Go Back   Tech Support Forum > Security Center > Virus/Trojan/Spyware Help > Inactive Malware Help Topics

User Tag List

my issues and hijackthislog

This is a discussion on my issues and hijackthislog within the Inactive Malware Help Topics forums, part of the Tech Support Forum category. During multiple operations, say using bitlord and the internet, or some other such thing, my cursor disappears. well... The cursor


 
 
Thread Tools Search this Thread
Old 12-31-2005, 04:31 PM   #1
Guest
 
Join Date: Dec 2005
Posts: 6
OS:



During multiple operations, say using bitlord and the internet, or some other such thing, my cursor disappears. well... The cursor freezes on my screen, but this is only the spot where it disappeared. other than being invisable, it moves and works fine. It seemed like a memory thing to me, but this made little sense to me since I should be fine...

another little problem I've been having is from a few things on my desktop I am unable to delete.
Street_Legal_Racing_Redline-dm
Street_Legal_Racing_Redline-dm
Super1Karting-dm
DeerHunter2005_Setup
(the above were associated with mywebsearch, I removed this, but am still unable to delete these.
and
ks1.1.53trial_securitysuiteen

all of these give me this message when I try to delete them.

'It is being used by another person or program.'

seems they're used in safemode as well..

anyway, here's my log.

Logfile of HijackThis v1.99.1
Scan saved at 4:19:21 PM, on 12/31/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\RioMSC.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\Program Files\LClock\LClock.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE
C:\Program Files\U.S. Robotics\ControlCenter\Reminder.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Documents and Settings\Lucas\Desktop\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://red.clientapps.yahoo.com/cust...search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://red.clientapps.yahoo.com/cust.../www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer presented by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet6_98.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [LClock] C:\Program Files\LClock\LClock.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [EPSON Stylus CX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE /P26 "EPSON Stylus CX4200 Series" /O6 "USB002" /M "Stylus CX4200"
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,ClientStartup -s
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EPSON Stylus CX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE /P26 "EPSON Stylus CX4200 Series" /M "Stylus CX4200" /EF "HKCU"
O4 - Global Startup: Instant Update Reminder.lnk = ?
O8 - Extra context menu item: &Search - https://edits.mywebsearch.com/toolbar...rch.jhtml?p=ZN
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - https://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - https://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - https://online.comcast.net/help/ (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - https://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - https://v5.windowsupdate.microsoft.co...?1105467709358
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - https://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - https://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: x-mem1 - {C3719F83-7EF8-4BA0-89B0-3360C7AFB7CC} - C:\WINDOWS\system32\wowctl2.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Rio MSC Manager (RioMSC) - Digital Networks North America, Inc. - C:\WINDOWS\system32\RioMSC.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
folf is offline  
Sponsored Links
Advertisement
 
Old 12-31-2005, 09:00 PM   #2
TSF Team, Emeritus
 
greyknight17's Avatar
 
Join Date: Jul 2004
Location: New York
Posts: 14,311
OS: Windows 98 & Windows XP Home/Pro

My System

Welcome to TSF.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Please download Ewido Security Suite at https://www.ewido.net/en/download/.

1. Install Ewido Security Suite.
2. When installing, under 'Additional Options' uncheck:
* Install background guard
* Install scan via context menu
3. Launch Ewido, there should be an icon on your desktop, double click it.
4. The program will now open to the main screen.
5. When you run Ewido for the first time, you will get a warning 'Database could not be found!'. Click OK. We will fix this in a moment.
6. You will need to update Ewido to the latest definition files.
* On the left hand side of the main screen click update.
* Then click on Start Update.
7. The update will start and a progress bar will show the updates being installed. The status bar at the bottom will display 'Update successful'.
8. Exit Ewido. DO NOT scan yet.

If you are having problems with the updater, you can go to https://www.ewido.net/en/download/updates/ to update manually.

Download CleanUp! https://cleanup.stevengould.org/ (Alternate Link if main link don't work - https://www.greyknight17.com/spy/CleanUp.exe ) and install it. Don't run it yet.

Download LSPFix https://www.greyknight17.com/spy/LSPFix.exe and run it. Check the box that says 'I know what I'm doing'. Click on newdotnet6_98.dll on the left window and then click on the arrow pointing to the right. Click Finish and follow the prompts.

Restart your computer and boot into Safe Mode (if you don't know how, go to https://www.bleepingcomputer.com/foru...howtutorial=61 ).

CleanUp! deletes EVERYTHING out of your temp/temporary folders, it does not make backups. If you have any documents or programs that are saved in any Temporary Folders, please make a backup of these before running CleanUp!. Run CleanUp! and click on the Options button. Uncheck 'Scan local drives for temporary files'. Also uncheck those two Newsgroup entries if you don't want to delete them. Click OK and then click on the CleanUp! button. Let it run. After it's done, choose Yes to logoff.

Now open Ewido and do a scan on your system.

* Click on scanner.
* Click on 'Complete System Scan' and the scan will begin.
* While the scan is in progress you will be prompted to clean the first infected file it finds. Choose 'Remove', then put a check next to 'Perform action on all infections' in the left corner of the box so you don't have to sit and watch Ewido the whole time. Click OK.
Exit Ewido when it's done.

Run a scan in HijackThis. Check each of the following if they still exist and hit 'Fix Checked' after you check the last one:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://red.clientapps.yahoo.com/cust...search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = :0
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet6_98.dll
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,ClientStartup -s
O8 - Extra context menu item: &Search - https://edits.mywebsearch.com/toolbar...rch.jhtml?p=ZN
O18 - Protocol: x-mem1 - {C3719F83-7EF8-4BA0-89B0-3360C7AFB7CC} - C:\WINDOWS\system32\wowctl2.dll


Uninstall New.Net via the Add/Remove panel.

Locate and delete the following:

C:\Program Files\NewDotNet\
C:\WINDOWS\system32\wowctl2.dll


Restart your computer and boot back to Safe Mode again. Run Ewido scan again...

* Once the scan has completed, there will be a button located on the bottom of the screen named 'Save report'.
* Click 'Save report'.
* Save the report to your desktop.

Restart your computer to get back to Normal Mode. Post the Ewido report and a new HijackThis log here.
__________________
Please do NOT PM me. Post whatever questions you may have in the forum and we will take a look at it when we get to it. If you have waited for more than 3 days, you may then and ONLY then PM me for assistance. I will take a look at it.
greyknight17 is offline  
Old 01-01-2006, 08:53 PM   #3
Guest
 
Join Date: Dec 2005
Posts: 6
OS:


Thanks for your welcome and aid.


---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 12:16:12 PM, 1/1/2006
+ Report-Checksum: 485D5E51

+ Scan result:

No infected objects found.


::Report End



Logfile of HijackThis v1.99.1
Scan saved at 12:17:25 PM, on 1/1/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ewido anti-malware\SecuritySuite.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Lucas\Desktop\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer presented by Comcast
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [LClock] C:\Program Files\LClock\LClock.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [EPSON Stylus CX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE /P26 "EPSON Stylus CX4200 Series" /O6 "USB002" /M "Stylus CX4200"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EPSON Stylus CX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE /P26 "EPSON Stylus CX4200 Series" /M "Stylus CX4200" /EF "HKCU"
O4 - Global Startup: Instant Update Reminder.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - https://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - https://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - https://online.comcast.net/help/ (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - https://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - https://v5.windowsupdate.microsoft.co...?1105467709358
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - https://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - https://www.creative.com/su/ocx/15016/CTPID.cab
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Rio MSC Manager (RioMSC) - Digital Networks North America, Inc. - C:\WINDOWS\system32\RioMSC.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
folf is offline  
Sponsored Links
Advertisement
 
Old 01-02-2006, 02:46 AM   #4
TSF Enthusiast
 
POADB's Avatar
 
Join Date: Jul 2004
Location: United Kingdom
Posts: 6,574
OS: Win7


Your logs are clean.

Are you experiencing any problems now?
POADB is offline  
Old 01-02-2006, 05:08 PM   #5
Guest
 
Join Date: Dec 2005
Posts: 6
OS:


the only problems I am experiencing is.. I am still unable to remove some things from my desktop... I am considering pushing f8 at start up and disabling the restart automatically when critical program is terminated feature... and then just exiting out of my programs one by one until I find the program which is using it and then reenabling the feature..

Something new I am experiencing is every other time on the internet, it is unable to load, and it tells me the only thing which could load is some data tree.
folf is offline  
Old 01-03-2006, 01:10 AM   #6
TSF Enthusiast
 
POADB's Avatar
 
Join Date: Jul 2004
Location: United Kingdom
Posts: 6,574
OS: Win7


Please elaorate on 'some things' that you cant rmeove from your desktop? Are they Icons? exe's? I'll need a little more detail please.
POADB is offline  
Old 01-03-2006, 10:40 PM   #7
Guest
 
Join Date: Dec 2005
Posts: 6
OS:


Street_Legal_Racing_Redline-dm
Street_Legal_Racing_Redline-dm
Super1Karting-dm
DeerHunter2005_Setup
(the above were associated with mywebsearch, I removed this, but am still unable to delete these.
and
ks1.1.53trial_securitysuiteen

___________________________

I'm having trouble removing these. They are .exe's.. Setup things I've downloaded directly to the desktop, but cannot remove.

___________________________

My mouse has improves, but disappeared tonight while running the internet, moving files around on my computer, and onto an mp3 player.
Its weird... The cursor freezes on the screen, but functions fine, moving around invisable, as I can hotkey it to locate it as I move it around.. Also, the cursor, where it appears to be frozen, changes shape, as it usually does when you move over anything clickable... My usual fix-->restart the computer.
folf is offline  
Old 01-05-2006, 02:25 AM   #8
TSF Security Team, Emeritus
 
MicroBell's Avatar
 
Join Date: Sep 2004
Location: Carmichaels, PA-USA
Posts: 6,962
OS: Windows 7


Send a message via ICQ to MicroBell Send a message via MSN to MicroBell
Download KillBox https://www.bleepingcomputer.com/file...re/KillBox.zip

Run Killbox and paste the path to the files your trying to delete and hit the RED button with the white X. This should allow you to remove those files.

I also need you run the following tools....


You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download AproposFix from here:
https://swandog46.geekstogo.com/aproposfix.exe

Save it to your desktop but do NOT run it yet.

Then please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.


Once in Safe Mode, please double-click aproposfix.exe and unzip it to the desktop. Open the aproposfix folder on your desktop and run RunThis.bat. Follow the prompts.

When the tool is finished, please reboot back into normal mode, and post the entire contents of the log.txt file in the aproposfix folder along with the log below.


Perform an online scan with Internet Explorer with Panda ActiveScan
** click on "Free use ActiveScan" located on the top right hand corner
  1. Click Check Now & a 'pop up' window shall appear. *ensure that your pop up blocker doesn't block it
  2. Enter your e-mail address, country, and state & click Scan Now ...begins downloading 8 MB Panda's ActiveX controls
Begin the scan by selecting My Computer
  • If it finds any malware, it will offer you a report.
  • Please ignore any entry it finds and wants you to buy the program for removal as we will address this later.
  • Click on see report. Then click Save report
Please post that log in your next reply.
__________________
We Are The BORG Spyware KILLER and Adware Destroyer!



MicroBell is offline  
Old 01-05-2006, 09:00 PM   #9
Guest
 
Join Date: Dec 2005
Posts: 6
OS:


Log of AproposFix v1

************

Running from directory:
C:\Documents and Settings\Lucas\Desktop\aproposfix

************

Registry entries found:


************

No service found!

Removing hidden folder:
No folder found!

Deleting files:


Backing up files:
Done!

Removing registry entries:

REGEDIT4


Done!

Finished!


__________________________________________


Incident Status Location

Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\cookies.txt[]
Adware:Adware/CWS.Searchmeup Not disinfected C:\Documents and Settings\Lucas\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-bae16f0-7986046d.zip[GetAccess.class]
Adware:Adware/CWS.Searchmeup Not disinfected C:\Documents and Settings\Lucas\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-bae16f0-7986046d.zip[Installer.class]
Virus:Exploit/ByteVerify Disinfected C:\Documents and Settings\Lucas\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-bae16f0-7986046d.zip[NewSecurityClassLoader.class]
Virus:Exploit/ByteVerify Disinfected C:\Documents and Settings\Lucas\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-bae16f0-7986046d.zip[NewURLClassLoader.class]
Adware:Adware/IST.ISTBar Not disinfected C:\Documents and Settings\Lucas\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-3c936701-66077160.zip[InstallerApplet.class]
Adware:Adware/IST.ISTBar Not disinfected C:\Documents and Settings\Lucas\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-5aa0b436-41962352.zip[InstallerApplet.class]
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Lucas\Cookies\[email protected][2].txt
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Lucas\Cookies\[email protected][1].txt
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Lucas\Cookies\[email protected][2].txt
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Lucas\Cookies\[email protected][1].txt
Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Lucas\Cookies\[email protected][1].txt



_________________________________________________



Logfile of HijackThis v1.99.1
Scan saved at 8:55:19 PM, on 1/5/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\RioMSC.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\Program Files\LClock\LClock.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Lucas\Desktop\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer presented by Comcast
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [LClock] C:\Program Files\LClock\LClock.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [EPSON Stylus CX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE /P26 "EPSON Stylus CX4200 Series" /O6 "USB002" /M "Stylus CX4200"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EPSON Stylus CX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE /P26 "EPSON Stylus CX4200 Series" /M "Stylus CX4200" /EF "HKCU"
O4 - Global Startup: Instant Update Reminder.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - https://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - https://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - https://online.comcast.net/help/ (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - https://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - https://v5.windowsupdate.microsoft.co...?1105467709358
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - https://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - https://www.creative.com/su/ocx/15016/CTPID.cab
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Rio MSC Manager (RioMSC) - Digital Networks North America, Inc. - C:\WINDOWS\system32\RioMSC.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
folf is offline  
Old 01-06-2006, 12:10 AM   #10
TSF Enthusiast
 
POADB's Avatar
 
Join Date: Jul 2004
Location: United Kingdom
Posts: 6,574
OS: Win7


Launch fireFox. go to Tools > Options > Privacy and then clear 'Cookies'.

Follow the instructions outlined here to clear Sun Java's cache.

Empty this folder:

C:\Documents and Settings\Lucas\Cookies\


Download RootKitRevealer.zip
Unzip it to the desktop, run it, and click Scan. This will generate a log file.
Please post the entire contents of the log file in your next reply
POADB is offline  
Old 01-07-2006, 12:23 AM   #11
Guest
 
Join Date: Dec 2005
Posts: 6
OS:


I was able to remove all cookies in documents and settings except for a dat file called index.
___________________________________________



HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\s0 11/24/2005 12:53 PM 4 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\s1 11/24/2005 12:53 PM 4 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\s2 11/24/2005 12:53 PM 4 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\g0 11/24/2005 12:53 PM 32 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\h0 11/24/2005 12:53 PM 4 bytes Hidden from Windows API.
HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 12/25/2005 12:31 AM 0 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk 1/6/2006 9:39 PM 839 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Flash Player\#SharedObjects\JNJZKZGH\files.freeonlinegames.com\1136612788 1/6/2006 9:52 PM 0 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Flash Player\#SharedObjects\JNJZKZGH\files.freeonlinegames.com\1136612788\games 1/6/2006 9:52 PM 0 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Flash Player\#SharedObjects\JNJZKZGH\files.freeonlinegames.com\1136612788\games\adrenalinechallenge 1/6/2006 9:52 PM 0 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Flash Player\#SharedObjects\JNJZKZGH\files.freeonlinegames.com\1136612788\games\adrenalinechallenge\adrenalinechallenge.swf 1/6/2006 9:52 PM 0 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Flash Player\#SharedObjects\JNJZKZGH\files.freeonlinegames.com\1136612788\games\adrenalinechallenge\adrenalinechallenge.swf\kianisMoto.sol 1/6/2006 9:52 PM 594 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Flash Player\#SharedObjects\JNJZKZGH\localhost\Documents and Settings 1/6/2006 10:44 PM 0 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Flash Player\#SharedObjects\JNJZKZGH\localhost\Documents and Settings\Lucas 1/6/2006 10:44 PM 0 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Flash Player\#SharedObjects\JNJZKZGH\localhost\Documents and Settings\Lucas\Desktop 1/6/2006 10:44 PM 0 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Flash Player\#SharedObjects\JNJZKZGH\localhost\Documents and Settings\Lucas\Desktop\rpmworld.exe 1/6/2006 10:44 PM 0 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Flash Player\#SharedObjects\JNJZKZGH\localhost\Documents and Settings\Lucas\Desktop\rpmworld.exe\TestMovie_Config_Info.sol 1/6/2006 10:44 PM 341 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Shockwave Player\Prefs\3ZLPG7UU\grooveloader.txt 1/6/2006 10:40 PM 75 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Shockwave Player\Prefs\3ZLPG7UU\TOCA_language_menu.txt 1/6/2006 10:41 PM 102 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Shockwave Player\xtras\download\TheGrooveAlliance 1/6/2006 10:38 PM 0 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Shockwave Player\xtras\download\TheGrooveAlliance\3DGrooveXtrav18 1/6/2006 10:38 PM 0 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Macromedia\Shockwave Player\xtras\download\TheGrooveAlliance\3DGrooveXtrav18\Groove.x32 1/6/2006 10:38 PM 848.00 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\00C709BCd01 1/6/2006 10:29 PM 12.84 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\00C90B47d01 1/6/2006 10:28 PM 1.72 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\00CD7AE1d01 1/6/2006 8:46 PM 35.55 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\011CBBB5d01 1/6/2006 10:13 PM 19.68 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\021656A8d01 1/6/2006 10:11 PM 15.86 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\02492758d01 1/6/2006 9:02 PM 75.91 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\0524DFAAd01 1/6/2006 10:15 PM 30.80 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\0742F7C0d01 1/6/2006 7:44 PM 17.76 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\0744C17Cd01 1/6/2006 7:45 PM 48.65 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\07D41E51d01 1/6/2006 10:14 PM 30.89 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\07E2172Cd01 1/6/2006 10:05 PM 31.02 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\0856B915d01 1/6/2006 10:05 PM 20.22 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\08736A19d01 1/6/2006 10:13 PM 20.52 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\08D2D414d01 1/6/2006 10:11 PM 20.07 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\0DEEF097d01 1/6/2006 10:07 PM 34.18 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\0E02D003d01 1/6/2006 10:10 PM 26.14 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\0E62934Ad01 1/6/2006 7:44 PM 54.24 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\100FB3DCd01 1/6/2006 9:56 PM 36.60 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\106EF04Bd01 1/6/2006 9:47 PM 26.67 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\10890EEDd01 1/6/2006 10:11 PM 14.00 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\1191DB68d01 1/6/2006 9:00 PM 4.89 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\11C3D41Ed01 1/6/2006 10:04 PM 21.06 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\143437FDd01 1/6/2006 10:05 PM 29.29 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\14CA5521d01 1/6/2006 10:36 PM 263.10 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\16739B31d01 1/6/2006 7:43 PM 29.60 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\167F9B31d01 1/6/2006 7:44 PM 24.09 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\180FB3DCd01 1/6/2006 9:53 PM 50.04 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\186FBA58d01 1/6/2006 7:39 PM 23.19 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\18C62121d01 1/6/2006 7:45 PM 49.89 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\18FDBE88d01 1/6/2006 10:27 PM 11.24 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\1975CB2Dd01 1/6/2006 10:38 PM 389.98 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\19909A3Cd01 1/6/2006 9:47 PM 244.33 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\19B34FFCd01 1/6/2006 10:42 PM 668 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\19C0CEC7d01 1/6/2006 10:03 PM 30.00 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\1A89C2F3d01 1/6/2006 7:42 PM 323.69 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\1AC3B1E8d01 1/6/2006 9:00 PM 39.83 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\1ACAABDAd01 1/6/2006 10:37 PM 235 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\1CAEFC62d01 1/6/2006 10:13 PM 34.89 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\1E28BE6Ad01 1/6/2006 10:15 PM 41.59 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\1F0F348Dd01 1/6/2006 10:35 PM 117.51 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\1F9F4B44d01 1/6/2006 10:24 PM 17.09 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\2088988Fd01 1/6/2006 8:46 PM 20.92 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\20B695F6d01 1/6/2006 10:41 PM 7.66 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\2125EDEEd01 1/6/2006 10:11 PM 29.76 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\2182F3F1d01 1/6/2006 10:32 PM 659.46 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\23423F57d01 1/6/2006 8:42 PM 31.07 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\23EF0A15d01 1/6/2006 10:24 PM 30.44 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\24DD9B06d01 1/6/2006 7:45 PM 31.47 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\24EC11B4d01 1/6/2006 10:11 PM 0 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\24FBDBFEd01 1/6/2006 10:41 PM 782.77 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\26738E57d01 1/6/2006 10:11 PM 36.78 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\26F33D8Fd01 1/6/2006 10:23 PM 28.44 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\29DA3E3Fd01 1/6/2006 10:04 PM 16.75 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\2B34F932d01 1/6/2006 10:27 PM 21.99 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\2C8D07EBd01 1/6/2006 10:41 PM 5.70 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\2F08C4A0d01 1/6/2006 10:13 PM 22.01 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\2F2ABFD5d01 1/6/2006 10:05 PM 33.05 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\2F884C31d01 1/6/2006 7:39 PM 25.49 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\2FA6B630d01 1/6/2006 7:45 PM 26.35 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\310B6FA8d01 1/6/2006 10:05 PM 16.34 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\31E81785d01 1/6/2006 10:29 PM 5.64 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\32BEEEFDd01 1/6/2006 10:05 PM 28.99 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\33CB88E3d01 1/6/2006 7:45 PM 25.13 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\33D1FAC0d01 1/6/2006 9:47 PM 144 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\35D91A2Dd01 1/6/2006 10:10 PM 14.00 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\36D6E996d01 1/6/2006 10:11 PM 16.15 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\36D6EEA6d01 1/6/2006 10:11 PM 16.15 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\370F00C8d01 1/6/2006 10:14 PM 23.51 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\37C82115d01 1/6/2006 10:27 PM 20.66 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\37D54CECd01 1/6/2006 10:14 PM 29.59 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\3A50000Fd01 1/6/2006 10:13 PM 14.58 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\3B1100FEd01 1/6/2006 10:38 PM 5.75 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\3D0EB24Ad01 1/6/2006 10:13 PM 12.25 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\3D90245Dd01 1/6/2006 9:01 PM 17.53 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\3E2E0C21d01 1/6/2006 10:11 PM 29.29 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\3E2F0C21d01 1/6/2006 10:11 PM 46.20 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\3FBEAA4Fd01 1/6/2006 7:43 PM 19.75 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\404554F5d01 1/6/2006 10:05 PM 20.83 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\410B9326d01 1/6/2006 10:15 PM 0 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\42B2FA1Ed01 1/6/2006 7:43 PM 60.68 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\42CA3EE1d01 1/6/2006 10:29 PM 15.45 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\455B69D9d01 1/6/2006 7:43 PM 8.54 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\46375A90d01 1/6/2006 10:04 PM 29.32 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\46681B52d01 1/6/2006 7:44 PM 8.34 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\48C96D98d01 1/6/2006 10:12 PM 13.65 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\49FAE431d01 1/6/2006 7:45 PM 18.57 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\4B6BF689d01 1/6/2006 10:24 PM 20.27 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\4B9DD3F4d01 1/6/2006 10:16 PM 23.84 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\4BDE2EBAd01 1/6/2006 10:04 PM 17.33 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\4CF4DCC6d01 1/6/2006 10:12 PM 33.91 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\4EF69C5Dd01 1/6/2006 10:12 PM 43.29 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\5054B5A1d01 1/6/2006 7:44 PM 24.26 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\51720351d01 1/6/2006 10:24 PM 26.33 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\51BEA72Dd01 1/6/2006 10:06 PM 14.00 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\5384D5BBd01 1/6/2006 9:01 PM 17.50 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\53AA7696d01 1/6/2006 7:45 PM 5.79 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\53C603B3d01 1/6/2006 10:25 PM 27.82 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\55A9BB94d01 1/6/2006 10:04 PM 3.46 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\5815D283d01 1/6/2006 10:36 PM 24.93 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\58ACF70Dd01 1/6/2006 7:45 PM 17.61 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\59420883d01 1/6/2006 8:46 PM 24.03 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\59BC7279d01 1/6/2006 10:15 PM 3.98 MB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\5AC97440d01 1/6/2006 9:02 PM 28.06 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\5AD924B2d01 1/6/2006 10:40 PM 16.89 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\5CA48699d01 1/6/2006 10:14 PM 19.90 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\5CA58699d01 1/6/2006 10:03 PM 19.90 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\5DBECD4Cd01 1/6/2006 7:45 PM 16.44 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\5E48F634d01 1/6/2006 10:11 PM 41.60 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\5EBFAB7Ad01 1/6/2006 10:28 PM 19.90 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\638C6DDAd01 1/6/2006 10:04 PM 19.80 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\64195965d01 1/6/2006 9:01 PM 25.75 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\6502BE01d01 1/6/2006 10:04 PM 248.57 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\65FB08D4d01 1/6/2006 8:36 PM 17.94 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\67B10961d01 1/6/2006 7:41 PM 183.69 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\67B11010d01 1/6/2006 7:41 PM 31.45 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\67C1A156d01 1/6/2006 7:45 PM 39.24 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\67DCDC79d01 1/6/2006 10:25 PM 15.53 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\67F58EB7d01 1/6/2006 10:42 PM 20.00 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\6BC21CA5d01 1/6/2006 10:36 PM 16.15 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\6CC8D8E2d01 1/6/2006 10:25 PM 15.45 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\6CD094FFd01 1/6/2006 10:41 PM 36.70 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\6CFB20EFd01 1/6/2006 10:27 PM 44.92 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\6D8DA658d01 1/6/2006 7:23 PM 30.25 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\6DE90A6Dd01 1/6/2006 10:12 PM 11.39 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\6DEEA4B8d01 1/6/2006 10:04 PM 17.86 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\6DFD5B75d01 1/6/2006 10:04 PM 13.51 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\6E9ADC2Fd01 1/6/2006 10:27 PM 17.61 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\6F39EAA7d01 1/6/2006 9:00 PM 2.18 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\70A697DEd01 1/6/2006 10:07 PM 7.95 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\727D2B93d01 1/6/2006 10:11 PM 302 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\74656F83d01 1/6/2006 9:01 PM 20.22 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\75A5E18Ad01 1/6/2006 7:45 PM 74.57 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\76992E2Fd01 1/6/2006 7:43 PM 18.86 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\774F4DE3d01 1/6/2006 10:27 PM 17.88 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\7971382Fd01 1/6/2006 7:44 PM 17.95 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\7A78768Fd01 1/6/2006 10:05 PM 19.98 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\7DE78699d01 1/6/2006 8:49 PM 19.90 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\7EF6FE08d01 1/6/2006 10:12 PM 57.76 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\7FF8F44Cd01 1/6/2006 10:27 PM 28.83 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\80249C53d01 1/6/2006 10:36 PM 31.82 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\80E52D52d01 1/6/2006 7:44 PM 58.11 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\80E621C3d01 1/6/2006 7:44 PM 57.77 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\80FF74A0d01 1/6/2006 7:45 PM 8.43 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\8210862Fd01 1/6/2006 7:23 PM 33.07 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\8210872Fd01 1/6/2006 7:23 PM 66.26 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\83E35DF1d01 1/6/2006 10:26 PM 15.03 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\840DAD22d01 1/6/2006 10:04 PM 22.49 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\84442DEBd01 1/6/2006 7:23 PM 16.08 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\84A2A902d01 1/6/2006 7:44 PM 26.83 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\86BACF4Bd01 1/6/2006 7:45 PM 33.36 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\8777A88Fd01 1/6/2006 10:04 PM 140 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\883A8FCBd01 1/6/2006 7:37 PM 183.01 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\88B91F7Dd01 1/6/2006 10:40 PM 315.52 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\8A26F050d01 1/6/2006 10:05 PM 12.61 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\8B268550d01 1/6/2006 10:05 PM 11.07 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\8BCD3EDAd01 1/6/2006 10:27 PM 22.13 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\8D2758A0d01 1/6/2006 10:04 PM 19.01 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\8D41E6E2d01 1/6/2006 9:00 PM 39.93 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\8E79DE54d01 1/6/2006 10:27 PM 18.03 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\8F395198d01 1/6/2006 10:25 PM 29.64 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\90482D95d01 1/6/2006 10:24 PM 1.61 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\90B82DA1d01 1/6/2006 7:43 PM 1.74 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\92735DE1d01 1/6/2006 10:04 PM 266 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\929B9078d01 1/6/2006 9:01 PM 28.63 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\94515725d01 1/6/2006 9:52 PM 46.18 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\96BC0BC7d01 1/6/2006 10:25 PM 1002.08 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\97550D0Fd01 1/6/2006 10:12 PM 14.58 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\975A7B0Fd01 1/6/2006 10:12 PM 14.58 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\9981CC61d01 1/6/2006 9:47 PM 29.19 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\9B4F2B82d01 1/6/2006 10:28 PM 25.91 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\9B566923d01 1/6/2006 10:06 PM 25.91 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\A04C7A81d01 1/6/2006 10:07 PM 4.97 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\A3124363d01 1/6/2006 9:52 PM 57.88 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\A37F6398d01 1/6/2006 10:27 PM 23.39 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\A482C8B6d01 1/6/2006 10:37 PM 11.49 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\A482D1C7d01 1/6/2006 10:37 PM 238.40 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\A5EB3B02d01 1/6/2006 9:47 PM 176.36 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\A6884840d01 1/6/2006 7:45 PM 21.96 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\A77550F8d01 1/6/2006 10:28 PM 29.55 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\A939864Ad01 1/6/2006 9:01 PM 108.51 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\AADF4E8Bd01 1/6/2006 10:29 PM 7.38 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\ABA0217Cd01 1/6/2006 10:05 PM 33.77 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\ABB113E3d01 1/6/2006 10:36 PM 862 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\AC57080Fd01 1/6/2006 10:11 PM 14.58 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\AC825245d01 1/6/2006 7:45 PM 2.93 MB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\ADA5C9EAd01 1/6/2006 10:37 PM 8.24 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\ADC70C04d01 1/6/2006 10:36 PM 1.81 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\AE609C61d01 1/6/2006 10:25 PM 34.16 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\AF65E228d01 1/6/2006 10:04 PM 72.80 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\B01C31A4d01 1/6/2006 9:48 PM 16.76 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\B1ACDB05d01 1/6/2006 10:36 PM 17.30 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\B35B4F08d01 1/6/2006 10:13 PM 14.58 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\B37C4A15d01 1/6/2006 10:27 PM 43.71 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\B436BB7Fd01 1/6/2006 8:44 PM 17.14 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\B504C29Ed01 1/6/2006 8:45 PM 60.10 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\B50C7957d01 1/6/2006 10:43 PM 20.19 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\B787BFC5d01 1/6/2006 10:29 PM 5.11 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\B7C62492d01 1/6/2006 10:26 PM 21.35 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\B7D754A6d01 1/6/2006 10:24 PM 21.35 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\B81F34FAd01 1/6/2006 10:40 PM 487.25 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\B97863F7d01 1/6/2006 9:47 PM 26.46 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\BA6B526Ad01 1/6/2006 10:29 PM 212.19 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\BA89E93Ad01 1/6/2006 8:46 PM 52.83 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\BB5BDE82d01 1/6/2006 10:02 PM 28.95 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\BC2F0A13d01 1/6/2006 9:01 PM 23.31 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\BC36DADDd01 1/6/2006 10:06 PM 12.31 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\BD1BA3A7d01 1/6/2006 7:23 PM 65.77 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\BDB19E8Cd01 1/6/2006 10:29 PM 19.88 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\BE04CFE1d01 1/6/2006 10:04 PM 25.73 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\BEB2C38Ad01 1/6/2006 9:14 PM 22.85 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\BF331C5Dd01 1/6/2006 7:45 PM 546 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C0E5ABC5d01 1/6/2006 9:22 PM 13.42 MB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C17E925Ad01 1/6/2006 10:04 PM 36.68 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C199C6BFd01 1/6/2006 10:29 PM 862 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C39E6343d01 1/6/2006 7:45 PM 25.57 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C3B09A69d01 1/6/2006 10:38 PM 38.04 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C4D6C929d01 1/6/2006 10:37 PM 5.73 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C5430AF9d01 1/6/2006 9:53 PM 27.42 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C5F70E1Ed01 1/6/2006 10:11 PM 19.40 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C6EC9FF6d01 1/6/2006 10:02 PM 69.93 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C7B90D5Dd01 1/6/2006 10:12 PM 14.00 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C80FB3DCd01 1/6/2006 9:54 PM 28.85 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C8F7047Ed01 1/6/2006 9:46 PM 37.07 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C928A99Cd01 1/6/2006 9:52 PM 20.64 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\C93E7910d01 1/6/2006 7:45 PM 28.26 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\CB2DE35Fd01 1/6/2006 10:40 PM 100.97 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\CC2BC542d01 1/6/2006 10:29 PM 24.88 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\CD43237Ad01 1/6/2006 9:34 PM 1.34 MB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\CD64473Ad01 1/6/2006 9:14 PM 18.41 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\CD6A473Ad01 1/6/2006 9:14 PM 19.06 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\CD6B473Ad01 1/6/2006 9:14 PM 16.55 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\CD73473Ad01 1/6/2006 9:14 PM 16.67 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\CDF66793d01 1/6/2006 10:11 PM 1.53 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\CEE92E3Fd01 1/6/2006 7:45 PM 3.06 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\D003AD97d01 1/6/2006 10:38 PM 4.61 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\D4925AD6d01 1/6/2006 10:23 PM 21.40 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\D6119362d01 1/6/2006 10:40 PM 14.54 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\D629C6D1d01 1/6/2006 10:11 PM 16.08 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\D63423CEd01 1/6/2006 10:03 PM 19.96 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\D889C784d01 1/6/2006 9:24 PM 5.47 MB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\DA60D7D5d01 1/6/2006 10:04 PM 19.90 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\DA8A1762d01 1/6/2006 10:26 PM 17.63 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\DCD4640Ed01 1/6/2006 10:10 PM 6.83 MB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\DDF2EEBEd01 1/6/2006 10:04 PM 35.40 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\DE682130d01 1/6/2006 10:26 PM 20.08 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\DE8FE37Ed01 1/6/2006 10:43 PM 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\E0555D0Ed01 1/6/2006 10:10 PM 14.58 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\E19DBE8Dd01 1/6/2006 10:03 PM 20.17 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\E204D29Fd01 1/6/2006 10:29 PM 83.89 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\E225C475d01 1/6/2006 7:44 PM 144 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\E291DC4Bd01 1/6/2006 10:37 PM 1.91 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\E454B47Bd01 1/6/2006 7:43 PM 44.96 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\E682C370d01 1/6/2006 10:11 PM 35.50 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\E6A11805d01 1/6/2006 10:26 PM 8.79 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\E6C4C593d01 1/6/2006 10:24 PM 18.26 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\E711CAEFd01 1/6/2006 10:27 PM 30.92 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\E81EF72Cd01 1/6/2006 7:41 PM 16.35 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\E9BB93DCd01 1/6/2006 10:14 PM 29.99 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\EBE4AC6Bd01 1/6/2006 9:01 PM 18.62 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\EE4E81A3d01 1/6/2006 10:14 PM 19.10 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\EE9B6AEAd01 1/6/2006 10:41 PM 22.61 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\EF1E2749d01 1/6/2006 10:36 PM 42.09 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\F312FD7Dd01 1/6/2006 10:13 PM 27.81 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\F4B6314Ed01 1/6/2006 9:47 PM 1.76 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\F4E240DDd01 1/6/2006 10:16 PM 19.02 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\F645483Ed01 1/6/2006 10:03 PM 31.79 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\F65A8B5Fd01 1/6/2006 10:11 PM 31.73 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\F7C26CC9d01 1/6/2006 10:02 PM 12.13 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\F87DE067d01 1/6/2006 10:27 PM 65.00 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\FAC90E29d01 1/6/2006 10:27 PM 18.21 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\FF414080d01 1/6/2006 10:40 PM 43.38 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Application Data\Mozilla\Firefox\Profiles\jfowot8n.default\Cache\FF4653C7d01 1/6/2006 10:14 PM 33.11 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Desktop\rpmworld.exe 1/6/2006 10:44 PM 2.11 MB Hidden from Windows API.
C:\Documents and Settings\Lucas\Desktop\SmileyCentralFFSetup2-1.0.4.2.exe 1/6/2006 10:42 PM 2.45 MB Hidden from Windows API.
C:\Documents and Settings\Lucas\Local Settings\Temp\empeg.bt.0001.a03140 1/6/2006 9:07 PM 0 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Lucas\Local Settings\Temporary Internet Files\Content.IE5\87KZODON\createMX[1].htm 1/6/2006 10:48 PM 57 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Local Settings\Temporary Internet Files\Content.IE5\87KZODON\CursorChooser[1].htm 1/6/2006 10:03 PM 89.57 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Local Settings\Temporary Internet Files\Content.IE5\F8ZATTGL\numonlineMX[1].htm 1/6/2006 10:44 PM 25 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Local Settings\Temporary Internet Files\Content.IE5\F8ZATTGL\rpmfeedV2[1].htm 1/6/2006 10:44 PM 631 bytes Hidden from Windows API.
C:\Documents and Settings\Lucas\Local Settings\Temporary Internet Files\Content.IE5\NOMSM5RQ\loginMX[2].htm 1/6/2006 10:49 PM 114 bytes Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Lucas\Local Settings\Temporary Internet Files\Content.IE5\XL7FSNU7\SmileyChooser_en.html[1].htm 1/6/2006 10:03 PM 339.05 KB Hidden from Windows API.
C:\Documents and Settings\Lucas\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk 1/6/2006 9:39 PM 839 bytes Hidden from Windows API.
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20060104.006\vscanmsx.dat 1/6/2006 9:34 PM 2.02 KB Hidden from Windows API.
C:\Program Files\FunWebProducts\Shared\Cache 1/6/2006 10:03 PM 0 bytes Hidden from Windows API.
C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html 1/6/2006 10:03 PM 89.57 KB Hidden from Windows API.
C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html 1/6/2006 10:03 PM 339.05 KB Hidden from Windows API.
C:\Program Files\Mozilla Firefox\chrome\m3ffxtbr.jar 1/6/2006 9:39 PM 4.70 KB Hidden from Windows API.
C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll 1/6/2006 9:39 PM 24.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\3.bin 1/6/2006 9:39 PM 0 bytes Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\3.bin\MWSOEMON.EXE 1/6/2006 9:39 PM 28.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\3.bin\MWSOESTB.DLL 1/6/2006 9:39 PM 40.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin 1/6/2006 9:39 PM 0 bytes Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3BKGERR.JPG 1/6/2006 9:39 PM 19.69 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3CJPEG.DLL 1/6/2006 9:39 PM 128.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3DTACTL.DLL 1/6/2006 9:39 PM 48.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3HISTSW.DLL 1/6/2006 9:39 PM 244.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3HTMLMU.DLL 1/6/2006 9:39 PM 116.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3HTTPCT.DLL 1/6/2006 9:39 PM 72.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3POPSWT.DLL 1/6/2006 9:39 PM 112.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3PSSAVR.SCR 1/6/2006 9:39 PM 28.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3REPROX.DLL 1/6/2006 9:39 PM 80.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3RESTUB.DLL 1/6/2006 9:39 PM 24.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3SCHMON.EXE 1/6/2006 9:39 PM 64.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3SCRCTR.DLL 1/6/2006 9:39 PM 276.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3SPACER.WMV 1/6/2006 9:39 PM 5.32 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3WALLPP.DAT 1/6/2006 9:39 PM 305 bytes Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\F3WPHOOK.DLL 1/6/2006 9:39 PM 20.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\M3FFXTBR.JAR 1/6/2006 9:39 PM 4.70 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\M3FFXTBR.MANIFEST 1/6/2006 9:39 PM 140 bytes Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\M3HTML.DLL 1/6/2006 9:39 PM 80.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\M3IDLE.DLL 1/6/2006 9:39 PM 28.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\M3NTSTBR.JAR 1/6/2006 9:39 PM 4.83 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\M3OUTLCN.DLL 1/6/2006 9:39 PM 56.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\M3PLUGIN.DLL 1/6/2006 9:39 PM 44.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\M3SKIN.DLL 1/6/2006 9:39 PM 112.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\M3SKPLAY.EXE 1/6/2006 9:39 PM 24.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\MWSBAR.DLL 1/6/2006 9:39 PM 280.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\MWSOEMON.EXE 1/6/2006 9:39 PM 28.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\MWSOEPLG.DLL 1/6/2006 9:39 PM 240.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\MWSOESTB.DLL 1/6/2006 9:39 PM 40.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\4.bin\NPMYWEBS.DLL 1/6/2006 9:39 PM 24.00 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\Cache 1/6/2006 10:03 PM 0 bytes Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\Cache\047C1750 1/6/2006 10:02 PM 69.93 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\Cache\047C4805 1/6/2006 10:02 PM 94 bytes Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\Cache\047C7474.bin 1/6/2006 10:03 PM 1.68 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\Cache\047C9FAB.bin 1/6/2006 10:03 PM 1.63 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\Cache\047CCAF1.bin 1/6/2006 10:03 PM 1.25 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\Cache\047CE29F.bin 1/6/2006 10:03 PM 1.89 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\Cache\files.ini 1/6/2006 10:43 PM 408 bytes Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\Game 1/6/2006 9:39 PM 0 bytes Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S 1/6/2006 9:39 PM 55.12 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S 1/6/2006 9:39 PM 65.16 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S 1/6/2006 9:39 PM 55.36 KB Hidden from Windows API.
C:\Program Files\MyWebSearch\SrchAstt 1/6/2006 9:39 PM 0 bytes Hidden from Windows API.
C:\Program Files\MyWebSearch\SrchAstt\4.bin 1/6/2006 9:39 PM 0 bytes Hidden from Windows API.
C:\Program Files\MyWebSearch\SrchAstt\4.bin\MWSSRCAS.DLL 1/6/2006 9:39 PM 56.00 KB Hidden from Windows API.
C:\RECYCLER\S-1-5-21-861567501-1708537768-682003330-1003\Dc65.exe 1/6/2006 9:31 PM 2.45 MB Hidden from Windows API.
C:\RECYCLER\S-1-5-21-861567501-1708537768-682003330-1003\Dc66.exe 1/6/2006 9:37 PM 2.45 MB Hidden from Windows API.
C:\System Volume Information\_restore{A9FB95EA-109E-48D2-B89F-E1140567EEFE}\RP422\A0067744.TAG 1/6/2006 5:25 PM 193 bytes Hidden from Windows API.
C:\System Volume Information\_restore{A9FB95EA-109E-48D2-B89F-E1140567EEFE}\RP422\A0067745.manifest 12/18/2005 6:01 PM 140 bytes Hidden from Windows API.
C:\System Volume Information\_restore{A9FB95EA-109E-48D2-B89F-E1140567EEFE}\RP422\A0067746.mfl 1/6/2006 7:22 PM 1.29 MB Hidden from Windows API.
C:\WINDOWS\Prefetch\MWSOEMON.EXE-0250F76E.pf 1/6/2006 9:39 PM 7.50 KB Hidden from Windows API.
C:\WINDOWS\Prefetch\MWSOEMON.EXE-10AD6785.pf 1/6/2006 9:39 PM 7.96 KB Hidden from Windows API.
C:\WINDOWS\Prefetch\MWSOEMON.EXE-274C947D.pf 1/6/2006 9:39 PM 7.84 KB Hidden from Windows API.
C:\WINDOWS\Prefetch\MWSSETUP.EXE-0A8EC42E.pf 1/6/2006 9:39 PM 33.86 KB Hidden from Windows API.
C:\WINDOWS\Prefetch\MWSSETUP.EXE-1FB945B3.pf 1/6/2006 9:39 PM 16.88 KB Hidden from Windows API.
C:\WINDOWS\Prefetch\MWSSRCSP.EXE-00777927.pf 1/6/2006 9:39 PM 8.71 KB Hidden from Windows API.
C:\WINDOWS\Prefetch\MWSSRCSP.EXE-235F1131.pf 1/6/2006 9:39 PM 7.91 KB Hidden from Windows API.
C:\WINDOWS\Prefetch\RPMWORLD.EXE-06FBC4B0.pf 1/6/2006 10:44 PM 42.88 KB Hidden from Windows API.
C:\WINDOWS\Prefetch\SMILEYCENTRALFFSETUP2-1.0.4.2-2054863C.pf 1/6/2006 9:39 PM 13.14 KB Hidden from Windows API.
C:\WINDOWS\system32\f3PSSavr.scr 1/6/2006 9:39 PM 28.00 KB Hidden from Windows API.
folf is offline  
Old 01-07-2006, 02:08 AM   #12
TSF Enthusiast
 
POADB's Avatar
 
Join Date: Jul 2004
Location: United Kingdom
Posts: 6,574
OS: Win7


Launch fireFox. go to Tools > Options > Privacy clear 'Cache'.
(Clear All, if you wish or atleast clear 'History').

Go to Add/Remove and uninstall:

MyWebSearch
FunWebProducts


Delete the following files and folders:

C:\Program Files\MyWebSearch\
C:\WINDOWS\system32\f3PSSavr.scr
C:\Program Files\FunWebProducts\
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk


Clear this prefetch folder:

C:\WINDOWS\Prefetch\


Download CCleaner - and Install it.

Run CCleaner.
  • On the left, click 'Issues'.
  • Click 'Scan For Issues'.
    *Ccleaner will check for issues in the registry and list them. You can monitor it's progress by the green percentage bar.*
  • Once it has reached 100%. Click 'Fix Selected Issues...'.
    *At this point Ccleaner will ask if you want to back up the registry. This is your choice. If you choose to back up, save the back up file in the folder you installed Ccleaner*
  • Ccleaner will give you a description of each 'issue' found. Click 'Fix All Selected Issues' for speed.
  • Repeat the above steps until CCleaner no longer finds 'issues'.
  • Exit CCleaner.
POADB is offline  
 

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2
Powered by vBadvanced CMPS v3.2.3


All times are GMT -7. The time now is 05:05 AM.


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
User Alert System provided by Advanced User Tagging v3.1.0 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Copyright 2001 - 2018, Tech Support Forum

Windows 10 - Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts