Tech Support banner

Status
Not open for further replies.
1 - 6 of 6 Posts

·
Registered
Joined
·
4 Posts
Discussion Starter #1
I can't get rid of it. I get at least a dozen OINADSERVER pop-ups everytime I log on, then my computer freezes. I have recently updated my Windows, I've run Ad-aware and Spyware doctor (run them in safe mode as well) and the crap will not go away. Here's my latest Hijack this log. Please Please help me.

Logfile of HijackThis v1.99.1
Scan saved at 12:52:16 PM, on 11/4/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\essspk.exe
C:\WINDOWS\System32\LXSUPMON.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
C:\PROGRA~1\Snapfish\SNAPFI~1\data\xtras\mssysmgr.exe
C:\WINDOWS\system32\w?auboot.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\onbh\nacc.exe
C:\PROGRA~1\HEWLET~1\PHOTOS~1\HPSHAR~1\hpgs2wnf.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Hijack This\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (file missing)
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: (no name) - {96426D73-829D-AC13-E76C-8F7AE1EA0ECD} - C:\WINDOWS\system32\ysffpwb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\WINDOWS\Downloaded Program Files\gbieh.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [EssSpkPhone] essspk.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\System32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nsvcin] C:\Documents and Settings\Douglas.DOUGLAS-Y359TZB\n20050308.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [CXMon] "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Snapfish\SNAPFI~1\data\xtras\mssysmgr.exe
O4 - HKCU\..\Run: [Piq] C:\WINDOWS\system32\w?auboot.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe"
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKCU\..\Run: [Spet] "C:\Program Files\onbh\nacc.exe" -vt ndrv
O4 - Global Startup: Lexmark Connect.lnk = C:\Program Files\Lexmark\Connect\Lexmark Connect.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm97364US
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {528C14CD-CF9E-489C-A365-5999F17B69B9} (LightSurfUploadCtl Class) - http://pictures.sprintpcs.com/activex/LightSurfUploadControl.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/132f0aea9e1e9b0a0522/netzip/RdxIE601.cab
O16 - DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} (Blockwerx Control) - http://www.worldwinner.com/games/v47/blockwerx/blockwerx.cab
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab
O16 - DPF: {E37CB5F0-51F5-4395-A808-5FA49E399F83} (GbPluginObj Class) - https://www14.bancobrasil.com.br/plugin/GbPluginBb.cab
O16 - DPF: {F229AB32-7BF9-4225-B78F-B4680AE6FC23} (Snapfish File Upload ActiveX Control) - http://www.snapfish.com/SnapfishUpload.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O20 - Winlogon Notify: ThemeManager - C:\WINDOWS\system32\fcsrch.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
 

·
TSF Security Team, Emeritus
Joined
·
6,962 Posts
Hi and Welcome to TSF

Before attacking an adware/spyware problem with hijackthis make sure you have already run the following tools. Download and update the databases on each program before running.

Also make sure you are using the the latest version (1.99.1) of HijackThis and it's installed in it's own folder on the root drive. (C:\HJT)

Download, install & launch - Webroot SpySweeper (Trial) (8.3 MB)

When SpySweeper starts, please accept any prompts to update definitions.

Then configure it as followed:
  • From the left pane, click Options
  • Select the Sweep Options tab & ensure the following are ticked:
    • Sweep Memory
    • Sweep Registry
    • Sweep Cookies
    • Sweep All Users accounts
    • Do Not Sweep System Restore Folder
    • Enable Direct Disk Sweeping
    • Sweep For Rootkits
  • After that's done, select Sweep from the left pane & click on the Start button
  • Allow Spysweeper to reboot your machine to remove the infected files.
After rebooting, launch SpySweeper & select Results from the left pane
Click the 'Session Log' tab & choose Save to File to create a log.

Post that in your next reply along with a new HJT log.
 

·
Registered
Joined
·
4 Posts
Discussion Starter #3
Ok now what?

So I've now downloaded and updated everything, here are my logs.

Logfile of HijackThis v1.99.1
Scan saved at 2:49:42 PM, on 11/8/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\essspk.exe
C:\WINDOWS\System32\LXSUPMON.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\PROGRA~1\Snapfish\SNAPFI~1\data\xtras\mssysmgr.exe
C:\WINDOWS\system32\w?auboot.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\onbh\nacc.exe
C:\PROGRA~1\HEWLET~1\PHOTOS~1\HPSHAR~1\hpgs2wnf.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Hijack This\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: (no name) - {96426D73-829D-AC13-E76C-8F7AE1EA0ECD} - C:\WINDOWS\system32\ysffpwb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\WINDOWS\Downloaded Program Files\gbieh.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [EssSpkPhone] essspk.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\System32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [CXMon] "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Snapfish\SNAPFI~1\data\xtras\mssysmgr.exe
O4 - HKCU\..\Run: [Piq] C:\WINDOWS\system32\w?auboot.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe"
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKCU\..\Run: [Spet] "C:\Program Files\onbh\nacc.exe" -vt ndrv
O4 - Global Startup: Lexmark Connect.lnk = C:\Program Files\Lexmark\Connect\Lexmark Connect.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm97364US
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {528C14CD-CF9E-489C-A365-5999F17B69B9} (LightSurfUploadCtl Class) - http://pictures.sprintpcs.com/activex/LightSurfUploadControl.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/132f0aea9e1e9b0a0522/netzip/RdxIE601.cab
O16 - DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} (Blockwerx Control) - http://www.worldwinner.com/games/v47/blockwerx/blockwerx.cab
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab
O16 - DPF: {E37CB5F0-51F5-4395-A808-5FA49E399F83} (GbPluginObj Class) - https://www14.bancobrasil.com.br/plugin/GbPluginBb.cab
O16 - DPF: {F229AB32-7BF9-4225-B78F-B4680AE6FC23} (Snapfish File Upload ActiveX Control) - http://www.snapfish.com/SnapfishUpload.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O20 - Winlogon Notify: ThemeManager - C:\WINDOWS\system32\fcsrch.dll (file missing)
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


Ad-Aware SE Build 1.05
Logfile Created on:Wednesday, November 02, 2005 3:31:46 AM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R72 26.10.2005
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
MRU List(TAC index:0):7 total references
Tracking Cookie(TAC index:3):13 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects


11-2-2005 3:31:46 AM - Scan started. (Full System Scan)

MRU List Object Recognized!
Location: : C:\Documents and Settings\Douglas.DOUGLAS-Y359TZB\recent
Description : list of recently opened documents


MRU List Object Recognized!
Location: : software\microsoft\directdraw\mostrecentapplication
Description : most recent application to use microsoft directdraw


MRU List Object Recognized!
Location: : S-1-5-21-2052111302-1060284298-1199715987-1003\software\microsoft\internet explorer
Description : last download directory used in microsoft internet explorer


MRU List Object Recognized!
Location: : S-1-5-21-2052111302-1060284298-1199715987-1003\software\microsoft\internet explorer\typedurls
Description : list of recently entered addresses in microsoft internet explorer


MRU List Object Recognized!
Location: : S-1-5-21-2052111302-1060284298-1199715987-1003\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
Description : list of recent programs opened


MRU List Object Recognized!
Location: : S-1-5-21-2052111302-1060284298-1199715987-1003\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
Description : list of recently saved files, stored according to file extension


MRU List Object Recognized!
Location: : S-1-5-21-2052111302-1060284298-1199715987-1003\software\microsoft\windows\currentversion\explorer\recentdocs
Description : list of recent documents opened


Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ProcessID : 148
ThreadCreationTime : 11-2-2005 8:22:52 AM
BasePriority : Normal


#:2 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 224
ThreadCreationTime : 11-2-2005 8:23:04 AM
BasePriority : High


#:3 [services.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 268
ThreadCreationTime : 11-2-2005 8:23:09 AM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : services.exe

#:4 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 280
ThreadCreationTime : 11-2-2005 8:23:09 AM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : lsass.exe

#:5 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 436
ThreadCreationTime : 11-2-2005 8:23:14 AM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:6 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 560
ThreadCreationTime : 11-2-2005 8:23:18 AM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:7 [explorer.exe]
FilePath : C:\WINDOWS\
ProcessID : 748
ThreadCreationTime : 11-2-2005 8:23:29 AM
BasePriority : Normal
FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : EXPLORER.EXE

#:8 [hpgs2wnf.exe]
FilePath : C:\PROGRA~1\HEWLET~1\PHOTOS~1\HPSHAR~1\
ProcessID : 860
ThreadCreationTime : 11-2-2005 8:23:47 AM
BasePriority : Normal
FileVersion : 2,4,0,26
ProductVersion : 2,4,0,26
ProductName : hpgs2wnf Module
FileDescription : hpgs2wnf Module
InternalName : hpgs2wnf
LegalCopyright : Copyright 2001
OriginalFilename : hpgs2wnf.EXE

#:9 [ad-aware.exe]
FilePath : C:\Program Files\Lavasoft\Ad-Aware SE Personal\
ProcessID : 1428
ThreadCreationTime : 11-2-2005 8:31:21 AM
BasePriority : Normal
FileVersion : 6.2.0.206
ProductVersion : VI.Second Edition
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved

Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 7


Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 7


Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 7


Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][1].txt
Category : Data Miner
Comment : Hits:7
Value : Cookie:[email protected]/
Expires : 10-31-2008 3:46:48 PM
LastSync : Hits:7
UseCount : 0
Hits : 7

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][1].txt
Category : Data Miner
Comment : Hits:5
Value : Cookie:[email protected]/
Expires : 12-31-2020 7:00:00 PM
LastSync : Hits:5
UseCount : 0
Hits : 5

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][1].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:[email protected]/
Expires : 10-27-2025 3:42:50 PM
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][3].txt
Category : Data Miner
Comment : Hits:5
Value : Cookie:[email protected]/adrevolver/
Expires : 7-28-2008 2:08:44 AM
LastSync : Hits:5
UseCount : 0
Hits : 5

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][2].txt
Category : Data Miner
Comment : Hits:4
Value : Cookie:[email protected]/
Expires : 12-31-2009 7:00:00 PM
LastSync : Hits:4
UseCount : 0
Hits : 4

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][2].txt
Category : Data Miner
Comment : Hits:4
Value : Cookie:[email protected]/
Expires : 10-30-2010 7:00:00 PM
LastSync : Hits:4
UseCount : 0
Hits : 4

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][2].txt
Category : Data Miner
Comment : Hits:17
Value : Cookie:[email protected]/
Expires : 10-31-2010 7:00:12 PM
LastSync : Hits:17
UseCount : 0
Hits : 17

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][2].txt
Category : Data Miner
Comment : Hits:2
Value : Cookie:[email protected]/
Expires : 6-10-2022 12:05:42 AM
LastSync : Hits:2
UseCount : 0
Hits : 2

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][1].txt
Category : Data Miner
Comment : Hits:6
Value : Cookie:[email protected]/
Expires : 11-2-2006 3:18:54 AM
LastSync : Hits:6
UseCount : 0
Hits : 6

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][1].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:[email protected]/
Expires : 12-31-2037 7:00:00 PM
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][2].txt
Category : Data Miner
Comment : Hits:2
Value : Cookie:[email protected]/
Expires : 11-1-2006 7:38:46 AM
LastSync : Hits:2
UseCount : 0
Hits : 2

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][2].txt
Category : Data Miner
Comment : Hits:11
Value : Cookie:[email protected]/
Expires : 12-1-2005 7:00:12 PM
LastSync : Hits:11
UseCount : 0
Hits : 11

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][1].txt
Category : Data Miner
Comment : Hits:11
Value : Cookie:[email protected]/
Expires : 12-2-2005 3:01:38 AM
LastSync : Hits:11
UseCount : 0
Hits : 11

Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 13
Objects found so far: 20



Deep scanning and examining files (C:)
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Disk Scan Result for C:\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 20


Scanning Hosts file......
Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Hosts file scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
11 entries scanned.
New critical objects:0
Objects found so far: 20




Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 20

3:48:38 AM Scan Complete

Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:16:52.536
Objects scanned:139935
Objects identified:13
Objects ignored:0
New critical objects:13
 

·
Registered
Joined
·
4 Posts
Discussion Starter #4
Now what (pt 2)

more logs:


