Go Back   Tech Support Forum > Security Center > Virus/Trojan/Spyware Help > Inactive Malware Help Topics

User Tag List

Slow internet - Multiple Viruses

This is a discussion on Slow internet - Multiple Viruses within the Inactive Malware Help Topics forums, part of the Tech Support Forum category. Hello, A couple of weeks ago my internet started to really slow down. My connection to my router dropped to


 
 
Thread Tools Search this Thread
Old 05-10-2007, 07:40 PM   #1
Guest
 
Join Date: Feb 2007
Posts: 14
OS:



Hello,

A couple of weeks ago my internet started to really slow down. My connection to my router dropped to 10 Mbps and sometimes its so slow it takes me several minutes to load a page. At first I thought it was a hardware problem, but now I'm thinking it's virus related. There are two computers hooked up to the router, mine and my sisters and hers is pretty old and she never takes care of it. I'm thinking that whatever is affecting her computer is affecting mine too. I have done the 5 steps on both computers, but I'm going to post the logs of hers first since the panda scan looked pretty bad (2000+ spyware, 3 viruses, and a rootkit).

I also want to note that ad-aware found a malware called alset, which it got rid of. A couple months ago she had something called spysherriff, which I think I got rid of by using smitfraud. I'm not sure if there is any remnants of it, though. Also, her computer is using XP Home SP1, and mine is XP Pro SP2.

Thank you in advance. Any help is greatly appreciated.


Here is the DSS log:

Deckard's System Scanner v20070426.43
Run by Wesley Jung on 2007-05-10 at 19:15:38
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
52: 2007-05-11 02:15:42 UTC - RP1094 - Deckard's System Scanner Restore Point
51: 2007-05-11 02:12:52 UTC - RP1093 - Software Distribution Service 2.0
50: 2007-05-11 02:08:05 UTC - RP1092 - Installed Windows Media Player 10 KB917734_WMP10.
49: 2007-05-11 02:07:12 UTC - RP1091 - Installed Windows XP KB899587.
48: 2007-05-11 0234 UTC - RP1090 - Installed Windows XP KB924191.


-- First Restore Point --
1: 2007-05-11 01:36:42 UTC - RP1043 - Installed Windows XP KB887472.


Backed up registry hives.

Performed disk cleanup.


-- HijackThis (run as Wesley Jung.exe) -----------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 7:17:57 PM, on 5/10/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Norton AntiVirus2003\navapsvc.exe
C:\Program Files\Norton AntiVirus2003\AdvTools\NPROTECT.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Wesley Jung\Desktop\dss.exe
C:\PROGRA~1\HIJACK~1\Wesley Jung.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus2003\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus2003\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {58172624-85DD-4482-9E64-02ADCA637E96} - https://www.shizmoo.com/activex/web665.cab
O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - https://secure2.comned.com/signuptemp...veSecurity.cab
O16 - DPF: {8FA9D107-547B-4DBC-9D88-FABD891EDB0A} - https://arcade.icq.com/multiplayer/odyssey_web8.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - https://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - https://us.dl1.yimg.com/download.yaho...bio5_1_4_0.cab
O20 - AppInit_DLLs:
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus2003\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus2003\AdvTools\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe


-- File Associations -----------------------------------------------------------

.cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL %1,%*
.cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser %1,%*


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R1 cdudf_xp - c:\windows\system32\drivers\cdudf_xp.sys <Not Verified; Roxio; DirectCD>
R1 OMCI - c:\windows\system32\drivers\omci.sys <Not Verified; Dell Computer Corporation; OMCI Driver>
R1 pwd_2k - c:\windows\system32\drivers\pwd_2k.sys <Not Verified; Roxio; DirectCD>
R1 UdfReadr_xp - c:\windows\system32\drivers\udfreadr_xp.sys <Not Verified; Roxio; DirectCD>
R2 enodpl - c:\windows\system32\drivers\enodpl.sys
R2 tandpl - c:\windows\system32\drivers\tandpl.sys
R3 ac97intc (Intel(r) 82801DB/DBM Audio Driver Service (WDM)) - c:\windows\system32\drivers\ac97ich4.sys <Not Verified; Intel Corporation; Intel(r) Integrated Controller Hub Audio Driver>
R3 mmc_2K - c:\windows\system32\drivers\mmc_2k.sys <Not Verified; Roxio; DirectCD>

S3 Bulk503 (Chameleon Mega Digital Camera) - c:\windows\system32\drivers\bulk503.sys <Not Verified; LARGAN Digital; SPCA503>
S3 dvd_2K - c:\windows\system32\drivers\dvd_2k.sys <Not Verified; Roxio; DirectCD>
S3 ENTECH - c:\windows\system32\drivers\entech.sys <Not Verified; EnTech Taiwan; PowerStrip>
S3 ISO503 (Chameleon Mega Video Camera) - c:\windows\system32\drivers\iso503.sys <Not Verified; Sunplus Technology Co. LTD.; SPCA504A Camera Driver>


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

All services whitelisted.


-- Scheduled Tasks -------------------------------------------------------------

2007-05-10 17:32:14 366 --a------ C:\WINDOWS\Tasks\Symantec NetDetect.job


-- Files created between 2007-04-10 and 2007-05-10 -----------------------------

2007-05-10 18:14:30 0 d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Windows Genuine Advantage
2007-05-10 14:35:14 0 d-------- C:\Program Files\Lavasoft
2007-05-10 14:34:48 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-04-18 23:29:03 0 d-------- C:\gear ratios
2007-04-18 21:31:22 0 d-------- C:\WINDOWS\System32\PreInstall
2007-04-18 21:31:05 0 d--h----- C:\WINDOWS\$hf_mig$


-- Find3M Report ---------------------------------------------------------------

2007-05-10 18:36:42 0 d-------- C:\Program Files\Messenger
2007-05-10 18:07:17 0 d-------- C:\Program Files\SpywareBlaster
2007-05-10 16:23:42 0 d-------- C:\Program Files\Norton AntiVirus2003
2007-05-10 16:04:43 0 d-------- C:\Program Files\Common Files\Symantec Shared
2007-05-10 15:40:44 0 d-------- C:\Program Files\Microsoft Works
2007-05-10 15:39:52 0 d-------- C:\Program Files\QuickTime
2007-05-10 15:39:52 0 d-------- C:\Program Files\iTunes
2007-05-10 14:35:32 0 d-------- C:\Documents and Settings\Wesley Jung\Application Data\Lavasoft
2007-05-09 20:35:45 0 d-------- C:\Documents and Settings\Wesley Jung\Application Data\HP
2007-05-09 20:34:13 0 d-------- C:\Documents and Settings\Wesley Jung\Application Data\U3
2007-04-26 22:48:23 0 d-------- C:\Program Files\HP
2007-04-12 22:10:33 0 d-------- C:\Documents and Settings\Wesley Jung\Application Data\AdobeUM
2007-03-22 18:25:33 3010 --a------ C:\WINDOWS\System32\tmp.reg
2007-03-22 17:47:12 0 d-------- C:\Program Files\BSPlayer
2007-03-16 21:37:39 0 d-------- C:\Documents and Settings\Wesley Jung\Application Data\Apple Computer
2007-03-16 21:30:14 0 d-------- C:\Program Files\Kazaa Lite K++


-- Registry Dump ---------------------------------------------------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
{53707962-6F74-2D53-2644-206D7942484F} C:\PROGRA~1\SPYBOT~1\SDHelper.dll
{BDF3E430-B101-42AD-A544-FADC6B084872} C:\Program Files\Norton AntiVirus2003\NavShExt.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"Logitech Utility"="Logi_MwX.Exe"
"HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"Microsoft Works Update Detection"="C:\\Program Files\\Microsoft Works\\WkDetect.exe"
"LDM"="\\Program\\BackWeb-8876480.exe"

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0
Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages REG_MULTI_SZ scecli\0\0


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="iTunesHelper"
"hkey"="HKLM"
"command"="C:\\Program Files\\iTunes\\iTunesHelper.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0



-- Hosts -----------------------------------------------------------------------

127.0.0.1 downloads.aaa1screensavers.com #[Bargin Buddy]
127.0.0.1 abcsearch.com
127.0.0.1 admin.abcsearch.com
127.0.0.1 www3.abcsearch.com #[Browseraid]
127.0.0.1 www.abcsearch.com
127.0.0.1 abc517.net #[Trojan.Mitglieder.H]
127.0.0.1 absoluagency.com #[Trojan.StartPage.H]
127.0.0.1 acestats.com
127.0.0.1 www.acestats.com
127.0.0.1 actualnames.com #[Parasite.ActualNames][Spyware.ActualNames]

4821 more entries in hosts file.


-- End of Deckard's System Scanner: finished at 2007-05-10 at 19:18:29 ---------



I tried to post to log for the Panda scan but it has over 2000 things in it and it wont let me post it because its too long. I have attached it to the post instead.
Attached Files
File Type: txt extra.txt (11.4 KB, 15 views)
File Type: txt Activescan.txt (756.8 KB, 22 views)
bobdole118 is offline  
Sponsored Links
Advertisement
 
Old 05-12-2007, 08:00 PM   #2
Guest
 
Join Date: Feb 2007
Posts: 14
OS:



48 Hour Bump
bobdole118 is offline  
Old 05-14-2007, 07:40 PM   #3
Guest
 
Join Date: Feb 2007
Posts: 14
OS:



Another bump
bobdole118 is offline  
Sponsored Links
Advertisement
 
Old 05-14-2007, 09:18 PM   #4
TSF Team, Emeritus
 
Sempurna's Avatar
 
Join Date: Sep 2006
Posts: 1,302
OS: Windows XP SP2



Hi bobdole118,

Welcome to Tech Support Forum!

I apologize for the delay getting to your log. The helpers here are all volunteers and we have been very busy here lately. If you are still having malware problems, I will be glad to help.

OK, hereís what we do first.

Please download DAFT and save it to your desktop:
  • Double-click the daft.exe icon. Read the disclaimer and click "OK".
  • Click on the "Scan" button.
  • Place a checkmark next to the following entries:

    .cpl
    .cpl


  • Click the "Fix" button.
  • Re-scan and save a logfile. By default, it will save as daft.txt.
  • Post the contents of that logfile with your next post.


NEXT:

Please download HostsXpert and save it to your desktop:
  • Extract the zip file (right-click the file and select "Extract All") to your desktop or a permanent folder on your hard drive.
  • Open the folder and double-click on HostsXpert.exe.
  • Click "Backup / Restore" and select "Create Backup".
  • Click "Restore MS Hosts File".
  • Click "OK" and exit the program.


NEXT:

Please run HijackThis and click "Scan". Place a check (tick) next to the following entries (if present):

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - https://secure2.comned.com/signuptemp...veSecurity.cab
O20 - AppInit_DLLs:



Close ALL programs and browsers (including this one), leaving ONLY HijackThis open, then click "Fix checked".

Then please exit HijackThis.


NEXT:

Please download OTMoveIt by OldTimer:
  • Save it to your desktop.
  • Please double-click OTMoveIt.exe to run it.
  • Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose "Copy"):

    C:\WINDOWS\System32\cd_clint.dll
    c:\windows\system32\drivers\etc\hosts.bho
    C:\Documents and Settings\Wesley Jung\Application Data\tvmknwrd.dll
    c:\windows\didduid.ini
    c:\windows\NDNuninstall5_48.exe
    c:\windows\sepsd.bin
    c:\windows\tmlpcert2005
    c:\windows\woinstall.exe
    C:\Overpro-347.exe
    C:\WINDOWS\emsw.exe
    C:\WINDOWS\system32\6to4svc1.exe
    C:\WINDOWS\system32\certmgr6.exe
    C:\WINDOWS\system32\cfgbkend.exe


  • Return to OTMoveIt, right-click on the "Paste List of Files/Folders to be Moved" window and choose "Paste".
  • Click the red "MoveIt!" button.
  • Close OTMoveIt.

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose "Yes".

Please post the log from OTMoveIt, located here:

C:\_OTMoveIt\MovedFiles\mmddyyyy_hhmmss.log

Where mmddyyyy_hhmmss is the date of the tool run.


NEXT:

Let's run some cleanup and diagnostic scans to make sure we're not leaving anything behind.

Please download CCleaner (freeware) and save it to your desktop:
  1. Run the CCleaner installer.
  2. During installation process, please UNCHECK "Add CCleaner Yahoo! Toolbar".
  3. Once installed, run CCleaner and click the "Windows" tab.
  4. Select the following:
    • Check everything under the "Internet Explorer" section.
    • Check everything under the "Windows Explorer" section.
    • Check everything under the "System" section.
    • Check ONLY "Old Prefetch data" under the "Advanced" section.
  5. Then, click the "Applications" tab:
    • UNCHECK everything there.
  6. Next, click the "Options" button in the left pane, then click the "Advanced" button:
    • UNCHECK : "Only delete files in Windows Temp folders older than 48 hours".
  7. Next, click the "Cleaner" button in the left pane, then click the "Run Cleaner" button (bottom right), click "OK" at the prompt.
  8. When done, please exit CCleaner.

CAUTION: Please do NOT use the "Issues" button in the left pane. This is a built-in registry cleaner. If you donít know how to use it, you may cause irreparable damage to your system.


