OK, BitDefender's all done. I saved the results as a .txt file, but it was obviously formatted html, so I'm going to upload it as well.
***********
ComboFix
*************
ComboFix 07-12-10.2 - Administrator 2007-12-11 12:33:17.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2602 [GMT -5:00]
Running from: C:\Documents and Settings\Administrator\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Administrator\Desktop\CFScript.txt
* Created a new restore point
FILE
C:\Downloads\cUTE ftp\CUTE4032.EXE
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Downloads\cUTE ftp\CUTE4032.EXE
C:\Program Files\GlobalSCAPE
C:\Program Files\GlobalSCAPE\CuteFTP\unwise32.exe
C:\Program Files\GlobalSCAPE\CuteHTML\cutehtml.cnt
C:\Program Files\GlobalSCAPE\CuteHTML\cutehtml.exe
C:\Program Files\GlobalSCAPE\CuteHTML\cutehtml.hlp
C:\Program Files\GlobalSCAPE\CuteHTML\cutetips.txt
C:\Program Files\GlobalSCAPE\CuteHTML\html.txt
C:\Program Files\GlobalSCAPE\CuteHTML\INSTALL2.LOG
C:\Program Files\GlobalSCAPE\CuteHTML\tagtips.dat
C:\Program Files\GlobalSCAPE\CuteHTML\unreg.exe
C:\Program Files\GlobalSCAPE\CuteHTML\unwise32.exe
C:\WINDOWS\system32\_suspicious_files
C:\WINDOWS\system32\_suspicious_files\17PHolmes1000106.exe
C:\WINDOWS\system32\_suspicious_files\17PHolmes572.exe
C:\WINDOWS\system32\_suspicious_files\acrrpwbc.dll
C:\WINDOWS\system32\_suspicious_files\bqmtihha.ini
C:\WINDOWS\system32\_suspicious_files\bteyeaih.ini
C:\WINDOWS\system32\_suspicious_files\cbwprrca.ini
C:\WINDOWS\system32\_suspicious_files\cllrunnm.ini
C:\WINDOWS\system32\_suspicious_files\cryowowh.dll
C:\WINDOWS\system32\_suspicious_files\esuoikps.dll
C:\WINDOWS\system32\_suspicious_files\fhckvtwb.dll
C:\WINDOWS\system32\_suspicious_files\grkkpthm.dll
C:\WINDOWS\system32\_suspicious_files\mhtpkkrg.ini
C:\WINDOWS\system32\_suspicious_files\mnnurllc.dll
C:\WINDOWS\system32\_suspicious_files\ofwavrob.dll
C:\WINDOWS\system32\_suspicious_files\oynmfrkp.ini
C:\WINDOWS\system32\_suspicious_files\qodopxrq.dll
C:\WINDOWS\system32\_suspicious_files\qrxpodoq.ini
C:\WINDOWS\system32\_suspicious_files\qyahbdav.ini
C:\WINDOWS\system32\_suspicious_files\rbliryih.dll
C:\WINDOWS\system32\_suspicious_files\rejordot.ini
C:\WINDOWS\system32\_suspicious_files\todrojer.dll
C:\WINDOWS\system32\_suspicious_files\vadbhayq.dll
C:\WINDOWS\system32\_suspicious_files\winshow.exe
.
((((((((((((((((((((((((( Files Created from 2007-11-11 to 2007-12-11 )))))))))))))))))))))))))))))))
.
2007-12-10 15:44 . 2007-12-10 15:44 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-12-10 15:44 . 2007-12-10 15:44 1,409 --a------ C:\WINDOWS\QTFont.for
2007-12-10 14:59 . 2007-12-10 14:59 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2007-12-10 14:59 . 2007-12-10 14:59 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2007-12-04 14:33 . 2007-12-04 14:33 <DIR> d-------- C:\Program Files\GiPo@Utilities
2007-12-04 14:33 . 2007-12-04 14:33 <DIR> d-------- C:\Program Files\Common Files\Gibinsoft Shared
2007-12-04 12:32 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2007-12-04 12:28 . 2007-12-04 12:28 <DIR> d-------- C:\Documents and Settings\Administrator\.java
2007-11-28 09:38 . 2007-12-10 12:22 <DIR> d-------- C:\OMFI MediaFiles
2007-11-27 16:51 . 2007-12-06 14:01 69 --a------ C:\WINDOWS\NeroDigital.ini
2007-11-20 09:11 . 2007-11-26 15:55 <DIR> d-------- C:\VundoFix Backups
2007-11-14 12:21 . 2007-12-04 12:35 10,676 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2007-11-14 12:21 . 2007-12-04 12:35 805 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.INF
2007-11-14 12:02 . 2007-11-14 12:24 <DIR> d-------- C:\WINDOWS\BDOSCAN8
2007-11-13 14:22 . 2007-11-13 14:53 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-13 12:43 . 2007-11-13 12:43 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Lavasoft
2007-11-13 12:42 . 2007-11-13 12:42 <DIR> d-------- C:\Program Files\Lavasoft
2007-11-13 09:00 . 2007-11-13 09:00 <DIR> d-------- C:\Program Files\MSXML 4.0
2007-11-12 14:59 . 2007-11-12 14:59 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Nero
2007-11-12 14:46 . 2007-11-12 14:46 <DIR> d-------- C:\Program Files\Nero
2007-11-12 14:46 . 2007-11-12 14:49 <DIR> d-------- C:\Program Files\Common Files\Nero
2007-11-12 14:46 . 2007-11-12 14:46 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Nero
2007-11-12 11:52 . 2007-12-11 08:58 <DIR> d-------- C:\Temp
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-11 17:28 0 ----a-w C:\WINDOWS\system32\drivers\WFTDriverLog.txt
2007-12-09 01:20 --------- d-----w C:\Program Files\Norton SystemWorks
2007-12-04 17:37 --------- d-----w C:\Program Files\Google
2007-12-04 17:35 60,800 ----a-w C:\WINDOWS\system32\S32EVNT1.DLL
2007-12-04 17:35 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2007-12-04 17:35 --------- d-----w C:\Program Files\Symantec
2007-12-04 17:32 --------- d-----w C:\Program Files\Java
2007-10-30 15:09 --------- d-----w C:\Program Files\DivX
2007-10-30 14:55 --------- d-----w C:\Documents and Settings\Administrator\Application Data\DivX
2007-10-26 03:34 8,460,288 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll
2007-10-25 15:26 53,248 ----a-w C:\WINDOWS\bdoscandel.exe
2007-10-23 18:32 --------- d-----w C:\Documents and Settings\All Users\Application Data\nView_Profiles
2007-09-28 16:08 156,992 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2007-09-28 16:07 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
2007-09-28 16:07 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2007-09-28 16:07 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2007-09-28 16:07 129,784 ----a-w C:\WINDOWS\system32\pxafs.dll
2007-09-28 16:07 120,056 ----a-w C:\WINDOWS\system32\pxcpyi64.exe
2007-09-28 16:07 118,520 ----a-w C:\WINDOWS\system32\pxinsi64.exe
2007-09-28 16:07 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2007-09-28 16:05 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
2007-09-28 16:05 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
2007-09-28 16:05 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
2007-09-28 16:05 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
2007-09-28 16:05 739,840 ----a-w C:\WINDOWS\system32\DivX.dll
2007-09-28 16:05 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
2007-09-28 16:05 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
2007-09-28 16:05 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
2007-09-28 16:05 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
2007-09-28 16:05 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
2007-09-28 16:05 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
2007-09-28 16:05 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
2007-09-28 16:05 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
2007-09-20 14:59 972,072 ----a-w C:\WINDOWS\UNRecode.exe
2007-09-20 14:55 972,072 ----a-w C:\WINDOWS\UNNeroMediaHome.exe
2007-09-20 14:55 95,600 ----a-w C:\WINDOWS\system32\NeroCo.dll
2005-09-22 17:34 32 --sha-w C:\WINDOWS\{188D46AD-BCED-447F-B20E-60F5CB32313C}.dat
2005-09-22 17:35 32 --sha-w C:\WINDOWS\{24A1CF26-2E6E-4375-B834-4B5524A92BF4}.dat
2005-09-22 17:34 32 --sha-w C:\WINDOWS\{4D92E012-78E3-4CD6-A27C-186497D1056B}.dat
2005-09-22 17:34 32 --sha-w C:\WINDOWS\system32\{C21790DB-1E75-41C2-B1A2-71C0D2E9AEF2}.dat
2005-09-22 17:35 32 --sha-w C:\WINDOWS\system32\{C8405FC4-02DD-4CD2-AEAB-5A1BB4900910}.dat
2005-09-22 17:34 32 --sha-w C:\WINDOWS\system32\{F6225B7E-ACDF-4245-8EE2-F1A674B16F9F}.dat
.
((((((((((((((((((((((((((((( snapshot@2007-12-10_ 9.42.45.96 )))))))))))))))))))))))))))))))))))))))))
.
+ 2005-05-24 17:27:16 213,048 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll
+ 2007-08-29 20:47:20 94,208 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
+ 2007-08-29 20:49:54 950,272 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
- 2007-12-10 14:40:58 14,098 ----a-w C:\WINDOWS\system32\tablet.dat
+ 2007-12-11 17:29:16 14,098 ----a-w C:\WINDOWS\system32\tablet.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\{AC887BC4-A887-455F-AA89-B2B3B71979B4}]
@=Mediafour Mac Volume Icons
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 02:00]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe" [2007-09-20 15:35]
"mount.exe"="C:\Program Files\GiPo@Utilities\GiPo@FileUtilities\mount.exe" [2003-05-24 02:09]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Smapp"="C:\Program Files\Analog Devices\SoundMAX\SMTray.exe" [2003-05-05 11:57]
"DrvLsnr"="C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe" [2003-05-08 07:34]
"PRONoMgrWired"="c:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe" [2004-03-02 14:49]
"dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2005-02-25 04:33]
"vptray"="C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe" [2002-07-30 10:35]
"Blackmagic CheckVersion PCI"="C:\Program Files\Blackmagic Design\Blackmagic DeckLink\CheckVersionPCI.exe" [2006-04-10 15:05]
"DigidesignMMERefresh"="C:\Program Files\Digidesign\Drivers\MMERefresh.exe" [2006-02-14 23:31]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-09-15 14:05]
"Mediafour Mac Volume Notifications"="C:\Program Files\Common Files\Mediafour\MACVNTFY.exe" [2002-07-02 13:31]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-04 02:00 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2006-03-17 13:16 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2004-08-04 02:00 C:\WINDOWS\system32\rundll32.exe]
"NeroFilterCheck"="C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 15:57]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-09-20 09:51]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^UMAX VistaAccess.lnk]
path=C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\UMAX VistaAccess.lnk
backup=C:\WINDOWS\pss\UMAX VistaAccess.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Getting Started with MacDrive 5.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Getting Started with MacDrive 5.lnk
backup=C:\WINDOWS\pss\Getting Started with MacDrive 5.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2007-05-11 02:06 40048 --a------ C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Promon.exe]
R0 MDPMGRNT;MDPMGRNT;C:\WINDOWS\system32\drivers\MDPMGRNT.sys
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3;C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
R3 Flamethrower;Flamethrower;C:\WINDOWS\system32\drivers\Flamethrower.sys
R3 LaCieFWFilter;Silver 1394 Filter (1394 BUS Filter Driver);C:\WINDOWS\system32\DRIVERS\LaCieFWFilter.sys
R3 LaCieUSBFilter;Silver USB Filter (USB BUS Filter Driver);C:\WINDOWS\system32\DRIVERS\LaCieUSBFilter.sys
R3 NPDriver;Norton Unerase Protection Driver;\??\C:\WINDOWS\system32\Drivers\NPDRIVER.SYS
S1 AEC671X;AEC671X;C:\WINDOWS\system32\drivers\AEC671X.SYS
S1 BMDPDisk;BMDPDisk;C:\WINDOWS\system32\drivers\BMDPDisk.sys
S1 DMX3191;DMX3191;C:\WINDOWS\system32\drivers\DMX3191.SYS
S2 BMDPBox;BMDPBox;C:\WINDOWS\system32\drivers\BMDPBox.sys
S2 UDNT;UDNT;C:\WINDOWS\system32\drivers\UDNT.sys
S3 BMDDeckLinkAudio;BMDDeckLinkAudio;C:\WINDOWS\system32\DRIVERS\deckaud.sys
S3 BMDDeckLinkSerial;BMDDeckLinkSerial;C:\WINDOWS\system32\DRIVERS\deckser.sys
S3 DeckLink;DeckLink;C:\WINDOWS\system32\DRIVERS\DeckLink.sys
S3 DeckLinkDisplay;DeckLinkDisplay;C:\WINDOWS\system32\DRIVERS\deckmp.sys
S3 MDFSYSNT;MDFSYSNT;C:\WINDOWS\system32\drivers\MDFSYSNT.sys
.
Contents of the 'Scheduled Tasks' folder
"2007-12-09 01:20:10 C:\WINDOWS\Tasks\Norton SystemWorks One Button Checkup.job"
- C:\Program Files\Norton SystemWorks\OBC.exe
.
**************************************************************************
catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-12-11 12:35:29
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\WINDOWS\system32\NavLogon.dll
.
Completion time: 2007-12-11 12:35:47
C:\ComboFix2.txt ... 2007-12-10 14:56
C:\ComboFix3.txt ... 2007-12-10 09:43
.
--- E O F --- 2007-11-14 14:05:22
************
HiJackThis
**************
Logfile of HijackThis v1.99.1
Scan saved at 2:31:57 PM, on 12/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\AvidSDMService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Digidesign\Drivers\MMERefresh.exe
C:\Program Files\FolderSize\FolderSizeSvc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Mediafour\MACVNTFY.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\explorer.exe
C:\Downloads\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [DrvLsnr] C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
O4 - HKLM\..\Run: [PRONoMgrWired] c:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Blackmagic CheckVersion PCI] C:\Program Files\Blackmagic Design\Blackmagic DeckLink\CheckVersionPCI.exe
O4 - HKLM\..\Run: [DigidesignMMERefresh] C:\Program Files\Digidesign\Drivers\MMERefresh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Mediafour Mac Volume Notifications] "C:\Program Files\Common Files\Mediafour\MACVNTFY.EXE" /auto
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [mount.exe] C:\Program Files\GiPo@Utilities\GiPo@FileUtilities\mount.exe /z
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
http://download.bitdefender.com/reso...an8/oscan8.cab
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avid SDM Service (AvidSDMService) - Avid Technology, Inc. - C:\WINDOWS\system32\AvidSDMService.exe
O23 - Service: Avid Startup (AvidStartup) - Unknown owner - C:\WINDOWS\system32\AvidStartup.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: Digidesign MME Refresh Service (DigiRefresh) - Digidesign, A Division of Avid Technology, Inc. - C:\Program Files\Digidesign\Drivers\MMERefresh.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Folder Size (FolderSize) - Brio - C:\Program Files\FolderSize\FolderSizeSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - c:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe
**********
Bit Defender
***********
BitDefender Online Scanner
Scan report generated at: Tue, Dec 11, 2007 - 14:18:49
Scan path: C:\;D:\;E:\;J:\;K:\;
Statistics
Time
01:28:09
Files
524380
Folders
14302
Boot Sectors
6
Archives
7791
Packed Files
60713
Results
Identified Viruses
7
Infected Files
22
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
33
Engines Info
Virus Definitions
873675
Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Scan plugins
14
Archive plugins
38
Unpack plugins
7
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580000.VBN=>(Quarantine-PE)
Infected with: Trojan.Generic.69276
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580001.VBN=>(Quarantine-PE)
Infected with: Trojan.Generic.69276
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580004.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Detected with: Adware.TTC.B
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580004.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580004.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580004.VBN=>(Quarantine-PE)=>(NSIS o)
Update failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580005.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Detected with: Adware.TTC.B
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580005.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580005.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580005.VBN=>(Quarantine-PE)=>(NSIS o)
Update failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580006.VBN=>(Quarantine-PE)
Infected with: Trojan.Generic.69783
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580006.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580006.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580007.VBN=>(Quarantine-PE)
Infected with: Trojan.Generic.69783
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580007.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07580007.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000A.VBN=>(Quarantine-PE)
Infected with: Trojan.BHO.AW
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000A.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000A.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000B.VBN=>(Quarantine-PE)
Infected with: Trojan.BHO.AW
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000B.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000B.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000C.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Detected with: Adware.TTC.B
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000C.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000C.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000C.VBN=>(Quarantine-PE)=>(NSIS o)
Update failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000D.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Detected with: Adware.TTC.B
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000D.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000D.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0758000D.VBN=>(Quarantine-PE)=>(NSIS o)
Update failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08B80000.VBN=>(Quarantine-PE)
Infected with: Trojan.Generic.69783
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08B80000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08B80000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A340000.VBN=>(Quarantine-PE)
Infected with: Trojan.Generic.69276
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A340000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A340000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A940000.VBN=>(Quarantine-PE)
Infected with: Trojan.BHO.AW
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A940000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A940000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0AB80000.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Detected with: Adware.TTC.B
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0AB80000.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0AB80000.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0AB80000.VBN=>(Quarantine-PE)=>(NSIS o)
Update failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CB00000.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Detected with: Adware.TTC.B
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CB00000.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CB00000.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0003
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CB00000.VBN=>(Quarantine-PE)=>(NSIS o)
Update failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D540000.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D540000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D540000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D540001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D540001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D540001.VBN=>(Quarantine-PE)
Deleted
C:\qoobox\Quarantine\C\WINDOWS\system32\_suspicious_files\winshow.exe.vir
Infected with: Trojan.Generic.73139
C:\qoobox\Quarantine\C\WINDOWS\system32\_suspicious_files\winshow.exe.vir
Disinfection failed
C:\qoobox\Quarantine\C\WINDOWS\system32\_suspicious_files\winshow.exe.vir
Deleted
C:\qoobox\Quarantine\C\WINDOWS\uninstall_nmon.vbs.vir
Infected with: Trojan.Small.WY
C:\qoobox\Quarantine\C\WINDOWS\uninstall_nmon.vbs.vir
Disinfection failed
C:\qoobox\Quarantine\C\WINDOWS\uninstall_nmon.vbs.vir
Deleted
C:\RECYCLER\NPROTECT\00000773
Infected with: Trojan.Small.WY
C:\RECYCLER\NPROTECT\00000773
Disinfection failed
C:\RECYCLER\NPROTECT\00000773
Deleted
C:\System Volume Information\_restore{D0D4C289-1775-4E84-B8F1-E8133151EDAF}\RP2\A0000279.vbs
Infected with: Trojan.Small.WY
C:\System Volume Information\_restore{D0D4C289-1775-4E84-B8F1-E8133151EDAF}\RP2\A0000279.vbs
Disinfection failed
C:\System Volume Information\_restore{D0D4C289-1775-4E84-B8F1-E8133151EDAF}\RP2\A0000279.vbs
Deleted
C:\System Volume Information\_restore{D0D4C289-1775-4E84-B8F1-E8133151EDAF}\RP4\A0000616.exe
Infected with: Trojan.Generic.73139
C:\System Volume Information\_restore{D0D4C289-1775-4E84-B8F1-E8133151EDAF}\RP4\A0000616.exe
Disinfection failed
C:\System Volume Information\_restore{D0D4C289-1775-4E84-B8F1-E8133151EDAF}\RP4\A0000616.exe
Deleted
K:\OMFI MediaFiles\NotanOptV01.473DB668.4E2130.omf
Clean
K:\OMFI MediaFiles\note paper.tif11940472B194A.omf
Clean
K:\OMFI MediaFiles\OBSESSION W-TAG.mp347386ABF.aif
Clean
K:\OMFI MediaFiles\OBSESSION W-TAG47386ABF.1.aif
Clean
K:\OMFI MediaFiles\Ola in the office (46FBB1BA.omf
Clean
K:\OMFI MediaFiles\Ola in the office (46FBB1F8.omf
Clean
K:\OMFI MediaFiles\om04013.mp3.A147571B7A.aif
Clean
K:\OMFI MediaFiles\om04013.mp3.A247571B7A.aif
Clean
K:\OMFI MediaFiles\om04014.mp3.A147571B86.aif
Clean
K:\OMFI MediaFiles\om04014.mp3.A247571B86.aif
Clean
K:\OMFI MediaFiles\om08703.mp3.A147571B8D.aif
Clean
K:\OMFI MediaFiles\om08703.mp3.A247571B8E.aif
Clean
K:\OMFI MediaFiles\om08713.mp3.A147571B93.aif
Clean
K:\OMFI MediaFiles\om08713.mp3.A247571B93.aif
Clean
K:\OMFI MediaFiles\om08718.mp3.A147571B99.aif
Clean
K:\OMFI MediaFiles\om08718.mp3.A247571B99.aif
Clean
K:\OMFI MediaFiles\om13707.waA01.4741D4741D748.aif
Clean
K:\OMFI MediaFiles\om13707.waA02.4741D4741D748.aif
Clean
K:\OMFI MediaFiles\om14715.waA01.46FA646FA6D2C.aif
Clean
K:\OMFI MediaFiles\om14715.waA02.46FA646FA6D2C.aif
Clean
K:\OMFI MediaFiles\om16322.waA01.4758647586F6E.aif
Clean
K:\OMFI MediaFiles\om16322.waA01.4759547595E82.aif
Clean
K:\OMFI MediaFiles\om16322.waA01.4759547595E83.aif
Clean
K:\OMFI MediaFiles\om16322.waA01.4759547595E83.aif=>REMOVED_NULLS
Clean
K:\OMFI MediaFiles\om16322.waA02.4758647586F6E.aif
Clean
K:\OMFI MediaFiles\om16322.waA02.4759547595E82.aif
Clean
K:\OMFI MediaFiles\om16322.waA02.4759547595E83.aif
Clean
K:\OMFI MediaFiles\om16322.waA02.4759547595E83.aif=>REMOVED_NULLS
Clean
K:\OMFI MediaFiles\om16505.mpA01.4758647586F79.aif
Clean
K:\OMFI MediaFiles\om16505.mpA01.4759547595E83.aif
Clean
K:\OMFI MediaFiles\om16505.mpA02.4758647586F79.aif
Clean
K:\OMFI MediaFiles\om16505.mpA02.4759547595E83.aif
Clean
K:\OMFI MediaFiles\om16514.waA01.46E0646E069B8.aif
Clean
K:\OMFI MediaFiles\om16514.waA01.46FA646FA6D31.aif
Clean
K:\OMFI MediaFiles\om16514.waA02.46E0646E069B9.aif
Clean
K:\OMFI MediaFiles\om16514.waA02.46FA646FA6D31.aif
Clean
K:\OMFI MediaFiles\om16703.waA01.474C8474C8CE4.aif
Clean
K:\OMFI MediaFiles\om16703.waA01.4758647586F93.aif
Clean
K:\OMFI MediaFiles\om16703.waA01.4759547595E84.aif
Clean
K:\OMFI MediaFiles\om16703.waA01.4759547595E86.aif
Clean
K:\OMFI MediaFiles\om16703.waA02.474C8474C8CE4.aif
Clean
K:\OMFI MediaFiles\om16703.waA02.4758647586F93.aif
Clean
K:\OMFI MediaFiles\om16703.waA02.4759547595E84.aif
Clean
K:\OMFI MediaFiles\om16703.waA02.4759547595E86.aif
Clean
K:\OMFI MediaFiles\om16704.waA01.474C8474C8CFB.aif
Clean
K:\OMFI MediaFiles\om16704.waA01.4758647586FA6.aif
Clean
K:\OMFI MediaFiles\om16704.waA01.4759547595E86.aif
Clean
K:\OMFI MediaFiles\om16704.waA01.4759547595E88.aif
Clean
K:\OMFI MediaFiles\om16704.waA01.4759547595E88.aif=>REMOVED_NULLS
Clean
K:\OMFI MediaFiles\om16704.waA02.474C8474C8CFB.aif
Clean
K:\OMFI MediaFiles\om16704.waA02.4758647586FA6.aif
Clean
K:\OMFI MediaFiles\om16704.waA02.4759547595E86.aif
Clean
K:\OMFI MediaFiles\om16704.waA02.4759547595E88.aif
Clean
K:\OMFI MediaFiles\om16704.waA02.4759547595E88.aif=>REMOVED_NULLS
Clean
K:\OMFI MediaFiles\om16705.waA01.474C8474C8D17.aif
Clean
K:\OMFI MediaFiles\om16705.waA02.474C8474C8D17.aif
Clean
K:\OMFI MediaFiles\om16714.waA01.474C8474C8D2E.aif
Clean
K:\OMFI MediaFiles\om16714.waA02.474C8474C8D2E.aif
Clean
K:\OMFI MediaFiles\om16717.waA01.474C8474C8D46.aif
Clean
K:\OMFI MediaFiles\om16717.waA02.474C8474C8D46.aif
Clean
K:\OMFI MediaFiles\om16718.waA01.474C8474C8D5C.aif
Clean
K:\OMFI MediaFiles\om16718.waA02.474C8474C8D5C.aif
Clean
K:\OMFI MediaFiles\opportunity1190664146F817C2.omf
Clean
K:\OMFI MediaFiles\opportunity11906646F817C2.0.omf
Clean
K:\OMFI MediaFiles\OTHER1190664679V046F819E7.omf
Clean
K:\OMFI MediaFiles\OTHER1190664680V046F819E8.omf
Clean
K:\OMFI MediaFiles\Palio slate 1.bmp1146E168D4.omf
Clean
K:\OMFI MediaFiles\Palio slate 1.bmp1146E168E9.omf
Clean
K:\OMFI MediaFiles\Palio slate 1.bmp1147307D4F.omf
Clean
K:\OMFI MediaFiles\Palio slate 1.bmp1147307D52.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Dip to473E0C68.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Dip to473E0C6A.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Dip to473E0C8F.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Dip to473E0C91.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Dip to473E0C93.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Dissol473E0C65.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Dissol473E0C66.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Dissol473E0C6A.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Dissol473E0C6C.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Fade f473A006E.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Fade f473E0CC4.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Fade f473E0D01.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Fade f473E0D04.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Fade f473E0D5C.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Fade f473E0D60.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Fade f473E106C.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Fade t473E0CC5.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Matte 473E0A8C.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Matte 473E0C96.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Matte 473E0CA7.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Matte 473E0CB5.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Matte 473E0D8D.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Matte 473E0FD8.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Matte 473E10DD.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Submas473E0B31.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Submas473E0CC7.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Submas473E0CC8.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Submas473E0D05.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Submas473E0D9E.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Submas473E0D9F.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Submas473E0FEB.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Submas473E1070.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Submas473E10E4.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Title_473E0A80.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Title_473E0C42.omf
Clean
K:\OMFI MediaFiles\Part 1 cut 2_Title_473E0C4B.omf
Clean
********************