********
12:13 PM: | Start of Session, Tuesday, November 08, 2005 |
12:13 PM: Spy Sweeper started
12:13 PM: Sweep initiated using definitions version 567
12:13 PM: Starting Memory Sweep
12:22 PM: Memory Sweep Complete, Elapsed Time: 00:09:16
12:22 PM: Starting Registry Sweep
12:23 PM: Registry Sweep Complete, Elapsed Time:00:00:39
12:23 PM: Starting Cookie Sweep
12:23 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
12:23 PM: Starting File Sweep
12:26 PM: Error: Access violation at address 004054FB in module 'WRSSSDK.exe'. Read of address 04450000.
12:29 PM: Error: Access violation at address 004054FB in module 'WRSSSDK.exe'. Read of address 04450000.
12:33 PM: Error: Access violation at address 004054FB in module 'WRSSSDK.exe'. Read of address 04450000.
12:45 PM: Error: Access violation at address 004054FB in module 'WRSSSDK.exe'. Read of address 04450000.
1:10 PM: Found System Monitor: potentially rootkit-masked files
1:10 PM: nmpeqlz.dll (ID = 0)
1:10 PM: generatr.dll (ID = 0)
1:10 PM: vocal.nct (ID = 0)
1:10 PM: data_b&w.nct (ID = 0)
1:11 PM: vqfenclib1.dll (ID = 0)
1:11 PM: nempg.ax (ID = 0)
1:11 PM: circumvent.nvp (ID = 0)
1:11 PM: neroapi.dll (ID = 0)
1:11 PM: fuzzy.nvp (ID = 0)
1:11 PM: jazz.nct (ID = 0)
1:11 PM: nerocoverdesigner_eng.chm (ID = 0)
1:11 PM: cdspeed.exe (ID = 0)
1:11 PM: cdrom.dll (ID = 0)
1:11 PM: cdcopy.dll (ID = 0)
1:11 PM: easter_egg16_9.jpg (ID = 0)
1:11 PM: first_school4_3.jpg (ID = 0)
1:11 PM: neroipp.dll (ID = 0)
1:11 PM: leaves10_4_3.jpg (ID = 0)
1:11 PM: dosbootimage.ima (ID = 0)
1:11 PM: nevcdengine.dll (ID = 0)
1:11 PM: dosbootimage.ima (ID = 0)
1:11 PM: metal_p2_16_9.jpg (ID = 0)
1:11 PM: infotool.exe (ID = 0)
1:11 PM: msa.dll (ID = 0)
1:11 PM: dws114x.dll (ID = 0)
1:11 PM: dws114x.dll (ID = 0)
1:11 PM: readhd32.dll (ID = 0)
1:11 PM: neroburnrightshelp.dll (ID = 0)
1:11 PM: blobz.nvp (ID = 0)
1:11 PM: karaoke.dll (ID = 0)
1:11 PM: jelly wormz.nvp (ID = 0)
1:11 PM: insufficient dictionary.nvp (ID = 0)
1:11 PM: owww.nvp (ID = 0)
1:11 PM: need sunglassez.nvp (ID = 0)
1:11 PM: nice.nvp (ID = 0)
1:11 PM: gencush.dll (ID = 0)
1:11 PM: mp3pro_hlp.dll (ID = 0)
1:11 PM: mp3pro_dmo.dll (ID = 0)
1:11 PM: hexagon_button.png (ID = 0)
1:11 PM: stairways.nvp (ID = 0)
1:11 PM: tubes.nvp (ID = 0)
1:11 PM: default.skn (ID = 0)
1:11 PM: explosion.nvp (ID = 0)
1:11 PM: dvd_button_4.png (ID = 0)
1:11 PM: nres_eng.msg (ID = 0)
1:11 PM: dvd_button_5.png (ID = 0)
1:11 PM: amcdom.dll (ID = 0)
1:11 PM: amcdom.dll (ID = 0)
1:11 PM: neroburnrights_eng.chm (ID = 0)
1:11 PM: the black lotus.nvp (ID = 0)
1:11 PM: gdires32.dll (ID = 0)
1:11 PM: 8pointstar_button.png (ID = 0)
1:11 PM: pointsquare_button.png (ID = 0)
1:11 PM: karaoke.dll (ID = 0)
1:11 PM: equalizer.pre (ID = 0)
1:11 PM: explosion.nvp (ID = 0)
1:11 PM: neroburnrights_eng.chm (ID = 0)
1:11 PM: ebonyframe_button.png (ID = 0)
1:11 PM: dancing flower.nvp (ID = 0)
1:11 PM: stocks.dat (ID = 0)
1:11 PM: nres_fra.msg (ID = 0)
1:11 PM: jazz_classical.nct (ID = 0)
1:11 PM: jazz_classical.nct (ID = 0)
1:11 PM: jazz_classical.nct (ID = 0)
1:11 PM: jazz_classical.nct (ID = 0)
1:11 PM: gcfilter.ax (ID = 0)
1:11 PM: nerocoverdesigner_eng.pdf (ID = 0)
1:11 PM: aacenc32.dll (ID = 0)
1:11 PM: mmtools.dll (ID = 0)
1:11 PM: genudf.dll (ID = 0)
1:11 PM: dynamicprocessor.pre (ID = 0)
1:11 PM: flower3_16_9.jpg (ID = 0)
1:11 PM: Warning: DDAFileExists failed to resolve the MFT number for: c:\documents and settings\douglas.douglas-y359tzb\local settings\temp\temporary directory 13 for ( software ) nero burning rom 6.0 ultra edition incl keygen & serial.zip\nero.burning.rom.6.0.ultra.edition.incl.keygen.&.serial\nero 6 ultra edition\common files\audioplugins\msa7\msa.dll.
1:11 PM: dws114x.dll (ID = 0)
1:11 PM: crystal3_16_9.jpg (ID = 0)
1:11 PM: light_r6_16_9.jpg (ID = 0)
1:11 PM: defconvertor.dll (ID = 0)
1:11 PM: denoise.pre (ID = 0)
1:11 PM: vcdengine.dll (ID = 0)
1:11 PM: wnaspi32.dll (ID = 0)
1:11 PM: def.dat (ID = 0)
1:11 PM: def.dat (ID = 0)
1:11 PM: cdr50s.dll (ID = 0)
1:11 PM: nevideoenc.ax (ID = 0)
1:11 PM: aacenc32.dll (ID = 0)
1:11 PM: backitup.exe (ID = 0)
1:11 PM: greenland16_9.jpg (ID = 0)
1:11 PM: shfolder.exe (ID = 0)
1:12 PM: nevcdengine.dll (ID = 0)
1:12 PM: delay.pre (ID = 0)
1:12 PM: nerowaveeditor_eng.chm (ID = 0)
1:12 PM: chorus.pre (ID = 0)
1:12 PM: vqfenclib1.dll (ID = 0)
1:12 PM: jazz.nct (ID = 0)
1:12 PM: drivespeed.exe (ID = 0)
1:12 PM: neromediacon.dll (ID = 0)
1:12 PM: neromediacon.dll (ID = 0)
1:12 PM: neromediacon.dll (ID = 0)
1:12 PM: neromediacon.dll (ID = 0)
1:12 PM: neromediacon.dll (ID = 0)
1:12 PM: default.bmp (ID = 0)
1:12 PM: expressui.dll (ID = 0)
1:12 PM: metal_f0_4_3.jpg (ID = 0)
1:12 PM: wmfdist.exe (ID = 0)
1:12 PM: bdant.cab (ID = 0)
1:12 PM: gclib.dll (ID = 0)
1:12 PM: gclib.dll (ID = 0)
1:12 PM: clippededges_button.png (ID = 0)
1:12 PM: dxnt.cab (ID = 0)
1:12 PM: directx.cab (ID = 0)
1:12 PM: expressui.dll (ID = 0)
1:12 PM: nerovision.exe (ID = 0)
1:12 PM: imagx5.dll (ID = 0)
1:12 PM: vocal.nct (ID = 0)
1:12 PM: vcdui.dll (ID = 0)
1:12 PM: vocal.nct (ID = 0)
1:12 PM: compilation.exe (ID = 0)
1:12 PM: vocal.nct (ID = 0)
1:12 PM: vocal.nct (ID = 0)
1:12 PM: wnaspi32.dll (ID = 0)
1:12 PM: gcfx.dll (ID = 0)
1:12 PM: ledmeter.ocx (ID = 0)
1:12 PM: ledmeter.ocx (ID = 0)
1:12 PM: nerocoverdesigner_eng.chm (ID = 0)
1:12 PM: nerocoverdesigner_eng.chm (ID = 0)
1:12 PM: effectctrl.ocx (ID = 0)
1:12 PM: effectctrl.ocx (ID = 0)
1:12 PM: wmfadist.exe (ID = 0)
1:12 PM: nerocoverdesigner_eng.pdf (ID = 0)
1:12 PM: nerocoverdesigner_eng.pdf (ID = 0)
1:12 PM: nerostartsmart.exe (ID = 0)
1:12 PM: metal_pl_16_9.jpg (ID = 0)
1:12 PM: ground8_16_9.jpg (ID = 0)
1:12 PM: nero6ultraeditionquickstart_eng.pdf (ID = 0)
1:12 PM: nero6ultraeditionquickstart_eng.pdf (ID = 0)
1:12 PM: wmfadist.exe (ID = 0)
1:12 PM: newtrf.dll (ID = 0)
1:12 PM: vfft.dll (ID = 0)
1:12 PM: soundtrax.exe (ID = 0)
1:12 PM: nerostartsmart.exe (ID = 0)
1:12 PM: gcfilter.ax (ID = 0)
1:12 PM: gcfilter.ax (ID = 0)
1:12 PM: gcfilter.ax (ID = 0)
1:12 PM: def.dat (ID = 0)
1:12 PM: dvd_button_3.png (ID = 0)
1:12 PM: metal_pl_16_9.jpg (ID = 0)
1:12 PM: nbj.exe (ID = 0)
1:12 PM: nbj.exe (ID = 0)
1:12 PM: nehdblkaccess.dll (ID = 0)
1:12 PM: infotool.exe.manifest (ID = 0)
1:12 PM: drivespeed.exe.manifest (ID = 0)
1:12 PM: coverdes.exe (ID = 0)
1:12 PM: audiodata_b&w.nct (ID = 0)
1:12 PM: neroshowtime_eng.pdf (ID = 0)
1:12 PM: audiocontrol.ocx (ID = 0)
1:12 PM: audiodata_b&w.nct (ID = 0)
1:12 PM: audiocontrol.ocx (ID = 0)
1:12 PM: nerocom.dll (ID = 0)
1:12 PM: mpgenc.dll (ID = 0)
1:12 PM: vcdui.dll (ID = 0)
1:12 PM: dancehiphop_b&w.nct (ID = 0)
1:12 PM: neroipp.dll (ID = 0)
1:12 PM: defconvertor.dll (ID = 0)
1:12 PM: msa.dll (ID = 0)
1:12 PM: cdcopy.dll (ID = 0)
1:12 PM: cdspeed.exe (ID = 0)
1:12 PM: equa_eng.prf (ID = 0)
1:12 PM: alienplanet4_3.jpg (ID = 0)
1:12 PM: vcddoc.dll (ID = 0)
1:12 PM: nevcdengine.dll (ID = 0)
1:13 PM: data_classic.nct (ID = 0)
1:13 PM: vcdengine.dll (ID = 0)
1:13 PM: leaves10_16_9.jpg (ID = 0)
1:13 PM: metal_p2_4_3.jpg (ID = 0)
1:13 PM: nres_ger.msg (ID = 0)
1:13 PM: metal_p2_16_9.jpg (ID = 0)
1:13 PM: dvd_button_2.png (ID = 0)
1:13 PM: wmpburn.exe (ID = 0)
1:13 PM: vqfenclib.dll (ID = 0)
1:13 PM: nerocbui.dll (ID = 0)
1:13 PM: cdu920.dll (ID = 0)
1:13 PM: audiodata.nct (ID = 0)
1:13 PM: audiodata.nct (ID = 0)
1:13 PM: nerocheck.exe (ID = 0)
1:13 PM: nefilesrc.ax (ID = 0)
1:13 PM: aiff.dll (ID = 0)
1:13 PM: nerodb.dll (ID = 0)
1:13 PM: aiff.dll (ID = 0)
1:13 PM: neroipp.dll (ID = 0)
1:13 PM: default.bmp (ID = 0)
1:13 PM: nerocoverdesigner_eng.pdf (ID = 0)
1:13 PM: gchw.dll (ID = 0)
1:13 PM: gchw.dll (ID = 0)
1:13 PM: newtrf.dll (ID = 0)
1:13 PM: dsetup.dll (ID = 0)
1:13 PM: nres_ita.msg (ID = 0)
1:13 PM: pdagreen.nps (ID = 0)
1:13 PM: necon.dll (ID = 0)
1:13 PM: necon.dll (ID = 0)
1:13 PM: imagedrv.inf (ID = 0)
1:13 PM: aacenc32.dll (ID = 0)
1:13 PM: infotool.exe (ID = 0)
1:13 PM: directx.cab (ID = 0)
1:13 PM: nres_jpn.msg (ID = 0)
1:13 PM: wmpburn.exe (ID = 0)
1:13 PM: backitup.exe (ID = 0)
1:13 PM: gcfilter.ax (ID = 0)
1:13 PM: gcfilter.ax (ID = 0)