NEXT:

Please download ComboFix by sUBs:

NOTE: In the event you already have ComboFix, this is a new version that I need you to download.
  • Save it to your desktop.
  • Double-click combofix.exe and follow the prompts.
  • When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.


NEXT:

Please do an online scan with Kaspersky Online Scanner using Internet Explorer (this online scanner only works with IE):
  1. Click on "Kaspersky Online Scanner".
  2. You will be prompted to install an ActiveX component from Kaspersky, click "Yes".
  3. The program will launch and then begin downloading the latest definition files.
  4. Once the files have been downloaded click on "Next".
  5. Now click on "Scan Settings".
  6. In the scan settings make sure that the following are selected:
    • Scan using the following Anti-Virus database:
      Extended
    • Scan Options:
      Scan Archives
      Scan Mail Bases
  7. Click "OK".
  8. Now under select a target to scan:
    • Select "My Computer".
  9. This program will start and scan your system.
  10. The scan will take a while so be patient and let it run.
  11. Once the scan is complete it will display if your system has been infected.
    • Now click on the "Save Report As" button.
    • In the "File name:" field, type kavscan.
    • In the "Save as type:" field, select "Text file (*.txt)".
  12. Save the file to your desktop.
  13. Copy and paste that information in your next post.

Note for Internet Explorer 7 users: If at any time you have trouble with the "Accept" button of the license, click on the "Zoom" tool located at the bottom right of the IE window and set the zoom to 75 %. Once the license has been accepted, reset to 100%.


NEXT:

Please REBOOT your computer normally into Windows and post these logs in your next reply:
  1. The log from DAFT.
  2. The log from OTMoveIt.
  3. The log from the ComboFix scan.
  4. The log from the Kaspersky scan.
  5. A new HijackThis log.

(You might have to paste the logs in multiple posts in the event they are too long and breach the post length restrictions of the forum software).

Also, please let me know how things are running now and if you encountered any problems while you were following the directions I posted.
Sempurna is offline  
Old 05-15-2007, 09:19 AM   #5
Guest
 
Join Date: Feb 2007
Posts: 14
OS:



Hey, thanks for the reply. I know you guys are busy, I didn't mean to seem impatient when I bumped the thread :)

Anyways, I wasn't sure if the order in which you posted stuff was important so I stopped after I couldn't complete the DAFT scan. It just says "All associations OK" and nothing appears in the log. I booted to safe mode and got the same thing.

Also, my internet speed has seemed to have gone back to pretty close to normal, but I'm still only connected to my router at 10 Mbps (my sisters is at 100 Mbps). Is it possible that the viruses on her computer are affecting my computer through the router? Also, just a reminder, the above log is for her computer, not mine, since hers is the sickest.

Thanks alot for your help!
bobdole118 is offline  
Old 05-15-2007, 03:20 PM   #6
Guest
 
Join Date: Feb 2007
Posts: 14
OS:



Ok, i decided to do the rest of the steps anyway :P

When doing the hijack this stuff, i got this error:
Quote:
An unexpected error has occurred at procedure: modBackup_MakeBackup(sItem=O20 - AppInit_DLLs: )
Error #5 - Invalid procedure call or argument

Please email me at [email protected], reporting the following:
* What you were trying to fix when the error occurred, if applicable
* How you can reproduce the error
* A complete HijackThis scan log, if possible

Windows version: Windows NT 5.01.2600
MSIE version: 6.0.2800.1106
HijackThis version: 1.99.1

This message has been copied to your clipboard.
Click OK to continue the rest of the scan.
I ran another scan and the three entries are gone, though.


When running OTMoveIt, i get this error when trying to move tvmknwrd.dll.
Here is the log:

DllUnregisterServer procedure not found in C:\WINDOWS\System32\cd_clint.dll
C:\WINDOWS\System32\cd_clint.dll NOT unregistered.
C:\WINDOWS\System32\cd_clint.dll moved successfully.
c:\windows\system32\drivers\etc\hosts.bho moved successfully.
LoadLibrary failed for C:\Documents and Settings\Wesley Jung\Application Data\tvmknwrd.dll
C:\Documents and Settings\Wesley Jung\Application Data\tvmknwrd.dll NOT unregistered.
C:\Documents and Settings\Wesley Jung\Application Data\tvmknwrd.dll moved successfully.
c:\windows\didduid.ini moved successfully.
c:\windows\NDNuninstall5_48.exe moved successfully.
c:\windows\sepsd.bin moved successfully.
c:\windows\tmlpcert2005 moved successfully.
c:\windows\woinstall.exe moved successfully.
C:\Overpro-347.exe moved successfully.
C:\WINDOWS\emsw.exe moved successfully.
C:\WINDOWS\system32\6to4svc1.exe moved successfully.
C:\WINDOWS\system32\certmgr6.exe moved successfully.
C:\WINDOWS\system32\cfgbkend.exe moved successfully.

Created on 05/15/2007 12:32:55
bobdole118 is offline  
Old 05-15-2007, 03:21 PM   #7
Guest
 
Join Date: Feb 2007
Posts: 14
OS:



ComboFix Log:

"Wesley Jung" - 2007-05-15 12:40:12 Service Pack 1
ComboFix 07-05.13.V - Running from: "C:\Documents and Settings\Wesley Jung\Desktop\"


((((((((((((((((((((((((((((((( Files Created from 2007-04-05 to 2007-05-15 ))))))))))))))))))))))))))))))))))


2007-05-15 12:35 <DIR> d-------- C:\Program Files\CCleaner
2007-05-10 19:15 <DIR> d-------- C:\Deckard
2007-05-10 18:14 <DIR> d-------- C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Windows Genuine Advantage
2007-05-10 14:35 <DIR> d-------- C:\Program Files\Lavasoft
2007-05-10 14:34 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-04-19 15:16 991,232 --a------ C:\WINDOWS\system32\esent.dll
2007-04-18 23:29 <DIR> d-------- C:\gear ratios
2007-04-18 21:31 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-04-18 21:31 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2007-04-18 21:31 <DIR> d-------- C:\WINDOWS\system32\PreInstall


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2007-05-11 01:36:42 -------- d-----w C:\Program Files\Messenger
2007-05-11 01:07:17 -------- d-----w C:\Program Files\SpywareBlaster
2007-05-10 23:23:42 -------- d-----w C:\Program Files\Norton AntiVirus2003
2007-05-10 23:04:43 -------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-05-10 22:40:44 -------- d-----w C:\Program Files\Microsoft Works
2007-05-10 22:39:52 -------- d-----w C:\Program Files\QuickTime
2007-05-10 22:39:52 -------- d-----w C:\Program Files\iTunes
2007-05-10 21:35:32 -------- d-----w C:\DOCUME~1\WESLEY~1\APPLIC~1\Lavasoft
2007-05-10 03:35:45 -------- d-----w C:\DOCUME~1\WESLEY~1\APPLIC~1\HP
2007-05-10 03:34:13 -------- d-----w C:\DOCUME~1\WESLEY~1\APPLIC~1\U3
2007-04-27 05:48:23 -------- d-----w C:\Program Files\HP
2007-04-13 05:10:33 -------- d-----w C:\DOCUME~1\WESLEY~1\APPLIC~1\AdobeUM
2007-03-23 01:25:33 3,010 ----a-w C:\WINDOWS\system32\tmp.reg
2007-03-23 00:47:12 -------- d-----w C:\Program Files\BSPlayer
2007-03-17 04:37:39 -------- d-----w C:\DOCUME~1\WESLEY~1\APPLIC~1\Apple Computer
2007-03-17 04:30:14 -------- d-----w C:\Program Files\Kazaa Lite K++


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 15:17]
{53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2004-05-12 01:03]
{BDF3E430-B101-42AD-A544-FADC6B084872}=C:\Program Files\Norton AntiVirus2003\NavShExt.dll [2002-11-15 00:09]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"nwiz"="nwiz.exe /install"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup"
"Logitech Utility"="Logi_MwX.Exe"
"HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2003-10-06 15:16 C:\WINDOWS\system32\nwiz.exe])
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2003-10-06 15:16]
"Logitech Utility"="Logi_MwX.Exe" [])
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 03:41]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Microsoft Works Update Detection"="C:\Program Files\Microsoft Works\WkDetect.exe" []
"LDM"="\Program\BackWeb-8876480.exe" []

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"Microsoft Works Update Detection"="C:\\Program Files\\Microsoft Works\\WkDetect.exe"
"LDM"="\\Program\\BackWeb-8876480.exe"


HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages msv1_0\0\0
Security Packages kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages scecli\0\0

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ituneshelper
C:\Program Files\iTunes\iTunesHelper.exe


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost]
LocalService Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService DnsCache\0\0
rpcss RpcSs\0\0
imgsvc StiSvc\0\0
termsvcs TermService\0\0

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost


~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

backup-20070515-122707-453
O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - https://secure2.comned.com/signuptemp...veSecurity.cab
backup-20070515-122707-536
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\Symantec NetDetect.job

********************************************************************

catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, https://www.gmer.net
Rootkit scan 2007-05-15 12:45:25
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

C:\RECYCLER\NPROTECT
C:\RECYCLER\NPROTECT\00089461. 5591040 bytes
C:\RECYCLER\NPROTECT\00112492.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112493.DLL 802816 bytes
C:\RECYCLER\NPROTECT\00112494.inf 8192 bytes
C:\RECYCLER\NPROTECT\00112495.pnf 16384 bytes
C:\RECYCLER\NPROTECT\00112496.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112497.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112498.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112499.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112500.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112503.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112504.pnf 24576 bytes
C:\RECYCLER\NPROTECT\00112505.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112506.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112507.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112508.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112509.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112510.inf 20480 bytes
C:\RECYCLER\NPROTECT\00112511.pnf 36864 bytes
C:\RECYCLER\NPROTECT\00112512.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112514.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112515.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112516.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112519.inf 8192 bytes
C:\RECYCLER\NPROTECT\00112520.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112521.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112522.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112523.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112524.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112525.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112528.exe 32768 bytes
C:\RECYCLER\NPROTECT\00112529.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112530.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112531.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112532.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112534.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112535.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112536.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112539.dll 131072 bytes
C:\RECYCLER\NPROTECT\00112540.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112541.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112542.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112543.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112545.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112546.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112547.DLL 16384 bytes
C:\RECYCLER\NPROTECT\00112550.DLL 61440 bytes
C:\RECYCLER\NPROTECT\00112551.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112552.pnf 24576 bytes
C:\RECYCLER\NPROTECT\00112553.cat 16384 bytes
C:\RECYCLER\NPROTECT\00112554.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112555.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112556.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112557.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112560.tsp 73728 bytes
C:\RECYCLER\NPROTECT\00112561.tsp 53248 bytes
C:\RECYCLER\NPROTECT\00112562.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112563.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112564.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112565.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112566.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112567.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112568.DLL 16384 bytes
C:\RECYCLER\NPROTECT\00112571.DLL 1798144 bytes
C:\RECYCLER\NPROTECT\00112572.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112573.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112574.cat 16384 bytes
C:\RECYCLER\NPROTECT\00112575.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112576.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112577.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112578.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112581.dll 1351680 bytes
C:\RECYCLER\NPROTECT\00112582.dll 65536 bytes
C:\RECYCLER\NPROTECT\00112583.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112584.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112585.log 131072 bytes
C:\RECYCLER\NPROTECT\00112586.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112587.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112588.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112589.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112590.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112593.DLL 118784 bytes
C:\RECYCLER\NPROTECT\00112594.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112595.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112596.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112597.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112598.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112599.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112600.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112603.dll 2031616 bytes
C:\RECYCLER\NPROTECT\00112604.dll 942080 bytes
C:\RECYCLER\NPROTECT\00112605.edb 1056768 bytes
C:\RECYCLER\NPROTECT\00112606.inf 8192 bytes
C:\RECYCLER\NPROTECT\00112607.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112608.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112609.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112610.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112611.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112612.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112615.ocx 520192 bytes
C:\RECYCLER\NPROTECT\00112616.ocx 389120 bytes
C:\RECYCLER\NPROTECT\00112617.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112618.pnf 24576 bytes
C:\RECYCLER\NPROTECT\00112619.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112620.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112621.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112622.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112623.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112626.DLL 176128 bytes
C:\RECYCLER\NPROTECT\00112627.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112628.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112629.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112630.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112631.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112632.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112633.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112636.dll 225280 bytes
C:\RECYCLER\NPROTECT\00112637.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112638.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112639.log 131072 bytes
C:\RECYCLER\NPROTECT\00112640.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112641.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112642.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112643.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112644.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112647.DLL 323584 bytes
C:\RECYCLER\NPROTECT\00112648.sys 258048 bytes
C:\RECYCLER\NPROTECT\00112649.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112650.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112651.log 131072 bytes
C:\RECYCLER\NPROTECT\00112652.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112654.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112655.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112656.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112659.inf 8192 bytes
C:\RECYCLER\NPROTECT\00112660.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112661.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112662.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112663.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112664.DLL 16384 bytes
C:\RECYCLER\NPROTECT\00112668.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112669.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112670.cat 16384 bytes
C:\RECYCLER\NPROTECT\00112671.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112672.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112673.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112674.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112675.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112676.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112677.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112678.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112679.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112680.DLL 16384 bytes
C:\RECYCLER\NPROTECT\00112683.DLL 204800 bytes
C:\RECYCLER\NPROTECT\00112684.inf 8192 bytes
C:\RECYCLER\NPROTECT\00112685.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112686.pnf 24576 bytes
C:\RECYCLER\NPROTECT\00112687.cat 16384 bytes
C:\RECYCLER\NPROTECT\00112688.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112689.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112690.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112691.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112694.dll 827392 bytes
C:\RECYCLER\NPROTECT\00112695.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112696.pnf 24576 bytes
C:\RECYCLER\NPROTECT\00112697.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112698.DLL 4096 bytes
C:\RECYCLER\NPROTECT\00112699.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112700.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112701.DLL 12288 bytes
C:\RECYCLER\NPROTECT\00112704.inf 8192 bytes
C:\RECYCLER\NPROTECT\00112705.pnf 20480 bytes
C:\RECYCLER\NPROTECT\00112706.cat 12288 bytes
C:\RECYCLER\NPROTECT\00112707.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112708.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112709.DLL 8192 bytes
C:\RECYCLER\NPROTECT\00112710.dll 5550080 bytes
C:\RECYCLER\NPROTECT\00112711.dll 3227648 bytes
C:\RECYCLER\NPROTECT\00112713.SQL 73728 bytes
C:\RECYCLER\NPROTECT\00112714.inf 12288 bytes
C:\RECYCLER\NPROTECT\00112715.pnf 24576 bytes
C:\RECYCLER\NPROTECT\00112716.cat 8192 bytes
C:\RECYCLER\NPROTECT\00112717.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112718.ldb 64 bytes
C:\RECYCLER\NPROTECT\00112719.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112720.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112721 4096 bytes
C:\RECYCLER\NPROTECT\00112722 4096 bytes
C:\RECYCLER\NPROTECT\00112723.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00112724.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00112725.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00112742.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112743.JS 544 bytes
C:\RECYCLER\NPROTECT\00112744.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00112746.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00112747.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112748 12288 bytes
C:\RECYCLER\NPROTECT\00112749 12288 bytes
C:\RECYCLER\NPROTECT\00112750 256 bytes
C:\RECYCLER\NPROTECT\00112751 264 bytes
C:\RECYCLER\NPROTECT\00112752 8192 bytes
C:\RECYCLER\NPROTECT\00112753 264 bytes
C:\RECYCLER\NPROTECT\00112754 248 bytes
C:\RECYCLER\NPROTECT\00112755 8192 bytes
C:\RECYCLER\NPROTECT\00112756 12288 bytes
C:\RECYCLER\NPROTECT\00112757 240 bytes
C:\RECYCLER\NPROTECT\00112758 12288 bytes
C:\RECYCLER\NPROTECT\00112759 12288 bytes
C:\RECYCLER\NPROTECT\00112760 12288 bytes
C:\RECYCLER\NPROTECT\00112761 12288 bytes
C:\RECYCLER\NPROTECT\00112762 8192 bytes
C:\RECYCLER\NPROTECT\00112763 8192 bytes
C:\RECYCLER\NPROTECT\00112764 8192 bytes
C:\RECYCLER\NPROTECT\00112765 256 bytes
C:\RECYCLER\NPROTECT\00112766 448 bytes
C:\RECYCLER\NPROTECT\00112767 264 bytes
C:\RECYCLER\NPROTECT\00112768 12288 bytes
C:\RECYCLER\NPROTECT\00112769 272 bytes
C:\RECYCLER\NPROTECT\00112770 8192 bytes
C:\RECYCLER\NPROTECT\00112771 4096 bytes
C:\RECYCLER\NPROTECT\00112772 12288 bytes
C:\RECYCLER\NPROTECT\00112773 8192 bytes
C:\RECYCLER\NPROTECT\00112774 8192 bytes
C:\RECYCLER\NPROTECT\00112775 8192 bytes
C:\RECYCLER\NPROTECT\00112776 8192 bytes
C:\RECYCLER\NPROTECT\00112777 12288 bytes
C:\RECYCLER\NPROTECT\00112778 8192 bytes
C:\RECYCLER\NPROTECT\00112779 12288 bytes
C:\RECYCLER\NPROTECT\00112780 12288 bytes
C:\RECYCLER\NPROTECT\00112781 12288 bytes
C:\RECYCLER\NPROTECT\00112782 4096 bytes
C:\RECYCLER\NPROTECT\00112783 8192 bytes
C:\RECYCLER\NPROTECT\00112784 12288 bytes
C:\RECYCLER\NPROTECT\00112785 12288 bytes
C:\RECYCLER\NPROTECT\00112786 8192 bytes
C:\RECYCLER\NPROTECT\00112787 12288 bytes
C:\RECYCLER\NPROTECT\00112788 8192 bytes
C:\RECYCLER\NPROTECT\00112789 12288 bytes
C:\RECYCLER\NPROTECT\00112790 12288 bytes
C:\RECYCLER\NPROTECT\00112791 8192 bytes
C:\RECYCLER\NPROTECT\00112792 12288 bytes
C:\RECYCLER\NPROTECT\00112793 12288 bytes
C:\RECYCLER\NPROTECT\00112794 12288 bytes
C:\RECYCLER\NPROTECT\00112795 12288 bytes
C:\RECYCLER\NPROTECT\00112796 8192 bytes
C:\RECYCLER\NPROTECT\00112797 4096 bytes
C:\RECYCLER\NPROTECT\00112798 12288 bytes
C:\RECYCLER\NPROTECT\00112799 8192 bytes
C:\RECYCLER\NPROTECT\00112800 8192 bytes
C:\RECYCLER\NPROTECT\00112801 8192 bytes
C:\RECYCLER\NPROTECT\00112802 8192 bytes
C:\RECYCLER\NPROTECT\00112803 56 bytes
C:\RECYCLER\NPROTECT\00112804 592 bytes
C:\RECYCLER\NPROTECT\00112805 8192 bytes
C:\RECYCLER\NPROTECT\00112806 4096 bytes
C:\RECYCLER\NPROTECT\00112807 4096 bytes
C:\RECYCLER\NPROTECT\00112808 96 bytes
C:\RECYCLER\NPROTECT\00112809 344 bytes
C:\RECYCLER\NPROTECT\00112810 8192 bytes
C:\RECYCLER\NPROTECT\00112811 248 bytes
C:\RECYCLER\NPROTECT\00112812 4096 bytes
C:\RECYCLER\NPROTECT\00112813 8192 bytes
C:\RECYCLER\NPROTECT\00112814 8192 bytes
C:\RECYCLER\NPROTECT\00112815 56 bytes
C:\RECYCLER\NPROTECT\00112816 4096 bytes
C:\RECYCLER\NPROTECT\00112817 4096 bytes
C:\RECYCLER\NPROTECT\00112818 12288 bytes
C:\RECYCLER\NPROTECT\00112819 4096 bytes
C:\RECYCLER\NPROTECT\00112820 400 bytes
C:\RECYCLER\NPROTECT\00112821.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112822.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112825.log 131072 bytes
C:\RECYCLER\NPROTECT\00112826.edb 1056768 bytes
C:\RECYCLER\NPROTECT\00112827.log 131072 bytes
C:\RECYCLER\NPROTECT\00112828.log 131072 bytes
C:\RECYCLER\NPROTECT\00112829.inf 1904640 bytes
C:\RECYCLER\NPROTECT\00112830.pnf 2269184 bytes
C:\RECYCLER\NPROTECT\00112831.cat 1044480 bytes
C:\RECYCLER\NPROTECT\00112835 8192 bytes
C:\RECYCLER\NPROTECT\00112836 8192 bytes
C:\RECYCLER\NPROTECT\00112837 8192 bytes
C:\RECYCLER\NPROTECT\00112838 4096 bytes
C:\RECYCLER\NPROTECT\00112839 8192 bytes
C:\RECYCLER\NPROTECT\00112840 248 bytes
C:\RECYCLER\NPROTECT\00112841 592 bytes
C:\RECYCLER\NPROTECT\00112842 56 bytes
C:\RECYCLER\NPROTECT\00112843 12288 bytes
C:\RECYCLER\NPROTECT\00112844 4096 bytes
C:\RECYCLER\NPROTECT\00112845 4096 bytes
C:\RECYCLER\NPROTECT\00112846 4096 bytes
C:\RECYCLER\NPROTECT\00112849.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112850.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00112856.cab 16384 bytes
C:\RECYCLER\NPROTECT\00112877.MOZ 416 bytes
C:\RECYCLER\NPROTECT\00112879.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112880.MOZ 464 bytes
C:\RECYCLER\NPROTECT\00112881.log 131072 bytes
C:\RECYCLER\NPROTECT\00112882.log 131072 bytes
C:\RECYCLER\NPROTECT\00112883.log 131072 bytes
C:\RECYCLER\NPROTECT\00112884.log 131072 bytes
C:\RECYCLER\NPROTECT\00112885.edb 1056768 bytes
C:\RECYCLER\NPROTECT\00112886.log 131072 bytes
C:\RECYCLER\NPROTECT\00112887.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112888.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112889.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112890.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112891.edb 65536 bytes
C:\RECYCLER\NPROTECT\00112892.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112893.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112894.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112895.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112896.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112897.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112898.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112899.SQL 831488 bytes
C:\RECYCLER\NPROTECT\00112900.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112901.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112902.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112903.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112904.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112905.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112906.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112907.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112908.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112909.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112910.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112911.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00112912.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112913.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112914.XML 104 bytes
C:\RECYCLER\NPROTECT\00112915.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112916.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112917.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112920.SQL 57344 bytes
C:\RECYCLER\NPROTECT\00112923.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112924.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112925.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112926.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112927.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112928.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112929.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112930.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112931.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112932.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112933.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112934.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112935.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112936.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112937.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112938.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112939.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00112940.JS 8192 bytes
C:\RECYCLER\NPROTECT\00112941.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00112943.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00112944.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00112947.PF 8192 bytes
C:\RECYCLER\NPROTECT\00112948.PF 8192 bytes
C:\RECYCLER\NPROTECT\00112949.PF 65536 bytes
C:\RECYCLER\NPROTECT\00112950.PF 12288 bytes
C:\RECYCLER\NPROTECT\00112951.PF 8192 bytes
C:\RECYCLER\NPROTECT\00112952.PF 8192 bytes
C:\RECYCLER\NPROTECT\00112953.PF 20480 bytes
C:\RECYCLER\NPROTECT\00112954.PF 16384 bytes
C:\RECYCLER\NPROTECT\00112955.PF 49152 bytes
C:\RECYCLER\NPROTECT\00112956.PF 8192 bytes
C:\RECYCLER\NPROTECT\00112957.PF 8192 bytes
C:\RECYCLER\NPROTECT\00112958.PF 8192 bytes
C:\RECYCLER\NPROTECT\00112959.PF 8192 bytes
C:\RECYCLER\NPROTECT\00112960.PF 20480 bytes
C:\RECYCLER\NPROTECT\00112961.PF 24576 bytes
C:\RECYCLER\NPROTECT\00112962.PF 24576 bytes
C:\RECYCLER\NPROTECT\00112963.PF 20480 bytes
C:\RECYCLER\NPROTECT\00112964.PF 24576 bytes
C:\RECYCLER\NPROTECT\00112965.PF 32768 bytes
C:\RECYCLER\NPROTECT\00112966.PF 12288 bytes
C:\RECYCLER\NPROTECT\00112967.PF 57344 bytes
C:\RECYCLER\NPROTECT\00112968.PF 24576 bytes
C:\RECYCLER\NPROTECT\00112969.PF 16384 bytes
C:\RECYCLER\NPROTECT\00112970.PF 12288 bytes
C:\RECYCLER\NPROTECT\00112971.PF 12288 bytes
C:\RECYCLER\NPROTECT\00112972.PF 20480 bytes
C:\RECYCLER\NPROTECT\00112973.PF 90112 bytes
C:\RECYCLER\NPROTECT\00112974.PF 81920 bytes
C:\RECYCLER\NPROTECT\00112975.PF 36864 bytes
C:\RECYCLER\NPROTECT\00112976.PF 57344 bytes
C:\RECYCLER\NPROTECT\00112977.PF 45056 bytes
C:\RECYCLER\NPROTECT\00112978.PF 8192 bytes
C:\RECYCLER\NPROTECT\00112979.PF 20480 bytes
C:\RECYCLER\NPROTECT\00112980.PF 40960 bytes
C:\RECYCLER\NPROTECT\00112981.PF 8192 bytes
C:\RECYCLER\NPROTECT\00112982.PF 20480 bytes
C:\RECYCLER\NPROTECT\00112983.PF 16384 bytes
C:\RECYCLER\NPROTECT\00112984.PF 24576 bytes
C:\RECYCLER\NPROTECT\00112985.PF 20480 bytes
C:\RECYCLER\NPROTECT\00112986.PF 28672 bytes
C:\RECYCLER\NPROTECT\00112987.PF 12288 bytes
C:\RECYCLER\NPROTECT\00112988.PF 32768 bytes
C:\RECYCLER\NPROTECT\00112989.PF 16384 bytes
C:\RECYCLER\NPROTECT\00112990.PF 4096 bytes
C:\RECYCLER\NPROTECT\00112991.PF 65536 bytes
C:\RECYCLER\NPROTECT\00112992.PF 16384 bytes
C:\RECYCLER\NPROTECT\00112993.PF 12288 bytes
C:\RECYCLER\NPROTECT\00112994.PF 32768 bytes
C:\RECYCLER\NPROTECT\00112995.PF 73728 bytes
C:\RECYCLER\NPROTECT\00112996.PF 73728 bytes
C:\RECYCLER\NPROTECT\00112997.PF 57344 bytes
C:\RECYCLER\NPROTECT\00112998.PF 36864 bytes
C:\RECYCLER\NPROTECT\00112999.PF 16384 bytes
C:\RECYCLER\NPROTECT\00113000.PF 73728 bytes
C:\RECYCLER\NPROTECT\00113001.PF 73728 bytes
C:\RECYCLER\NPROTECT\00113002.PF 20480 bytes
C:\RECYCLER\NPROTECT\00113003.PF 12288 bytes
C:\RECYCLER\NPROTECT\00113004.PF 49152 bytes
C:\RECYCLER\NPROTECT\00113005.PF 73728 bytes
C:\RECYCLER\NPROTECT\00113006.PF 40960 bytes
C:\RECYCLER\NPROTECT\00113007.PF 16384 bytes
C:\RECYCLER\NPROTECT\00113008.PF 86016 bytes
C:\RECYCLER\NPROTECT\00113009.PF 86016 bytes
C:\RECYCLER\NPROTECT\00113010.PF 77824 bytes
C:\RECYCLER\NPROTECT\00113011.PF 73728 bytes
C:\RECYCLER\NPROTECT\00113012.PF 40960 bytes
C:\RECYCLER\NPROTECT\00113013.PF 77824 bytes
C:\RECYCLER\NPROTECT\00113014.PF 73728 bytes
C:\RECYCLER\NPROTECT\00113015.PF 73728 bytes
C:\RECYCLER\NPROTECT\00113016.PF 73728 bytes
C:\RECYCLER\NPROTECT\00113017.PF 73728 bytes
C:\RECYCLER\NPROTECT\00113018.PF 69632 bytes
C:\RECYCLER\NPROTECT\00113019.PF 69632 bytes
C:\RECYCLER\NPROTECT\00113020.PF 61440 bytes
C:\RECYCLER\NPROTECT\00113021.PF 69632 bytes
C:\RECYCLER\NPROTECT\00113022.PF 73728 bytes
C:\RECYCLER\NPROTECT\00113023.PF 45056 bytes
C:\RECYCLER\NPROTECT\00113024.PF 20480 bytes
C:\RECYCLER\NPROTECT\00113025.PF 12288 bytes
C:\RECYCLER\NPROTECT\00113026.PF 4096 bytes
C:\RECYCLER\NPROTECT\00113027.PF 16384 bytes
C:\RECYCLER\NPROTECT\00113028.PF 16384 bytes
C:\RECYCLER\NPROTECT\00113029.PF 8192 bytes
C:\RECYCLER\NPROTECT\00113030.PF 4096 bytes
C:\RECYCLER\NPROTECT\00113031.PF 12288 bytes
C:\RECYCLER\NPROTECT\00113032.PF 20480 bytes
C:\RECYCLER\NPROTECT\00113033.PF 20480 bytes
C:\RECYCLER\NPROTECT\00113034.PF 20480 bytes
C:\RECYCLER\NPROTECT\00113035.PF 4096 bytes
C:\RECYCLER\NPROTECT\00113036.PF 12288 bytes
C:\RECYCLER\NPROTECT\00113037.PF 12288 bytes
C:\RECYCLER\NPROTECT\00113038.PF 12288 bytes
C:\RECYCLER\NPROTECT\00113039.PF 4096 bytes
C:\RECYCLER\NPROTECT\00113040.PF 20480 bytes
C:\RECYCLER\NPROTECT\00113041.PF 12288 bytes
C:\RECYCLER\NPROTECT\00113042.PF 4096 bytes
C:\RECYCLER\NPROTECT\00113049.BIN 4096 bytes
C:\RECYCLER\NPROTECT\00113050.edb 65536 bytes
C:\RECYCLER\NPROTECT\00113059.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113060.SQL 393216 bytes
C:\RECYCLER\NPROTECT\00113061.ldb 64 bytes
C:\RECYCLER\NPROTECT\00113063.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113064.JS 4096 bytes
C:\RECYCLER\NPROTECT\00113065.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113067.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113068.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113073.cab 16384 bytes
C:\RECYCLER\NPROTECT\00113079.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113080.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113085 4096 bytes
C:\RECYCLER\NPROTECT\00113086 4096 bytes
C:\RECYCLER\NPROTECT\00113091.ldb 64 bytes
C:\RECYCLER\NPROTECT\00113096.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113097.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113098.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113099.dat 32768 bytes
C:\RECYCLER\NPROTECT\00113103.HTM 28672 bytes
C:\RECYCLER\NPROTECT\00113105.TRA 4096 bytes
C:\RECYCLER\NPROTECT\00113106.MOZ 416 bytes
C:\RECYCLER\NPROTECT\00113107.SQL 872448 bytes
C:\RECYCLER\NPROTECT\00113108.edb 1056768 bytes
C:\RECYCLER\NPROTECT\00113109.edb 65536 bytes
C:\RECYCLER\NPROTECT\00113110.MOZ 576 bytes
C:\RECYCLER\NPROTECT\00113111.JS 576 bytes
C:\RECYCLER\NPROTECT\00113112.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113114.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113115.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113136.cab 16384 bytes
C:\RECYCLER\NPROTECT\00113147.edb 65536 bytes
C:\RECYCLER\NPROTECT\00113148.ldb 64 bytes
C:\RECYCLER\NPROTECT\00113149 4096 bytes
C:\RECYCLER\NPROTECT\00113150 4096 bytes
C:\RECYCLER\NPROTECT\00113151.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113152.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113153.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113154.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113155.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113171.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113173.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113174.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113175.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113176.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113177.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113178.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113179.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113189 4096 bytes
C:\RECYCLER\NPROTECT\00113190 4096 bytes
C:\RECYCLER\NPROTECT\00113194.edb 65536 bytes
C:\RECYCLER\NPROTECT\00113197.JS 304 bytes
C:\RECYCLER\NPROTECT\00113198.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113200.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113201.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113205.BIN 4096 bytes
C:\RECYCLER\NPROTECT\00113207.edb 65536 bytes
C:\RECYCLER\NPROTECT\00113217.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113218.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113230.SQL 851968 bytes
C:\RECYCLER\NPROTECT\00113231.XML 104 bytes
C:\RECYCLER\NPROTECT\00113233.SQL 49152 bytes
C:\RECYCLER\NPROTECT\00113234.SQL 81920 bytes
C:\RECYCLER\NPROTECT\00113235.SQL 102400 bytes
C:\RECYCLER\NPROTECT\00113236.ldb 64 bytes
C:\RECYCLER\NPROTECT\00113244.JS 304 bytes
C:\RECYCLER\NPROTECT\00113245.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113248.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113249.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113254.cab 16384 bytes
C:\RECYCLER\NPROTECT\00113260.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113261.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113269 4096 bytes
C:\RECYCLER\NPROTECT\00113270 4096 bytes
C:\RECYCLER\NPROTECT\00113285.ldb 64 bytes
C:\RECYCLER\NPROTECT\00113291.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113292.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113293.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113294.dat 32768 bytes
C:\RECYCLER\NPROTECT\00113297.HTM 28672 bytes
C:\RECYCLER\NPROTECT\00113299.MOZ 416 bytes
C:\RECYCLER\NPROTECT\00113300.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113301.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113302.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113303.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113304.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113305.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113306.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113307.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113308.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113309.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113310.edb 1056768 bytes
C:\RECYCLER\NPROTECT\00113311.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113312.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113313.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113314.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113315.SQL 1159168 bytes
C:\RECYCLER\NPROTECT\00113316.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113317.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113318.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113319.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113320.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113321.edb 65536 bytes
C:\RECYCLER\NPROTECT\00113322.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113323.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113324.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113325.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113326.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113327.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113328.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113329.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113330.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113331.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113332.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113333.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113334.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113336.JS 8192 bytes
C:\RECYCLER\NPROTECT\00113340.MOZ 472 bytes
C:\RECYCLER\NPROTECT\00113342.JS 472 bytes
C:\RECYCLER\NPROTECT\00113344.MOZ 456 bytes
C:\RECYCLER\NPROTECT\00113345.JS 456 bytes
C:\RECYCLER\NPROTECT\00113346.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113348.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113349.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113369.MOZ 408 bytes
C:\RECYCLER\NPROTECT\00113370.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113371.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113372.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113374.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113375.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113376.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113377.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113378.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113379.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113380.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113381.SQL 536576 bytes
C:\RECYCLER\NPROTECT\00113382.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113383.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113384.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113392.SQL 40960 bytes
C:\RECYCLER\NPROTECT\00113394.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113395.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113397.SQL 53248 bytes
C:\RECYCLER\NPROTECT\00113399.SQL 49152 bytes
C:\RECYCLER\NPROTECT\00113400.SQL 73728 bytes
C:\RECYCLER\NPROTECT\00113401.SQL 8192 bytes
C:\RECYCLER\NPROTECT\00113402.SQL 73728 bytes
C:\RECYCLER\NPROTECT\00113403.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113404.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113405.SQL 20480 bytes
C:\RECYCLER\NPROTECT\00113406.SQL 32768 bytes
C:\RECYCLER\NPROTECT\00113413.SQL 45056 bytes
C:\RECYCLER\NPROTECT\00113414.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113415.SOL 72 bytes
C:\RECYCLER\NPROTECT\00113416.SOL 72 bytes
C:\RECYCLER\NPROTECT\00113417.SOL 72 bytes
C:\RECYCLER\NPROTECT\00113418.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113419.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113420.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113421.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113422.XML 104 bytes
C:\RECYCLER\NPROTECT\00113423.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113424.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113425.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113427.SOL 72 bytes
C:\RECYCLER\NPROTECT\00113428.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113429.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113430.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113431.SQL 69632 bytes
C:\RECYCLER\NPROTECT\00113432.SOL 72 bytes
C:\RECYCLER\NPROTECT\00113433.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113434.SOL 72 bytes
C:\RECYCLER\NPROTECT\00113435.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113438.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113439.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113440.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113441.SQL 61440 bytes
C:\RECYCLER\NPROTECT\00113442.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113443.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113444.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113445.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113446.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113447.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113448.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113449.SOL 72 bytes
C:\RECYCLER\NPROTECT\00113450.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113451.SOL 72 bytes
C:\RECYCLER\NPROTECT\00113452.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113453.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113454.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113455.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113456.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113457.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113458.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113459.SOL 72 bytes
C:\RECYCLER\NPROTECT\00113461.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113462.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113463.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113464.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113465.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113466.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113467.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113468.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113469.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113470.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113471.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113472.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113473.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113474.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113475.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113476.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113477.SOL 56 bytes
C:\RECYCLER\NPROTECT\00113478.SOL 56 bytes
C:\RECYCLER\NPROTECT\00113479.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113480.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113481.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113482.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113483.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113484.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113485.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113486.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113487.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113488.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113489.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113491.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113492.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113493.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113494.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113495.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113496.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113497.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113498.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113499.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113500.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113501.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113502.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113503.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113504.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113505.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113506.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113507.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113508.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113509.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113510.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113511.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113512.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113513.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113514.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113515.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113516.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113517.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113518.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113519.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113520.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113521.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113522.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113523.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113524.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113525.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113526.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113527.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113528.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113529.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113530.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113531.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113532.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113533.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113534.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113535.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113536.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113537.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113538.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113539.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113540.SQL 192512 bytes
C:\RECYCLER\NPROTECT\00113541.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113542.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113543.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113544.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113545.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113546.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113547.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113548.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113549.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113550.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113551.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113552.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113553.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113554.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113555.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113556.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113557.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113558.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113559.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113560.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113561.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113562.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113563.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113564.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113565.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113566.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113567.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113568.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113569.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113570.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113571.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113572.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113573.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113574.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113575.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113576.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113577.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113578.SQL 36864 bytes
C:\RECYCLER\NPROTECT\00113579.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113580.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113581.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113582.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113583.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113584.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113586.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113587.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113588.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113589.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113590.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113591.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113592.ldb 64 bytes
C:\RECYCLER\NPROTECT\00113595.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113597.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113598.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113599.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113600.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113601.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113602.SQL 28672 bytes
C:\RECYCLER\NPROTECT\00113603.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113605.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113606.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113607.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113608.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113610.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113611.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113612.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113613.SQL 143360 bytes
C:\RECYCLER\NPROTECT\00113615.SQL 86016 bytes
C:\RECYCLER\NPROTECT\00113616.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113617.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113618.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113619.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113620.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113621.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113622.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113623.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113624.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113625.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113633.SQL 61440 bytes
C:\RECYCLER\NPROTECT\00113634.JS 8192 bytes
C:\RECYCLER\NPROTECT\00113635.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113637.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113638.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113643.cab 16384 bytes
C:\RECYCLER\NPROTECT\00113649.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113650.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113655 4096 bytes
C:\RECYCLER\NPROTECT\00113656 4096 bytes
C:\RECYCLER\NPROTECT\00113658.ldb 64 bytes
C:\RECYCLER\NPROTECT\00113680.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113681.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113682.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113683.dat 32768 bytes
C:\RECYCLER\NPROTECT\00113686.HTM 32768 bytes
C:\RECYCLER\NPROTECT\00113688.edb 1056768 bytes
C:\RECYCLER\NPROTECT\00113689.MOZ 408 bytes
C:\RECYCLER\NPROTECT\00113690.SQL 1261568 bytes
C:\RECYCLER\NPROTECT\00113691.edb 65536 bytes
C:\RECYCLER\NPROTECT\00113698.SQL 65536 bytes
C:\RECYCLER\NPROTECT\00113699.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113700.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113701.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113702.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113703.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113704.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113705.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113706.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113707.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113708.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113709.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113710.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113711.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113712.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113713.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113715.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113716.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113717.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113718.MOZ 69632 bytes
C:\RECYCLER\NPROTECT\00113719.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113720.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113721.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113722.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113723.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113724.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113725.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113726.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113727.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113728.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113729.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113730.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113731.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113732.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113733.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113734.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113735.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113736.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113737.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113738.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113739.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113740.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113741.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113742.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113743.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113744.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113745.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113746.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113747.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113748.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113749.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113750.SOL 64 bytes
C:\RECYCLER\NPROTECT\00113751.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113752.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113753.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113754.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113755.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113756.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113757.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113758.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00113759.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113760.JS 20480 bytes
C:\RECYCLER\NPROTECT\00113761.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113763.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113764.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113765.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113770.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113771.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113772.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113773.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113774.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113775.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113776.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113777.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113778.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113779.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113780.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113781.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113782.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113784.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113785.SQL 73728 bytes
C:\RECYCLER\NPROTECT\00113786.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113787.MOZ 32768 bytes
C:\RECYCLER\NPROTECT\00113788.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113789.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00113790.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113791.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113792.SOL 48 bytes
C:\RECYCLER\NPROTECT\00113793.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113794.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113795.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113796.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113797.SOL 56 bytes
C:\RECYCLER\NPROTECT\00113798.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113799.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113800.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113801.SOL 48 bytes
C:\RECYCLER\NPROTECT\00113802.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113803.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113804.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113805.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113806.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113807.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113808.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113809.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113810.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113811.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113812.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113813.SOL 56 bytes
C:\RECYCLER\NPROTECT\00113814.SOL 48 bytes
C:\RECYCLER\NPROTECT\00113815.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113816.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113817.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113818.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113819.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113820.SQL 126976 bytes
C:\RECYCLER\NPROTECT\00113821.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113822.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00113823.JS 16384 bytes
C:\RECYCLER\NPROTECT\00113824.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00113826.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113827.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00113828.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113835.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113836.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113837.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113838.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113840.edb 65536 bytes
C:\RECYCLER\NPROTECT\00113847 4096 bytes
C:\RECYCLER\NPROTECT\00113848 4096 bytes
C:\RECYCLER\NPROTECT\00113865.ldb 64 bytes
C:\RECYCLER\NPROTECT\00113870.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113871.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113872.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113873.dat 32768 bytes
C:\RECYCLER\NPROTECT\00113876.edb 1056768 bytes
C:\RECYCLER\NPROTECT\00113878.HTM 32768 bytes
C:\RECYCLER\NPROTECT\00113880.TRA 8192 bytes
C:\RECYCLER\NPROTECT\00113881.MOZ 408 bytes
C:\RECYCLER\NPROTECT\00113882.JS 576 bytes
C:\RECYCLER\NPROTECT\00113883.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00113885.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00113886.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113888.LNK 4096 bytes
C:\RECYCLER\NPROTECT\00113889.LNK 4096 bytes
C:\RECYCLER\NPROTECT\00113890.LNK 4096 bytes
C:\RECYCLER\NPROTECT\00113891.LNK 4096 bytes
C:\RECYCLER\NPROTECT\00113892.LNK 4096 bytes
C:\RECYCLER\NPROTECT\00113893.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113894.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00113898.edb 65536 bytes
C:\RECYCLER\NPROTECT\00113909.cab 16384 bytes
C:\RECYCLER\NPROTECT\00113920.edb 65536 bytes
C:\RECYCLER\NPROTECT\00113927 4096 bytes
C:\RECYCLER\NPROTECT\00113928 4096 bytes
C:\RECYCLER\NPROTECT\00113948.ldb 64 bytes
C:\RECYCLER\NPROTECT\00113951.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113952.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113953.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00113963.MOZ 408 bytes
C:\RECYCLER\NPROTECT\00113964.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113965.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113966.SQL 1769472 bytes
C:\RECYCLER\NPROTECT\00113967.MOZ 544 bytes
C:\RECYCLER\NPROTECT\00113968.MOZ 544 bytes
C:\RECYCLER\NPROTECT\00113969.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113970.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113971.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113972.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113973.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113974.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113975.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113976.JS 4096 bytes
C:\RECYCLER\NPROTECT\00113977.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00113979.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00113980.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00113984.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113985.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113986.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113987.MOZ 552 bytes
C:\RECYCLER\NPROTECT\00113988.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113989.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113991.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113992.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113993.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113994.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113995.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00113996.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00113997.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114002.SQL 151552 bytes
C:\RECYCLER\NPROTECT\00114006.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114007.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114008.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114009.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114010.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114012.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114013.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114014.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114015.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114016.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114017.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114018.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114019.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114020.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114026.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114028.QTC 1982464 bytes
C:\RECYCLER\NPROTECT\00114029.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114030.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114031.QTC 1970176 bytes
C:\RECYCLER\NPROTECT\00114032.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114033.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114034.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114035.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114039.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114040.XML 104 bytes
C:\RECYCLER\NPROTECT\00114041.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114042.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114043.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114044.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114045.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114046.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114047.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114048.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114049.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114050.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114051.JS 8192 bytes
C:\RECYCLER\NPROTECT\00114052.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00114054.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00114055.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114059.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114060.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114061.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114062.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114063.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114064.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114065.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114066.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114067.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114068.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114069.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114070.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114071.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114072.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114073.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114074.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114075.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114076.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114077.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114078.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114079.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114080.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114081.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114082.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114083.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114084.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114085.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114086.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114087.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114088.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114089.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114090.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114091.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114092.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114093.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114094.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114095.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114096.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114097.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114098.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114099.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114100.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114101.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114102.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114103.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114104.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114105.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114106.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114107.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114108.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114109.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114110.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114111.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114112.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114113.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114114.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114115.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114116.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114117.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114118.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114119.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114120.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114121.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114122.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114123.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114124.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114125.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114126.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114127.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114128.JS 8192 bytes
C:\RECYCLER\NPROTECT\00114129.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00114131.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00114132.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114137.JS 408 bytes
C:\RECYCLER\NPROTECT\00114141.JS 408 bytes
C:\RECYCLER\NPROTECT\00114143.MOZ 73728 bytes
C:\RECYCLER\NPROTECT\00114144.SQL 4096 bytes
C:\RECYCLER\NPROTECT\00114147.SQL 65536 bytes
C:\RECYCLER\NPROTECT\00114150.JS 408 bytes
C:\RECYCLER\NPROTECT\00114151.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00114153.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00114154.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114162.MOZ 168 bytes
C:\RECYCLER\NPROTECT\00114163.JS 408 bytes
C:\RECYCLER\NPROTECT\00114165.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00114167.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00114168.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114170.LOG 8 bytes
C:\RECYCLER\NPROTECT\00114171.LOG 464 bytes
C:\RECYCLER\NPROTECT\00114172.LOG 472 bytes
C:\RECYCLER\NPROTECT\00114173.LOG 456 bytes
C:\RECYCLER\NPROTECT\00114174.STE 4096 bytes
C:\RECYCLER\NPROTECT\00114175.txt 272 bytes
C:\RECYCLER\NPROTECT\00114176.txt 520 bytes
C:\RECYCLER\NPROTECT\00114177.txt 4096 bytes
C:\RECYCLER\NPROTECT\00114178.txt 4096 bytes
C:\RECYCLER\NPROTECT\00114179.txt 4096 bytes
C:\RECYCLER\NPROTECT\00114180.txt 4096 bytes
C:\RECYCLER\NPROTECT\00114181.txt 4096 bytes
C:\RECYCLER\NPROTECT\00114182.txt 4096 bytes
C:\RECYCLER\NPROTECT\00114183.LOG 464 bytes
C:\RECYCLER\NPROTECT\00114184.txt 4096 bytes
C:\RECYCLER\NPROTECT\00114185.txt 4096 bytes
C:\RECYCLER\NPROTECT\00114186.txt 4096 bytes
C:\RECYCLER\NPROTECT\00114192.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00114193.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00114206.JPG 1400832 bytes
C:\RECYCLER\NPROTECT\00114207.JPG 1294336 bytes
C:\RECYCLER\NPROTECT\00114208.JPG 1048576 bytes
C:\RECYCLER\NPROTECT\00114209.JPG 1728512 bytes
C:\RECYCLER\NPROTECT\00114210.JPG 1769472 bytes
C:\RECYCLER\NPROTECT\00114211.JPG 1138688 bytes
C:\RECYCLER\NPROTECT\00114212.JPG 1634304 bytes
C:\RECYCLER\NPROTECT\00114213.JPG 1327104 bytes
C:\RECYCLER\NPROTECT\00114214.JPG 1339392 bytes
C:\RECYCLER\NPROTECT\00114215.JPG 1462272 bytes
C:\RECYCLER\NPROTECT\00114216.JPG 1077248 bytes
C:\RECYCLER\NPROTECT\00114218.JPG 884736 bytes
C:\RECYCLER\NPROTECT\00114219.JPG 1564672 bytes
C:\RECYCLER\NPROTECT\00114220.JPG 1298432 bytes
C:\RECYCLER\NPROTECT\00114221.JPG 1536000 bytes
C:\RECYCLER\NPROTECT\00114231.edb 1056768 bytes
C:\RECYCLER\NPROTECT\00114233 32768 bytes
C:\RECYCLER\NPROTECT\00114234.jpg 458752 bytes
C:\RECYCLER\NPROTECT\00114235.JPG 1183744 bytes
C:\RECYCLER\NPROTECT\00114236.JPG 954368 bytes
C:\RECYCLER\NPROTECT\00114237.JPG 98304 bytes
C:\RECYCLER\NPROTECT\00114238.JPG 1032192 bytes
C:\RECYCLER\NPROTECT\00114239.JPG 1179648 bytes
C:\RECYCLER\NPROTECT\00114240.JPG 1122304 bytes
C:\RECYCLER\NPROTECT\00114241.JPG 491520 bytes
C:\RECYCLER\NPROTECT\00114242.JPG 172032 bytes
C:\RECYCLER\NPROTECT\00114243.JPG 851968 bytes
C:\RECYCLER\NPROTECT\00114244.JPG 1241088 bytes
C:\RECYCLER\NPROTECT\00114245.JPG 102400 bytes
C:\RECYCLER\NPROTECT\00114246.JPG 1540096 bytes
C:\RECYCLER\NPROTECT\00114247.JPG 61440 bytes
C:\RECYCLER\NPROTECT\00114248.JPG 1372160 bytes
C:\RECYCLER\NPROTECT\00114249.JPG 1306624 bytes
C:\RECYCLER\NPROTECT\00114250.JPG 49152 bytes
C:\RECYCLER\NPROTECT\00114251.JPG 954368 bytes
C:\RECYCLER\NPROTECT\00114252.JPG 1269760 bytes
C:\RECYCLER\NPROTECT\00114253.JPG 1175552 bytes
C:\RECYCLER\NPROTECT\00114254.JPG 1048576 bytes
C:\RECYCLER\NPROTECT\00114255.JPG 1671168 bytes
C:\RECYCLER\NPROTECT\00114256.JPG 1425408 bytes
C:\RECYCLER\NPROTECT\00114257.JPG 1466368 bytes
C:\RECYCLER\NPROTECT\00114258.JPG 323584 bytes
C:\RECYCLER\NPROTECT\00114259.JPG 1314816 bytes
C:\RECYCLER\NPROTECT\00114260.JPG 401408 bytes
C:\RECYCLER\NPROTECT\00114261.JPG 1417216 bytes
C:\RECYCLER\NPROTECT\00114262.JPG 1527808 bytes
C:\RECYCLER\NPROTECT\00114263.JPG 1708032 bytes
C:\RECYCLER\NPROTECT\00114264.JPG 1802240 bytes
C:\RECYCLER\NPROTECT\00114265.JPG 1630208 bytes
C:\RECYCLER\NPROTECT\00114266.JPG 1437696 bytes
C:\RECYCLER\NPROTECT\00114267.JPG 1720320 bytes
C:\RECYCLER\NPROTECT\00114268.JPG 1613824 bytes
C:\RECYCLER\NPROTECT\00114269.JPG 1601536 bytes
C:\RECYCLER\NPROTECT\00114270.JPG 1421312 bytes
C:\RECYCLER\NPROTECT\00114271.JPG 1716224 bytes
C:\RECYCLER\NPROTECT\00114272.JPG 1609728 bytes
C:\RECYCLER\NPROTECT\00114273.JPG 1806336 bytes
C:\RECYCLER\NPROTECT\00114274.JPG 1519616 bytes
C:\RECYCLER\NPROTECT\00114275.JPG 1703936 bytes
C:\RECYCLER\NPROTECT\00114276.JPG 1421312 bytes
C:\RECYCLER\NPROTECT\00114277.JPG 1114112 bytes
C:\RECYCLER\NPROTECT\00114278.JPG 1622016 bytes
C:\RECYCLER\NPROTECT\00114279.JPG 1282048 bytes
C:\RECYCLER\NPROTECT\00114280.JPG 1458176 bytes
C:\RECYCLER\NPROTECT\00114281.JPG 1716224 bytes
C:\RECYCLER\NPROTECT\00114282.JPG 1617920 bytes
C:\RECYCLER\NPROTECT\00114283.JPG 1122304 bytes
C:\RECYCLER\NPROTECT\00114284.JPG 1994752 bytes
C:\RECYCLER\NPROTECT\00114285.JPG 1081344 bytes
C:\RECYCLER\NPROTECT\00114286.JPG 1015808 bytes
C:\RECYCLER\NPROTECT\00114287.JPG 1863680 bytes
C:\RECYCLER\NPROTECT\00114288.JPG 1257472 bytes
C:\RECYCLER\NPROTECT\00114289.JPG 1916928 bytes
C:\RECYCLER\NPROTECT\00114293.ipi 16384 bytes
C:\RECYCLER\NPROTECT\00114294.mst 544768 bytes
C:\RECYCLER\NPROTECT\00114297.rbs 184320 bytes
C:\RECYCLER\NPROTECT\00114298.ipi 16384 bytes
C:\RECYCLER\NPROTECT\00114299.mst 544768 bytes
C:\RECYCLER\NPROTECT\00114302.edb 1056768 bytes
C:\RECYCLER\NPROTECT\00114303.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00114304.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00114306.edb 65536 bytes
C:\RECYCLER\NPROTECT\00114314 4096 bytes
C:\RECYCLER\NPROTECT\00114315 4096 bytes
C:\RECYCLER\NPROTECT\00114334.ldb 64 bytes
C:\RECYCLER\NPROTECT\00114338.HTM 32768 bytes
C:\RECYCLER\NPROTECT\00114341.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00114342.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00114343.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00114344.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114347.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114349.MOZ 584 bytes
C:\RECYCLER\NPROTECT\00114351.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114352.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114353.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114354.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114355.SQL 1171456 bytes
C:\RECYCLER\NPROTECT\00114356.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114357.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114358.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114359.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114360.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114361.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114363.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114364.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114365.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114366.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00114367.MAP 4096 bytes
C:\RECYCLER\NPROTECT\00114369.edb 65536 bytes
C:\RECYCLER\NPROTECT\00114380.cab 16384 bytes
C:\RECYCLER\NPROTECT\00114391.edb 65536 bytes
C:\RECYCLER\NPROTECT\00114394 4096 bytes
C:\RECYCLER\NPROTECT\00114395 4096 bytes
C:\RECYCLER\NPROTECT\00114415.ldb 64 bytes
C:\RECYCLER\NPROTECT\00114418.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00114419.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00114420.HTM 8192 bytes
C:\RECYCLER\NPROTECT\00114425.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114426.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114427.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114428.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114429.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114435.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114439.edb 1056768 bytes
C:\RECYCLER\NPROTECT\00114443.SQL 749568 bytes
C:\RECYCLER\NPROTECT\00114444.JS 4096 bytes
C:\RECYCLER\NPROTECT\00114445.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00114447.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00114448.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114449.REG 4096 bytes
C:\RECYCLER\NPROTECT\00114450.REG 4096 bytes
C:\RECYCLER\NPROTECT\00114452.LNK 4096 bytes
C:\RECYCLER\NPROTECT\00114453.INF 4096 bytes
C:\RECYCLER\NPROTECT\00114456.MOZ 408 bytes
C:\RECYCLER\NPROTECT\00114457.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114458.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114459.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00114460.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114462.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114463.MOZ 12288 bytes
C:\RECYCLER\NPROTECT\00114464.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114465.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114466.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114467.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114468.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114469.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114470.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114471.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114472.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114477.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114479.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114480.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114481.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114482.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114483.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114484.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114485.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114486.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114487.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114488.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114489.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114491.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114492.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114493.MOZ 16384 bytes
C:\RECYCLER\NPROTECT\00114494.MOZ 4096 bytes
C:\RECYCLER\NPROTECT\00114495.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00114500.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00114503.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00114504.ini 120 bytes
C:\RECYCLER\NPROTECT\00114505.dat 98304 bytes
C:\RECYCLER\NPROTECT\00114506.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114507.dat 114688 bytes
C:\RECYCLER\NPROTECT\00114508.dat 180224 bytes
C:\RECYCLER\NPROTECT\00114509.dat 131072 bytes
C:\RECYCLER\NPROTECT\00114510.dat 98304 bytes
C:\RECYCLER\NPROTECT\00114511.dat 114688 bytes
C:\RECYCLER\NPROTECT\00114512.dat 196608 bytes
C:\RECYCLER\NPROTECT\00114513.dat 65536 bytes
C:\RECYCLER\NPROTECT\00114514.dat 98304 bytes
C:\RECYCLER\NPROTECT\00114515.dat 114688 bytes
C:\RECYCLER\NPROTECT\00114516.dat 262144 bytes
C:\RECYCLER\NPROTECT\00114517.dat 147456 bytes
C:\RECYCLER\NPROTECT\00114518.dat 147456 bytes
C:\RECYCLER\NPROTECT\00114519.dat 114688 bytes
C:\RECYCLER\NPROTECT\00114520.dat 163840 bytes
C:\RECYCLER\NPROTECT\00114521.dat 98304 bytes
C:\RECYCLER\NPROTECT\00114522.dat 147456 bytes
C:\RECYCLER\NPROTECT\00114523.dat 114688 bytes
C:\RECYCLER\NPROTECT\00114524.dat 229376 bytes
C:\RECYCLER\NPROTECT\00114525.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114526.dat 65536 bytes
C:\RECYCLER\NPROTECT\00114527.dat 98304 bytes
C:\RECYCLER\NPROTECT\00114528.dat 147456 bytes
C:\RECYCLER\NPROTECT\00114529.dat 131072 bytes
C:\RECYCLER\NPROTECT\00114530.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114531.dat 147456 bytes
C:\RECYCLER\NPROTECT\00114532.dat 81920 bytes
C:\RECYCLER\NPROTECT\00114533.dat 131072 bytes
C:\RECYCLER\NPROTECT\00114534.dat 114688 bytes
C:\RECYCLER\NPROTECT\00114535.dat 81920 bytes
C:\RECYCLER\NPROTECT\00114536.dat 131072 bytes
C:\RECYCLER\NPROTECT\00114537.dat 114688 bytes
C:\RECYCLER\NPROTECT\00114538.dat 147456 bytes
C:\RECYCLER\NPROTECT\00114539.dat 81920 bytes
C:\RECYCLER\NPROTECT\00114540.dat 98304 bytes
C:\RECYCLER\NPROTECT\00114541.dat 65536 bytes
C:\RECYCLER\NPROTECT\00114542.dat 131072 bytes
C:\RECYCLER\NPROTECT\00114543.dat 131072 bytes
C:\RECYCLER\NPROTECT\00114544.dat 131072 bytes
C:\RECYCLER\NPROTECT\00114545.dat 131072 bytes
C:\RECYCLER\NPROTECT\00114546.dat 98304 bytes
C:\RECYCLER\NPROTECT\00114547.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114548.dat 81920 bytes
C:\RECYCLER\NPROTECT\00114549.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114550.dat 65536 bytes
C:\RECYCLER\NPROTECT\00114551.dat 65536 bytes
C:\RECYCLER\NPROTECT\00114552.dat 98304 bytes
C:\RECYCLER\NPROTECT\00114553.dat 81920 bytes
C:\RECYCLER\NPROTECT\00114554.dat 81920 bytes
C:\RECYCLER\NPROTECT\00114555.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114556.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114557.dat 98304 bytes
C:\RECYCLER\NPROTECT\00114558.dat 98304 bytes
C:\RECYCLER\NPROTECT\00114559.dat 229376 bytes
C:\RECYCLER\NPROTECT\00114560.dat 65536 bytes
C:\RECYCLER\NPROTECT\00114561.dat 81920 bytes
C:\RECYCLER\NPROTECT\00114562.dat 65536 bytes
C:\RECYCLER\NPROTECT\00114563.dat 229376 bytes
C:\RECYCLER\NPROTECT\00114564.dat 163840 bytes
C:\RECYCLER\NPROTECT\00114565.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114566.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114567.dat 65536 bytes
C:\RECYCLER\NPROTECT\00114568.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114569.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114570.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114571.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114572.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114573.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114574.dat 114688 bytes
C:\RECYCLER\NPROTECT\00114575.dat 65536 bytes
C:\RECYCLER\NPROTECT\00114576.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114577.dat 98304 bytes
C:\RECYCLER\NPROTECT\00114578.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114579.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114580.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114581.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114582.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114583.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114584.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114585.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114586.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114587.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114588.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114589.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114590.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114591.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114592.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114593.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114594.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114595.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114596.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114597.dat 49152 bytes
C:\RECYCLER\NPROTECT\00114598.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114599.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114600.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114601.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114602.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114603.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114604.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114605.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114606.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114607.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114608.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114609.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114610.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114611.dat 32768 bytes
C:\RECYCLER\NPROTECT\00114612.DMP 65536 bytes
C:\RECYCLER\NPROTECT\00114613.DMP 65536 bytes
C:\RECYCLER\NPROTECT\00114614.DMP 65536 bytes
C:\RECYCLER\NPROTECT\00114615.LOG 1015808 bytes
C:\RECYCLER\NPROTECT\00114616.log 4096 bytes
C:\RECYCLER\NPROTECT\00114617.log 8 bytes
C:\RECYCLER\NPROTECT\00114618.log 12288 bytes
C:\RECYCLER\NPROTECT\00114619.log 40960 bytes
C:\RECYCLER\NPROTECT\00114620.log 208 bytes
C:\RECYCLER\NPROTECT\00114621.log 45056 bytes
C:\RECYCLER\NPROTECT\00114622.log 49152 bytes
C:\RECYCLER\NPROTECT\00114623.lo_ 69632 bytes
C:\RECYCLER\NPROTECT\00114624.lo_ 69632 bytes
C:\RECYCLER\NPROTECT\00114625.lo_ 69632 bytes
C:\RECYCLER\NPROTECT\00114626.log 32530432 bytes
C:\RECYCLER\NPROTECT\00114627.dmp 8192 bytes
C:\RECYCLER\NPROTECT\00114628.log 368 bytes
C:\RECYCLER\NPROTECT\00114629.LOG 8192 bytes
C:\RECYCLER\NPROTECT\00114630.log 4096 bytes
C:\RECYCLER\NPROTECT\00114631.log 4096 bytes
C:\RECYCLER\NPROTECT\00114632.log 680 bytes
C:\RECYCLER\NPROTECT\00114633.log 122880 bytes
C:\RECYCLER\NPROTECT\00114634.log 8192 bytes
C:\RECYCLER\NPROTECT\00114635.old 4096 bytes
C:\RECYCLER\NPROTECT\00114639.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00114641.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00114645.bat 4096 bytes
C:\RECYCLER\NPROTECT\00114660 176 bytes
C:\RECYCLER\NPROTECT\00114664 216 bytes
C:\RECYCLER\NPROTECT\00114666.BAT 280 bytes
C:\RECYCLER\NPROTECT\00114672.hiv 8192 bytes
C:\RECYCLER\NPROTECT\00114673.cf 4096 bytes
C:\RECYCLER\NPROTECT\00114676.hiv 8192 bytes
C:\RECYCLER\NPROTECT\00114677.cf 80 bytes
C:\RECYCLER\NPROTECT\00114691.MOZ 20480 bytes
C:\RECYCLER\NPROTECT\00114693.JS 20480 bytes
C:\RECYCLER\NPROTECT\00114694.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00114695.MOZ 28672 bytes
C:\RECYCLER\NPROTECT\00114696.MOZ 8192 bytes
C:\RECYCLER\NPROTECT\00114711.CF 264 bytes
C:\RECYCLER\NPROTECT\00114712.bat 4096 bytes
C:\RECYCLER\NPROTECT\00114713.VBS 136 bytes
C:\RECYCLER\NPROTECT\00114714.CF 4096 bytes
C:\RECYCLER\NPROTECT\00114715.CFE 40960 bytes
C:\RECYCLER\NPROTECT\00114717.bat 8192 bytes
C:\RECYCLER\NPROTECT\00114718.CF 4096 bytes
C:\RECYCLER\NPROTECT\00114719.CF 416 bytes
C:\RECYCLER\NPROTECT\00114721.CF 256 bytes
C:\RECYCLER\NPROTECT\00114722.CF 8192 bytes
C:\RECYCLER\NPROTECT\00114723.SYS 8192 bytes
C:\RECYCLER\NPROTECT\00114781.hiv 8192 bytes
C:\RECYCLER\NPROTECT\00114782.cf 432 bytes
C:\RECYCLER\NPROTECT\00114789.cf 4096 bytes
C:\RECYCLER\NPROTECT\00114790.cf 4096 bytes
C:\RECYCLER\NPROTECT\00114792.cf 112 bytes
C:\RECYCLER\NPROTECT\00114796.cf 208 bytes
C:\RECYCLER\NPROTECT\00114801.cf 8192 bytes
C:\RECYCLER\NPROTECT\00114802 8192 bytes
C:\RECYCLER\NPROTECT\00114806.cf 8 bytes
C:\RECYCLER\NPROTECT\00114817.cf 4096 bytes
C:\RECYCLER\NPROTECT\00114818.txt 4096 bytes
C:\RECYCLER\NPROTECT\00114819.cf 86016 bytes
C:\RECYCLER\NPROTECT\00114820.cf 12288 bytes
C:\RECYCLER\NPROTECT\00114821.CF 4096 bytes
C:\RECYCLER\NPROTECT\00114822.CF 224 bytes
C:\RECYCLER\NPROTECT\00114823.cf 8192 bytes
C:\RECYCLER\NPROTECT\00114824.CF 304 bytes
C:\RECYCLER\NPROTECT\00114825.cf 8192 bytes
C:\RECYCLER\NPROTECT\00114826.cf 8192 bytes
C:\RECYCLER\NPROTECT\00114827.cf 704 bytes
C:\RECYCLER\NPROTECT\00114829.bat 65536 bytes
C:\RECYCLER\NPROTECT\00114831.cf 104 bytes
C:\RECYCLER\NPROTECT\00114833.cf 104 bytes
C:\RECYCLER\NPROTECT\00114836.BAT 4096 bytes
C:\RECYCLER\NPROTECT\00114837.cf 4096 bytes
C:\RECYCLER\NPROTECT\00114838 4096 bytes
C:\RECYCLER\NPROTECT\00114839.cf 4096 bytes
C:\RECYCLER\NPROTECT\00114844 336 bytes
C:\RECYCLER\NPROTECT\00114846.cf 4096 bytes
C:\RECYCLER\NPROTECT\00114847.cf 456 bytes
C:\RECYCLER\NPROTECT\00114849.txt 168 bytes
C:\RECYCLER\NPROTECT\00114850 272 bytes
C:\RECYCLER\NPROTECT\00114852.txt 120 bytes
C:\RECYCLER\NPROTECT\00114853 128 bytes
C:\RECYCLER\NPROTECT\00114854.cf 208 bytes
C:\RECYCLER\NPROTECT\00114855.cf 88 bytes
C:\RECYCLER\NPROTECT\00114856.cf 88 bytes
C:\RECYCLER\NPROTECT\00114857.cf 96 bytes
C:\RECYCLER\NPROTECT\00114858.cf 88 bytes
C:\RECYCLER\NPROTECT\00114859.cf 88 bytes
C:\RECYCLER\NPROTECT\00114860.cf 96 bytes
C:\RECYCLER\NPROTECT\00114861.cf 88 bytes
C:\RECYCLER\NPROTECT\00114862.cf 96 bytes
C:\RECYCLER\NPROTECT\00114863.cf 96 bytes
C:\RECYCLER\NPROTECT\00114864.cf 88 bytes
C:\RECYCLER\NPROTECT\00114865.cf 72 bytes
C:\RECYCLER\NPROTECT\00114866.cf 264 bytes
C:\RECYCLER\NPROTECT\00114867.cf 88 bytes
C:\RECYCLER\NPROTECT\00114868.cf 96 bytes
C:\RECYCLER\NPROTECT\00114869.cf 88 bytes
C:\RECYCLER\NPROTECT\00114870.cf 96 bytes
C:\RECYCLER\NPROTECT\00114871.cf 88 bytes
C:\RECYCLER\NPROTECT\00114872.cf 184 bytes
C:\RECYCLER\NPROTECT\00114873.cf 176 bytes
C:\RECYCLER\NPROTECT\00114874.cf 224 bytes
C:\RECYCLER\NPROTECT\00114875.cf 176 bytes
C:\RECYCLER\NPROTECT\00114876.cf 256 bytes
C:\RECYCLER\NPROTECT\00114877.cf 176 bytes
C:\RECYCLER\NPROTECT\00114878.cf 8192 bytes
C:\RECYCLER\NPROTECT\00114879.cf 88 bytes
C:\RECYCLER\NPROTECT\00114880.cf 80 bytes
C:\RECYCLER\NPROTECT\00114881.cf 88 bytes
C:\RECYCLER\NPROTECT\00114882.cf 88 bytes
C:\RECYCLER\NPROTECT\00114883.cf 96 bytes
C:\RECYCLER\NPROTECT\00114884.cf 104 bytes
C:\RECYCLER\NPROTECT\00114885.cf 96 bytes
C:\RECYCLER\NPROTECT\00114887.cf 96 bytes
C:\RECYCLER\NPROTECT\00114888.cf 96 bytes
C:\RECYCLER\NPROTECT\NPROTECT.LOG 647168 bytes

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 1555


********************************************************************

Completion time: 2007-05-15 12:45:43
C:\ComboFix-quarantined-files.txt ... 2007-05-15 12:45
bobdole118 is offline  
Old 05-15-2007, 03:23 PM   #8
Guest
 
Join Date: Feb 2007
Posts: 14
OS:



Kapersky log:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Tuesday, May 15, 2007 3:17:02 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 15/05/2007
Kaspersky Anti-Virus database records: 321138
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 107520
Number of viruses found: 36
Number of infected objects: 191 / 0
Number of suspicious objects: 2
Duration of the scan process: 02:00:10

Infected Object Name / Virus Name / Last Action
C:\!PeperFix\Aik79H.exe Infected: Trojan-Downloader.Win32.VB.em skipped
C:\!PeperFix\Ezg1p5.exe Infected: Trojan-Downloader.Win32.VB.em skipped
C:\!PeperFix\Fmx274e8.exe Infected: Trojan-Downloader.Win32.VB.em skipped
C:\!PeperFix\LnapxT3.exe Infected: Trojan-Downloader.Win32.VB.em skipped
C:\!PeperFix\MukO8r9.exe Infected: Trojan-Downloader.Win32.VB.em skipped
C:\!PeperFix\OhvTT.exe Infected: Trojan-Downloader.Win32.VB.em skipped
C:\!PeperFix\Tovs.exe Infected: Trojan-Downloader.Win32.VB.em skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\DyFuCAInternetOptimizer9.zip/optimize.exe Suspicious: Password-protected-EXE skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\DyFuCAInternetOptimizer9.zip ZIP: suspicious - 1 skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0002/data299033.zip/Setup.exe Infected: not-a-virus:AdWare.Win32.IEDriver.b skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0002/data299033.zip/Files/3.exe Infected: not-a-virus:AdWare.Win32.IEDriver.b skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0002/data299033.zip/Files/5.exe Infected: not-a-virus:AdWare.Win32.IEDriver.b skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0002/data299033.zip/Files/IEDRIVER.EXE Infected: Trojan-Downloader.Win32.Turown.h skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0002/data299033.zip/Files/ieupdate.exe Infected: Trojan-Downloader.Win32.Turown.b skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0002/data299033.zip/Files/td.exe Infected: Trojan-Downloader.Win32.Turown.a skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0002/data299033.zip Infected: Trojan-Downloader.Win32.Turown.a skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0002 Infected: Trojan-Downloader.Win32.Turown.a skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0003 Infected: not-a-virus:AdWare.Win32.180Solutions skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0004/data0003 Infected: not-a-virus:AdWare.Win32.Connector skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0004/data0004 Infected: not-a-virus:AdWare.Win32.Connector skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0004 Infected: not-a-virus:AdWare.Win32.Connector skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0006/data0001.cab/Save.exe Infected: not-a-virus:AdWare.Win32.SaveNow.t skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0006/data0001.cab/SaveUninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.af skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0006/data0001.cab Infected: not-a-virus:AdWare.Win32.SaveNow.af skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0006/data0002.cab/Sync.exe Infected: not-a-virus:AdWare.Win32.SaveNow.v skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0006/data0002.cab/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.v skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0006/data0002.cab Infected: not-a-virus:AdWare.Win32.SaveNow.v skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0006 Infected: not-a-virus:AdWare.Win32.SaveNow.v skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0007/data0120 Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0007 Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0008 Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0009/data0004 Infected: not-a-virus:AdWare.Win32.SideSearch.l skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0009 Infected: not-a-virus:AdWare.Win32.SideSearch.l skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0008 Infected: not-a-virus:AdWare.Win32.IGetNet skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0009 Infected: Backdoor.Win32.Ruledor.c skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe/data0010 Infected: Trojan-Downloader.Win32.Poplite.a skipped
C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe NSIS: infected - 27 skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0002/data299033.zip/Setup.exe Infected: not-a-virus:AdWare.Win32.IEDriver.b skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0002/data299033.zip/Files/3.exe Infected: not-a-virus:AdWare.Win32.IEDriver.b skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0002/data299033.zip/Files/5.exe Infected: not-a-virus:AdWare.Win32.IEDriver.b skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0002/data299033.zip/Files/IEDRIVER.EXE Infected: Trojan-Downloader.Win32.Turown.h skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0002/data299033.zip/Files/ieupdate.exe Infected: Trojan-Downloader.Win32.Turown.b skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0002/data299033.zip/Files/td.exe Infected: Trojan-Downloader.Win32.Turown.a skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0002/data299033.zip Infected: Trojan-Downloader.Win32.Turown.a skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0002 Infected: Trojan-Downloader.Win32.Turown.a skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0003 Infected: not-a-virus:AdWare.Win32.180Solutions skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0004/data0003 Infected: not-a-virus:AdWare.Win32.Connector skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0004/data0004 Infected: not-a-virus:AdWare.Win32.Connector skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0004 Infected: not-a-virus:AdWare.Win32.Connector skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0006/data0001.cab/Save.exe Infected: not-a-virus:AdWare.Win32.SaveNow.t skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0006/data0001.cab/SaveUninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.af skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0006/data0001.cab Infected: not-a-virus:AdWare.Win32.SaveNow.af skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0006/data0002.cab/Sync.exe Infected: not-a-virus:AdWare.Win32.SaveNow.v skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0006/data0002.cab/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.v skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0006/data0002.cab Infected: not-a-virus:AdWare.Win32.SaveNow.v skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0006 Infected: not-a-virus:AdWare.Win32.SaveNow.v skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0007/data0120 Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0007 Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0008 Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0009/data0004 Infected: not-a-virus:AdWare.Win32.SideSearch.l skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0009 Infected: not-a-virus:AdWare.Win32.SideSearch.l skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0008 Infected: not-a-virus:AdWare.Win32.IGetNet skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0009 Infected: Backdoor.Win32.Ruledor.c skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe/data0010 Infected: Trojan-Downloader.Win32.Poplite.a skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe NSIS: infected - 27 skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\memwatcher.exe/data0004 Infected: Trojan-Downloader.Win32.VB.q skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\memwatcher.exe/data0006 Infected: Backdoor.Win32.VB.nb skipped
C:\Documents and Settings\Default User\My Documents\Data\Data\memwatcher.exe NSIS: infected - 2 skipped
C:\Documents and Settings\Default User\My Documents\Data\memwatcher.exe/data0004 Infected: Trojan-Downloader.Win32.VB.q skipped
C:\Documents and Settings\Default User\My Documents\Data\memwatcher.exe/data0006 Infected: Backdoor.Win32.VB.nb skipped
C:\Documents and Settings\Default User\My Documents\Data\memwatcher.exe NSIS: infected - 2 skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Wesley Jung\Application Data\Mozilla\Firefox\Profiles\4872brpi.default\cert8.db Object is locked skipped
C:\Documents and Settings\Wesley Jung\Application Data\Mozilla\Firefox\Profiles\4872brpi.default\formhistory.dat Object is locked skipped
C:\Documents and Settings\Wesley Jung\Application Data\Mozilla\Firefox\Profiles\4872brpi.default\history.dat Object is locked skipped
C:\Documents and Settings\Wesley Jung\Application Data\Mozilla\Firefox\Profiles\4872brpi.default\key3.db Object is locked skipped
C:\Documents and Settings\Wesley Jung\Application Data\Mozilla\Firefox\Profiles\4872brpi.default\parent.lock Object is locked skipped
C:\Documents and Settings\Wesley Jung\Application Data\Mozilla\Firefox\Profiles\4872brpi.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Wesley Jung\Application Data\Mozilla\Firefox\Profiles\4872brpi.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Wesley Jung\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Wesley Jung\Desktop\hostsbak.bak Infected: Trojan.Win32.Qhost.ha skipped
C:\Documents and Settings\Wesley Jung\Desktop\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\ApplicationHistory\hpqimzone.exe.3204510e.ini.inuse Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\Mozilla\Firefox\Profiles\4872brpi.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\Mozilla\Firefox\Profiles\4872brpi.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\Mozilla\Firefox\Profiles\4872brpi.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Application Data\Mozilla\Firefox\Profiles\4872brpi.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\History\History.IE5\MSHist012007051520070516\index.dat Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Temp\~DFA45F.tmp Object is locked skipped
C:\Documents and Settings\Wesley Jung\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Wesley Jung\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Wesley Jung\NTUSER.DAT.LOG Object is locked skipped
C:\Program Files\Norton AntiVirus2003\AVApp.log Object is locked skipped
C:\Program Files\Norton AntiVirus2003\AVError.log Object is locked skipped
C:\Program Files\Norton AntiVirus2003\AVVirus.log Object is locked skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\03770A97.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\06281688.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\06353E7A.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\064B6461.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\06556256.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\0D7A7A64.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\0DB536FE Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\0E947A5A.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\0FE45EE8.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\16D873CC.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\16DB1DC8.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\16E51BBE.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\17096996.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\172D376E.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\17363564.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\173D095C.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\17470752.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\174D5B4B.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\176B552A.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\1785250D.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\17924CFF.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\179C4AF4.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\17B61AD8.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\17D314B7.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\17DD12AC.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\27F54907.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\2AD4233C.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\340F6D24.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\34124D09.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\3B8410FE.htm Infected: Trojan-Downloader.JS.Small.d skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\3B8E0EF3.js Infected: Trojan-Downloader.VBS.Iwill.u skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\3DFD729A.html Infected: Trojan-Downloader.JS.Small.i skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\3E001C96.php Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\3FCC06DE Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\3FEB0E98.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\3FFF0A83.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\40055E7C.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\401C0463.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\4030004D.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\40332A49.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\40534E25.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\405A221E.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\40642013.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\406E1E09.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\408E41E5.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\40AC3BC4.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\40B539BA.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\40BF37AF.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\40D90792.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\40FA2B6E.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\410A7D5C.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\41147B51.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\41A36222.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\42446B6F Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\425F3B52 Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\42606383.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\4262654F Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\42790B36 Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\4290311D Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\42960515 Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\42AA0100 Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\42C450E3 Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\42CE4ED8 Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\42D422D1 Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\42DB76CA Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\42E14AC3 Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\42F870AA Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\430C6C94 Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\4312408D Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\43191486 Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\43303A6C Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\43466053 Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\434D344C Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\440F09A9.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\44F05AB1.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\474658DF.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\47766628.wav Infected: EICAR-Test-File skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\4A8948FB.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\4AB36ACC.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\4AC766B6.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\4ACA10B3.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\4BEC3C34 Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\5140486A.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\587A1594.js Infected: Trojan-Downloader.JS.Small.d skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\5D287B04.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\5F5C2CE4.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\5F6C7ED2.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\5F8D22AE.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\5F9376A7.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\63CC5166 Infected: Trojan-Downloader.Win32.Wintrim.w skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\63D07B63 Infected: Trojan-Downloader.Win32.Wintrim.w skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\6E09182A.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\70C75B25.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\73471B3A Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\7354432B Infected: Exploit.JS.ActiveXComponent skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\73713D0B.exe Infected: Virus.Win32.Parite.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\7823046E.exe Infected: Trojan-Downloader.Win32.Nex.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\783A2A55.exe Infected: Trojan-Downloader.Win32.Nex.b skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\78B2591D Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus2003\Quarantine\7A2D5F7C Infected: Exploit.HTML.Mht skipped
C:\Program Files\WinBudget\bin\crap.1168999843.old/EXE-file Infected: not-a-virus:AdWare.Win32.BHO.by skipped
C:\Program Files\WinBudget\bin\crap.1168999843.old Embedded EXE: infected - 1 skipped
C:\Program Files\WinBudget\bin\matrix.dll Infected: not-a-virus:AdWare.Win32.BHO.by skipped
C:\System Volume Information\_restore{719D3ECB-C83F-47C8-93BB-D3DC3689439E}\RP1094\A0119334.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{719D3ECB-C83F-47C8-93BB-D3DC3689439E}\RP1094\A0119334.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{719D3ECB-C83F-47C8-93BB-D3DC3689439E}\RP1094\A0119334.exe RarSFX: infected - 2 skipped
C:\System Volume Information\_restore{719D3ECB-C83F-47C8-93BB-D3DC3689439E}\RP1094\A0119334.exe PE_Patch.UPX: infected - 2 skipped
C:\System Volume Information\_restore{719D3ECB-C83F-47C8-93BB-D3DC3689439E}\RP1098\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\_OTMoveIt\MovedFiles\Overpro-347.exe/data0005 Infected: not-a-virus:AdWare.Win32.AdSrve.b skipped
C:\_OTMoveIt\MovedFiles\Overpro-347.exe/data0007 Infected: not-a-virus:AdWare.Win32.AdSrve.a skipped
C:\_OTMoveIt\MovedFiles\Overpro-347.exe/data0010 Infected: Trojan.Win32.KillApp.f skipped
C:\_OTMoveIt\MovedFiles\Overpro-347.exe/data0011 Infected: not-a-virus:AdWare.Win32.AdSrve.a skipped
C:\_OTMoveIt\MovedFiles\Overpro-347.exe/data0012 Infected: Trojan.Win32.VB.od skipped
C:\_OTMoveIt\MovedFiles\Overpro-347.exe NSIS: infected - 5 skipped
C:\_OTMoveIt\MovedFiles\WINDOWS\emsw.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\_OTMoveIt\MovedFiles\WINDOWS\NDNuninstall5_48.exe Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
C:\_OTMoveIt\MovedFiles\WINDOWS\System32\6to4svc1.exe Infected: not-a-virus:AdWare.Win32.AdSrve.b skipped
C:\_OTMoveIt\MovedFiles\WINDOWS\System32\certmgr6.exe Infected: not-a-virus:AdWare.Win32.AdSrve.a skipped
C:\_OTMoveIt\MovedFiles\WINDOWS\System32\cfgbkend.exe Infected: not-a-virus:AdWare.Win32.AdSrve.a skipped
C:\_OTMoveIt\MovedFiles\WINDOWS\woinstall.exe/WISE0001.BIN Infected: not-a-virus:AdWare.Win32.EZula.ak skipped
C:\_OTMoveIt\MovedFiles\WINDOWS\woinstall.exe WiseSFX: infected - 1 skipped

Scan process completed.


Hijackthis scan:

Logfile of HijackThis v1.99.1
Scan saved at 3:23:05 PM, on 5/15/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton AntiVirus2003\navapsvc.exe
C:\Program Files\Norton AntiVirus2003\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus2003\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus2003\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {58172624-85DD-4482-9E64-02ADCA637E96} - https://www.shizmoo.com/activex/web665.cab
O16 - DPF: {8FA9D107-547B-4DBC-9D88-FABD891EDB0A} - https://arcade.icq.com/multiplayer/odyssey_web8.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - https://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - https://us.dl1.yimg.com/download.yaho...bio5_1_4_0.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus2003\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus2003\AdvTools\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
bobdole118 is offline  
Old 05-15-2007, 08:19 PM   #9
TSF Team, Emeritus
 
Sempurna's Avatar
 
Join Date: Sep 2006
Posts: 1,302
OS: Windows XP SP2



Hi bobdole118,

You did good. Well done, and keep up the good work!

OK, letís pick up the leftovers.

First of all, please empty out the Recycle Bin and the Norton quarantine folder.

Then, please launch OTMoveIt:
  • Double-click OTMoveIt.exe to run it.
  • Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose "Copy"):

    C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe
    C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe
    C:\Documents and Settings\Default User\My Documents\Data\Data\memwatcher.exe
    C:\Documents and Settings\Default User\My Documents\Data\memwatcher.exe
    C:\Documents and Settings\Wesley Jung\Desktop\hostsbak.bak
    C:\Program Files\WinBudget\bin\crap.1168999843.old
    C:\Program Files\WinBudget\bin\matrix.dll


  • Return to OTMoveIt, right-click on the "Paste List of Files/Folders to be Moved" window and choose "Paste".
  • Click the red "MoveIt!" button.
  • Close OTMoveIt.

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose "Yes".

Please post the log from OTMoveIt, located here:

C:\_OTMoveIt\MovedFiles\mmddyyyy_hhmmss.log

Where mmddyyyy_hhmmss is the date of the tool run.


NEXT:

Please REBOOT your computer normally into Windows and post these logs in your next reply:
  1. The log from OTMoveIt.
  2. A new HijackThis log.

How are things running now? Please let me know of any problems that still persist.
Sempurna is offline  
Old 05-15-2007, 08:32 PM   #10
Guest
 
Join Date: Feb 2007
Posts: 14
OS:



Hey,
Here are the two logs as requested. Thanks again!


Moveit log:

C:\Documents and Settings\Default User\My Documents\Data\all_files2.exe moved successfully.
C:\Documents and Settings\Default User\My Documents\Data\Data\all_files2.exe moved successfully.
C:\Documents and Settings\Default User\My Documents\Data\Data\memwatcher.exe moved successfully.
C:\Documents and Settings\Default User\My Documents\Data\memwatcher.exe moved successfully.
C:\Documents and Settings\Wesley Jung\Desktop\hostsbak.bak moved successfully.
C:\Program Files\WinBudget\bin\crap.1168999843.old moved successfully.
C:\Program Files\WinBudget\bin\matrix.dll NOT unregistered.
C:\Program Files\WinBudget\bin\matrix.dll moved successfully.

Created on 05/15/2007 20:26:06


HJT Log:

Logfile of HijackThis v1.99.1
Scan saved at 8:31:22 PM, on 5/15/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton AntiVirus2003\navapsvc.exe
C:\Program Files\Norton AntiVirus2003\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus2003\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus2003\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {58172624-85DD-4482-9E64-02ADCA637E96} - https://www.shizmoo.com/activex/web665.cab
O16 - DPF: {8FA9D107-547B-4DBC-9D88-FABD891EDB0A} - https://arcade.icq.com/multiplayer/odyssey_web8.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - https://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - https://us.dl1.yimg.com/download.yaho...bio5_1_4_0.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus2003\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus2003\AdvTools\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
bobdole118 is offline  
Old 05-15-2007, 08:56 PM   #11
TSF Team, Emeritus
 
Sempurna's Avatar
 
Join Date: Sep 2006
Posts: 1,302
OS: Windows XP SP2



Hi bobdole118,

You're most welcome, bobdole118.

The HJT log appears to be clean. Any persistent problems or suspicious behaviour on your sister's machine that I should know about?
Sempurna is offline  
Old 05-16-2007, 03:48 PM   #12
Guest
 
Join Date: Feb 2007
Posts: 14
OS:



I don't think so, it seems to be running fine. For my computer, is there any kind of virus or malware that would limit the connection to my router to 10 Mbps instead of 100 Mbps like it used to be? I'm trying to discern if it is hardware or virus related, but ive gone through just about all the hardware options i can think of.
bobdole118 is offline  
Old 05-16-2007, 09:25 PM   #13
TSF Team, Emeritus
 
Sempurna's Avatar
 
Join Date: Sep 2006
Posts: 1,302
OS: Windows XP SP2



No virus or malware will limit your router connection speed. Are you on a wireless router? If you are, the speed would be 10 Mbps.

If you are connected directly to the router via a hardline, then the speed would be 100 Mbps.
Sempurna is offline  
Old 05-17-2007, 08:37 AM   #14
Guest
 
Join Date: Feb 2007
Posts: 14
OS:



yeah im connected directly, but its still at 10 Mbps. I guess ill keep looking for a hardware problem. Thanks alot!
bobdole118 is offline  
Old 05-17-2007, 08:55 PM   #15
TSF Team, Emeritus
 
Sempurna's Avatar
 
Join Date: Sep 2006
Posts: 1,302
OS: Windows XP SP2



You're most welcome.

You could bring your problem over to the networking forum at TSF. Perhaps they gurus there would be able to help you. Give them a link to this thread so they know that it is not malware that is causing your problem.
Sempurna is offline  
 

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar Threads
Thread Thread Starter Forum Replies Last Post
My mouse coursor is going wild.
The computer mouse coursor is going crazy please help. Here is my hijackthis log : Logfile of HijackThis v1.99.1 Scan saved at 16:58:21, on 05/12/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes:...
hfb Inactive Malware Help Topics 9 12-16-2006 04:38 PM
Significant decrease in performance
Recently I've noticed a significant decrease in my computer's performance. I've already gotten rid of ismini.exe, but I still notice lagging when performing small tasks. Even opening a folder sometimes becomes slow. I also notice a dock icon that says I have been infected, but I think it is part of...
Notoriety Inactive Malware Help Topics 18 12-03-2006 12:17 PM
W32.Alcra.B Removal Help please
Hello Spywareinfo I do not know what is triggering this virus/trojan, but it seems like everytime after i update my windows and do a restart, my Norton keeps popping up like forever indicating that theres an infected file in my C:/Windows/Temp folder I go into that folder and i see that...
mamaboyjames Inactive Malware Help Topics 9 11-05-2005 06:51 PM
HJT log help, trojans
Here is a log. My girlfrinds brother somehow got a trojan on their pc, so any help on how to remove them would be greatly appreciated. I ran ewido security suite in safe mode, then ran hijackthis. Logfile of HijackThis v1.99.1 Scan saved at 10:02:34 PM, on 10/2/2005 Platform: Windows XP...
Milamber Resolved HJT Threads 11 10-11-2005 01:44 PM
O1 - Hosts will not go away!
I am working on my relative's computer and they have O1 - Hosts: 69.20.16.183 auto.search.msn.com, O1 - Hosts: 69.20.16.183 search.netscape.com, and O1 - Hosts: 69.20.16.183 ieautosearch that I can not get to go away. I've deleted them from HJT as well as going through SafeMode and they still come...
Domer06ND Resolved HJT Threads 22 05-02-2005 07:52 PM

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2
Powered by vBadvanced CMPS v3.2.3


All times are GMT -7. The time now is 12:35 PM.


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
User Alert System provided by Advanced User Tagging v3.1.0 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Copyright 2001 - 2018, Tech Support Forum

Windows 10 - Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts