128.tmp
02/02/2006 10:36 PM 2,667 ver129.tmp
02/02/2006 10:36 PM 2,667 ver12A.tmp
02/02/2006 10:36 PM 2,667 ver12B.tmp
02/02/2006 10:36 PM 2,667 ver12C.tmp
02/02/2006 10:42 PM 2,667 ver12D.tmp
02/02/2006 10:42 PM 2,667 ver12E.tmp
02/02/2006 10:42 PM 2,667 ver12F.tmp
02/02/2006 10:42 PM 2,667 ver130.tmp
02/02/2006 10:42 PM 2,667 ver131.tmp
02/02/2006 10:42 PM 2,667 ver132.tmp
02/02/2006 10:42 PM 2,667 ver133.tmp
02/02/2006 10:42 PM 2,667 ver134.tmp
02/02/2006 10:52 PM 2,667 ver135.tmp
02/02/2006 10:52 PM 2,667 ver136.tmp
02/02/2006 10:52 PM 2,667 ver137.tmp
02/02/2006 10:52 PM 2,667 ver138.tmp
02/02/2006 10:52 PM 2,667 ver139.tmp
02/02/2006 10:52 PM 2,667 ver13A.tmp
02/02/2006 10:52 PM 2,667 ver13B.tmp
02/02/2006 10:52 PM 2,667 ver13C.tmp
02/02/2006 10:59 PM 2,667 ver13D.tmp
02/02/2006 10:59 PM 2,667 ver13E.tmp
02/02/2006 10:59 PM 2,667 ver13F.tmp
02/02/2006 10:59 PM 2,667 ver140.tmp
02/02/2006 10:59 PM 2,667 ver141.tmp
02/02/2006 10:59 PM 2,667 ver142.tmp
02/02/2006 10:59 PM 2,667 ver143.tmp
02/02/2006 10:59 PM 2,667 ver144.tmp
02/02/2006 11:04 PM 2,667 ver145.tmp
02/02/2006 11:04 PM 2,667 ver146.tmp
02/02/2006 11:04 PM 2,667 ver147.tmp
02/02/2006 11:04 PM 2,667 ver148.tmp
02/02/2006 11:04 PM 2,667 ver149.tmp
02/02/2006 11:04 PM 2,667 ver14A.tmp
02/02/2006 11:04 PM 2,667 ver14B.tmp
02/02/2006 11:04 PM 2,667 ver14C.tmp
02/02/2006 11:15 PM 2,667 ver14D.tmp
02/02/2006 11:15 PM 2,667 ver14E.tmp
02/02/2006 11:15 PM 2,667 ver14F.tmp
02/02/2006 11:15 PM 2,667 ver150.tmp
02/02/2006 11:51 PM 2,667 ver151.tmp
02/02/2006 11:51 PM 2,667 ver152.tmp
02/02/2006 11:51 PM 2,667 ver153.tmp
02/02/2006 11:51 PM 2,667 ver154.tmp
02/03/2006 12:15 AM 2,667 ver155.tmp
02/03/2006 12:15 AM 2,667 ver156.tmp
02/03/2006 12:15 AM 2,667 ver157.tmp
02/03/2006 12:15 AM 2,667 ver158.tmp
02/03/2006 12:38 AM 2,667 ver159.tmp
02/03/2006 12:38 AM 2,667 ver15A.tmp
02/03/2006 12:38 AM 2,667 ver15B.tmp
02/03/2006 12:38 AM 2,667 ver15C.tmp
02/03/2006 12:41 AM 2,667 ver15D.tmp
02/03/2006 12:41 AM 2,667 ver15E.tmp
02/03/2006 12:41 AM 2,667 ver15F.tmp
02/03/2006 12:41 AM 2,667 ver160.tmp
02/03/2006 12:41 AM 2,667 ver161.tmp
02/03/2006 12:41 AM 2,667 ver162.tmp
02/03/2006 12:41 AM 2,667 ver163.tmp
02/03/2006 12:41 AM 2,667 ver164.tmp
02/03/2006 12:49 AM 2,667 ver165.tmp
02/03/2006 12:49 AM 2,667 ver166.tmp
02/03/2006 12:49 AM 2,667 ver167.tmp
02/03/2006 12:49 AM 2,667 ver168.tmp
02/03/2006 12:49 AM 2,667 ver169.tmp
02/03/2006 12:49 AM 2,667 ver16A.tmp
02/03/2006 12:49 AM 2,667 ver16B.tmp
02/03/2006 12:49 AM 2,667 ver16C.tmp
02/03/2006 01:04 AM 2,667 ver16D.tmp
02/03/2006 01:04 AM 2,667 ver16E.tmp
02/03/2006 01:04 AM 2,667 ver16F.tmp
02/03/2006 01:04 AM 2,667 ver170.tmp
02/03/2006 01:04 AM 2,667 ver171.tmp
02/03/2006 01:04 AM 2,667 ver172.tmp
02/03/2006 01:04 AM 2,667 ver173.tmp
02/03/2006 01:04 AM 2,667 ver174.tmp
02/03/2006 01:11 AM 2,667 ver175.tmp
02/03/2006 01:11 AM 2,667 ver176.tmp
02/03/2006 01:11 AM 2,667 ver177.tmp
02/03/2006 01:11 AM 2,667 ver178.tmp
02/03/2006 01:11 AM 2,667 ver179.tmp
02/03/2006 01:11 AM 2,667 ver17A.tmp
02/03/2006 01:11 AM 2,667 ver17B.tmp
02/03/2006 01:11 AM 2,667 ver17C.tmp
02/03/2006 01:24 AM 2,667 ver17D.tmp
02/03/2006 01:24 AM 2,667 ver17E.tmp
02/03/2006 01:24 AM 2,667 ver17F.tmp
02/03/2006 01:24 AM 2,667 ver180.tmp
02/03/2006 01:24 AM 2,667 ver181.tmp
02/03/2006 01:24 AM 2,667 ver182.tmp
02/03/2006 01:24 AM 2,667 ver183.tmp
02/03/2006 01:24 AM 2,667 ver184.tmp
02/03/2006 01:30 AM 2,667 ver185.tmp
02/03/2006 01:30 AM 2,667 ver186.tmp
02/03/2006 01:30 AM 2,667 ver187.tmp
02/03/2006 01:30 AM 2,667 ver188.tmp
02/03/2006 01:43 AM 2,667 ver189.tmp
02/03/2006 01:43 AM 2,667 ver18A.tmp
02/03/2006 01:43 AM 2,667 ver18B.tmp
02/03/2006 01:43 AM 2,667 ver18C.tmp
02/03/2006 01:59 AM 2,667 ver18D.tmp
02/03/2006 01:59 AM 2,667 ver18E.tmp
02/03/2006 01:59 AM 2,667 ver18F.tmp
02/03/2006 01:59 AM 2,667 ver190.tmp
02/03/2006 01:59 AM 2,667 ver191.tmp
02/03/2006 01:59 AM 2,667 ver192.tmp
02/03/2006 01:59 AM 2,667 ver193.tmp
02/03/2006 01:59 AM 2,667 ver194.tmp
02/03/2006 02:11 AM 2,667 ver195.tmp
02/03/2006 02:11 AM 2,667 ver196.tmp
02/03/2006 02:11 AM 2,667 ver197.tmp
02/03/2006 02:11 AM 2,667 ver198.tmp
02/03/2006 02:11 AM 2,667 ver199.tmp
02/03/2006 02:11 AM 2,667 ver19A.tmp
02/03/2006 02:11 AM 2,667 ver19B.tmp
02/03/2006 02:11 AM 2,667 ver19C.tmp
02/03/2006 02:18 AM 2,667 ver19D.tmp
02/03/2006 02:18 AM 2,667 ver19E.tmp
02/03/2006 02:18 AM 2,667 ver19F.tmp
02/03/2006 02:18 AM 2,667 ver1A0.tmp
02/03/2006 02:19 AM 2,667 ver1A1.tmp
02/03/2006 02:19 AM 2,667 ver1A2.tmp
02/03/2006 02:19 AM 2,667 ver1A3.tmp
02/03/2006 02:19 AM 2,667 ver1A4.tmp
02/03/2006 02:29 AM 2,667 ver1A5.tmp
02/03/2006 02:29 AM 2,667 ver1A6.tmp
02/03/2006 02:29 AM 2,667 ver1A7.tmp
02/03/2006 02:29 AM 2,667 ver1A8.tmp
02/03/2006 02:41 AM 2,667 ver1A9.tmp
02/03/2006 02:41 AM 2,667 ver1AA.tmp
02/03/2006 02:41 AM 2,667 ver1AB.tmp
02/03/2006 02:41 AM 2,667 ver1AC.tmp
02/03/2006 02:41 AM 2,667 ver1AD.tmp
02/03/2006 02:41 AM 2,667 ver1AE.tmp
02/03/2006 02:41 AM 2,667 ver1AF.tmp
02/03/2006 02:41 AM 2,667 ver1B0.tmp
02/03/2006 02:49 AM 2,667 ver1B1.tmp
02/03/2006 02:49 AM 2,667 ver1B2.tmp
02/03/2006 02:49 AM 2,667 ver1B3.tmp
02/03/2006 02:49 AM 2,667 ver1B4.tmp
02/03/2006 02:49 AM 2,667 ver1B5.tmp
02/03/2006 02:49 AM 2,667 ver1B6.tmp
02/03/2006 02:49 AM 2,667 ver1B7.tmp
02/03/2006 02:49 AM 2,667 ver1B8.tmp
02/03/2006 03:15 AM 2,667 ver1BA.tmp
02/03/2006 03:15 AM 2,667 ver1BB.tmp
02/03/2006 03:15 AM 2,667 ver1BC.tmp
02/03/2006 03:15 AM 2,667 ver1BD.tmp
02/03/2006 03:16 AM 2,667 ver1BE.tmp
02/03/2006 03:16 AM 2,667 ver1BF.tmp
02/03/2006 03:16 AM 2,667 ver1C0.tmp
02/03/2006 03:16 AM 2,667 ver1C1.tmp
02/03/2006 03:28 AM 2,667 ver1C2.tmp
02/03/2006 03:28 AM 2,667 ver1C3.tmp
02/03/2006 03:28 AM 2,667 ver1C4.tmp
02/03/2006 03:28 AM 2,667 ver1C5.tmp
02/03/2006 03:29 AM 2,667 ver1C6.tmp
02/03/2006 03:29 AM 2,667 ver1C7.tmp
02/03/2006 03:29 AM 2,667 ver1C8.tmp
02/03/2006 03:29 AM 2,667 ver1C9.tmp
02/03/2006 03:36 AM 2,667 ver1CA.tmp
02/03/2006 03:36 AM 2,667 ver1CB.tmp
02/03/2006 03:36 AM 2,667 ver1CC.tmp
02/03/2006 03:36 AM 2,667 ver1CD.tmp
02/03/2006 03:36 AM 2,667 ver1CE.tmp
02/03/2006 03:36 AM 2,667 ver1CF.tmp
02/03/2006 03:36 AM 2,667 ver1D0.tmp
02/03/2006 03:36 AM 2,667 ver1D1.tmp
02/03/2006 03:44 AM 2,667 ver1D2.tmp
02/03/2006 03:44 AM 2,667 ver1D3.tmp
02/03/2006 03:44 AM 2,667 ver1D4.tmp
02/03/2006 03:44 AM 2,667 ver1D5.tmp
02/03/2006 03:44 AM 2,667 ver1D6.tmp
02/03/2006 03:44 AM 2,667 ver1D7.tmp
02/03/2006 03:44 AM 2,667 ver1D8.tmp
02/03/2006 03:44 AM 2,667 ver1D9.tmp
02/03/2006 04:04 AM 2,667 ver1DA.tmp
02/03/2006 04:04 AM 2,667 ver1DB.tmp
02/03/2006 04:04 AM 2,667 ver1DC.tmp
02/03/2006 04:04 AM 2,667 ver1DD.tmp
02/03/2006 04:04 AM 2,667 ver1DE.tmp
02/03/2006 04:04 AM 2,667 ver1DF.tmp
02/03/2006 04:04 AM 2,667 ver1E0.tmp
02/03/2006 04:04 AM 2,667 ver1E1.tmp
02/03/2006 04:10 AM 2,667 ver1E2.tmp
02/03/2006 04:10 AM 2,667 ver1E3.tmp
02/03/2006 04:10 AM 2,667 ver1E4.tmp
02/03/2006 04:10 AM 2,667 ver1E5.tmp
02/03/2006 04:19 AM 2,667 ver1E6.tmp
02/03/2006 04:19 AM 2,667 ver1E7.tmp
02/03/2006 04:19 AM 2,667 ver1E8.tmp
02/03/2006 04:19 AM 2,667 ver1E9.tmp
02/03/2006 04:35 AM 2,667 ver1EA.tmp
02/03/2006 04:35 AM 2,667 ver1EB.tmp
02/03/2006 04:35 AM 2,667 ver1EC.tmp
02/03/2006 04:35 AM 2,667 ver1ED.tmp
02/03/2006 04:46 AM 2,667 ver1EE.tmp
02/03/2006 04:46 AM 2,667 ver1EF.tmp
02/03/2006 04:46 AM 2,667 ver1F0.tmp
02/03/2006 04:46 AM 2,667 ver1F1.tmp
02/03/2006 04:54 AM 2,667 ver1F2.tmp
02/03/2006 04:54 AM 2,667 ver1F3.tmp
02/03/2006 04:54 AM 2,667 ver1F4.tmp
02/03/2006 04:54 AM 2,667 ver1F5.tmp
02/03/2006 04:54 AM 2,667 ver1F6.tmp
02/03/2006 04:54 AM 2,667 ver1F7.tmp
02/03/2006 04:54 AM 2,667 ver1F8.tmp
02/03/2006 04:54 AM 2,667 ver1F9.tmp
02/03/2006 05:01 AM 2,667 ver1FB.tmp
02/03/2006 05:01 AM 2,667 ver1FC.tmp
02/03/2006 05:01 AM 2,667 ver1FD.tmp
02/03/2006 05:01 AM 2,667 ver1FE.tmp
02/03/2006 05:01 AM 2,667 ver1FF.tmp
02/03/2006 05:01 AM 2,667 ver200.tmp
02/03/2006 05:01 AM 2,667 ver201.tmp
02/03/2006 05:01 AM 2,667 ver202.tmp
02/03/2006 05:14 AM 2,667 ver203.tmp
02/03/2006 05:14 AM 2,667 ver204.tmp
02/03/2006 05:14 AM 2,667 ver205.tmp
02/03/2006 05:14 AM 2,667 ver206.tmp
02/03/2006 05:14 AM 2,667 ver207.tmp
02/03/2006 05:14 AM 2,667 ver208.tmp
02/03/2006 05:14 AM 2,667 ver209.tmp
02/03/2006 05:14 AM 2,667 ver20A.tmp
02/03/2006 05:21 AM 2,667 ver20B.tmp
02/03/2006 05:21 AM 2,667 ver20C.tmp
02/03/2006 05:21 AM 2,667 ver20D.tmp
02/03/2006 05:21 AM 2,667 ver20E.tmp
02/03/2006 05:21 AM 2,667 ver20F.tmp
02/03/2006 05:21 AM 2,667 ver210.tmp
02/03/2006 05:21 AM 2,667 ver211.tmp
02/03/2006 05:21 AM 2,667 ver212.tmp
02/03/2006 05:29 AM 2,667 ver213.tmp
02/03/2006 05:29 AM 2,667 ver214.tmp
02/03/2006 05:29 AM 2,667 ver215.tmp
02/03/2006 05:29 AM 2,667 ver216.tmp
02/03/2006 05:29 AM 2,667 ver217.tmp
02/03/2006 05:29 AM 2,667 ver218.tmp
02/03/2006 05:29 AM 2,667 ver219.tmp
02/03/2006 05:29 AM 2,667 ver21A.tmp
02/03/2006 05:36 AM 2,667 ver21B.tmp
02/03/2006 05:36 AM 2,667 ver21C.tmp
02/03/2006 05:36 AM 2,667 ver21D.tmp
02/03/2006 05:36 AM 2,667 ver21E.tmp
02/03/2006 05:36 AM 2,667 ver21F.tmp
02/03/2006 05:36 AM 2,667 ver220.tmp
02/03/2006 05:36 AM 2,667 ver221.tmp
02/03/2006 05:36 AM 2,667 ver222.tmp
02/03/2006 05:44 AM 2,667 ver223.tmp
02/03/2006 05:44 AM 2,667 ver224.tmp
02/03/2006 05:44 AM 2,667 ver225.tmp
02/03/2006 05:44 AM 2,667 ver226.tmp
02/03/2006 05:56 AM 2,667 ver227.tmp
02/03/2006 05:56 AM 2,667 ver228.tmp
02/03/2006 05:56 AM 2,667 ver229.tmp
02/03/2006 05:56 AM 2,667 ver22A.tmp
02/03/2006 05:56 AM 2,667 ver22B.tmp
02/03/2006 05:56 AM 2,667 ver22C.tmp
02/03/2006 05:56 AM 2,667 ver22D.tmp
02/03/2006 05:56 AM 2,667 ver22E.tmp
02/03/2006 06:04 AM 2,667 ver231.tmp
02/03/2006 06:04 AM 2,667 ver232.tmp
02/03/2006 06:04 AM 2,667 ver233.tmp
02/03/2006 06:04 AM 2,667 ver234.tmp
02/03/2006 06:04 AM 2,667 ver235.tmp
02/03/2006 06:04 AM 2,667 ver236.tmp
02/03/2006 06:04 AM 2,667 ver237.tmp
02/03/2006 06:04 AM 2,667 ver238.tmp
02/03/2006 06:11 AM 2,667 ver239.tmp
02/03/2006 06:11 AM 2,667 ver23A.tmp
02/03/2006 06:11 AM 2,667 ver23B.tmp
02/03/2006 06:11 AM 2,667 ver23C.tmp
02/03/2006 06:11 AM 2,667 ver23D.tmp
02/03/2006 06:11 AM 2,667 ver23E.tmp
02/03/2006 06:11 AM 2,667 ver23F.tmp
02/03/2006 06:11 AM 2,667 ver240.tmp
02/03/2006 06:19 AM 2,667 ver241.tmp
02/03/2006 06:19 AM 2,667 ver242.tmp
02/03/2006 06:19 AM 2,667 ver243.tmp
02/03/2006 06:19 AM 2,667 ver244.tmp
02/03/2006 06:19 AM 2,667 ver245.tmp
02/03/2006 06:19 AM 2,667 ver246.tmp
02/03/2006 06:19 AM 2,667 ver247.tmp
02/03/2006 06:19 AM 2,667 ver248.tmp
02/03/2006 06:24 AM 2,667 ver249.tmp
02/03/2006 06:24 AM 2,667 ver24A.tmp
02/03/2006 06:24 AM 2,667 ver24B.tmp
02/03/2006 06:24 AM 2,667 ver24C.tmp
02/03/2006 06:31 AM 2,667 ver24D.tmp
02/03/2006 06:31 AM 2,667 ver24E.tmp
02/03/2006 06:31 AM 2,667 ver24F.tmp
02/03/2006 06:31 AM 2,667 ver250.tmp
02/03/2006 06:59 AM 2,667 ver251.tmp
02/03/2006 06:59 AM 2,667 ver252.tmp
02/03/2006 06:59 AM 2,667 ver253.tmp
02/03/2006 06:59 AM 2,667 ver254.tmp
02/03/2006 06:59 AM 2,667 ver255.tmp
02/03/2006 06:59 AM 2,667 ver256.tmp
02/03/2006 06:59 AM 2,667 ver257.tmp
02/03/2006 06:59 AM 2,667 ver258.tmp
02/03/2006 07:06 AM 2,667 ver259.tmp
02/03/2006 07:06 AM 2,667 ver25A.tmp
02/03/2006 07:06 AM 2,667 ver25B.tmp
02/03/2006 07:06 AM 2,667 ver25C.tmp
02/03/2006 07:06 AM 2,667 ver25D.tmp
02/03/2006 07:06 AM 2,667 ver25E.tmp
02/03/2006 07:06 AM 2,667 ver25F.tmp
02/03/2006 07:06 AM 2,667 ver260.tmp
02/03/2006 07:15 AM 2,667 ver262.tmp
02/03/2006 07:15 AM 2,667 ver263.tmp
02/03/2006 07:15 AM 2,667 ver264.tmp
02/03/2006 07:15 AM 2,667 ver265.tmp
02/03/2006 07:19 AM 2,667 ver266.tmp
02/03/2006 07:19 AM 2,667 ver267.tmp
02/03/2006 07:19 AM 2,667 ver268.tmp
02/03/2006 07:19 AM 2,667 ver269.tmp
02/03/2006 07:19 AM 2,667 ver26A.tmp
02/03/2006 07:19 AM 2,667 ver26B.tmp
02/03/2006 07:19 AM 2,667 ver26C.tmp
02/03/2006 07:19 AM 2,667 ver26D.tmp
02/03/2006 07:26 AM 2,667 ver26E.tmp
02/03/2006 07:26 AM 2,667 ver26F.tmp
02/03/2006 07:26 AM 2,667 ver270.tmp
02/03/2006 07:26 AM 2,667 ver271.tmp
02/03/2006 07:26 AM 2,667 ver272.tmp
02/03/2006 07:26 AM 2,667 ver273.tmp
02/03/2006 07:26 AM 2,667 ver274.tmp
02/03/2006 07:26 AM 2,667 ver275.tmp
02/03/2006 07:35 AM 2,667 ver276.tmp
02/03/2006 07:35 AM 2,667 ver277.tmp
02/03/2006 07:35 AM 2,667 ver278.tmp
02/03/2006 07:35 AM 2,667 ver279.tmp
02/03/2006 07:35 AM 2,667 ver27A.tmp
02/03/2006 07:35 AM 2,667 ver27B.tmp
02/03/2006 07:35 AM 2,667 ver27C.tmp
02/03/2006 07:35 AM 2,667 ver27D.tmp
02/03/2006 07:49 AM 2,667 ver27E.tmp
02/03/2006 07:49 AM 2,667 ver27F.tmp
02/03/2006 07:49 AM 2,667 ver280.tmp
02/03/2006 07:49 AM 2,667 ver281.tmp
02/03/2006 07:49 AM 2,667 ver282.tmp
02/03/2006 07:49 AM 2,667 ver283.tmp
02/03/2006 07:49 AM 2,667 ver284.tmp
02/03/2006 07:49 AM 2,667 ver285.tmp
02/03/2006 07:56 AM 2,667 ver286.tmp
02/03/2006 07:56 AM 2,667 ver287.tmp
02/03/2006 07:56 AM 2,667 ver288.tmp
02/03/2006 07:56 AM 2,667 ver289.tmp
02/03/2006 07:56 AM 2,667 ver28A.tmp
02/03/2006 07:56 AM 2,667 ver28B.tmp
02/03/2006 07:56 AM 2,667 ver28C.tmp
02/03/2006 07:56 AM 2,667 ver28D.tmp
02/03/2006 08:04 AM 2,667 ver28E.tmp
02/03/2006 08:04 AM 2,667 ver28F.tmp
02/03/2006 08:04 AM 2,667 ver290.tmp
02/03/2006 08:04 AM 2,667 ver291.tmp
02/03/2006 08:04 AM 2,667 ver292.tmp
02/03/2006 08:04 AM 2,667 ver293.tmp
02/03/2006 08:04 AM 2,667 ver294.tmp
02/03/2006 08:04 AM 2,667 ver295.tmp
02/03/2006 08:11 AM 2,667 ver296.tmp
02/03/2006 08:11 AM 2,667 ver297.tmp
02/03/2006 08:11 AM 2,667 ver298.tmp
02/03/2006 08:11 AM 2,667 ver299.tmp
02/03/2006 08:11 AM 2,667 ver29A.tmp
02/03/2006 08:11 AM 2,667 ver29B.tmp
02/03/2006 08:11 AM 2,667 ver29C.tmp
02/03/2006 08:11 AM 2,667 ver29D.tmp
02/03/2006 08:24 AM 2,667 ver29E.tmp
02/03/2006 08:24 AM 2,667 ver29F.tmp
02/03/2006 08:24 AM 2,667 ver2A0.tmp
02/03/2006 08:24 AM 2,667 ver2A1.tmp
02/03/2006 08:24 AM 2,667 ver2A2.tmp
02/03/2006 08:24 AM 2,667 ver2A3.tmp
02/03/2006 08:24 AM 2,667 ver2A4.tmp
02/03/2006 08:24 AM 2,667 ver2A5.tmp
02/03/2006 08:34 AM 2,667 ver2A6.tmp
02/03/2006 08:34 AM 2,667 ver2A7.tmp
02/03/2006 08:34 AM 2,667 ver2A8.tmp
02/03/2006 08:34 AM 2,667 ver2A9.tmp
02/03/2006 09:06 AM 2,667 ver2AA.tmp
02/03/2006 09:06 AM 2,667 ver2AB.tmp
02/03/2006 09:06 AM 2,667 ver2AC.tmp
02/03/2006 09:06 AM 2,667 ver2AD.tmp
02/03/2006 09:07 AM 2,667 ver2AE.tmp
02/03/2006 09:07 AM 2,667 ver2AF.tmp
02/03/2006 09:07 AM 2,667 ver2B0.tmp
02/03/2006 09:07 AM 2,667 ver2B1.tmp
02/03/2006 09:14 AM 2,667 ver2B2.tmp
02/03/2006 09:14 AM 2,667 ver2B3.tmp
02/03/2006 09:14 AM 2,667 ver2B4.tmp
02/03/2006 09:14 AM 2,667 ver2B5.tmp
02/03/2006 09:14 AM 2,667 ver2B6.tmp
02/03/2006 09:14 AM 2,667 ver2B7.tmp
02/03/2006 09:14 AM 2,667 ver2B8.tmp
02/03/2006 09:14 AM 2,667 ver2B9.tmp
02/03/2006 09:41 AM 2,667 ver2BA.tmp
02/03/2006 09:41 AM 2,667 ver2BB.tmp
02/03/2006 09:41 AM 2,667 ver2BC.tmp
02/03/2006 09:41 AM 2,667 ver2BD.tmp
02/03/2006 09:41 AM 2,667 ver2BE.tmp
02/03/2006 09:41 AM 2,667 ver2BF.tmp
02/03/2006 09:41 AM 2,667 ver2C0.tmp
02/03/2006 09:41 AM 2,667 ver2C1.tmp
02/03/2006 09:48 AM 2,667 ver2C2.tmp
02/03/2006 09:48 AM 2,667 ver2C3.tmp
02/03/2006 09:48 AM 2,667 ver2C4.tmp
02/03/2006 09:48 AM 2,667 ver2C5.tmp
02/03/2006 09:48 AM 2,667 ver2C6.tmp
02/03/2006 09:48 AM 2,667 ver2C7.tmp
02/03/2006 09:48 AM 2,667 ver2C8.tmp
02/03/2006 09:48 AM 2,667 ver2C9.tmp
02/03/2006 09:55 AM 2,667 ver2CA.tmp
02/03/2006 09:55 AM 2,667 ver2CB.tmp
02/03/2006 09:55 AM 2,667 ver2CC.tmp
02/03/2006 09:55 AM 2,667 ver2CD.tmp
02/03/2006 09:55 AM 2,667 ver2CE.tmp
02/03/2006 09:55 AM 2,667 ver2CF.tmp
02/03/2006 09:55 AM 2,667 ver2D0.tmp
02/03/2006 09:55 AM 2,667 ver2D1.tmp
02/03/2006 10:02 AM 2,667 ver2D2.tmp
02/03/2006 10:02 AM 2,667 ver2D3.tmp
02/03/2006 10:02 AM 2,667 ver2D4.tmp
02/03/2006 10:02 AM 2,667 ver2D5.tmp
02/03/2006 10:02 AM 2,667 ver2D6.tmp
02/03/2006 10:02 AM 2,667 ver2D7.tmp
02/03/2006 10:02 AM 2,667 ver2D8.tmp
02/03/2006 10:02 AM 2,667 ver2D9.tmp
02/03/2006 10:21 AM 2,667 ver2DA.tmp
02/03/2006 10:21 AM 2,667 ver2DB.tmp
02/03/2006 10:21 AM 2,667 ver2DC.tmp
02/03/2006 10:21 AM 2,667 ver2DD.tmp
02/03/2006 10:21 AM 2,667 ver2DE.tmp
02/03/2006 10:21 AM 2,667 ver2DF.tmp
02/03/2006 10:21 AM 2,667 ver2E0.tmp
02/03/2006 10:21 AM 2,667 ver2E1.tmp
02/03/2006 10:30 AM 2,667 ver2E2.tmp
02/03/2006 10:30 AM 2,667 ver2E3.tmp
02/03/2006 10:30 AM 2,667 ver2E4.tmp
02/03/2006 10:30 AM 2,667 ver2E5.tmp
02/03/2006 10:31 AM 2,667 ver2E6.tmp
02/03/2006 10:31 AM 2,667 ver2E7.tmp
02/03/2006 10:31 AM 2,667 ver2E8.tmp
02/03/2006 10:31 AM 2,667 ver2E9.tmp
02/03/2006 10:42 AM 2,667 ver2EA.tmp
02/03/2006 10:42 AM 2,667 ver2EB.tmp
02/03/2006 10:42 AM 2,667 ver2EC.tmp
02/03/2006 10:42 AM 2,667 ver2ED.tmp
02/03/2006 11:03 AM 2,667 ver2EE.tmp
02/03/2006 11:03 AM 2,667 ver2EF.tmp
02/03/2006 11:03 AM 2,667 ver2F0.tmp
02/03/2006 11:03 AM 2,667 ver2F1.tmp
02/03/2006 11:03 AM 2,667 ver2F2.tmp
02/03/2006 11:03 AM 2,667 ver2F3.tmp
02/03/2006 11:03 AM 2,667 ver2F4.tmp
02/03/2006 11:03 AM 2,667 ver2F5.tmp
02/03/2006 11:15 AM 2,667 ver2F6.tmp
02/03/2006 11:15 AM 2,667 ver2F7.tmp
02/03/2006 11:15 AM 2,667 ver2F8.tmp
02/03/2006 11:15 AM 2,667 ver2F9.tmp
02/03/2006 11:23 AM 2,667 ver2FA.tmp
02/03/2006 11:23 AM 2,667 ver2FB.tmp
02/03/2006 11:23 AM 2,667 ver2FC.tmp
02/03/2006 11:23 AM 2,667 ver2FD.tmp
02/03/2006 11:27 AM 2,667 ver2FE.tmp
02/03/2006 11:27 AM 2,667 ver2FF.tmp
02/03/2006 11:27 AM 2,667 ver300.tmp
02/03/2006 11:27 AM 2,667 ver301.tmp
02/03/2006 11:27 AM 2,667 ver302.tmp
02/03/2006 11:27 AM 2,667 ver303.tmp
02/03/2006 11:27 AM 2,667 ver304.tmp
02/03/2006 11:27 AM 2,667 ver305.tmp
02/03/2006 11:40 AM 2,667 ver306.tmp
02/03/2006 11:40 AM 2,667 ver307.tmp
02/03/2006 11:40 AM 2,667 ver308.tmp
02/03/2006 11:40 AM 2,667 ver309.tmp
02/03/2006 11:40 AM 2,667 ver30A.tmp
02/03/2006 11:40 AM 2,667 ver30B.tmp
02/03/2006 11:40 AM 2,667 ver30C.tmp
02/03/2006 11:40 AM 2,667 ver30D.tmp
02/03/2006 11:47 AM 2,667 ver30F.tmp
02/03/2006 11:47 AM 2,667 ver310.tmp
02/03/2006 11:47 AM 2,667 ver311.tmp
02/03/2006 11:47 AM 2,667 ver312.tmp
02/03/2006 11:52 AM 2,667 ver313.tmp
02/03/2006 11:52 AM 2,667 ver314.tmp
02/03/2006 11:52 AM 2,667 ver315.tmp
02/03/2006 11:52 AM 2,667 ver316.tmp
02/03/2006 11:52 AM 2,667 ver317.tmp
02/03/2006 11:52 AM 2,667 ver318.tmp
02/03/2006 11:52 AM 2,667 ver319.tmp
02/03/2006 11:52 AM 2,667 ver31A.tmp
02/03/2006 11:55 AM 2,667 ver31B.tmp
02/03/2006 11:55 AM 2,667 ver31C.tmp
02/03/2006 11:55 AM 2,667 ver31D.tmp
02/03/2006 11:55 AM 2,667 ver31E.tmp
02/03/2006 12:12 PM 2,667 ver31F.tmp
02/03/2006 12:12 PM 2,667 ver320.tmp
02/03/2006 12:12 PM 2,667 ver321.tmp
02/03/2006 12:12 PM 2,667 ver322.tmp
02/03/2006 12:15 PM 2,667 ver323.tmp
02/03/2006 12:15 PM 2,667 ver324.tmp
02/03/2006 12:15 PM 2,667 ver325.tmp
02/03/2006 12:15 PM 2,667 ver326.tmp
02/03/2006 12:15 PM 2,667 ver327.tmp
02/03/2006 12:15 PM 2,667 ver328.tmp
02/03/2006 12:15 PM 2,667 ver329.tmp
02/03/2006 12:15 PM 2,667 ver32A.tmp
02/03/2006 12:25 PM 2,667 ver32B.tmp
02/03/2006 12:25 PM 2,667 ver32C.tmp
02/03/2006 12:25 PM 2,667 ver32D.tmp
02/03/2006 12:25 PM 2,667 ver32E.tmp
02/03/2006 12:29 PM 2,667 ver32F.tmp
02/03/2006 12:29 PM 2,667 ver330.tmp
02/03/2006 12:29 PM 2,667 ver331.tmp
02/03/2006 12:29 PM 2,667 ver332.tmp
02/03/2006 12:30 PM 2,667 ver333.tmp
02/03/2006 12:30 PM 2,667 ver334.tmp
02/03/2006 12:30 PM 2,667 ver335.tmp
02/03/2006 12:30 PM 2,667 ver336.tmp
02/03/2006 12:45 PM 2,667 ver337.tmp
02/03/2006 12:45 PM 2,667 ver338.tmp
02/03/2006 12:45 PM 2,667 ver339.tmp
02/03/2006 12:45 PM 2,667 ver33A.tmp
02/03/2006 12:58 PM 2,667 ver33B.tmp
02/03/2006 12:58 PM 2,667 ver33C.tmp
02/03/2006 12:58 PM 2,667 ver33D.tmp
02/03/2006 12:58 PM 2,667 ver33E.tmp
02/03/2006 12:58 PM 2,667 ver33F.tmp
02/03/2006 12:58 PM 2,667 ver340.tmp
02/03/2006 12:58 PM 2,667 ver341.tmp
02/03/2006 12:58 PM 2,667 ver342.tmp
02/03/2006 01:25 PM 2,667 ver343.tmp
02/03/2006 01:25 PM 2,667 ver344.tmp
02/03/2006 01:25 PM 2,667 ver345.tmp
02/03/2006 01:25 PM 2,667 ver346.tmp
02/03/2006 01:25 PM 2,667 ver347.tmp
02/03/2006 01:25 PM 2,667 ver348.tmp
02/03/2006 01:25 PM 2,667 ver349.tmp
02/03/2006 01:25 PM 2,667 ver34A.tmp
02/03/2006 01:47 PM 2,667 ver34B.tmp
02/03/2006 01:47 PM 2,667 ver34C.tmp
02/03/2006 01:47 PM 2,667 ver34D.tmp
02/03/2006 01:47 PM 2,667 ver34E.tmp
02/03/2006 01:47 PM 2,667 ver34F.tmp
02/03/2006 01:47 PM 2,667 ver350.tmp
02/03/2006 01:47 PM 2,667 ver351.tmp
02/03/2006 01:47 PM 2,667 ver352.tmp
02/03/2006 02:08 PM 2,667 ver353.tmp
02/03/2006 02:08 PM 2,667 ver354.tmp
02/03/2006 02:08 PM 2,667 ver355.tmp
02/03/2006 02:08 PM 2,667 ver356.tmp
02/03/2006 02:14 PM 2,667 ver357.tmp
02/03/2006 02:14 PM 2,667 ver358.tmp
02/03/2006 02:14 PM 2,667 ver359.tmp
02/03/2006 02:14 PM 2,667 ver35A.tmp
02/03/2006 02:14 PM 2,667 ver35B.tmp
02/03/2006 02:14 PM 2,667 ver35C.tmp
02/03/2006 02:14 PM 2,667 ver35D.tmp
02/03/2006 02:14 PM 2,667 ver35E.tmp
02/03/2006 02:47 PM 2,667 ver35F.tmp
02/03/2006 02:47 PM 2,667 ver360.tmp
02/03/2006 02:48 PM 2,667 ver361.tmp
02/03/2006 02:48 PM 2,667 ver362.tmp
02/03/2006 03:02 PM 2,667 ver363.tmp
02/03/2006 03:02 PM 2,667 ver364.tmp
02/03/2006 03:02 PM 2,667 ver365.tmp
02/03/2006 03:02 PM 2,667 ver366.tmp
02/03/2006 03:02 PM 2,667 ver367.tmp
02/03/2006 03:02 PM 2,667 ver368.tmp
02/03/2006 03:02 PM 2,667 ver369.tmp
02/03/2006 03:02 PM 2,667 ver36A.tmp
02/03/2006 03:15 PM 2,667 ver36B.tmp
02/03/2006 03:15 PM 2,667 ver36C.tmp
02/03/2006 03:15 PM 2,667 ver36D.tmp
02/03/2006 03:15 PM 2,667 ver36E.tmp
02/03/2006 03:25 PM 2,667 ver36F.tmp
02/03/2006 03:25 PM 2,667 ver370.tmp
02/03/2006 03:25 PM 2,667 ver371.tmp
02/03/2006 03:25 PM 2,667 ver372.tmp
02/03/2006 03:25 PM 2,667 ver373.tmp
02/03/2006 03:25 PM 2,667 ver374.tmp
02/03/2006 03:25 PM 2,667 ver375.tmp
02/03/2006 03:25 PM 2,667 ver376.tmp
02/03/2006 03:38 PM 2,667 ver377.tmp
02/03/2006 03:38 PM 2,667 ver378.tmp
02/03/2006 03:38 PM 2,667 ver379.tmp
02/03/2006 03:38 PM 2,667 ver37A.tmp
02/03/2006 03:38 PM 2,667 ver380.tmp
02/03/2006 03:38 PM 2,667 ver381.tmp
02/03/2006 03:45 PM 2,667 ver382.tmp
02/03/2006 03:45 PM 2,667 ver383.tmp
02/03/2006 03:45 PM 2,667 ver384.tmp
02/03/2006 03:45 PM 2,667 ver385.tmp
02/03/2006 03:45 PM 2,667 ver386.tmp
02/03/2006 03:45 PM 2,667 ver387.tmp
02/03/2006 03:45 PM 2,667 ver388.tmp
02/03/2006 03:45 PM 2,667 ver389.tmp
02/03/2006 03:53 PM 2,667 ver38B.tmp
02/03/2006 03:53 PM 2,667 ver38C.tmp
02/03/2006 03:53 PM 2,667 ver38D.tmp
02/03/2006 03:53 PM 2,667 ver38E.tmp
02/03/2006 03:53 PM 2,667 ver38F.tmp
02/03/2006 03:53 PM 2,667 ver390.tmp
02/03/2006 03:53 PM 2,667 ver391.tmp
02/03/2006 03:53 PM 2,667 ver392.tmp
02/03/2006 04:28 PM 2,667 ver393.tmp
02/03/2006 04:28 PM 2,667 ver394.tmp
02/03/2006 04:28 PM 2,667 ver395.tmp
02/03/2006 04:28 PM 2,667 ver396.tmp
02/03/2006 05:23 PM 2,667 ver397.tmp
02/03/2006 05:23 PM 2,667 ver398.tmp
02/03/2006 05:23 PM 2,667 ver399.tmp
02/03/2006 05:23 PM 2,667 ver39A.tmp
02/03/2006 05:26 PM 2,667 ver39B.tmp
02/03/2006 05:26 PM 2,667 ver39C.tmp
02/03/2006 05:26 PM 2,667 ver39D.tmp
02/03/2006 05:26 PM 2,667 ver39E.tmp
02/03/2006 05:55 PM 2,667 ver39F.tmp
02/03/2006 05:55 PM 2,667 ver3A0.tmp
02/03/2006 05:55 PM 2,667 ver3A1.tmp
02/03/2006 05:55 PM 2,667 ver3A2.tmp
02/03/2006 06:24 PM 2,667 ver3A3.tmp
02/03/2006 06:24 PM 2,667 ver3A4.tmp
02/03/2006 06:24 PM 2,667 ver3A5.tmp
02/03/2006 06:24 PM 2,667 ver3A6.tmp
02/03/2006 06:31 PM <DIR> .
02/03/2006 06:31 PM <DIR> ..
714 File(s) 1,904,238 bytes

Total Files Listed:
714 File(s) 1,904,238 bytes
2 Dir(s) 48,800,641,024 bytes free
==================================

HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 6:48:20 PM, on 2/3/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Common Files\AOL\1133832770\ee\services\sscFirewallPlugin\ver1_10_3_1\aolavupd.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\PROGRA~1\mcafee.com\ANTIVI~1\mcshield.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\mcafee.com\antivirus\oasclnt.exe
C:\Program Files\mcafee.com\antivirus\mcvsescn.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\AOL\1133832770\ee\services\sscFirewallPlugin\ver1_10_3_1\SSCEvtHdlr.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Common Files\AOL\1133832770\ee\aolsoftware.exe
c:\program files\common files\aol\1133832770\ee\aolssc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\unzipped\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
N4 - Mozilla: user_pref("browser.search.defaultengine", "http://www.google.com/"); (C:\Documents and Settings\Don\Application Data\Mozilla\Profiles\default\m2mh74y7.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\mcafee.com\antivirus\oasclnt.exe
O4 - HKLM\..\Run: [EmailScan] C:\Program Files\mcafee.com\antivirus\mcvsescn.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 3.0\resources\en-US\local\search.html
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Absolute Poker - {EFFF8D47-D060-4108-B761-E8EC86622E56} - C:\Documents and Settings\All Users\Start Menu\Programs\Absolute Poker\Absolute Poker.lnk
O9 - Extra 'Tools' menuitem: Absolute Poker - {EFFF8D47-D060-4108-B761-E8EC86622E56} - C:\Documents and Settings\All Users\Start Menu\Programs\Absolute Poker\Absolute Poker.lnk
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {37DF41B2-61DB-4CAC-A755-CFB3C7EE7F40} (AOL Content Update) - http://esupport.aol....oach_core_1.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.com...kup/qdiagcc.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg...l_v1-0-3-36.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.pw.a...77/mcinsctl.cab
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.kodakgall..._1/axofupld.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.pw.a...,18/mcgdmgr.cab
O18 - Protocol: x-atng - {7E8717B0-D862-11D5-8C9E-00010304F989} - C:\Program Files\Fidelity Investments\Fidelity Active Trader\System\atngprot.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: AOL Antivirus Update Service (aolavupd) - America Online - C:\Program Files\Common Files\AOL\1133832770\ee\services\sscFirewallPlugin\ver1_10_3_1\aolavupd.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: McAfee McShield (McShield) - McAfee Inc. - C:\PROGRA~1\mcafee.com\ANTIVI~1\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Networks Associates Technology, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
======================

PS: They offer the McAfee firewall for an extra fee but I'm giving it a free trial and will stick with my syslink or windows firewall most likely.

Edited by ppbsa, 03 February 2006 - 05:52 PM.

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP