![]() |
![]() |
![]() |
|||||
![]() |
![]() |
![]() |
![]() |
![]() |
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| HijackThis Log Help Get Rid Of Malware With Help From Our Analysts. Follow the "First Steps" link at the top right of each page before posting for help. |
![]() |
|
|
Thread Tools |
|
|
#1 (permalink) |
|
Registered User
Join Date: Feb 2007
Posts: 14
OS: XP
|
Slow internet - Multiple Viruses
Hello,
A couple of weeks ago my internet started to really slow down. My connection to my router dropped to 10 Mbps and sometimes its so slow it takes me several minutes to load a page. At first I thought it was a hardware problem, but now I'm thinking it's virus related. There are two computers hooked up to the router, mine and my sisters and hers is pretty old and she never takes care of it. I'm thinking that whatever is affecting her computer is affecting mine too. I have done the 5 steps on both computers, but I'm going to post the logs of hers first since the panda scan looked pretty bad (2000+ spyware, 3 viruses, and a rootkit). I also want to note that ad-aware found a malware called alset, which it got rid of. A couple months ago she had something called spysherriff, which I think I got rid of by using smitfraud. I'm not sure if there is any remnants of it, though. Also, her computer is using XP Home SP1, and mine is XP Pro SP2. Thank you in advance. Any help is greatly appreciated. Here is the DSS log: Deckard's System Scanner v20070426.43 Run by Wesley Jung on 2007-05-10 at 19:15:38 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point. -- Last 5 Restore Point(s) -- 52: 2007-05-11 02:15:42 UTC - RP1094 - Deckard's System Scanner Restore Point 51: 2007-05-11 02:12:52 UTC - RP1093 - Software Distribution Service 2.0 50: 2007-05-11 02:08:05 UTC - RP1092 - Installed Windows Media Player 10 KB917734_WMP10. 49: 2007-05-11 02:07:12 UTC - RP1091 - Installed Windows XP KB899587. 48: 2007-05-11 02 34 UTC - RP1090 - Installed Windows XP KB924191.-- First Restore Point -- 1: 2007-05-11 01:36:42 UTC - RP1043 - Installed Windows XP KB887472. Backed up registry hives. Performed disk cleanup. -- HijackThis (run as Wesley Jung.exe) ----------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 7:17:57 PM, on 5/10/2007 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\Explorer.EXE C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Norton AntiVirus2003\navapsvc.exe C:\Program Files\Norton AntiVirus2003\AdvTools\NPROTECT.EXE C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe C:\Program Files\Logitech\MouseWare\system\em_exec.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe C:\WINDOWS\System32\WgaTray.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\System32\wuauclt.exe C:\Documents and Settings\Wesley Jung\Desktop\dss.exe C:\PROGRA~1\HIJACK~1\Wesley Jung.exe C:\WINDOWS\system32\NOTEPAD.EXE R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus2003\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus2003\NavShExt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ? O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000 O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O16 - DPF: {58172624-85DD-4482-9E64-02ADCA637E96} - http://www.shizmoo.com/activex/web665.cab O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com/signuptemp...veSecurity.cab O16 - DPF: {8FA9D107-547B-4DBC-9D88-FABD891EDB0A} - http://arcade.icq.com/multiplayer/odyssey_web8.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - http://us.dl1.yimg.com/download.yaho...bio5_1_4_0.cab O20 - AppInit_DLLs: O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus2003\navapsvc.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus2003\AdvTools\NPROTECT.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe -- File Associations ----------------------------------------------------------- .cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL %1,%* .cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser %1,%* -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R1 cdudf_xp - c:\windows\system32\drivers\cdudf_xp.sys <Not Verified; Roxio; DirectCD> R1 OMCI - c:\windows\system32\drivers\omci.sys <Not Verified; Dell Computer Corporation; OMCI Driver> R1 pwd_2k - c:\windows\system32\drivers\pwd_2k.sys <Not Verified; Roxio; DirectCD> R1 UdfReadr_xp - c:\windows\system32\drivers\udfreadr_xp.sys <Not Verified; Roxio; DirectCD> R2 enodpl - c:\windows\system32\drivers\enodpl.sys R2 tandpl - c:\windows\system32\drivers\tandpl.sys R3 ac97intc (Intel(r) 82801DB/DBM Audio Driver Service (WDM)) - c:\windows\system32\drivers\ac97ich4.sys <Not Verified; Intel Corporation; Intel(r) Integrated Controller Hub Audio Driver> R3 mmc_2K - c:\windows\system32\drivers\mmc_2k.sys <Not Verified; Roxio; DirectCD> S3 Bulk503 (Chameleon Mega Digital Camera) - c:\windows\system32\drivers\bulk503.sys <Not Verified; LARGAN Digital; SPCA503> S3 dvd_2K - c:\windows\system32\drivers\dvd_2k.sys <Not Verified; Roxio; DirectCD> S3 ENTECH - c:\windows\system32\drivers\entech.sys <Not Verified; EnTech Taiwan; PowerStrip> S3 ISO503 (Chameleon Mega Video Camera) - c:\windows\system32\drivers\iso503.sys <Not Verified; Sunplus Technology Co. LTD.; SPCA504A Camera Driver> -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- All services whitelisted. -- Scheduled Tasks ------------------------------------------------------------- 2007-05-10 17:32:14 366 --a------ C:\WINDOWS\Tasks\Symantec NetDetect.job -- Files created between 2007-04-10 and 2007-05-10 ----------------------------- 2007-05-10 18:14:30 0 d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Windows Genuine Advantage 2007-05-10 14:35:14 0 d-------- C:\Program Files\Lavasoft 2007-05-10 14:34:48 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-04-18 23:29:03 0 d-------- C:\gear ratios 2007-04-18 21:31:22 0 d-------- C:\WINDOWS\System32\PreInstall 2007-04-18 21:31:05 0 d--h----- C:\WINDOWS\$hf_mig$ -- Find3M Report --------------------------------------------------------------- 2007-05-10 18:36:42 0 d-------- C:\Program Files\Messenger 2007-05-10 18:07:17 0 d-------- C:\Program Files\SpywareBlaster 2007-05-10 16:23:42 0 d-------- C:\Program Files\Norton AntiVirus2003 2007-05-10 16:04:43 0 d-------- C:\Program Files\Common Files\Symantec Shared 2007-05-10 15:40:44 0 d-------- C:\Program Files\Microsoft Works 2007-05-10 15:39:52 0 d-------- C:\Program Files\QuickTime 2007-05-10 15:39:52 0 d-------- C:\Program Files\iTunes 2007-05-10 14:35:32 0 d-------- C:\Documents and Settings\Wesley Jung\Application Data\Lavasoft 2007-05-09 20:35:45 0 d-------- C:\Documents and Settings\Wesley Jung\Application Data\HP 2007-05-09 20:34:13 0 d-------- C:\Documents and Settings\Wesley Jung\Application Data\U3 2007-04-26 22:48:23 0 d-------- C:\Program Files\HP 2007-04-12 22:10:33 0 d-------- C:\Documents and Settings\Wesley Jung\Application Data\AdobeUM 2007-03-22 18:25:33 3010 --a------ C:\WINDOWS\System32\tmp.reg 2007-03-22 17:47:12 0 d-------- C:\Program Files\BSPlayer 2007-03-16 21:37:39 0 d-------- C:\Documents and Settings\Wesley Jung\Application Data\Apple Computer 2007-03-16 21:30:14 0 d-------- C:\Program Files\Kazaa Lite K++ -- Registry Dump --------------------------------------------------------------- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll {53707962-6F74-2D53-2644-206D7942484F} C:\PROGRA~1\SPYBOT~1\SDHelper.dll {BDF3E430-B101-42AD-A544-FADC6B084872} C:\Program Files\Norton AntiVirus2003\NavShExt.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup" "nwiz"="nwiz.exe /install" "Logitech Utility"="Logi_MwX.Exe" "HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "Microsoft Works Update Detection"="C:\\Program Files\\Microsoft Works\\WkDetect.exe" "LDM"="\\Program\\BackWeb-8876480.exe" HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa Authentication Packages REG_MULTI_SZ msv1_0\0\0 Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0 Notification Packages REG_MULTI_SZ scecli\0\0 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="iTunesHelper" "hkey"="HKLM" "command"="C:\\Program Files\\iTunes\\iTunesHelper.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 -- Hosts ----------------------------------------------------------------------- 127.0.0.1 downloads.aaa1screensavers.com #[Bargin Buddy] 127.0.0.1 abcsearch.com 127.0.0.1 admin.abcsearch.com 127.0.0.1 www3.abcsearch.com #[Browseraid] 127.0.0.1 www.abcsearch.com 127.0.0.1 abc517.net #[Trojan.Mitglieder.H] 127.0.0.1 absoluagency.com #[Trojan.StartPage.H] 127.0.0.1 acestats.com 127.0.0.1 www.acestats.com 127.0.0.1 actualnames.com #[Parasite.ActualNames][Spyware.ActualNames] 4821 more entries in hosts file. -- End of Deckard's System Scanner: finished at 2007-05-10 at 19:18:29 --------- I tried to post to log for the Panda scan but it has over 2000 things in it and it wont let me post it because its too long. I have attached it to the post instead. |
|
|
|
|
|
#4 (permalink) |
|
Analyst, Security Team; Assistant Rangemaster, TSF Academy
Join Date: Sep 2006
Posts: 1,302
OS: Windows XP SP2
|
Re: Slow internet - Multiple Viruses
Hi bobdole118,
Welcome to Tech Support Forum! ![]() I apologize for the delay getting to your log. The helpers here are all volunteers and we have been very busy here lately. If you are still having malware problems, I will be glad to help. OK, here’s what we do first. Please download DAFT and save it to your desktop:
NEXT: Please download HostsXpert and save it to your desktop:
NEXT: Please run HijackThis and click "Scan". Place a check (tick) next to the following entries (if present): O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com/signuptemp...veSecurity.cab O20 - AppInit_DLLs: Close ALL programs and browsers (including this one), leaving ONLY HijackThis open, then click "Fix checked". Then please exit HijackThis. NEXT: Please download OTMoveIt by OldTimer:
Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose "Yes". Please post the log from OTMoveIt, located here: C:\_OTMoveIt\MovedFiles\mmddyyyy_hhmmss.log Where mmddyyyy_hhmmss is the date of the tool run. NEXT: Let's run some cleanup and diagnostic scans to make sure we're not leaving anything behind. Please download CCleaner (freeware) and save it to your desktop:
CAUTION: Please do NOT use the "Issues" button in the left pane. This is a built-in registry cleaner. If you don’t know how to use it, you may cause irreparable damage to your system. NEXT: Please download ComboFix by sUBs: NOTE: In the event you already have ComboFix, this is a new version that I need you to download.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall. NEXT: Please do an online scan with Kaspersky Online Scanner using Internet Explorer (this online scanner only works with IE):
Note for Internet Explorer 7 users: If at any time you have trouble with the "Accept" button of the license, click on the "Zoom" tool located at the bottom right of the IE window and set the zoom to 75 %. Once the license has been accepted, reset to 100%. NEXT: Please REBOOT your computer normally into Windows and post these logs in your next reply:
(You might have to paste the logs in multiple posts in the event they are too long and breach the post length restrictions of the forum software). Also, please let me know how things are running now and if you encountered any problems while you were following the directions I posted.
__________________
![]() Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum |
|
|
|
|
|
#5 (permalink) |
|
Registered User
Join Date: Feb 2007
Posts: 14
OS: XP
|
Re: Slow internet - Multiple Viruses
Hey, thanks for the reply. I know you guys are busy, I didn't mean to seem impatient when I bumped the thread :)
Anyways, I wasn't sure if the order in which you posted stuff was important so I stopped after I couldn't complete the DAFT scan. It just says "All associations OK" and nothing appears in the log. I booted to safe mode and got the same thing. Also, my internet speed has seemed to have gone back to pretty close to normal, but I'm still only connected to my router at 10 Mbps (my sisters is at 100 Mbps). Is it possible that the viruses on her computer are affecting my computer through the router? Also, just a reminder, the above log is for her computer, not mine, since hers is the sickest. Thanks alot for your help! |
|
|
|
|
|
#6 (permalink) | |
|
Registered User
Join Date: Feb 2007
Posts: 14
OS: XP
|
Re: Slow internet - Multiple Viruses
Ok, i decided to do the rest of the steps anyway :P
When doing the hijack this stuff, i got this error: Quote:
When running OTMoveIt, i get this error when trying to move tvmknwrd.dll. Here is the log: DllUnregisterServer procedure not found in C:\WINDOWS\System32\cd_clint.dll C:\WINDOWS\System32\cd_clint.dll NOT unregistered. C:\WINDOWS\System32\cd_clint.dll moved successfully. c:\windows\system32\drivers\etc\hosts.bho moved successfully. LoadLibrary failed for C:\Documents and Settings\Wesley Jung\Application Data\tvmknwrd.dll C:\Documents and Settings\Wesley Jung\Application Data\tvmknwrd.dll NOT unregistered. C:\Documents and Settings\Wesley Jung\Application Data\tvmknwrd.dll moved successfully. c:\windows\didduid.ini moved successfully. c:\windows\NDNuninstall5_48.exe moved successfully. c:\windows\sepsd.bin moved successfully. c:\windows\tmlpcert2005 moved successfully. c:\windows\woinstall.exe moved successfully. C:\Overpro-347.exe moved successfully. C:\WINDOWS\emsw.exe moved successfully. C:\WINDOWS\system32\6to4svc1.exe moved successfully. C:\WINDOWS\system32\certmgr6.exe moved successfully. C:\WINDOWS\system32\cfgbkend.exe moved successfully. Created on 05/15/2007 12:32:55 |
|
|
|
|
|
|
#7 (permalink) |
|
Registered User
Join Date: Feb 2007
Posts: 14
OS: XP
|
Re: Slow internet - Multiple Viruses
ComboFix Log: "Wesley Jung" - 2007-05-15 12:40:12 Service Pack 1 ComboFix 07-05.13.V - Running from: "C:\Documents and Settings\Wesley Jung\Desktop\" ((((((((((((((((((((((((((((((( Files Created from 2007-04-05 to 2007-05-15 )))))))))))))))))))))))))))))))))) 2007-05-15 12:35 <DIR> d-------- C:\Program Files\CCleaner 2007-05-10 19:15 <DIR> d-------- C:\Deckard 2007-05-10 18:14 <DIR> d-------- C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Windows Genuine Advantage 2007-05-10 14:35 <DIR> d-------- C:\Program Files\Lavasoft 2007-05-10 14:34 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-04-19 15:16 991,232 --a------ C:\WINDOWS\system32\esent.dll 2007-04-18 23:29 <DIR> d-------- C:\gear ratios 2007-04-18 21:31 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe 2007-04-18 21:31 <DIR> d--h----- C:\WINDOWS\$hf_mig$ 2007-04-18 21:31 <DIR> d-------- C:\WINDOWS\system32\PreInstall (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-05-11 01:36:42 -------- d-----w C:\Program Files\Messenger 2007-05-11 01:07:17 -------- d-----w C:\Program Files\SpywareBlaster 2007-05-10 23:23:42 -------- d-----w C:\Program Files\Norton AntiVirus2003 2007-05-10 23:04:43 -------- d-----w C:\Program Files\Common Files\Symantec Shared 2007-05-10 22:40:44 -------- d-----w C:\Program Files\Microsoft Works 2007-05-10 22:39:52 -------- d-----w C:\Program Files\QuickTime 2007-05-10 22:39:52 -------- d-----w C:\Program Files\iTunes 2007-05-10 21:35:32 -------- d-----w C:\DOCUME~1\WESLEY~1\APPLIC~1\Lavasoft 2007-05-10 03:35:45 -------- d-----w C:\DOCUME~1\WESLEY~1\APPLIC~1\HP 2007-05-10 03:34:13 -------- d-----w C:\DOCUME~1\WESLEY~1\APPLIC~1\U3 2007-04-27 05:48:23 -------- d-----w C:\Program Files\HP 2007-04-13 05:10:33 -------- d-----w C:\DOCUME~1\WESLEY~1\APPLIC~1\AdobeUM 2007-03-23 01:25:33 3,010 ----a-w C:\WINDOWS\system32\tmp.reg 2007-03-23 00:47:12 -------- d-----w C:\Program Files\BSPlayer 2007-03-17 04:37:39 -------- d-----w C:\DOCUME~1\WESLEY~1\APPLIC~1\Apple Computer 2007-03-17 04:30:14 -------- d-----w C:\Program Files\Kazaa Lite K++ (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 15:17] {53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2004-05-12 01:03] {BDF3E430-B101-42AD-A544-FADC6B084872}=C:\Program Files\Norton AntiVirus2003\NavShExt.dll [2002-11-15 00:09] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "nwiz"="nwiz.exe /install" "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup" "Logitech Utility"="Logi_MwX.Exe" "HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nwiz"="nwiz.exe" [2003-10-06 15:16 C:\WINDOWS\system32\nwiz.exe]) "NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2003-10-06 15:16] "Logitech Utility"="Logi_MwX.Exe" []) "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 03:41] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Microsoft Works Update Detection"="C:\Program Files\Microsoft Works\WkDetect.exe" [] "LDM"="\Program\BackWeb-8876480.exe" [] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "Microsoft Works Update Detection"="C:\\Program Files\\Microsoft Works\\WkDetect.exe" "LDM"="\\Program\\BackWeb-8876480.exe" HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa Authentication Packages msv1_0\0\0 Security Packages kerberos\0msv1_0\0schannel\0wdigest\0\0 Notification Packages scecli\0\0 HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ituneshelper C:\Program Files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost] LocalService Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService DnsCache\0\0 rpcss RpcSs\0\0 imgsvc StiSvc\0\0 termsvcs TermService\0\0 HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost ~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ backup-20070515-122707-453 O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com/signuptemp...veSecurity.cab backup-20070515-122707-536 O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE Contents of the 'Scheduled Tasks' folder C:\WINDOWS\tasks\Symantec NetDetect.job ******************************************************************** catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-05-15 12:45:25 Windows 5.1.2600 Service Pack 1 NTFS scanning hidden processes ... scanning hidden services ... scanning hidden autostart entries ... scanning hidden files ... C:\RECYCLER\NPROTECT C:\RECYCLER\NPROTECT\00089461. 5591040 bytes C:\RECYCLER\NPROTECT\00112492.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112493.DLL 802816 bytes C:\RECYCLER\NPROTECT\00112494.inf 8192 bytes C:\RECYCLER\NPROTECT\00112495.pnf 16384 bytes C:\RECYCLER\NPROTECT\00112496.cat 12288 bytes C:\RECYCLER\NPROTECT\00112497.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112498.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112499.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112500.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112503.inf 12288 bytes C:\RECYCLER\NPROTECT\00112504.pnf 24576 bytes C:\RECYCLER\NPROTECT\00112505.cat 12288 bytes C:\RECYCLER\NPROTECT\00112506.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112507.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112508.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112509.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112510.inf 20480 bytes C:\RECYCLER\NPROTECT\00112511.pnf 36864 bytes C:\RECYCLER\NPROTECT\00112512.cat 12288 bytes C:\RECYCLER\NPROTECT\00112514.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112515.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112516.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112519.inf 8192 bytes C:\RECYCLER\NPROTECT\00112520.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112521.cat 12288 bytes C:\RECYCLER\NPROTECT\00112522.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112523.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112524.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112525.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112528.exe 32768 bytes C:\RECYCLER\NPROTECT\00112529.inf 12288 bytes C:\RECYCLER\NPROTECT\00112530.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112531.cat 12288 bytes C:\RECYCLER\NPROTECT\00112532.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112534.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112535.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112536.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112539.dll 131072 bytes C:\RECYCLER\NPROTECT\00112540.inf 12288 bytes C:\RECYCLER\NPROTECT\00112541.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112542.cat 12288 bytes C:\RECYCLER\NPROTECT\00112543.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112545.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112546.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112547.DLL 16384 bytes C:\RECYCLER\NPROTECT\00112550.DLL 61440 bytes C:\RECYCLER\NPROTECT\00112551.inf 12288 bytes C:\RECYCLER\NPROTECT\00112552.pnf 24576 bytes C:\RECYCLER\NPROTECT\00112553.cat 16384 bytes C:\RECYCLER\NPROTECT\00112554.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112555.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112556.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112557.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112560.tsp 73728 bytes C:\RECYCLER\NPROTECT\00112561.tsp 53248 bytes C:\RECYCLER\NPROTECT\00112562.inf 12288 bytes C:\RECYCLER\NPROTECT\00112563.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112564.cat 12288 bytes C:\RECYCLER\NPROTECT\00112565.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112566.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112567.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112568.DLL 16384 bytes C:\RECYCLER\NPROTECT\00112571.DLL 1798144 bytes C:\RECYCLER\NPROTECT\00112572.inf 12288 bytes C:\RECYCLER\NPROTECT\00112573.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112574.cat 16384 bytes C:\RECYCLER\NPROTECT\00112575.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112576.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112577.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112578.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112581.dll 1351680 bytes C:\RECYCLER\NPROTECT\00112582.dll 65536 bytes C:\RECYCLER\NPROTECT\00112583.inf 12288 bytes C:\RECYCLER\NPROTECT\00112584.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112585.log 131072 bytes C:\RECYCLER\NPROTECT\00112586.cat 12288 bytes C:\RECYCLER\NPROTECT\00112587.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112588.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112589.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112590.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112593.DLL 118784 bytes C:\RECYCLER\NPROTECT\00112594.inf 12288 bytes C:\RECYCLER\NPROTECT\00112595.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112596.cat 12288 bytes C:\RECYCLER\NPROTECT\00112597.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112598.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112599.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112600.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112603.dll 2031616 bytes C:\RECYCLER\NPROTECT\00112604.dll 942080 bytes C:\RECYCLER\NPROTECT\00112605.edb 1056768 bytes C:\RECYCLER\NPROTECT\00112606.inf 8192 bytes C:\RECYCLER\NPROTECT\00112607.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112608.cat 12288 bytes C:\RECYCLER\NPROTECT\00112609.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112610.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112611.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112612.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112615.ocx 520192 bytes C:\RECYCLER\NPROTECT\00112616.ocx 389120 bytes C:\RECYCLER\NPROTECT\00112617.inf 12288 bytes C:\RECYCLER\NPROTECT\00112618.pnf 24576 bytes C:\RECYCLER\NPROTECT\00112619.cat 12288 bytes C:\RECYCLER\NPROTECT\00112620.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112621.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112622.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112623.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112626.DLL 176128 bytes C:\RECYCLER\NPROTECT\00112627.inf 12288 bytes C:\RECYCLER\NPROTECT\00112628.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112629.cat 12288 bytes C:\RECYCLER\NPROTECT\00112630.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112631.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112632.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112633.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112636.dll 225280 bytes C:\RECYCLER\NPROTECT\00112637.inf 12288 bytes C:\RECYCLER\NPROTECT\00112638.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112639.log 131072 bytes C:\RECYCLER\NPROTECT\00112640.cat 12288 bytes C:\RECYCLER\NPROTECT\00112641.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112642.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112643.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112644.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112647.DLL 323584 bytes C:\RECYCLER\NPROTECT\00112648.sys 258048 bytes C:\RECYCLER\NPROTECT\00112649.inf 12288 bytes C:\RECYCLER\NPROTECT\00112650.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112651.log 131072 bytes C:\RECYCLER\NPROTECT\00112652.cat 12288 bytes C:\RECYCLER\NPROTECT\00112654.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112655.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112656.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112659.inf 8192 bytes C:\RECYCLER\NPROTECT\00112660.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112661.cat 12288 bytes C:\RECYCLER\NPROTECT\00112662.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112663.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112664.DLL 16384 bytes C:\RECYCLER\NPROTECT\00112668.inf 12288 bytes C:\RECYCLER\NPROTECT\00112669.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112670.cat 16384 bytes C:\RECYCLER\NPROTECT\00112671.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112672.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112673.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112674.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112675.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112676.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112677.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112678.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112679.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112680.DLL 16384 bytes C:\RECYCLER\NPROTECT\00112683.DLL 204800 bytes C:\RECYCLER\NPROTECT\00112684.inf 8192 bytes C:\RECYCLER\NPROTECT\00112685.inf 12288 bytes C:\RECYCLER\NPROTECT\00112686.pnf 24576 bytes C:\RECYCLER\NPROTECT\00112687.cat 16384 bytes C:\RECYCLER\NPROTECT\00112688.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112689.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112690.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112691.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112694.dll 827392 bytes C:\RECYCLER\NPROTECT\00112695.inf 12288 bytes C:\RECYCLER\NPROTECT\00112696.pnf 24576 bytes C:\RECYCLER\NPROTECT\00112697.cat 12288 bytes C:\RECYCLER\NPROTECT\00112698.DLL 4096 bytes C:\RECYCLER\NPROTECT\00112699.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112700.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112701.DLL 12288 bytes C:\RECYCLER\NPROTECT\00112704.inf 8192 bytes C:\RECYCLER\NPROTECT\00112705.pnf 20480 bytes C:\RECYCLER\NPROTECT\00112706.cat 12288 bytes C:\RECYCLER\NPROTECT\00112707.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112708.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112709.DLL 8192 bytes C:\RECYCLER\NPROTECT\00112710.dll 5550080 bytes C:\RECYCLER\NPROTECT\00112711.dll 3227648 bytes C:\RECYCLER\NPROTECT\00112713.SQL 73728 bytes C:\RECYCLER\NPROTECT\00112714.inf 12288 bytes C:\RECYCLER\NPROTECT\00112715.pnf 24576 bytes C:\RECYCLER\NPROTECT\00112716.cat 8192 bytes C:\RECYCLER\NPROTECT\00112717.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112718.ldb 64 bytes C:\RECYCLER\NPROTECT\00112719.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112720.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112721 4096 bytes C:\RECYCLER\NPROTECT\00112722 4096 bytes C:\RECYCLER\NPROTECT\00112723.HTM 8192 bytes C:\RECYCLER\NPROTECT\00112724.HTM 8192 bytes C:\RECYCLER\NPROTECT\00112725.HTM 8192 bytes C:\RECYCLER\NPROTECT\00112742.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112743.JS 544 bytes C:\RECYCLER\NPROTECT\00112744.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00112746.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00112747.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112748 12288 bytes C:\RECYCLER\NPROTECT\00112749 12288 bytes C:\RECYCLER\NPROTECT\00112750 256 bytes C:\RECYCLER\NPROTECT\00112751 264 bytes C:\RECYCLER\NPROTECT\00112752 8192 bytes C:\RECYCLER\NPROTECT\00112753 264 bytes C:\RECYCLER\NPROTECT\00112754 248 bytes C:\RECYCLER\NPROTECT\00112755 8192 bytes C:\RECYCLER\NPROTECT\00112756 12288 bytes C:\RECYCLER\NPROTECT\00112757 240 bytes C:\RECYCLER\NPROTECT\00112758 12288 bytes C:\RECYCLER\NPROTECT\00112759 12288 bytes C:\RECYCLER\NPROTECT\00112760 12288 bytes C:\RECYCLER\NPROTECT\00112761 12288 bytes C:\RECYCLER\NPROTECT\00112762 8192 bytes C:\RECYCLER\NPROTECT\00112763 8192 bytes C:\RECYCLER\NPROTECT\00112764 8192 bytes C:\RECYCLER\NPROTECT\00112765 256 bytes C:\RECYCLER\NPROTECT\00112766 448 bytes C:\RECYCLER\NPROTECT\00112767 264 bytes C:\RECYCLER\NPROTECT\00112768 12288 bytes C:\RECYCLER\NPROTECT\00112769 272 bytes C:\RECYCLER\NPROTECT\00112770 8192 bytes C:\RECYCLER\NPROTECT\00112771 4096 bytes C:\RECYCLER\NPROTECT\00112772 12288 bytes C:\RECYCLER\NPROTECT\00112773 8192 bytes C:\RECYCLER\NPROTECT\00112774 8192 bytes C:\RECYCLER\NPROTECT\00112775 8192 bytes C:\RECYCLER\NPROTECT\00112776 8192 bytes C:\RECYCLER\NPROTECT\00112777 12288 bytes C:\RECYCLER\NPROTECT\00112778 8192 bytes C:\RECYCLER\NPROTECT\00112779 12288 bytes C:\RECYCLER\NPROTECT\00112780 12288 bytes C:\RECYCLER\NPROTECT\00112781 12288 bytes C:\RECYCLER\NPROTECT\00112782 4096 bytes C:\RECYCLER\NPROTECT\00112783 8192 bytes C:\RECYCLER\NPROTECT\00112784 12288 bytes C:\RECYCLER\NPROTECT\00112785 12288 bytes C:\RECYCLER\NPROTECT\00112786 8192 bytes C:\RECYCLER\NPROTECT\00112787 12288 bytes C:\RECYCLER\NPROTECT\00112788 8192 bytes C:\RECYCLER\NPROTECT\00112789 12288 bytes C:\RECYCLER\NPROTECT\00112790 12288 bytes C:\RECYCLER\NPROTECT\00112791 8192 bytes C:\RECYCLER\NPROTECT\00112792 12288 bytes C:\RECYCLER\NPROTECT\00112793 12288 bytes C:\RECYCLER\NPROTECT\00112794 12288 bytes C:\RECYCLER\NPROTECT\00112795 12288 bytes C:\RECYCLER\NPROTECT\00112796 8192 bytes C:\RECYCLER\NPROTECT\00112797 4096 bytes C:\RECYCLER\NPROTECT\00112798 12288 bytes C:\RECYCLER\NPROTECT\00112799 8192 bytes C:\RECYCLER\NPROTECT\00112800 8192 bytes C:\RECYCLER\NPROTECT\00112801 8192 bytes C:\RECYCLER\NPROTECT\00112802 8192 bytes C:\RECYCLER\NPROTECT\00112803 56 bytes C:\RECYCLER\NPROTECT\00112804 592 bytes C:\RECYCLER\NPROTECT\00112805 8192 bytes C:\RECYCLER\NPROTECT\00112806 4096 bytes C:\RECYCLER\NPROTECT\00112807 4096 bytes C:\RECYCLER\NPROTECT\00112808 96 bytes C:\RECYCLER\NPROTECT\00112809 344 bytes C:\RECYCLER\NPROTECT\00112810 8192 bytes C:\RECYCLER\NPROTECT\00112811 248 bytes C:\RECYCLER\NPROTECT\00112812 4096 bytes C:\RECYCLER\NPROTECT\00112813 8192 bytes C:\RECYCLER\NPROTECT\00112814 8192 bytes C:\RECYCLER\NPROTECT\00112815 56 bytes C:\RECYCLER\NPROTECT\00112816 4096 bytes C:\RECYCLER\NPROTECT\00112817 4096 bytes C:\RECYCLER\NPROTECT\00112818 12288 bytes C:\RECYCLER\NPROTECT\00112819 4096 bytes C:\RECYCLER\NPROTECT\00112820 400 bytes C:\RECYCLER\NPROTECT\00112821.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112822.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112825.log 131072 bytes C:\RECYCLER\NPROTECT\00112826.edb 1056768 bytes C:\RECYCLER\NPROTECT\00112827.log 131072 bytes C:\RECYCLER\NPROTECT\00112828.log 131072 bytes C:\RECYCLER\NPROTECT\00112829.inf 1904640 bytes C:\RECYCLER\NPROTECT\00112830.pnf 2269184 bytes C:\RECYCLER\NPROTECT\00112831.cat 1044480 bytes C:\RECYCLER\NPROTECT\00112835 8192 bytes C:\RECYCLER\NPROTECT\00112836 8192 bytes C:\RECYCLER\NPROTECT\00112837 8192 bytes C:\RECYCLER\NPROTECT\00112838 4096 bytes C:\RECYCLER\NPROTECT\00112839 8192 bytes C:\RECYCLER\NPROTECT\00112840 248 bytes C:\RECYCLER\NPROTECT\00112841 592 bytes C:\RECYCLER\NPROTECT\00112842 56 bytes C:\RECYCLER\NPROTECT\00112843 12288 bytes C:\RECYCLER\NPROTECT\00112844 4096 bytes C:\RECYCLER\NPROTECT\00112845 4096 bytes C:\RECYCLER\NPROTECT\00112846 4096 bytes C:\RECYCLER\NPROTECT\00112849.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112850.MAP 4096 bytes C:\RECYCLER\NPROTECT\00112856.cab 16384 bytes C:\RECYCLER\NPROTECT\00112877.MOZ 416 bytes C:\RECYCLER\NPROTECT\00112879.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112880.MOZ 464 bytes C:\RECYCLER\NPROTECT\00112881.log 131072 bytes C:\RECYCLER\NPROTECT\00112882.log 131072 bytes C:\RECYCLER\NPROTECT\00112883.log 131072 bytes C:\RECYCLER\NPROTECT\00112884.log 131072 bytes C:\RECYCLER\NPROTECT\00112885.edb 1056768 bytes C:\RECYCLER\NPROTECT\00112886.log 131072 bytes C:\RECYCLER\NPROTECT\00112887.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112888.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112889.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112890.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112891.edb 65536 bytes C:\RECYCLER\NPROTECT\00112892.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112893.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112894.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112895.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112896.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112897.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112898.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112899.SQL 831488 bytes C:\RECYCLER\NPROTECT\00112900.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112901.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112902.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112903.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112904.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112905.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112906.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112907.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112908.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112909.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112910.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112911.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00112912.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112913.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112914.XML 104 bytes C:\RECYCLER\NPROTECT\00112915.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112916.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112917.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112920.SQL 57344 bytes C:\RECYCLER\NPROTECT\00112923.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112924.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112925.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112926.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112927.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112928.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112929.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112930.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112931.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112932.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112933.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112934.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112935.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112936.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112937.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112938.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112939.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00112940.JS 8192 bytes C:\RECYCLER\NPROTECT\00112941.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00112943.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00112944.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00112947.PF 8192 bytes C:\RECYCLER\NPROTECT\00112948.PF 8192 bytes C:\RECYCLER\NPROTECT\00112949.PF 65536 bytes C:\RECYCLER\NPROTECT\00112950.PF 12288 bytes C:\RECYCLER\NPROTECT\00112951.PF 8192 bytes C:\RECYCLER\NPROTECT\00112952.PF 8192 bytes C:\RECYCLER\NPROTECT\00112953.PF 20480 bytes C:\RECYCLER\NPROTECT\00112954.PF 16384 bytes C:\RECYCLER\NPROTECT\00112955.PF 49152 bytes C:\RECYCLER\NPROTECT\00112956.PF 8192 bytes C:\RECYCLER\NPROTECT\00112957.PF 8192 bytes C:\RECYCLER\NPROTECT\00112958.PF 8192 bytes C:\RECYCLER\NPROTECT\00112959.PF 8192 bytes C:\RECYCLER\NPROTECT\00112960.PF 20480 bytes C:\RECYCLER\NPROTECT\00112961.PF 24576 bytes C:\RECYCLER\NPROTECT\00112962.PF 24576 bytes C:\RECYCLER\NPROTECT\00112963.PF 20480 bytes C:\RECYCLER\NPROTECT\00112964.PF 24576 bytes C:\RECYCLER\NPROTECT\00112965.PF 32768 bytes C:\RECYCLER\NPROTECT\00112966.PF 12288 bytes C:\RECYCLER\NPROTECT\00112967.PF 57344 bytes C:\RECYCLER\NPROTECT\00112968.PF 24576 bytes C:\RECYCLER\NPROTECT\00112969.PF 16384 bytes C:\RECYCLER\NPROTECT\00112970.PF 12288 bytes C:\RECYCLER\NPROTECT\00112971.PF 12288 bytes C:\RECYCLER\NPROTECT\00112972.PF 20480 bytes C:\RECYCLER\NPROTECT\00112973.PF 90112 bytes C:\RECYCLER\NPROTECT\00112974.PF 81920 bytes C:\RECYCLER\NPROTECT\00112975.PF 36864 bytes C:\RECYCLER\NPROTECT\00112976.PF 57344 bytes C:\RECYCLER\NPROTECT\00112977.PF 45056 bytes C:\RECYCLER\NPROTECT\00112978.PF 8192 bytes C:\RECYCLER\NPROTECT\00112979.PF 20480 bytes C:\RECYCLER\NPROTECT\00112980.PF 40960 bytes C:\RECYCLER\NPROTECT\00112981.PF 8192 bytes C:\RECYCLER\NPROTECT\00112982.PF 20480 bytes C:\RECYCLER\NPROTECT\00112983.PF 16384 bytes C:\RECYCLER\NPROTECT\00112984.PF 24576 bytes C:\RECYCLER\NPROTECT\00112985.PF 20480 bytes C:\RECYCLER\NPROTECT\00112986.PF 28672 bytes C:\RECYCLER\NPROTECT\00112987.PF 12288 bytes C:\RECYCLER\NPROTECT\00112988.PF 32768 bytes C:\RECYCLER\NPROTECT\00112989.PF 16384 bytes C:\RECYCLER\NPROTECT\00112990.PF 4096 bytes C:\RECYCLER\NPROTECT\00112991.PF 65536 bytes C:\RECYCLER\NPROTECT\00112992.PF 16384 bytes C:\RECYCLER\NPROTECT\00112993.PF 12288 bytes C:\RECYCLER\NPROTECT\00112994.PF 32768 bytes C:\RECYCLER\NPROTECT\00112995.PF 73728 bytes C:\RECYCLER\NPROTECT\00112996.PF 73728 bytes C:\RECYCLER\NPROTECT\00112997.PF 57344 bytes C:\RECYCLER\NPROTECT\00112998.PF 36864 bytes C:\RECYCLER\NPROTECT\00112999.PF 16384 bytes C:\RECYCLER\NPROTECT\00113000.PF 73728 bytes C:\RECYCLER\NPROTECT\00113001.PF 73728 bytes C:\RECYCLER\NPROTECT\00113002.PF 20480 bytes C:\RECYCLER\NPROTECT\00113003.PF 12288 bytes C:\RECYCLER\NPROTECT\00113004.PF 49152 bytes C:\RECYCLER\NPROTECT\00113005.PF 73728 bytes C:\RECYCLER\NPROTECT\00113006.PF 40960 bytes C:\RECYCLER\NPROTECT\00113007.PF 16384 bytes C:\RECYCLER\NPROTECT\00113008.PF 86016 bytes C:\RECYCLER\NPROTECT\00113009.PF 86016 bytes C:\RECYCLER\NPROTECT\00113010.PF 77824 bytes C:\RECYCLER\NPROTECT\00113011.PF 73728 bytes C:\RECYCLER\NPROTECT\00113012.PF 40960 bytes C:\RECYCLER\NPROTECT\00113013.PF 77824 bytes C:\RECYCLER\NPROTECT\00113014.PF 73728 bytes C:\RECYCLER\NPROTECT\00113015.PF 73728 bytes C:\RECYCLER\NPROTECT\00113016.PF 73728 bytes C:\RECYCLER\NPROTECT\00113017.PF 73728 bytes C:\RECYCLER\NPROTECT\00113018.PF 69632 bytes C:\RECYCLER\NPROTECT\00113019.PF 69632 bytes C:\RECYCLER\NPROTECT\00113020.PF 61440 bytes C:\RECYCLER\NPROTECT\00113021.PF 69632 bytes C:\RECYCLER\NPROTECT\00113022.PF 73728 bytes C:\RECYCLER\NPROTECT\00113023.PF 45056 bytes C:\RECYCLER\NPROTECT\00113024.PF 20480 bytes C:\RECYCLER\NPROTECT\00113025.PF 12288 bytes C:\RECYCLER\NPROTECT\00113026.PF 4096 bytes C:\RECYCLER\NPROTECT\00113027.PF 16384 bytes C:\RECYCLER\NPROTECT\00113028.PF 16384 bytes C:\RECYCLER\NPROTECT\00113029.PF 8192 bytes C:\RECYCLER\NPROTECT\00113030.PF 4096 bytes C:\RECYCLER\NPROTECT\00113031.PF 12288 bytes C:\RECYCLER\NPROTECT\00113032.PF 20480 bytes C:\RECYCLER\NPROTECT\00113033.PF 20480 bytes C:\RECYCLER\NPROTECT\00113034.PF 20480 bytes C:\RECYCLER\NPROTECT\00113035.PF 4096 bytes C:\RECYCLER\NPROTECT\00113036.PF 12288 bytes C:\RECYCLER\NPROTECT\00113037.PF 12288 bytes C:\RECYCLER\NPROTECT\00113038.PF 12288 bytes C:\RECYCLER\NPROTECT\00113039.PF 4096 bytes C:\RECYCLER\NPROTECT\00113040.PF 20480 bytes C:\RECYCLER\NPROTECT\00113041.PF 12288 bytes C:\RECYCLER\NPROTECT\00113042.PF 4096 bytes C:\RECYCLER\NPROTECT\00113049.BIN 4096 bytes C:\RECYCLER\NPROTECT\00113050.edb 65536 bytes C:\RECYCLER\NPROTECT\00113059.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113060.SQL 393216 bytes C:\RECYCLER\NPROTECT\00113061.ldb 64 bytes C:\RECYCLER\NPROTECT\00113063.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113064.JS 4096 bytes C:\RECYCLER\NPROTECT\00113065.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113067.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113068.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113073.cab 16384 bytes C:\RECYCLER\NPROTECT\00113079.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113080.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113085 4096 bytes C:\RECYCLER\NPROTECT\00113086 4096 bytes C:\RECYCLER\NPROTECT\00113091.ldb 64 bytes C:\RECYCLER\NPROTECT\00113096.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113097.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113098.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113099.dat 32768 bytes C:\RECYCLER\NPROTECT\00113103.HTM 28672 bytes C:\RECYCLER\NPROTECT\00113105.TRA 4096 bytes C:\RECYCLER\NPROTECT\00113106.MOZ 416 bytes C:\RECYCLER\NPROTECT\00113107.SQL 872448 bytes C:\RECYCLER\NPROTECT\00113108.edb 1056768 bytes C:\RECYCLER\NPROTECT\00113109.edb 65536 bytes C:\RECYCLER\NPROTECT\00113110.MOZ 576 bytes C:\RECYCLER\NPROTECT\00113111.JS 576 bytes C:\RECYCLER\NPROTECT\00113112.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113114.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113115.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113136.cab 16384 bytes C:\RECYCLER\NPROTECT\00113147.edb 65536 bytes C:\RECYCLER\NPROTECT\00113148.ldb 64 bytes C:\RECYCLER\NPROTECT\00113149 4096 bytes C:\RECYCLER\NPROTECT\00113150 4096 bytes C:\RECYCLER\NPROTECT\00113151.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113152.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113153.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113154.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113155.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113171.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113173.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113174.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113175.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113176.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113177.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113178.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113179.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113189 4096 bytes C:\RECYCLER\NPROTECT\00113190 4096 bytes C:\RECYCLER\NPROTECT\00113194.edb 65536 bytes C:\RECYCLER\NPROTECT\00113197.JS 304 bytes C:\RECYCLER\NPROTECT\00113198.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113200.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113201.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113205.BIN 4096 bytes C:\RECYCLER\NPROTECT\00113207.edb 65536 bytes C:\RECYCLER\NPROTECT\00113217.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113218.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113230.SQL 851968 bytes C:\RECYCLER\NPROTECT\00113231.XML 104 bytes C:\RECYCLER\NPROTECT\00113233.SQL 49152 bytes C:\RECYCLER\NPROTECT\00113234.SQL 81920 bytes C:\RECYCLER\NPROTECT\00113235.SQL 102400 bytes C:\RECYCLER\NPROTECT\00113236.ldb 64 bytes C:\RECYCLER\NPROTECT\00113244.JS 304 bytes C:\RECYCLER\NPROTECT\00113245.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113248.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113249.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113254.cab 16384 bytes C:\RECYCLER\NPROTECT\00113260.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113261.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113269 4096 bytes C:\RECYCLER\NPROTECT\00113270 4096 bytes C:\RECYCLER\NPROTECT\00113285.ldb 64 bytes C:\RECYCLER\NPROTECT\00113291.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113292.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113293.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113294.dat 32768 bytes C:\RECYCLER\NPROTECT\00113297.HTM 28672 bytes C:\RECYCLER\NPROTECT\00113299.MOZ 416 bytes C:\RECYCLER\NPROTECT\00113300.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113301.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113302.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113303.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113304.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113305.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113306.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113307.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113308.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113309.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113310.edb 1056768 bytes C:\RECYCLER\NPROTECT\00113311.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113312.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113313.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113314.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113315.SQL 1159168 bytes C:\RECYCLER\NPROTECT\00113316.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113317.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113318.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113319.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113320.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113321.edb 65536 bytes C:\RECYCLER\NPROTECT\00113322.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113323.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113324.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113325.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113326.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113327.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113328.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113329.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113330.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113331.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113332.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113333.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113334.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113336.JS 8192 bytes C:\RECYCLER\NPROTECT\00113340.MOZ 472 bytes C:\RECYCLER\NPROTECT\00113342.JS 472 bytes C:\RECYCLER\NPROTECT\00113344.MOZ 456 bytes C:\RECYCLER\NPROTECT\00113345.JS 456 bytes C:\RECYCLER\NPROTECT\00113346.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113348.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113349.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113369.MOZ 408 bytes C:\RECYCLER\NPROTECT\00113370.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113371.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113372.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113374.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113375.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113376.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113377.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113378.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113379.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113380.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113381.SQL 536576 bytes C:\RECYCLER\NPROTECT\00113382.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113383.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113384.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113392.SQL 40960 bytes C:\RECYCLER\NPROTECT\00113394.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113395.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113397.SQL 53248 bytes C:\RECYCLER\NPROTECT\00113399.SQL 49152 bytes C:\RECYCLER\NPROTECT\00113400.SQL 73728 bytes C:\RECYCLER\NPROTECT\00113401.SQL 8192 bytes C:\RECYCLER\NPROTECT\00113402.SQL 73728 bytes C:\RECYCLER\NPROTECT\00113403.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113404.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113405.SQL 20480 bytes C:\RECYCLER\NPROTECT\00113406.SQL 32768 bytes C:\RECYCLER\NPROTECT\00113413.SQL 45056 bytes C:\RECYCLER\NPROTECT\00113414.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113415.SOL 72 bytes C:\RECYCLER\NPROTECT\00113416.SOL 72 bytes C:\RECYCLER\NPROTECT\00113417.SOL 72 bytes C:\RECYCLER\NPROTECT\00113418.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113419.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113420.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113421.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113422.XML 104 bytes C:\RECYCLER\NPROTECT\00113423.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113424.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113425.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113427.SOL 72 bytes C:\RECYCLER\NPROTECT\00113428.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113429.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113430.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113431.SQL 69632 bytes C:\RECYCLER\NPROTECT\00113432.SOL 72 bytes C:\RECYCLER\NPROTECT\00113433.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113434.SOL 72 bytes C:\RECYCLER\NPROTECT\00113435.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113438.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113439.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113440.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113441.SQL 61440 bytes C:\RECYCLER\NPROTECT\00113442.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113443.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113444.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113445.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113446.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113447.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113448.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113449.SOL 72 bytes C:\RECYCLER\NPROTECT\00113450.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113451.SOL 72 bytes C:\RECYCLER\NPROTECT\00113452.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113453.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113454.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113455.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113456.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113457.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113458.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113459.SOL 72 bytes C:\RECYCLER\NPROTECT\00113461.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113462.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113463.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113464.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113465.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113466.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113467.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113468.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113469.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113470.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113471.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113472.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113473.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113474.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113475.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113476.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113477.SOL 56 bytes C:\RECYCLER\NPROTECT\00113478.SOL 56 bytes C:\RECYCLER\NPROTECT\00113479.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113480.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113481.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113482.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113483.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113484.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113485.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113486.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113487.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113488.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113489.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113491.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113492.SOL 64 bytes C:\RECYCLER\NPROTECT\00113493.SOL 64 bytes C:\RECYCLER\NPROTECT\00113494.SOL 64 bytes C:\RECYCLER\NPROTECT\00113495.SOL 64 bytes C:\RECYCLER\NPROTECT\00113496.SOL 64 bytes C:\RECYCLER\NPROTECT\00113497.SOL 64 bytes C:\RECYCLER\NPROTECT\00113498.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113499.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113500.SOL 64 bytes C:\RECYCLER\NPROTECT\00113501.SOL 64 bytes C:\RECYCLER\NPROTECT\00113502.SOL 64 bytes C:\RECYCLER\NPROTECT\00113503.SOL 64 bytes C:\RECYCLER\NPROTECT\00113504.SOL 64 bytes C:\RECYCLER\NPROTECT\00113505.SOL 64 bytes C:\RECYCLER\NPROTECT\00113506.SOL 64 bytes C:\RECYCLER\NPROTECT\00113507.SOL 64 bytes C:\RECYCLER\NPROTECT\00113508.SOL 64 bytes C:\RECYCLER\NPROTECT\00113509.SOL 64 bytes C:\RECYCLER\NPROTECT\00113510.SOL 64 bytes C:\RECYCLER\NPROTECT\00113511.SOL 64 bytes C:\RECYCLER\NPROTECT\00113512.SOL 64 bytes C:\RECYCLER\NPROTECT\00113513.SOL 64 bytes C:\RECYCLER\NPROTECT\00113514.SOL 64 bytes C:\RECYCLER\NPROTECT\00113515.SOL 64 bytes C:\RECYCLER\NPROTECT\00113516.SOL 64 bytes C:\RECYCLER\NPROTECT\00113517.SOL 64 bytes C:\RECYCLER\NPROTECT\00113518.SOL 64 bytes C:\RECYCLER\NPROTECT\00113519.SOL 64 bytes C:\RECYCLER\NPROTECT\00113520.SOL 64 bytes C:\RECYCLER\NPROTECT\00113521.SOL 64 bytes C:\RECYCLER\NPROTECT\00113522.SOL 64 bytes C:\RECYCLER\NPROTECT\00113523.SOL 64 bytes C:\RECYCLER\NPROTECT\00113524.SOL 64 bytes C:\RECYCLER\NPROTECT\00113525.SOL 64 bytes C:\RECYCLER\NPROTECT\00113526.SOL 64 bytes C:\RECYCLER\NPROTECT\00113527.SOL 64 bytes C:\RECYCLER\NPROTECT\00113528.SOL 64 bytes C:\RECYCLER\NPROTECT\00113529.SOL 64 bytes C:\RECYCLER\NPROTECT\00113530.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113531.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113532.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113533.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113534.SOL 64 bytes C:\RECYCLER\NPROTECT\00113535.SOL 64 bytes C:\RECYCLER\NPROTECT\00113536.SOL 64 bytes C:\RECYCLER\NPROTECT\00113537.SOL 64 bytes C:\RECYCLER\NPROTECT\00113538.SOL 64 bytes C:\RECYCLER\NPROTECT\00113539.SOL 64 bytes C:\RECYCLER\NPROTECT\00113540.SQL 192512 bytes C:\RECYCLER\NPROTECT\00113541.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113542.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113543.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113544.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113545.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113546.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113547.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113548.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113549.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113550.SOL 64 bytes C:\RECYCLER\NPROTECT\00113551.SOL 64 bytes C:\RECYCLER\NPROTECT\00113552.SOL 64 bytes C:\RECYCLER\NPROTECT\00113553.SOL 64 bytes C:\RECYCLER\NPROTECT\00113554.SOL 64 bytes C:\RECYCLER\NPROTECT\00113555.SOL 64 bytes C:\RECYCLER\NPROTECT\00113556.SOL 64 bytes C:\RECYCLER\NPROTECT\00113557.SOL 64 bytes C:\RECYCLER\NPROTECT\00113558.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113559.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113560.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113561.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113562.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113563.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113564.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113565.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113566.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113567.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113568.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113569.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113570.MOZ 16384 bytes C:\RECYCLER\NPROTECT\00113571.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113572.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113573.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113574.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113575.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113576.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113577.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113578.SQL 36864 bytes C:\RECYCLER\NPROTECT\00113579.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113580.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113581.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113582.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113583.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113584.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113586.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113587.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113588.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113589.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113590.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113591.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113592.ldb 64 bytes C:\RECYCLER\NPROTECT\00113595.MOZ 20480 bytes C:\RECYCLER\NPROTECT\00113597.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113598.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113599.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113600.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113601.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113602.SQL 28672 bytes C:\RECYCLER\NPROTECT\00113603.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113605.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113606.MOZ 73728 bytes C:\RECYCLER\NPROTECT\00113607.MOZ 73728 bytes C:\RECYCLER\NPROTECT\00113608.MOZ 73728 bytes C:\RECYCLER\NPROTECT\00113610.MOZ 73728 bytes C:\RECYCLER\NPROTECT\00113611.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113612.MOZ 73728 bytes C:\RECYCLER\NPROTECT\00113613.SQL 143360 bytes C:\RECYCLER\NPROTECT\00113615.SQL 86016 bytes C:\RECYCLER\NPROTECT\00113616.MOZ 73728 bytes C:\RECYCLER\NPROTECT\00113617.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113618.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113619.MOZ 73728 bytes C:\RECYCLER\NPROTECT\00113620.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113621.MOZ 73728 bytes C:\RECYCLER\NPROTECT\00113622.MOZ 73728 bytes C:\RECYCLER\NPROTECT\00113623.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113624.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113625.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113633.SQL 61440 bytes C:\RECYCLER\NPROTECT\00113634.JS 8192 bytes C:\RECYCLER\NPROTECT\00113635.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113637.MOZ 32768 bytes C:\RECYCLER\NPROTECT\00113638.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113643.cab 16384 bytes C:\RECYCLER\NPROTECT\00113649.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113650.MAP 4096 bytes C:\RECYCLER\NPROTECT\00113655 4096 bytes C:\RECYCLER\NPROTECT\00113656 4096 bytes C:\RECYCLER\NPROTECT\00113658.ldb 64 bytes C:\RECYCLER\NPROTECT\00113680.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113681.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113682.HTM 8192 bytes C:\RECYCLER\NPROTECT\00113683.dat 32768 bytes C:\RECYCLER\NPROTECT\00113686.HTM 32768 bytes C:\RECYCLER\NPROTECT\00113688.edb 1056768 bytes C:\RECYCLER\NPROTECT\00113689.MOZ 408 bytes C:\RECYCLER\NPROTECT\00113690.SQL 1261568 bytes C:\RECYCLER\NPROTECT\00113691.edb 65536 bytes C:\RECYCLER\NPROTECT\00113698.SQL 65536 bytes C:\RECYCLER\NPROTECT\00113699.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113700.MOZ 73728 bytes C:\RECYCLER\NPROTECT\00113701.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113702.MOZ 4096 bytes C:\RECYCLER\NPROTECT\00113703.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113704.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113705.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113706.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113707.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113708.MOZ 8192 bytes C:\RECYCLER\NPROTECT\00113709.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113710.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113711.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113712.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113713.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113715.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113716.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113717.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113718.MOZ 69632 bytes C:\RECYCLER\NPROTECT\00113719.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113720.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113721.MOZ 73728 bytes C:\RECYCLER\NPROTECT\00113722.MOZ 12288 bytes C:\RECYCLER\NPROTECT\00113723.MOZ 73728 bytes C:\RECYCLER\NPROTE |