1:13 PM: neroapi.dll (ID = 0)
1:13 PM: coveredctrl.ocx (ID = 0)
1:13 PM: nefilesrc.ax (ID = 0)
1:13 PM: coverdes.exe (ID = 0)
1:13 PM: dxnt.cab (ID = 0)
1:13 PM: rock.nct (ID = 0)
1:13 PM: rock.nct (ID = 0)
1:13 PM: expressdoc.dll (ID = 0)
1:13 PM: coveredctrl.ocx (ID = 0)
1:13 PM: shortcut.dll (ID = 0)
1:13 PM: msvcrt.dll (ID = 0)
1:13 PM: shortcut.dll (ID = 0)
1:13 PM: msvcrt.dll (ID = 0)
1:13 PM: nerowaveeditor_eng.pdf (ID = 0)
1:13 PM: dosbootimage.ima (ID = 0)
1:13 PM: coveredctrl.ocx (ID = 0)
1:13 PM: neroipp.dll (ID = 0)
1:13 PM: dvd_button_1.png (ID = 0)
1:13 PM: cdi_imag.rtf (ID = 0)
1:13 PM: coverdes.exe (ID = 0)
1:13 PM: metal_f2_4_3.jpg (ID = 0)
1:13 PM: nres_eng.msg (ID = 0)
1:13 PM: imagedrv.inf (ID = 0)
1:13 PM: amcuibase.dll (ID = 0)
1:13 PM: bda.cab (ID = 0)
1:13 PM: imagx5.dll (ID = 0)
1:13 PM: imagx5.dll (ID = 0)
1:13 PM: imagx5.dll (ID = 0)
1:13 PM: mfc42.dll (ID = 0)
1:13 PM: nerowaveeditor_eng.pdf (ID = 0)
1:13 PM: mp3pro.dll (ID = 0)
1:13 PM: mp3pro.dll (ID = 0)
1:13 PM: mp3pro.dll (ID = 0)
1:13 PM: mp3pro.dll (ID = 0)
1:13 PM: mp3pro.dll (ID = 0)
1:13 PM: cdu920.dll (ID = 0)
1:13 PM: cdu920.dll (ID = 0)
1:13 PM: dxsetup.exe (ID = 0)
1:13 PM: flower9_16_9.jpg (ID = 0)
1:13 PM: imagxpr5.dll (ID = 0)
1:13 PM: imagxpr5.dll (ID = 0)
1:13 PM: cdspeed_eng.chm (ID = 0)
1:13 PM: imagxpr5.dll (ID = 0)
1:13 PM: metal_f0_16_9.jpg (ID = 0)
1:13 PM: neroipp.dll (ID = 0)
1:13 PM: imagr5.dll (ID = 0)
1:14 PM: imagr5.dll (ID = 0)
1:14 PM: dvdengine.dll (ID = 0)
1:14 PM: showtime.exe (ID = 0)
1:14 PM: showtime.exe (ID = 0)
1:14 PM: shortcut.dll (ID = 0)
1:14 PM: Warning: DDAFileExists failed to resolve the MFT number for: c:\documents and settings\douglas.douglas-y359tzb\local settings\temp\temporary directory 4 for ( software ) nero burning rom 6.0 ultra edition incl keygen & serial.zip\nero.burning.rom.6.0.ultra.edition.incl.keygen.&.serial\nero 6 ultra edition\common files\audioplugins\msa7\msa.dll.
1:14 PM: naseditor.nvl (ID = 0)
1:14 PM: wav.dll (ID = 0)
1:14 PM: wav.dll (ID = 0)
1:14 PM: compilation.exe (ID = 0)
1:14 PM: jazz_classical.nct (ID = 0)
1:14 PM: leaves10_16_9.jpg (ID = 0)
1:14 PM: vegetables_16_9.jpg (ID = 0)
1:14 PM: imagegen.dll (ID = 0)
1:14 PM: nerocd95.vxd (ID = 0)
1:14 PM: atl.dll (ID = 0)
1:14 PM: halloween16_9.jpg (ID = 0)
1:14 PM: vaagheid galore.nvp (ID = 0)
1:14 PM: udfimporter.dll (ID = 0)
1:14 PM: image.dll (ID = 0)
1:14 PM: picn20.dll (ID = 0)
1:14 PM: spritescope.nvp (ID = 0)
1:14 PM: tomato2_16_9.jpg (ID = 0)
1:14 PM: artichoke2_4_3.jpg (ID = 0)
1:14 PM: nerowaveeditor_eng.chm (ID = 0)
1:14 PM: vis_nas.dll (ID = 0)
1:14 PM: artichoke2_16_9.jpg (ID = 0)
1:14 PM: nres_por.msg (ID = 0)
1:14 PM: circumvent.nvp (ID = 0)
1:14 PM: easter_egg16_9.jpg (ID = 0)
1:14 PM: diffuse_16_9.jpg (ID = 0)
1:14 PM: pentium.nvp (ID = 0)
1:14 PM: floor.nvp (ID = 0)
1:14 PM: zoomer.nvp (ID = 0)
1:14 PM: 5pointstar_button.png (ID = 0)
1:14 PM: dvd_button_0.png (ID = 0)
1:14 PM: quarter2_button.png (ID = 0)
1:14 PM: quarter3_button.png (ID = 0)
1:14 PM: quarter4_button.png (ID = 0)
1:14 PM: woodframe_button.png (ID = 0)
1:14 PM: metal_f0_16_9.jpg (ID = 0)
1:14 PM: stocks.dat (ID = 0)
1:14 PM: nero.txt (ID = 0)
1:14 PM: dancing flower.nvp (ID = 0)
1:14 PM: data_classic.nct (ID = 0)
1:14 PM: psychozoom.nvp (ID = 0)
1:14 PM: stocks.dat (ID = 0)
1:14 PM: nehdblkaccess.dll (ID = 0)
1:14 PM: nero.txt (ID = 0)
1:14 PM: 8pointstar_button.png (ID = 0)
1:14 PM: stocks.dat (ID = 0)
1:14 PM: dingdong.wav (ID = 0)
1:14 PM: evil germz.nvp (ID = 0)
1:14 PM: ieltjes carnaval.nvp (ID = 0)
1:14 PM: planar.nvp (ID = 0)
1:14 PM: dvd_button_6.png (ID = 0)
1:14 PM: pointframe_button.png (ID = 0)
1:14 PM: quarter1_button.png (ID = 0)
1:14 PM: stdole2.tlb (ID = 0)
1:14 PM: vcdengine.dll (ID = 0)
1:14 PM: vqfenclib1.dll (ID = 0)
1:14 PM: data_b&w.nct (ID = 0)
1:14 PM: data_b&w.nct (ID = 0)
1:14 PM: alienplanet16_9.jpg (ID = 0)
1:14 PM: dingdong.wav (ID = 0)
1:14 PM: wav.dll (ID = 0)
1:14 PM: wav.dll (ID = 0)
1:14 PM: audio_classic.nct (ID = 0)
1:14 PM: audiodata_classic.n (ID = 0)
1:14 PM: wav.dll (ID = 0)
1:14 PM: imagegen.dll (ID = 0)
1:14 PM: readhd32.dll (ID = 0)
1:14 PM: neroburnrightshelp.dll (ID = 0)
1:14 PM: sylvester16_9.jpg (ID = 0)
1:14 PM: greencove16_9.jpg (ID = 0)
1:14 PM: flower2_16_9.jpg (ID = 0)
1:14 PM: pdagreen.nps (ID = 0)
1:14 PM: vcddoc.dll (ID = 0)
1:14 PM: liquid.nvp (ID = 0)
1:14 PM: santa_claus16_9.jpg (ID = 0)
1:14 PM: readhd16.dll (ID = 0)
1:14 PM: nvdv.dll (ID = 0)
1:14 PM: greencove4_3.jpg (ID = 0)
1:14 PM: dvdui.dll (ID = 0)
1:14 PM: dvdui.dll (ID = 0)
1:15 PM: dvdui.dll (ID = 0)
1:15 PM: dvdui.dll (ID = 0)
1:15 PM: dvdblockacc.dll (ID = 0)
1:15 PM: cdspeed.exe.manifest (ID = 0)
1:15 PM: drivespeed.exe.manifest (ID = 0)
1:15 PM: infotool.exe.manifest (ID = 0)
1:15 PM: chorus.pre (ID = 0)
1:15 PM: delay.pre (ID = 0)
1:15 PM: denoise.pre (ID = 0)
1:15 PM: blobz.nvp (ID = 0)
1:15 PM: dynamicprocessor.pre (ID = 0)
1:15 PM: imagedrv.inf (ID = 0)
1:15 PM: equa_eng.prf (ID = 0)
1:15 PM: light_re_4_3.jpg (ID = 0)
1:15 PM: insufficient dictionary.nvp (ID = 0)
1:15 PM: need sunglassez.nvp (ID = 0)
1:15 PM: easter_egg16_9.jpg (ID = 0)
1:15 PM: stocks.dat (ID = 0)
1:15 PM: nero.txt (ID = 0)
1:15 PM: graffiti_4_3.jpg (ID = 0)
1:15 PM: crystal3_16_9.jpg (ID = 0)
1:15 PM: gdipainter.dll (ID = 0)
1:15 PM: jelly wormz.nvp (ID = 0)
1:15 PM: llight_r7_16_9.jpg (ID = 0)
1:15 PM: easter_egg4_3.jpg (ID = 0)
1:15 PM: artichoke2_16_9.jpg (ID = 0)
1:15 PM: nice.nvp (ID = 0)
1:15 PM: alienplanet16_9.jpg (ID = 0)
1:15 PM: dvdui.dll (ID = 0)
1:15 PM: zoomer.nvp (ID = 0)
1:15 PM: plasma.nvp (ID = 0)
1:15 PM: mp3pro_hlp.dll (ID = 0)
1:15 PM: neroipp.dll (ID = 0)
1:15 PM: 5pointstar_button.png (ID = 0)
1:15 PM: dancehiphop.nct (ID = 0)
1:15 PM: dvd_button_0.png (ID = 0)
1:15 PM: slime.nvp (ID = 0)
1:15 PM: watermorph.nvp (ID = 0)
1:15 PM: compmem.dll (ID = 0)
1:15 PM: nerocd95.vxd (ID = 0)
1:15 PM: picn20.dll (ID = 0)
1:15 PM: htmlgallery.dll (ID = 0)
1:15 PM: flower4_16_9.jpg (ID = 0)
1:15 PM: nevideofx.bitmaps (ID = 0)
1:15 PM: nerocd95.vxd (ID = 0)
1:15 PM: htmlgallery.dll (ID = 0)
1:15 PM: picn20.dll (ID = 0)
1:15 PM: llight_r7_16_9.jpg (ID = 0)
1:15 PM: liquid.nvp (ID = 0)
1:15 PM: plasma.nvp (ID = 0)
1:15 PM: nerocd95.vxd (ID = 0)
1:15 PM: neroipp.dll (ID = 0)
1:15 PM: neroipp.dll (ID = 0)
1:15 PM: picn20.dll (ID = 0)
1:15 PM: light_r2_16_9.jpg (ID = 0)
1:15 PM: neroadb.dll (ID = 0)
1:15 PM: manageddx.cab (ID = 0)
1:15 PM: data_b&w.nct (ID = 0)
1:15 PM: liquid.nvp (ID = 0)
1:15 PM: light_re_16_9.jpg (ID = 0)
1:15 PM: nerocd95.vxd (ID = 0)
1:15 PM: picn20.dll (ID = 0)
1:15 PM: stocks.dat (ID = 0)
1:15 PM: Warning: DDAFileExists failed to resolve the MFT number for: c:\documents and settings\douglas.douglas-y359tzb\local settings\temp\temporary directory 3 for ( software ) nero burning rom 6.0 ultra edition incl keygen & serial.zip\nero.burning.rom.6.0.ultra.edition.incl.keygen.&.serial\nero 6 ultra edition\common files\audioplugins\msa7\msa.dll.
1:15 PM: nero.txt (ID = 0)
1:15 PM: metal_p2_16_9.jpg (ID = 0)
1:15 PM: neroexpress_eng.pdf (ID = 0)
1:15 PM: equalizer.pre (ID = 0)
1:15 PM: plasma.nvp (ID = 0)
1:15 PM: quarter2_button.png (ID = 0)
1:15 PM: psychozoom.nvp (ID = 0)
1:15 PM: stocks.dat (ID = 0)
1:15 PM: slime.nvp (ID = 0)
1:15 PM: watermorph.nvp (ID = 0)
1:15 PM: compmem.dll (ID = 0)
1:15 PM: nero.txt (ID = 0)
1:15 PM: light_r9_16_9.jpg (ID = 0)
1:15 PM: htmlgallery.dll (ID = 0)
1:15 PM: light_r8_4_3.jpg (ID = 0)
1:15 PM: dvdblockacc.dll (ID = 0)
1:15 PM: nevideofx.bitmaps (ID = 0)
1:15 PM: oleaut32.dll (ID = 0)
1:15 PM: light_r9_4_3.jpg (ID = 0)
1:16 PM: oleaut32.dll (ID = 0)
1:16 PM: htmlgallery.dll (ID = 0)
1:16 PM: vegetables2_4_3.jpg (ID = 0)
1:16 PM: leaves11_16_9.jpg (ID = 0)
1:16 PM: slime.nvp (ID = 0)
1:16 PM: nemp3hlp.dll (ID = 0)
1:16 PM: aacmp32.dll (ID = 0)
1:16 PM: generatr.dll (ID = 0)
1:16 PM: flower12_16_9.jpg (ID = 0)
1:16 PM: watermorph.nvp (ID = 0)
1:16 PM: gdires16.dll (ID = 0)
1:16 PM: neaudioconv.ax (ID = 0)
1:16 PM: marble_button.png (ID = 0)
1:16 PM: gencush.dll (ID = 0)
1:16 PM: audiopluginmgr.dll (ID = 0)
1:16 PM: generatr.dll (ID = 0)
1:16 PM: gencush.dll (ID = 0)
1:16 PM: nve-mtmpl.bin (ID = 0)
1:16 PM: leaves10_16_9.jpg (ID = 0)
1:16 PM: nerender.ax (ID = 0)
1:16 PM: nemp3hlp.dll (ID = 0)
1:16 PM: imagedrive.cpl (ID = 0)
1:16 PM: neroipp.dll (ID = 0)
1:16 PM: aacmp32.dll (ID = 0)
1:16 PM: default.bmp (ID = 0)
1:16 PM: metal_f2_16_9.jpg (ID = 0)
1:16 PM: mp3pro_dmo.dll (ID = 0)
1:16 PM: generatr.dll (ID = 0)
1:16 PM: imagr5.dll (ID = 0)
1:16 PM: nerocbui.dll (ID = 0)
1:16 PM: vqf.dll (ID = 0)
1:16 PM: vqf.dll (ID = 0)
1:16 PM: neroscsi.dll (ID = 0)
1:16 PM: vegetables2_16_9.jpg (ID = 0)
1:16 PM: compmem.dll (ID = 0)
1:16 PM: tomato1_16_9.jpg (ID = 0)
1:16 PM: shfolder.exe (ID = 0)
1:16 PM: alienplanet4_3.jpg (ID = 0)
1:16 PM: htmlgallery.dll (ID = 0)
1:16 PM: nevideofx.bitmaps (ID = 0)
1:16 PM: mp3pro_hlp.dll (ID = 0)
1:16 PM: vqfenclib1.dll (ID = 0)
1:16 PM: vqfenclib1.dll (ID = 0)
1:16 PM: data_b&w.nct (ID = 0)
1:16 PM: cdrom.cfg (ID = 0)
1:16 PM: cdrom.cfg (ID = 0)
1:16 PM: vqf.dll (ID = 0)
1:16 PM: htmlgallery.dll (ID = 0)
1:16 PM: msa.dll (ID = 0)
1:16 PM: neaudioconv.ax (ID = 0)
1:16 PM: nefilesrc.ax (ID = 0)
1:16 PM: marble_button.png (ID = 0)
1:16 PM: vcdengine.dll (ID = 0)
1:16 PM: gencush.dll (ID = 0)
1:16 PM: necapture.ax (ID = 0)
1:16 PM: nres_fra.msg (ID = 0)
1:16 PM: audiopluginmgr.dll (ID = 0)
1:16 PM: msa.dll (ID = 0)
1:16 PM: cdcopy.dll (ID = 0)
1:16 PM: dancehiphop.nct (ID = 0)
1:16 PM: neromediacon.dll (ID = 0)
1:16 PM: nevcr.ax (ID = 0)
1:16 PM: twinvq2.cdb (ID = 0)
1:16 PM: twinvq2.cdb (ID = 0)
1:16 PM: twinvq2.cdb (ID = 0)
1:16 PM: twinvq2.cdb (ID = 0)
1:16 PM: karaoke.dll (ID = 0)
1:16 PM: aacmp32.dll (ID = 0)
1:16 PM: generatr.dll (ID = 0)
1:16 PM: ndparser.ax (ID = 0)
1:16 PM: light_r9_16_9.jpg (ID = 0)
1:16 PM: light_r9_16_9.jpg (ID = 0)
1:16 PM: audiopluginmgr.dll (ID = 0)
1:16 PM: nvdv.dll (ID = 0)
1:16 PM: equalize.dll (ID = 0)
1:16 PM: eula_eng.txt (ID = 0)
1:16 PM: flower10_16_9.jpg (ID = 0)
1:16 PM: audiopluginmgr.dll (ID = 0)
1:16 PM: generatr.dll (ID = 0)
1:16 PM: vcddoc.dll (ID = 0)
1:16 PM: imagedrv.mpd (ID = 0)
1:16 PM: gdires16.dll (ID = 0)
1:16 PM: quarter3_button.png (ID = 0)
1:17 PM: aiff.dll (ID = 0)
1:17 PM: downloaders.dll (ID = 0)
1:17 PM: flanger.pre (ID = 0)
1:17 PM: reverb.pre (ID = 0)
1:17 PM: timecorrection.pre (ID = 0)
1:17 PM: transpose.pre (ID = 0)
1:17 PM: quarter4_button.png (ID = 0)
1:17 PM: metal_f0_16_9.jpg (ID = 0)
1:17 PM: alien funk.nvp (ID = 0)
1:17 PM: equa_eng.prf (ID = 0)
1:17 PM: alien funk too.nvp (ID = 0)
1:17 PM: chaos.nvp (ID = 0)
1:17 PM: imagedrive.cpl (ID = 0)
1:17 PM: grid o'cubez.nvp (ID = 0)
1:17 PM: audiodata_b&w.nct (ID = 0)
1:17 PM: line art.nvp (ID = 0)
1:17 PM: nerocdnt.sys (ID = 0)
1:17 PM: nerocdnt.sys (ID = 0)
1:17 PM: eula_eng.txt (ID = 0)
1:17 PM: evil germz.nvp (ID = 0)
1:17 PM: audiodata_classic.nct (ID = 0)
1:17 PM: audio_classic.nct (ID = 0)
1:17 PM: flash.nvp (ID = 0)
1:17 PM: hypnotic.nvp (ID = 0)
1:17 PM: icicle 5 (can you feel it).n (ID = 0)
1:17 PM: atl.dll (ID = 0)
1:17 PM: eula_eng.txt (ID = 0)
1:17 PM: newtrf.dll (ID = 0)
1:17 PM: imagedrv.inf (ID = 0)
1:17 PM: aacmp32.dll (ID = 0)
1:17 PM: equa_eng.prf (ID = 0)
1:17 PM: greencove16_9.jpg (ID = 0)
1:17 PM: data_classic.nct (ID = 0)
1:17 PM: woodframe_button.png (ID = 0)
1:17 PM: flanger.pre (ID = 0)
1:17 PM: reverb.pre (ID = 0)
1:17 PM: timecorrection.pre (ID = 0)
1:17 PM: transpose.pre (ID = 0)
1:17 PM: cdspeed.exe.manifest (ID = 0)
1:17 PM: drivespeed.exe.manifest (ID = 0)
1:17 PM: infotool.exe.manifest (ID = 0)
1:17 PM: chorus.pre (ID = 0)
1:17 PM: delay.pre (ID = 0)
1:17 PM: denoise.pre (ID = 0)
1:17 PM: dynamicprocessor.pre (ID = 0)
1:17 PM: audiocontrols2.ocx (ID = 0)
1:17 PM: readhd32.dll (ID = 0)
1:17 PM: landscape.nvp (ID = 0)
1:17 PM: mj past and present.nvp (ID = 0)
1:17 PM: paddo tango.nvp (ID = 0)
1:17 PM: spring.nvp (ID = 0)
1:17 PM: renderexample3.nvp (ID = 0)
1:17 PM: crystal3_16_9.jpg (ID = 0)
1:17 PM: hwinfo.exe (ID = 0)
1:17 PM: neroburnrightshelp.dll (ID = 0)
1:17 PM: dingdong.wav (ID = 0)
1:17 PM: data_classic.nct (ID = 0)
1:17 PM: smudge.nvp (ID = 0)
1:17 PM: dancing flower.nvp (ID = 0)
1:17 PM: clippededges_button.png (ID = 0)
1:17 PM: blobz.nvp (ID = 0)
1:17 PM: dvd_button_1.png (ID = 0)
1:17 PM: explosion.nvp (ID = 0)
1:17 PM: dvd_button_2.png (ID = 0)
1:17 PM: dvd_button_3.png (ID = 0)
1:17 PM: dvd_button_6.png (ID = 0)
1:17 PM: fuzzy.nvp (ID = 0)
1:17 PM: mars.nvp (ID = 0)
1:17 PM: insufficient dictionary.nvp (ID = 0)
1:17 PM: microscope.nvp (ID = 0)
1:17 PM: light_r7_4_3.jpg (ID = 0)
1:17 PM: mindtwizt.nvp (ID = 0)
1:17 PM: perspective tunnel.nvp (ID = 0)
1:17 PM: need sunglassez.nvp (ID = 0)
1:17 PM: vaagheid galore.nvp (ID = 0)
1:17 PM: gdires16.dll (ID = 0)
1:17 PM: nice.nvp (ID = 0)
1:17 PM: ebonyframe_button.png (ID = 0)
1:17 PM: data_classic.nct (ID = 0)
1:17 PM: clippededges_button.png (ID = 0)
1:17 PM: hexagon_button.png (ID = 0)
1:17 PM: ebonyframe_button.png (ID = 0)
1:17 PM: nve-mtmpl.bin (ID = 0)
1:18 PM: pointframe_button.png (ID = 0)
1:18 PM: quarter1_button.png (ID = 0)
1:18 PM: zoomer.nvp (ID = 0)
1:18 PM: cdi_text.fnt (ID = 0)
1:18 PM: vegetables_16_9.jpg (ID = 0)
1:18 PM: metal_f2_16_9.jpg (ID = 0)
1:18 PM: light_r6_4_3.jpg (ID = 0)
1:18 PM: amcdom.dll (ID = 0)
1:18 PM: owww.nvp (ID = 0)
1:18 PM: gdipainter.dll (ID = 0)
1:18 PM: data_classic.nct (ID = 0)
1:18 PM: psychozoom.nvp (ID = 0)
1:18 PM: 5pointstar_button.png (ID = 0)
1:18 PM: light_r5_4_3.jpg (ID = 0)
1:18 PM: tri-act.nvp (ID = 0)
1:18 PM: dvd_button_0.png (ID = 0)
1:18 PM: quarter2_button.png (ID = 0)
1:18 PM: drivelocker.dll (ID = 0)
1:18 PM: vcddoc.dll (ID = 0)
1:18 PM: tunnel.nvp (ID = 0)
1:18 PM: nehdblkaccess.dll (ID = 0)
1:18 PM: cool_baptism4_3.jpg (ID = 0)
1:18 PM: mp3pro_dmo.dll (ID = 0)
1:18 PM: gdipainter.dll (ID = 0)
1:18 PM: dvdrealloc.dll (ID = 0)
1:18 PM: quarter3_button.png (ID = 0)
1:18 PM: quarter4_button.png (ID = 0)
1:18 PM: artichoke1_16_9.jpg (ID = 0)
1:18 PM: neroipp.dll (ID = 0)
1:18 PM: woodframe_button.png (ID = 0)
1:18 PM: drivelocker.dll (ID = 0)
1:18 PM: nvdv.dll (ID = 0)
1:18 PM: nvdv.dll (ID = 0)
1:18 PM: light_r8_16_9.jpg (ID = 0)
1:18 PM: pointsquare_button.png (ID = 0)
1:18 PM: nres_eng.msg (ID = 0)
1:18 PM: msa.dll (ID = 0)
1:18 PM: neroburnrights_eng.chm (ID = 0)
1:18 PM: prism_e2_16_9.jpg (ID = 0)
1:18 PM: nres_fra.msg (ID = 0)
1:18 PM: the black lotus.nvp (ID = 0)
1:18 PM: jelly wormz.nvp (ID = 0)
1:18 PM: gdires32.dll (ID = 0)
1:18 PM: the black lotus.nvp (ID = 0)
1:18 PM: unlimited objects.nvp (ID = 0)
1:18 PM: recording.ocx (ID = 0)
1:18 PM: vcdengine.dll (ID = 0)
1:18 PM: 8pointstar_button.png (ID = 0)
1:18 PM: pointsquare_button.png (ID = 0)
1:18 PM: vcddoc.dll (ID = 0)
1:18 PM: leaves1_16_9.jpg (ID = 0)
1:18 PM: gdires32.dll (ID = 0)
1:18 PM: audiodata_classic.n (ID = 0)
1:18 PM: owww.nvp (ID = 0)
1:18 PM: dancehiphop_b&w.nct (ID = 0)
1:18 PM: light_re_16_9.jpg (ID = 0)
1:18 PM: equalizer.pre (ID = 0)
1:18 PM: light_r9_16_9.jpg (ID = 0)
1:18 PM: karaoke.dll (ID = 0)
1:18 PM: unlimited objects.nvp (ID = 0)
1:18 PM: xyber.nvp (ID = 0)
1:18 PM: stairways.nvp (ID = 0)
1:18 PM: tubes.nvp (ID = 0)
1:18 PM: default.skn (ID = 0)
1:18 PM: dvd_button_4.png (ID = 0)
1:18 PM: audiodata_classic.n (ID = 0)
1:18 PM: audio_classic.nct (ID = 0)
1:18 PM: audio_classic.nct (ID = 0)
1:18 PM: cdi_text.fnt (ID = 0)
1:18 PM: nres_ger.msg (ID = 0)
1:18 PM: dvd_button_5.png (ID = 0)
1:18 PM: evil germz.nvp (ID = 0)
1:18 PM: data_classic.nct (ID = 0)
1:18 PM: amcdom.dll (ID = 0)
1:18 PM: cdi_text.fnt (ID = 0)
1:18 PM: nerocdnt.sys (ID = 0)
1:18 PM: nres_ita.msg (ID = 0)
1:18 PM: audiodata_classic.nct (ID = 0)
1:18 PM: nres_jpn.msg (ID = 0)
1:18 PM: audio_classic.nct (ID = 0)
1:18 PM: shadows.nvp (ID = 0)
1:18 PM: nefilesrc.ax (ID = 0)
1:19 PM: oleaut32.dll (ID = 0)
1:19 PM: dingdong.wav (ID = 0)
1:19 PM: flash.nvp (ID = 0)
1:19 PM: ieltjes carnaval.nvp (ID = 0)
1:19 PM: winterfun16_9.jpg (ID = 0)
1:19 PM: imagegen.dll (ID = 0)
1:19 PM: hypnotic.nvp (ID = 0)
1:19 PM: stairways.nvp (ID = 0)
1:19 PM: tubes.nvp (ID = 0)
1:19 PM: default.skn (ID = 0)
1:19 PM: imagedrive.cpl (ID = 0)
1:19 PM: ieltjes carnaval.nvp (ID = 0)
1:19 PM: planar.nvp (ID = 0)
1:19 PM: dvd_button_6.png (ID = 0)
1:19 PM: pointframe_button.png (ID = 0)
1:19 PM: dvd_button_4.png (ID = 0)
1:19 PM: dvd_button_5.png (ID = 0)
1:19 PM: textile4_16_9.jpg (ID = 0)
1:19 PM: amcdom.dll (ID = 0)
1:19 PM: amcdom.dll (ID = 0)
1:19 PM: light_r3_4_3.jpg (ID = 0)
1:19 PM: nvdv.dll (ID = 0)
1:19 PM: renderexample1.nvp (ID = 0)
1:19 PM: nres_por.msg (ID = 0)
1:19 PM: ndparser.ax (ID = 0)
1:19 PM: light_r2_16_9.jpg (ID = 0)
1:19 PM: mp3pro_hlp.dll (ID = 0)
1:19 PM: data_classic.nct (ID = 0)
1:19 PM: light_r5_16_9.jpg (ID = 0)
1:19 PM: flower13_4_3.jpg (ID = 0)
1:19 PM: readhd16.dll (ID = 0)
1:19 PM: leaves11_4_3.jpg (ID = 0)
1:19 PM: vcdengine.dll (ID = 0)
1:19 PM: vqfdeclib.dll (ID = 0)
1:19 PM: llight_r7_16_9.jpg (ID = 0)
1:19 PM: alien funk too.nvp (ID = 0)
1:19 PM: cdr50s.dll (ID = 0)
1:19 PM: cdr50s.dll (ID = 0)
1:19 PM: nbr.exe (ID = 0)
1:19 PM: alien funk.nvp (ID = 0)
1:19 PM: ieltjes thing.nvp (ID = 0)
1:19 PM: nerocheck.exe (ID = 0)
1:19 PM: Warning: DDAFileExists failed to resolve the MFT number for: c:\documents and settings\douglas.douglas-y359tzb\local settings\temp\temporary directory 2 for ( software ) nero burning rom 6.0 ultra edition incl keygen & serial.zip\nero.burning.rom.6.0.ultra.edition.incl.keygen.&.serial\nero 6 ultra edition\common files\audioplugins\msa7\msa.dll.
1:19 PM: hwinfo.exe (ID = 0)
1:19 PM: prism_e3_16_9.jpg (ID = 0)
1:19 PM: light_r2_4_3.jpg (ID = 0)
1:19 PM: light_r3_16_9.jpg (ID = 0)
1:19 PM: flower10_4_3.jpg (ID = 0)
1:19 PM: idrivesetup.dll (ID = 0)
1:19 PM: first_school16_9.jpg (ID = 0)
1:19 PM: dancehiphop_b&w.nct (ID = 0)
1:19 PM: textile2_16_9.jpg (ID = 0)
1:19 PM: quarter1_button.png (ID = 0)
1:19 PM: santa_claus4_3.jpg (ID = 0)
1:19 PM: mp4file.dll (ID = 0)
1:19 PM: light16_16_9.jpg (ID = 0)
1:19 PM: flower12_16_9.jpg (ID = 0)
1:19 PM: icicle 5 (can you feel it).n (ID = 0)
1:19 PM: ieltjes thing.nvp (ID = 0)
1:19 PM: cdi_imag.rtf (ID = 0)
1:19 PM: generatr.dll (ID = 0)
1:19 PM: vaagheid galore.nvp (ID = 0)
1:19 PM: renderexample1.nvp (ID = 0)
1:19 PM: shadows.nvp (ID = 0)
1:19 PM: nerocd95.vxd (ID = 0)
1:19 PM: prism_e2_16_9.jpg (ID = 0)
1:19 PM: flanger.pre (ID = 0)
1:19 PM: xyber.nvp (ID = 0)
1:19 PM: crystal2_4_3.jpg (ID = 0)
1:19 PM: nerender.ax (ID = 0)
1:19 PM: cool_baptism16_9.jpg (ID = 0)
1:19 PM: prism_e4_16_9.jpg (ID = 0)
1:19 PM: midi.dll (ID = 0)
1:19 PM: neaudioconv.ax (ID = 0)
1:19 PM: neroerr.dll (ID = 0)
1:19 PM: perspective tunnel.nvp (ID = 0)
1:19 PM: prism_ef_16_9.jpg (ID = 0)
1:19 PM: smudge.nvp (ID = 0)
1:19 PM: vqf.dll (ID = 0)
1:19 PM: vqf.dll (ID = 0)
1:19 PM: flower7_16_9.jpg (ID = 0)
1:19 PM: mindtwizt.nvp (ID = 0)
1:20 PM: pdagreen.nps (ID = 0)
1:20 PM: mp3pro.dll (ID = 0)
1:20 PM: spring.nvp (ID = 0)
1:20 PM: reverb.pre (ID = 0)
1:20 PM: light_r5_16_9.jpg (ID = 0)
1:20 PM: paddo tango.nvp (ID = 0)
1:20 PM: audiodata_classic.n (ID = 0)
1:20 PM: audiodata_classic.n (ID = 0)
1:20 PM: apreg.dll (ID = 0)
1:20 PM: audio_classic.nct (ID = 0)
1:20 PM: nres_ger.msg (ID = 0)
1:20 PM: cdi_text.fnt (ID = 0)
1:20 PM: metal_f2_16_9.jpg (ID = 0)
1:20 PM: prism_e3_4_3.jpg (ID = 0)
1:20 PM: halloween16_9.jpg (ID = 0)
1:20 PM: drivespeed.exe (ID = 0)
1:20 PM: drivespeed.exe (ID = 0)
1:20 PM: compilation.exe (ID = 0)
1:20 PM: vocal.nct (ID = 0)
1:20 PM: vcdui.dll (ID = 0)
1:20 PM: vcdui.dll (ID = 0)
1:20 PM: neromediacon.dll (ID = 0)
1:20 PM: imagx5.dll (ID = 0)
1:20 PM: vplugins.wpl (ID = 0)
1:20 PM: waveedit.dll (ID = 0)
1:20 PM: tunnel.nvp (ID = 0)
1:20 PM: artichoke1_4_3.jpg (ID = 0)
1:20 PM: mp3pro_dmo.dll (ID = 0)
1:20 PM: mp3pro_hlp.dll (ID = 0)
1:20 PM: ims.dll (ID = 0)
1:20 PM: ro1420c.dll (ID = 0)
1:20 PM: expressdoc.dll (ID = 0)
1:20 PM: msa.dll (ID = 0)
1:20 PM: marble_button.png (ID = 0)
1:20 PM: msa.dll (ID = 0)
1:20 PM: vfft.dll (ID = 0)
1:20 PM: cdr100.dll (ID = 0)
1:20 PM: expressdoc.dll (ID = 0)
1:20 PM: nevideofx.dll (ID = 0)
1:20 PM: nres_ita.msg (ID = 0)
1:20 PM: expressdoc.dll (ID = 0)
1:20 PM: shortcut.dll (ID = 0)
1:20 PM: gclib.dll (ID = 0)
1:20 PM: leaves11_16_9.jpg (ID = 0)
1:20 PM: cr2200cs.dll (ID = 0)
1:20 PM: naseditor.nvl (ID = 0)
1:20 PM: nve-mtmpl.bin (ID = 0)
1:20 PM: cdr100.dll (ID = 0)
1:20 PM: image.dll (ID = 0)
1:20 PM: floor.nvp (ID = 0)
1:20 PM: video.dll (ID = 0)
1:20 PM: gencush.dll (ID = 0)
1:20 PM: tri-act.nvp (ID = 0)
1:20 PM: pentium.nvp (ID = 0)
1:20 PM: nersdb.dll (ID = 0)
1:20 PM: light15_16_9.jpg (ID = 0)
1:20 PM: light_re_16_9.jpg (ID = 0)
1:20 PM: crystal3_16_9.jpg (ID = 0)
1:20 PM: first_school4_3.jpg (ID = 0)
1:20 PM: crystal_16_9.jpg (ID = 0)
1:20 PM: artichoke2_4_3.jpg (ID = 0)
1:20 PM: light_r4_4_3.jpg (ID = 0)
1:20 PM: spritescope.nvp (ID = 0)
1:20 PM: dvd_button_1.png (ID = 0)
1:20 PM: nempg.ax (ID = 0)
1:20 PM: cdrom.cfg (ID = 0)
1:20 PM: leaves3_16_9.jpg (ID = 0)
1:20 PM: mp3pro.dll (ID = 0)
1:20 PM: vis_nas.dll (ID = 0)
1:20 PM: artichoke1_16_9.jpg (ID = 0)
1:20 PM: cool_baptism4_3.jpg (ID = 0)
1:20 PM: apreg.dll (ID = 0)
1:20 PM: planar.nvp (ID = 0)
1:20 PM: chaos.nvp (ID = 0)
1:20 PM: grid o'cubez.nvp (ID = 0)
1:20 PM: prism_e4_16_9.jpg (ID = 0)
1:20 PM: imagedrive.exe (ID = 0)
1:20 PM: image.dll (ID = 0)
1:21 PM: eula_eng.txt (ID = 0)
1:21 PM: cdr100.dll (ID = 0)
1:21 PM: cr2200cs.dll (ID = 0)
1:21 PM: santa_claus16_9.jpg (ID = 0)
1:21 PM: dancehiphop_b&w.nct (ID = 0)
1:21 PM: dancehiphop_b&w.nct (ID = 0)
1:21 PM: flower11_16_9.jpg (ID = 0)
1:21 PM: neroerr.dll (ID = 0)
1:21 PM: vmpegenc.dll (ID = 0)
1:21 PM: light_r8_16_9.jpg (ID = 0)
1:21 PM: metal_pl_4_3.jpg (ID = 0)
1:21 PM: imagedrv.dll (ID = 0)
1:21 PM: imagedrv.mpd (ID = 0)
1:21 PM: santa_claus4_3.jpg (ID = 0)
1:21 PM: landscape.nvp (ID = 0)
1:21 PM: vplugins.wpl (ID = 0)
1:21 PM: imagedrv.sys (ID = 0)
1:21 PM: imagedrive.exe (ID = 0)
1:21 PM: imagegen.dll (ID = 0)
1:21 PM: neroadb.dll (ID = 0)
1:21 PM: metal_pl_16_9.jpg (ID = 0)
1:21 PM: aacplus.dll (ID = 0)
1:21 PM: vplugins.wpl (ID = 0)
1:21 PM: vegetables2_16_9.jpg (ID = 0)
1:21 PM: audiocontrols2.ocx (ID = 0)
1:21 PM: imagegen.dll (ID = 0)
1:21 PM: flower12_16_9.jpg (ID = 0)
1:21 PM: flower10_16_9.jpg (ID = 0)
1:21 PM: image.dll (ID = 0)
1:21 PM: nve-mtmpl.bin (ID = 0)
1:21 PM: vegetables_4_3.jpg (ID = 0)
1:21 PM: microscope.nvp (ID = 0)
1:21 PM: renderexample3.nvp (ID = 0)
1:21 PM: mars.nvp (ID = 0)
1:21 PM: light_r8_16_9.jpg (ID = 0)
1:21 PM: textile_16_9.jpg (ID = 0)
1:21 PM: sardines_16_9.jpg (ID = 0)
1:21 PM: light_r6_16_9.jpg (ID = 0)
1:21 PM: amcdocbase.dll (ID = 0)
1:21 PM: cdi_text.fnt (ID = 0)
1:21 PM: wav.dll (ID = 0)
1:21 PM: metal_pl_16_9.jpg (ID = 0)
1:21 PM: prism_e4_16_9.jpg (ID = 0)
1:21 PM: cdrom.cfg (ID = 0)
1:21 PM: cdrom.cfg (ID = 0)
1:21 PM: ro1420c.dll (ID = 0)
1:21 PM: idrivesetup.dll (ID = 0)
1:21 PM: stdole2.tlb (ID = 0)
1:21 PM: ieltjes thing.nvp (ID = 0)
1:21 PM: mj past and present.nvp (ID = 0)
1:21 PM: boo.wav (ID = 0)
1:21 PM: line art.nvp (ID = 0)
1:21 PM: nevcdengine.dll (ID = 0)
1:21 PM: ims.dll (ID = 0)
1:21 PM: nres_jpn.msg (ID = 0)
1:21 PM: vmpegenc.dll (ID = 0)
1:21 PM: cr2200cs.dll (ID = 0)
1:21 PM: gccore.dll (ID = 0)
1:21 PM: nerocoverdesigner_eng.chm (ID = 0)
1:21 PM: geniso.dll (ID = 0)
1:21 PM: audio_classic.nct (ID = 0)
1:21 PM: vegetables2_4_3.jpg (ID = 0)
1:21 PM: audiodata.nct (ID = 0)
1:21 PM: crystal4_16_9.jpg (ID = 0)
1:21 PM: shfolder.exe (ID = 0)
1:21 PM: cdspeed.exe.manifest (ID = 0)
1:21 PM: gencush.dll (ID = 0)
1:21 PM: neroapl.dll (ID = 0)
1:21 PM: drivelocker.dll (ID = 0)
1:21 PM: data_classic.nct (ID = 0)
1:21 PM: imagedrv.sys (ID = 0)
1:21 PM: aacplus.dll (ID = 0)
1:21 PM: cdr50s.dll (ID = 0)
1:21 PM: audiopluginmgr.dll (ID = 0)
1:21 PM: winterfun16_9.jpg (ID = 0)
1:21 PM: vmpegenc.dll (ID = 0)
1:21 PM: light_r4_16_9.jpg (ID = 0)
1:21 PM: coverdes.exe (ID = 0)
1:21 PM: smudge.nvp (ID = 0)
1:21 PM: mp3pro_hlp.dll (ID = 0)
1:21 PM: vmpegenc.dll (ID = 0)
1:21 PM: data.nct (ID = 0)
1:21 PM: data.nct (ID = 0)
1:22 PM: data.nct (ID = 0)
1:22 PM: data.nct (ID = 0)
1:22 PM: neroapi.dll (ID = 0)
1:22 PM: flower8_16_9.jpg (ID = 0)
1:22 PM: dvdblockacc.dll (ID = 0)
1:22 PM: nerocom.dll (ID = 0)
1:22 PM: nerocoverdesigner_eng.pdf (ID = 0)
1:22 PM: waveedit.exe (ID = 0)
1:22 PM: light_r5_16_9.jpg (ID = 0)
1:22 PM: sardines_4_3.jpg (ID = 0)
1:22 PM: landscape.nvp (ID = 0)
1:22 PM: readhd16.dll (ID = 0)
1:22 PM: sardines_16_9.jpg (ID = 0)
1:22 PM: midi.dll (ID = 0)
1:22 PM: vegetables_16_9.jpg (ID = 0)
1:22 PM: icicle 5 (can you feel it).n (ID = 0)
1:22 PM: hypnotic.nvp (ID = 0)
1:22 PM: line art.nvp (ID = 0)
1:22 PM: fuzzy.nvp (ID = 0)
1:22 PM: sardines_16_9.jpg (ID = 0)
1:22 PM: imagedrive.cpl (ID = 0)
1:22 PM: nemp3hlp.dll (ID = 0)
1:22 PM: imagedrv.sys (ID = 0)
1:22 PM: santa_claus4_3.jpg (ID = 0)
1:22 PM: imagedrv.dll (ID = 0)
1:22 PM: image.dll (ID = 0)
1:22 PM: trumpet1.wav (ID = 0)
1:22 PM: vegetables_4_3.jpg (ID = 0)
1:22 PM: cdi_vcd.app (ID = 0)
1:22 PM: vegetables2_4_3.jpg (ID = 0)
1:22 PM: mj past and present.nvp (ID = 0)
1:22 PM: bda.cab (ID = 0)
1:22 PM: cdi_imag.rtf (ID = 0)
1:22 PM: cdi_imag.rtf (ID = 0)
1:22 PM: mp3pro_dmo.dll (ID = 0)
1:22 PM: cdi_imag.rtf (ID = 0)
1:22 PM: gccore.dll (ID = 0)
1:22 PM: dvdblockacc.dll (ID = 0)
1:22 PM: vegetables2_16_9.jpg (ID = 0)
1:22 PM: neroshowtime_eng.pdf (ID = 0)
1:22 PM: light_r2_16_9.jpg (ID = 0)
1:22 PM: light_r4_16_9.jpg (ID = 0)
1:22 PM: dsetup.dll (ID = 0)
1:22 PM: audiodata_b&w.nct (ID = 0)
1:22 PM: hwinfo.exe (ID = 0)
1:22 PM: neroshowtime_eng.pdf (ID = 0)
1:22 PM: light14_16_9.jpg (ID = 0)
1:22 PM: data.nct (ID = 0)
1:22 PM: audiocontrol.ocx (ID = 0)
1:22 PM: audiodata_b&w.nct (ID = 0)
1:22 PM: gccore.dll (ID = 0)
1:22 PM: cdrom.cfg (ID = 0)
1:22 PM: wav.dll (ID = 0)
1:22 PM: artichoke2_4_3.jpg (ID = 0)
1:22 PM: grid o'cubez.nvp (ID = 0)
1:22 PM: rock.nct (ID = 0)
1:22 PM: rock.nct (ID = 0)
1:22 PM: rock.nct (ID = 0)
1:22 PM: rock.nct (ID = 0)
1:22 PM: nevideofx.dll (ID = 0)
1:22 PM: shadows.nvp (ID = 0)
1:22 PM: renderexample3.nvp (ID = 0)
1:22 PM: aac.dll (ID = 0)
1:22 PM: renderexample1.nvp (ID = 0)
1:22 PM: dvdblockacc.dll (ID = 0)
1:22 PM: santa_claus16_9.jpg (ID = 0)
1:22 PM: sylvester16_9.jpg (ID = 0)
1:22 PM: data.nct (ID = 0)
1:22 PM: data.nct (ID = 0)
1:22 PM: data.nct (ID = 0)
1:22 PM: hdcc.dll (ID = 0)
1:22 PM: nevideofx.dll (ID = 0)
1:22 PM: nerocbui.dll (ID = 0)
1:22 PM: drivelocker.dll (ID = 0)
1:22 PM: ro1420c.dll (ID = 0)
1:22 PM: hdcc.dll (ID = 0)
1:22 PM: hdcc.dll (ID = 0)
1:22 PM: audiodata_classic.n (ID = 0)
1:22 PM: drivelocker.dll (ID = 0)
1:22 PM: hdcc.dll (ID = 0)
1:22 PM: audiodata.nct (ID = 0)
1:22 PM: soundtrax.exe (ID = 0)
1:22 PM: hdcc.dll (ID = 0)
1:23 PM: audio_classic.nct (ID = 0)
1:23 PM: coverdes.exe (ID = 0)
1:23 PM: vqfdeclib.dll (ID = 0)
1:23 PM: nerostartsmart.exe (ID = 0)
1:23 PM: sylvester16_9.jpg (ID = 0)
1:23 PM: light_r4_16_9.jpg (ID = 0)
1:23 PM: hdcc.dll (ID = 0)
1:23 PM: imagedrv.dll (ID = 0)
1:23 PM: imagegen.dll (ID = 0)
1:23 PM: nero.txt (ID = 0)
1:23 PM: equalize.dll (ID = 0)
1:23 PM: artichoke2_16_9.jpg (ID = 0)
1:23 PM: vqfdeclib.dll (ID = 0)
1:23 PM: alienplanet16_9.jpg (ID = 0)
1:23 PM: cr2200cs.dll (ID = 0)
1:23 PM: light_re_16_9.jpg (ID = 0)
1:23 PM: trumpet1.wav (ID = 0)
1:23 PM: msvcrt.dll (ID = 0)
1:23 PM: flash.nvp (ID = 0)
1:23 PM: cdr100.dll (ID = 0)
1:23 PM: picn20.dll (ID = 0)
1:23 PM: neroerr.dll (ID = 0)
1:23 PM: nerovision.exe (ID = 0)
1:23 PM: vmpegenc.dll (ID = 0)
1:23 PM: easter_egg4_3.jpg (ID = 0)
1:23 PM: textile2_16_9.jpg (ID = 0)
1:23 PM: unlimited objects.nvp (ID = 0)
1:23 PM: shortcut.dll (ID = 0)
1:23 PM: llight_r7_16_9.jpg (ID = 0)
1:23 PM: first_school4_3.jpg (ID = 0)
1:23 PM: rock.nct (ID = 0)
1:23 PM: neroerr.dll (ID = 0)
1:23 PM: data_b&w.nct (ID = 0)
1:23 PM: santa_claus16_9.jpg (ID = 0)
1:23 PM: shortcut.dll (ID = 0)
1:23 PM: nerobackitup_eng.chm (ID = 0)
1:23 PM: fx1.nvl (ID = 0)
1:23 PM: sunrise_16_9.jpg (ID = 0)
1:23 PM: amcdocbase.dll (ID = 0)
1:23 PM: first_school16_9.jpg (ID = 0)
1:23 PM: prism_e3_16_9.jpg (ID = 0)
1:23 PM: tri-act.nvp (ID = 0)
1:23 PM: circumvent.nvp (ID = 0)
1:23 PM: floor.nvp (ID = 0)
1:23 PM: mars.nvp (ID = 0)
1:23 PM: paddo tango.nvp (ID = 0)
1:23 PM: isofs.dll (ID = 0)
1:23 PM: dancehiphop.nct (ID = 0)
1:23 PM: neaudioenc.ax (ID = 0)
1:23 PM: neroamp.dll (ID = 0)
1:23 PM: dancehiphop.nct (ID = 0)
1:23 PM: isofs.dll (ID = 0)
1:23 PM: chaos.nvp (ID = 0)
1:23 PM: ground2_16_9.jpg (ID = 0)
1:23 PM: drwebase.vdb (ID = 0)
1:23 PM: drwebase.vdb (ID = 0)
1:23 PM: metal_f2_16_9.jpg (ID = 0)
1:23 PM: light13_16_9.jpg (ID = 0)
1:23 PM: flower11_16_9.jpg (ID = 0)
1:23 PM: nerender.ax (ID = 0)
1:23 PM: nefilesrc.ax (ID = 0)
1:23 PM: pentium.nvp (ID = 0)
1:23 PM: audio_classic.nct (ID = 0)
1:23 PM: perspective tunnel.nvp (ID = 0)
1:23 PM: vis_nas.dll (ID = 0)
1:23 PM: inetcddb.dll (ID = 0)
1:23 PM: vcdmenu.dll (ID = 0)
1:23 PM: gdipainter.dll (ID = 0)
1:23 PM: nempg.ax (ID = 0)
1:23 PM: light_r6_16_9.jpg (ID = 0)
1:23 PM: vocal.nct (ID = 0)
1:23 PM: manageddx.cab (ID = 0)
1:23 PM: nerodb.dll (ID = 0)
1:23 PM: cdi_vcd.app (ID = 0)
1:23 PM: artichoke1_4_3.jpg (ID = 0)
1:23 PM: cool_baptism16_9.jpg (ID = 0)
1:23 PM: nmpeqlz.dll (ID = 0)
1:23 PM: crystal2_16_9.jpg (ID = 0)
1:23 PM: neroscsi.dll (ID = 0)
1:23 PM: first_school16_9.jpg (ID = 0)
1:23 PM: imagedrv.mpd (ID = 0)
1:23 PM: ro1420c.dll (ID = 0)
1:23 PM: vcdui.dll (ID = 0)
1:23 PM: neroburningrom_eng.chm (ID = 0)
1:24 PM: nero.exe (ID = 0)
1:24 PM: nerosoundtrax_eng.chm (ID = 0)
1:24 PM: gdiplus.dll (ID = 0)
1:24 PM: nersdb.dll (ID = 0)
1:24 PM: nres_por.msg (ID = 0)
1:24 PM: light12_16_9.jpg (ID = 0)
1:24 PM: msvcp60.dll (ID = 0)
1:24 PM: shortcut.dll (ID = 0)
1:24 PM: textile3_16_9.jpg (ID = 0)
1:24 PM: greenland16_9.jpg (ID = 0)
1:24 PM: cdr100.dll (ID = 0)
1:24 PM: spring.nvp (ID = 0)
1:24 PM: nbj.exe (ID = 0)
1:24 PM: mindtwizt.nvp (ID = 0)
1:24 PM: vcdmenu.dll (ID = 0)
1:24 PM: audiodata_classic.nct (ID = 0)
1:24 PM: graffiti_16_9.jpg (ID = 0)
1:24 PM: genudf.dll (ID = 0)
1:24 PM: audio_classic.nct (ID = 0)
1:24 PM: audiodata_classic (ID = 0)
1:24 PM: graffiti_16_9.jpg (ID = 0)
1:24 PM: tunnel.nvp (ID = 0)
1:24 PM: oranges_16_9.jpg (ID = 0)
1:24 PM: mp3pro_dmo.dll (ID = 0)
1:24 PM: imagegen.dll (ID = 0)
1:24 PM: nevideoenc.ax (ID = 0)
1:24 PM: cdr50s.dll (ID = 0)
1:24 PM: cdr100.dll (ID = 0)
1:24 PM: cdi_text.fnt (ID = 0)
1:24 PM: amcuibase.dll (ID = 0)
1:24 PM: dsetup.dll (ID = 0)
1:24 PM: hexagon_button.png (ID = 0)
1:24 PM: mp3pro_hlp.dll (ID = 0)
1:24 PM: neroapl.dll (ID = 0)
1:24 PM: dvd_button_3.png (ID = 0)
1:24 PM: dvd_button_2.png (ID = 0)
1:24 PM: alien funk too.nvp (ID = 0)
1:24 PM: nerobackitup_eng.pdf (ID = 0)
1:24 PM: neroformatconv.ax (ID = 0)
1:24 PM: nerovision.exe (ID = 0)
1:24 PM: textile4_16_9.jpg (ID = 0)
1:24 PM: halloween16_9.jpg (ID = 0)
1:24 PM: mpgenc.dll (ID = 0)
1:24 PM: downloaders.dll (ID = 0)
1:24 PM: aiff.dll (ID = 0)
1:24 PM: audiopluginmgr.dll (ID = 0)
1:24 PM: cdi_text.fnt (ID = 0)
1:24 PM: dvdblockacc.dll (ID = 0)
1:24 PM: stdole2.tlb (ID = 0)
1:24 PM: timecorrection.pre (ID = 0)
1:24 PM: nerocheck.exe (ID = 0)
1:24 PM: shortcut.dll (ID = 0)
1:24 PM: msa.dll (ID = 0)
1:24 PM: greenland4_3.jpg (ID = 0)
1:24 PM: neroburnplugin.dll (ID = 0)
1:24 PM: pdagreen.bmp (ID = 0)
1:24 PM: video.dll (ID = 0)
1:24 PM: video.dll (ID = 0)
1:24 PM: imagxpr5.dll (ID = 0)
1:24 PM: cdrom.dll (ID = 0)
1:24 PM: apreg.dll (ID = 0)
1:24 PM: cdspeed_eng.chm (ID = 0)
1:24 PM: winterfun16_9.jpg (ID = 0)
1:24 PM: sylvester16_9.jpg (ID = 0)
1:24 PM: textile4_4_3.jpg (ID = 0)
1:24 PM: pdagreen.bmp (ID = 0)
1:24 PM: idrivesetup.dll (ID = 0)
1:24 PM: drivelocker.dll (ID = 0)
1:24 PM: nersdb.dll (ID = 0)
1:24 PM: nefilesrc.ax (ID = 0)
1:24 PM: nerovideoproc.ax (ID = 0)
1:24 PM: nerodb.dll (ID = 0)
1:24 PM: alien funk.nvp (ID = 0)
1:24 PM: data_classic.nct (ID = 0)
1:24 PM: wmfdist.exe (ID = 0)
1:24 PM: nerobackitup_eng.chm (ID = 0)
1:24 PM: transpose.pre (ID = 0)
1:24 PM: coveredctrl.ocx (ID = 0)
1:24 PM: atl.dll (ID = 0)
1:24 PM: vcdmenu.dll (ID = 0)
1:24 PM: nerocbui.dll (ID = 0)
1:24 PM: vqfdeclib.dll (ID = 0)
1:24 PM: coverdes.exe (ID = 0)
1:24 PM: audiodata.nct (ID = 0)
1:25 PM: flower13_16_9.jpg (ID = 0)
1:25 PM: gencush.dll (ID = 0)
1:25 PM: neromediacon.dll (ID = 0)
1:25 PM: vocal.nct (ID = 0)
1:25 PM: microscope.nvp (ID = 0)
1:25 PM: nescenedetector.ax (ID = 0)
1:25 PM: audiodata_b&w.nct (ID = 0)
1:25 PM: eula_eng.txt (ID = 0)
1:25 PM: cr2200cs.dll (ID = 0)
1:25 PM: ro1420c.dll (ID = 0)
1:25 PM: ndparser.ax (ID = 0)
1:25 PM: drivelocker.dll (ID = 0)
1:25 PM: xyber.nvp (ID = 0)
1:25 PM: neroapi.dll (ID = 0)
1:25 PM: vcdui.dll (ID = 0)
1:25 PM: jazz_classical.nct (ID = 0)
1:25 PM: nemp3hlp.dll (ID = 0)
1:25 PM: dxnt.cab (ID = 0)
1:25 PM: neaudio.ax (ID = 0)
1:25 PM: imagr5.dll (ID = 0)
1:25 PM: halloween16_9.jpg (ID = 0)
1:25 PM: neroformatconv.ax (ID = 0)
1:25 PM: neroexpress_eng.chm (ID = 0)
1:25 PM: neroexpress_eng.chm (ID = 0)
1:25 PM: audiodata_b&w.nct (ID = 0)
1:25 PM: audiodata_b&w.nct (ID = 0)
1:25 PM: light11_16_9.jpg (ID = 0)
1:25 PM: newtrf.dll (ID = 0)
1:25 PM: geniso.dll (ID = 0)
1:25 PM: cdrom.dll (ID = 0)
1:25 PM: prism_e3_16_9.jpg (ID = 0)
1:25 PM: expressui.dll (ID = 0)
1:25 PM: disco.nct (ID = 0)
1:25 PM: disco.nct (ID = 0)
1:25 PM: midi.dll (ID = 0)
1:25 PM: nerender.ax (ID = 0)
1:25 PM: leaves11_16_9.jpg (ID = 0)
1:25 PM: light_r3_16_9.jpg (ID = 0)
1:25 PM: textile3_16_9.jpg (ID = 0)
1:25 PM: nemp3dmo.dll (ID = 0)
1:25 PM: necon.dll (ID = 0)
1:25 PM: necon.dll (ID = 0)
1:25 PM: idrivesetup.dll (ID = 0)
1:25 PM: gdipainter.dll (ID = 0)
1:25 PM: dsetup32.dll (ID = 0)
1:25 PM: vqf.dll (ID = 0)
1:25 PM: vqf.dll (ID = 0)
1:25 PM: nemp3dmo.dll (ID = 0)
1:25 PM: flower5_16_9.jpg (ID = 0)
1:25 PM: nerocoverdesigner_eng.pdf (ID = 0)
1:25 PM: nemp3dmo.dll (ID = 0)
1:25 PM: expressdoc.dll (ID = 0)
1:25 PM: easter_egg16_9.jpg (ID = 0)
1:25 PM: dxsetup.exe (ID = 0)
1:25 PM: mmc.dll (ID = 0)
1:25 PM: gclib.dll (ID = 0)
1:25 PM: expressui.dll (ID = 0)
1:25 PM: nemp3dmo.dll (ID = 0)
1:25 PM: jazz.nct (ID = 0)
1:25 PM: msvcp60.dll (ID = 0)
1:25 PM: msvcp60.dll (ID = 0)
1:25 PM: msvcp60.dll (ID = 0)
1:25 PM: light10_16_9.jpg (ID = 0)
1:25 PM: neaudio.ax (ID = 0)
1:25 PM: neaudio.ax (ID = 0)
1:25 PM: neaudio.ax (ID = 0)
1:25 PM: backitup.exe (ID = 0)
1:25 PM: dws114x.dll (ID = 0)
1:25 PM: mmtools.dll (ID = 0)
1:25 PM: neroexpress_eng.pdf (ID = 0)
1:25 PM: nerobackitup_eng.pdf (ID = 0)
1:25 PM: nerobackitup_eng.pdf (ID = 0)
1:25 PM: cdu920.dll (ID = 0)
1:25 PM: flower6_16_9.jpg (ID = 0)
1:25 PM: pyramids16_9.jpg (ID = 0)
1:25 PM: leaves7_16_9.jpg (ID = 0)
1:25 PM: greenland16_9.jpg (ID = 0)
1:25 PM: greencove16_9.jpg (ID = 0)
1:25 PM: aac.dll (ID = 0)
1:25 PM: aac.dll (ID = 0)
1:25 PM: aac.dll (ID = 0)
1:25 PM: aac.dll (ID = 0)
1:25 PM: cdu920.dll (ID = 0)
1:25 PM: coveredctrl.ocx (ID = 0)
1:25 PM: neroburningrom_eng.pdf (ID = 0)
1:26 PM: drivelocker.dll (ID = 0)
1:26 PM: dws114x.dll (ID = 0)
1:26 PM: textile3_4_3.jpg (ID = 0)
1:26 PM: crystal1_4_3.jpg (ID = 0)
1:26 PM: bdant.cab (ID = 0)
1:26 PM: geniso.dll (ID = 0)
1:26 PM: cdcopy.dll (ID = 0)
1:26 PM: flower10_16_9.jpg (ID = 0)
1:26 PM: leaves9_16_9.jpg (ID = 0)
1:26 PM: data.nct (ID = 0)
1:26 PM: dws114x.dll (ID = 0)
1:26 PM: twinvq2.cdb (ID = 0)
1:26 PM: disco.nct (ID = 0)
1:26 PM: nerosoundtrax_eng.pdf (ID = 0)
1:26 PM: nerovision.exe (ID = 0)
1:26 PM: dancehiphop_b&w.nct (ID = 0)
1:26 PM: flower13_16_9.jpg (ID = 0)
1:26 PM: artichoke2_4_3.jpg (ID = 0)
1:26 PM: artichoke2_16_9.jpg (ID = 0)
1:26 PM: trumpet1.wav (ID = 0)
1:26 PM: coveredctrl.ocx (ID = 0)
1:26 PM: alienplanet16_9.jpg (ID = 0)
1:26 PM: prism_ef_4_3.jpg (ID = 0)
1:26 PM: cr2200cs.dll (ID = 0)
1:26 PM: equalize.dll (ID = 0)
1:26 PM: cdi_vcd.app (ID = 0)
1:26 PM: apreg.dll (ID = 0)
1:26 PM: twinvq2.cdb (ID = 0)
1:26 PM: audiodata.nct (ID = 0)
1:26 PM: audiodata.nct (ID = 0)
1:26 PM: audiodata.nct (ID = 0)
1:26 PM: gccore.dll (ID = 0)
1:26 PM: audiodata.nct (ID = 0)
1:26 PM: imagedrv.dll (ID = 0)
1:26 PM: imagedrv.mpd (ID = 0)
1:26 PM: prism_e2_16_9.jpg (ID = 0)
1:26 PM: textile4_16_9.jpg (ID = 0)
1:26 PM: neroerr.dll (ID = 0)
1:26 PM: nevdec.ax (ID = 0)
1:26 PM: vcddoc.dll (ID = 0)
1:26 PM: nersdb.dll (ID = 0)
1:26 PM: nevcdengine.dll (ID = 0)
1:26 PM: neroerr.dll (ID = 0)
1:26 PM: vocal.nct (ID = 0)
1:26 PM: ground4_16_9.jpg (ID = 0)
1:26 PM: crystal4_16_9.jpg (ID = 0)
1:26 PM: genudf.dll (ID = 0)
1:26 PM: necapture.ax (ID = 0)
1:26 PM: amcuibase.dll (ID = 0)
1:26 PM: dvdui.dll (ID = 0)
1:26 PM: jazz_classical.nct (ID = 0)
1:26 PM: nerowaveeditor_eng.chm (ID = 0)
1:26 PM: drivelocker.dll (ID = 0)
1:26 PM: flower13_16_9.jpg (ID = 0)
1:26 PM: mfc42.dll (ID = 0)
1:26 PM: jazz.nct (ID = 0)
1:26 PM: dvddoc.dll (ID = 0)
1:26 PM: dvddoc.dll (ID = 0)
1:26 PM: dvddoc.dll (ID = 0)
1:26 PM: nevideo.ax (ID = 0)
1:26 PM: dosbootimage.ima (ID = 0)
1:26 PM: bdaxp.cab (ID = 0)
1:26 PM: bdaxp.cab (ID = 0)
1:26 PM: aacenc32.dll (ID = 0)
1:26 PM: aacenc32.dll (ID = 0)
1:26 PM: aacenc32.dll (ID = 0)
1:26 PM: nerocoverdesigner_eng.chm (ID = 0)
1:26 PM: vqfenclib.dll (ID = 0)
1:26 PM: birthday16_9.jpg (ID = 0)
1:26 PM: prism_ef_16_9.jpg (ID = 0)
1:26 PM: dancehiphop_b&w.nct (ID = 0)
1:26 PM: dancehiphop_b&w.nct (ID = 0)
1:26 PM: nersdb.dll (ID = 0)
1:26 PM: soundtrax.exe (ID = 0)
1:26 PM: cdi_imag.rtf (ID = 0)
1:26 PM: nerocoverdesigner_eng.chm (ID = 0)
1:26 PM: light_r5_16_9.jpg (ID = 0)
1:26 PM: neroapi.dll (ID = 0)
1:26 PM: neroapi.dll (ID = 0)
1:26 PM: coveredctrl.ocx (ID = 0)
1:26 PM: udfimporter.dll (ID = 0)
1:26 PM: udfimporter.dll (ID = 0)
1:27 PM: udfimporter.dll (ID = 0)
1:27 PM: udfimporter.dll (ID = 0)
1:27 PM: udfimporter.dll (ID = 0)
1:27 PM: vqfenclib1.dll (ID = 0)
1:27 PM: data_b&w.nct (ID = 0)
1:27 PM: data_b&w.nct (ID = 0)
1:27 PM: artichoke1_16_9.jpg (ID = 0)
1:27 PM: cool_baptism4_3.jpg (ID = 0)
1:27 PM: wnaspi32.dll (ID = 0)
1:27 PM: prism_ef_16_9.jpg (ID = 0)
1:27 PM: neroscsi.dll (ID = 0)
1:27 PM: neroscsi.dll (ID = 0)
1:27 PM: mp3pro_dmo.dll (ID = 0)
1:27 PM: nersdb.dll (ID = 0)
1:27 PM: naseditor.nvl (ID = 0)
1:27 PM: nerosoundtrax_eng.chm (ID = 0)
1:27 PM: vqfdeclib.dll (ID = 0)
1:27 PM: vqfdeclib.dll (ID = 0)
1:27 PM: vqfdeclib.dll (ID = 0)
1:27 PM: dvdengine.dll (ID = 0)
1:27 PM: nerocoverdesigner_eng.pdf (ID = 0)
1:27 PM: mmtools.dll (ID = 0)
1:27 PM: newtrf.dll (ID = 0)
1:27 PM: bda.cab (ID = 0)
1:27 PM: vqfenclib.dll (ID = 0)
1:27 PM: crystal4_16_9.jpg (ID = 0)
1:27 PM: directx.cab (ID = 0)
1:27 PM: coverdes.exe (ID = 0)
1:27 PM: coveredctrl.ocx (ID = 0)
1:27 PM: nvdv.dll (ID = 0)
1:27 PM: imagedrive.exe (ID = 0)
1:27 PM: mmc.dll (ID = 0)
1:27 PM: gclib.dll (ID = 0)
1:27 PM: gclib.dll (ID = 0)
1:27 PM: mmc.dll (ID = 0)
1:27 PM: dxsetup.exe (ID = 0)
1:27 PM: nerocoverdesigner_eng.pdf (ID = 0)
1:27 PM: nerosoundtrax_eng.chm (ID = 0)
1:27 PM: aacenc32.dll (ID = 0)
1:27 PM: showtime.exe (ID = 0)
1:27 PM: expressui.dll (ID = 0)
1:27 PM: drweb32.dll (ID = 0)
1:27 PM: neromediacon.dll (ID = 0)
1:27 PM: wnaspi32.dll (ID = 0)
1:27 PM: nerocoverdesigner_eng.pdf (ID = 0)
1:28 PM: easter_egg4_3.jpg (ID = 0)
1:28 PM: amcuibase.dll (ID = 0)
1:28 PM: prism_e2_4_3.jpg (ID = 0)
1:28 PM: dvdrealloc.dll (ID = 0)
1:28 PM: def.dat (ID = 0)
1:28 PM: wnaspi32.dll (ID = 0)
1:28 PM: dancehiphop.nct (ID = 0)
1:28 PM: isofs.dll (ID = 0)
1:28 PM: dancehiphop.nct (ID = 0)
1:28 PM: vmpegenc.dll (ID = 0)
1:28 PM: neroexpress_eng.chm (ID = 0)
1:28 PM: coveredctrl.ocx (ID = 0)
1:28 PM: amcdocbase.dll (ID = 0)
1:28 PM: amcuibase.dll (ID = 0)
1:28 PM: jazz_classical.nct (ID = 0)
1:28 PM: coveredctrl.ocx (ID = 0)
1:28 PM: drweb32.dll (ID = 0)
1:28 PM: drweb32.dll (ID = 0)
1:28 PM: drweb32.dll (ID = 0)
1:28 PM: drwebase.vdb (ID = 0)
1:28 PM: aac.dll (ID = 0)
1:28 PM: gcfx.dll (ID = 0)
1:28 PM: gcfx.dll (ID = 0)
1:28 PM: gcfx.dll (ID = 0)
1:28 PM: gcfx.dll (ID = 0)
1:28 PM: light_r8_16_9.jpg (ID = 0)
1:28 PM: nerocbui.dll (ID = 0)
1:28 PM: neroburningrom_eng.pdf (ID = 0)
1:28 PM: mmtools.dll (ID = 0)
1:28 PM: cdi_vcd.app (ID = 0)
1:28 PM: dvdrealloc.dll (ID = 0)
1:28 PM: nrestore.exe (ID = 0)
1:28 PM: cdspeed_eng.chm (ID = 0)
1:28 PM: wmfadist.exe (ID = 0)
1:28 PM: prism_e2_16_9.jpg (ID = 0)
1:28 PM: santa_claus4_3.jpg (ID = 0)
1:28 PM: neroshowtime_eng.chm (ID = 0)
1:28 PM: nerocoverdesigner_eng.pdf (ID = 0)
1:28 PM: drivelocker.dll (ID = 0)
1:28 PM: nevcr.ax (ID = 0)
1:28 PM: imagedrive.exe (ID = 0)
1:28 PM: cdi_imag.rtf (ID = 0)
1:28 PM: languages.nvl (ID = 0)
1:28 PM: languages.nvl (ID = 0)
1:28 PM: languages.nvl (ID = 0)
1:28 PM: dvddoc.dll (ID = 0)
1:28 PM: expressui.dll (ID = 0)
1:28 PM: vfft.dll (ID = 0)
1:28 PM: newtrf.dll (ID = 0)
1:28 PM: gchw.dll (ID = 0)
1:28 PM: gchw.dll (ID = 0)
1:28 PM: dancehiphop_b&w.nct (ID = 0)
1:28 PM: aac.dll (ID = 0)
1:28 PM: nevideo.ax (ID = 0)
1:28 PM: nerovision.exe (ID = 0)
1:28 PM: nevideo.ax (ID = 0)
1:28 PM: nevideo.ax (ID = 0)
1:28 PM: dvddoc.dll (ID = 0)
1:28 PM: nero6ultraeditionquickstart_eng.pdf (ID = 0)
1:28 PM: crystal4_16_9.jpg (ID = 0)
1:28 PM: spritescope.nvp (ID = 0)
1:28 PM: metal_p2_16_9.jpg (ID = 0)
1:28 PM: imagxpr5.dll (ID = 0)
1:28 PM: drivelocker.dll (ID = 0)
1:28 PM: nevideo.ax (ID = 0)
1:28 PM: neroburnplugin.dll (ID = 0)
1:28 PM: ledmeter.ocx (ID = 0)
1:28 PM: nero.exe (ID = 0)
1:28 PM: nerobackitup_eng.chm (ID = 0)
1:28 PM: light_r6_16_9.jpg (ID = 0)
1:28 PM: cdi_vcd.app (ID = 0)
1:28 PM: msa.dll (ID = 0)
1:28 PM: axis.ocx (ID = 0)
1:28 PM: nerovideoproc.ax (ID = 0)
1:28 PM: textile4_16_9.jpg (ID = 0)
1:28 PM: textile3_16_9.jpg (ID = 0)
1:28 PM: dvddoc.dll (ID = 0)
1:28 PM: cool_baptism4_3.jpg (ID = 0)
1:28 PM: artichoke1_16_9.jpg (ID = 0)
1:28 PM: cdrom.dll (ID = 0)
1:28 PM: mmc.dll (ID = 0)
1:28 PM: nevdec.ax (ID = 0)
1:28 PM: geniso.dll (ID = 0)
1:28 PM: cdspeed.exe (ID = 0)
1:28 PM: msvcrt.dll (ID = 0)
1:28 PM: cdrom.dll (ID = 0)
1:28 PM: dvdengine.dll (ID = 0)
1:28 PM: dvdengine.dll (ID = 0)
1:29 PM: dvdengine.dll (ID = 0)
1:29 PM: dvdengine.dll (ID = 0)
1:29 PM: aiff.dll (ID = 0)
1:29 PM: nerodb.dll (ID = 0)
1:29 PM: aiff.dll (ID = 0)
1:29 PM: nrestore.exe (ID = 0)
1:29 PM: nrestore.exe (ID = 0)
1:29 PM: neaudio.ax (ID = 0)
1:29 PM: recording.ocx (ID = 0)
1:29 PM: axis.ocx (ID = 0)
1:29 PM: nbr.exe (ID = 0)
1:29 PM: wmpburn.exe (ID = 0)
1:29 PM: nbr.exe (ID = 0)
1:29 PM: downloaders.dll (ID = 0)
1:29 PM: gdiplus.dll (ID = 0)
1:29 PM: vqfenclib.dll (ID = 0)
1:29 PM: vqfenclib.dll (ID = 0)
1:29 PM: vqfenclib.dll (ID = 0)
1:29 PM: vqfenclib.dll (ID = 0)
1:29 PM: aiff.dll (ID = 0)
1:29 PM: nerodb.dll (ID = 0)
1:29 PM: nerosoundtrax_eng.pdf (ID = 0)
1:29 PM: neroburnplugin.dll (ID = 0)
1:29 PM: effectctrl.ocx (ID = 0)
1:29 PM: mp4file.dll (ID = 0)
1:29 PM: flower13_16_9.jpg (ID = 0)
1:29 PM: neroburningrom_eng.pdf (ID = 0)
1:29 PM: audiopluginmgr.dll (ID = 0)
1:29 PM: coverdes.exe (ID = 0)
1:29 PM: rock.nct (ID = 0)
1:29 PM: bdaxp.cab (ID = 0)
1:29 PM: cdu920.dll (ID = 0)
1:29 PM: inetcddb.dll (ID = 0)
1:29 PM: dsetup32.dll (ID = 0)
1:29 PM: fx1.nvl (ID = 0)
1:29 PM: axis.ocx (ID = 0)
1:29 PM: msvcrt.dll (ID = 0)
1:29 PM: nerovision.exe (ID = 0)
1:29 PM: msvcrt.dll (ID = 0)
1:29 PM: cdu920.dll (ID = 0)
1:29 PM: imagedrv.sys (ID = 0)
1:29 PM: nerocoverdesigner_eng.chm (ID = 0)
1:29 PM: defconvertor.dll (ID = 0)
1:29 PM: defconvertor.dll (ID = 0)
1:29 PM: amcuibase.dll (ID = 0)
1:29 PM: light_r3_16_9.jpg (ID = 0)
1:29 PM: nerocmd.exe (ID = 0)
1:29 PM: nerocmd.exe (ID = 0)
1:29 PM: neroamp.dll (ID = 0)
1:29 PM: bdant.cab (ID = 0)
1:29 PM: neaudioenc.ax (ID = 0)
1:29 PM: dancehiphop.nct (ID = 0)
1:29 PM: dancehiphop.nct (ID = 0)
1:29 PM: geniso.dll (ID = 0)
1:29 PM: isofs.dll (ID = 0)
1:29 PM: dancehiphop.nct (ID = 0)
1:29 PM: data_b&w.nct (ID = 0)
1:29 PM: vqfenclib1.dll (ID = 0)
1:29 PM: data_b&w.nct (ID = 0)
1:29 PM: manageddx.cab (ID = 0)
1:29 PM: nevdec.ax (ID = 0)
1:29 PM: gdiplus.dll (ID = 0)
1:29 PM: audiocontrols2.ocx (ID = 0)
1:29 PM: gccore.dll (ID = 0)
1:29 PM: nerocoverdesigner_eng.chm (ID = 0)
1:29 PM: coverdes.exe (ID = 0)
1:29 PM: amcdocbase.dll (ID = 0)
1:29 PM: gchw.dll (ID = 0)
1:29 PM: gchw.dll (ID = 0)
1:29 PM: sylvester4_3.jpg (ID = 0)
1:29 PM: data.nct (ID = 0)
1:29 PM: inetcddb.dll (ID = 0)
1:29 PM: fx1.nvl (ID = 0)
1:29 PM: nerocmd.exe (ID = 0)
1:29 PM: neroexpress_eng.pdf (ID = 0)
1:29 PM: cdr50s.dll (ID = 0)
1:29 PM: nevideoenc.ax (ID = 0)
1:29 PM: aacplus.dll (ID = 0)
1:29 PM: nerowaveeditor_eng.pdf (ID = 0)
1:29 PM: ro1420c.dll (ID = 0)
1:29 PM: nerocbui.dll (ID = 0)
1:29 PM: dancehiphop.nct (ID = 0)
1:29 PM: neaudio.ax (ID = 0)
1:29 PM: expressdoc.dll (ID = 0)
1:29 PM: leaves8_16_9.jpg (ID = 0)
1:29 PM: isofs.dll (ID = 0)
1:30 PM: imagr5.dll (ID = 0)
1:30 PM: imagx5.dll (ID = 0)
1:30 PM: graffiti_16_9.jpg (ID = 0)
1:30 PM: neaudio.ax (ID = 0)
1:30 PM: geniso.dll (ID = 0)
1:30 PM: ground7_16_9.jpg (ID = 0)
1:30 PM: dsp_scaleplugin.dll (ID = 0)
1:30 PM: dsp_scaleplugin.dll (ID = 0)
1:30 PM: genudf.dll (ID = 0)
1:30 PM: genudf.dll (ID = 0)
1:30 PM: genudf.dll (ID = 0)
1:30 PM: flower11_16_9.jpg (ID = 0)
1:30 PM: flower10_16_9.jpg (ID = 0)
1:30 PM: crystal2_16_9.jpg (ID = 0)
1:30 PM: cool_baptism16_9.jpg (ID = 0)
1:30 PM: wmfdist.exe (ID = 0)
1:30 PM: winterfun16_9.jpg (ID = 0)
1:30 PM: shortcut.dll (ID = 0)
1:30 PM: eula_eng.txt (ID = 0)
1:30 PM: eula_eng.txt (ID = 0)
1:30 PM: nerocmd.exe (ID = 0)
1:30 PM: msa.dll (ID = 0)
1:30 PM: necapture.ax (ID = 0)
1:30 PM: msvcp60.dll (ID = 0)
1:30 PM: msvcp60.dll (ID = 0)
1:30 PM: nefilesrc.ax (ID = 0)
1:30 PM: def.dat (ID = 0)
1:30 PM: first_school4_3.jpg (ID = 0)
1:30 PM: neroadb.dll (ID = 0)
1:30 PM: flower11_4_3.jpg (ID = 0)
1:30 PM: crystal4_4_3.jpg (ID = 0)
1:30 PM: light_r2_16_9.jpg (ID = 0)
1:30 PM: neroapl.dll (ID = 0)
1:30 PM: neroformatconv.ax (ID = 0)
1:30 PM: leaves4_16_9.jpg (ID = 0)
1:30 PM: nescenedetector.ax (ID = 0)
1:30 PM: halloween4_3.jpg (ID = 0)
1:30 PM: ground3_16_9.jpg (ID = 0)
1:30 PM: drivelocker.dll (ID = 0)
1:30 PM: cdi_vcd.app (ID = 0)
1:30 PM: dvdrealloc.dll (ID = 0)
1:30 PM: prism_e3_16_9.jpg (ID = 0)
1:30 PM: ground1_16_9.jpg (ID = 0)
1:30 PM: waveedit.exe (ID = 0)
1:30 PM: leaves5_16_9.jpg (ID = 0)
1:30 PM: vegetables2_16_9.jpg (ID = 0)
1:30 PM: gdipainter.dll (ID = 0)
1:30 PM: dws114x.dll (ID = 0)
1:30 PM: leaves2_16_9.jpg (ID = 0)
1:30 PM: flower12_16_9.jpg (ID = 0)
1:30 PM: vegetables2_4_3.jpg (ID = 0)
1:30 PM: vegetables_16_9.jpg (ID = 0)
1:30 PM: equalize.dll (ID = 0)
1:30 PM: waveedit.exe (ID = 0)
1:30 PM: nerovideoproc.ax (ID = 0)
1:30 PM: vegetables_4_3.jpg (ID = 0)
1:30 PM: ground5_16_9.jpg (ID = 0)
1:30 PM: ground6_16_9.jpg (ID = 0)
1:30 PM: nescenedetector.ax (ID = 0)
1:30 PM: textile2_16_9.jpg (ID = 0)
1:30 PM: nmpeqlz.dll (ID = 0)
1:30 PM: prism_e4_16_9.jpg (ID = 0)
1:30 PM: textile2_4_3.jpg (ID = 0)
1:30 PM: nero.exe (ID = 0)
1:30 PM: nero.exe (ID = 0)
1:30 PM: imagr5.dll (ID = 0)
1:30 PM: mpgenc.dll (ID = 0)
1:30 PM: drivelocker.dll (ID = 0)
1:30 PM: alienplanet4_3.jpg (ID = 0)
1:30 PM: cdi_vcd.app (ID = 0)
1:30 PM: artichoke1_4_3.jpg (ID = 0)
1:30 PM: jazz_classical.nct (ID = 0)
1:30 PM: neroshowtime_eng.chm (ID = 0)
1:30 PM: defconvertor.dll (ID = 0)
1:30 PM: mfc42.dll (ID = 0)
1:30 PM: cdr50s.dll (ID = 0)
1:30 PM: textile2_16_9.jpg (ID = 0)
1:30 PM: image.dll (ID = 0)
1:30 PM: ims.dll (ID = 0)
1:30 PM: artichoke1_4_3.jpg (ID = 0)
1:30 PM: neroscsi.dll (ID = 0)
1:30 PM: cool_baptism16_9.jpg (ID = 0)
1:30 PM: crystal2_16_9.jpg (ID = 0)
1:30 PM: drivelocker.dll (ID = 0)
1:30 PM: cdr100.dll (ID = 0)
1:30 PM: cr2200cs.dll (ID = 0)
1:30 PM: ims.dll (ID = 0)
1:30 PM: amcdocbase.dll (ID = 0)
1:31 PM: flower11_16_9.jpg (ID = 0)
1:31 PM: audiodata_b&w.nct (ID = 0)
1:31 PM: dancehiphop_b&w.nc (ID = 0)
1:31 PM: crystal3_4_3.jpg (ID = 0)
1:31 PM: gccore.dll (ID = 0)
1:31 PM: alienplanet4_3.jpg (ID = 0)
1:31 PM: dsetup32.dll (ID = 0)
1:31 PM: recording.ocx (ID = 0)
1:31 PM: isofs.dll (ID = 0)
1:31 PM: waveedit.dll (ID = 0)
1:31 PM: neroburningrom_eng.chm (ID = 0)
1:31 PM: nerocoverdesigner_eng.chm (ID = 0)
1:31 PM: image.dll (ID = 0)
1:31 PM: pdagreen.bmp (ID = 0)
1:31 PM: mp4file.dll (ID = 0)
1:31 PM: neaudioenc.ax (ID = 0)
1:31 PM: isofs.dll (ID = 0)
1:31 PM: amcdocbase.dll (ID = 0)
1:31 PM: cdrom.cfg (ID = 0)
1:31 PM: waveedit.dll (ID = 0)
1:31 PM: neroscsi.dll (ID = 0)
1:31 PM: imagxpr5.dll (ID = 0)
1:31 PM: nevideo.ax (ID = 0)
1:32 PM: nevcr.ax (ID = 0)
1:32 PM: nerocbui.dll (ID = 0)
1:32 PM: infotool.exe (ID = 0)
1:32 PM: rock.nct (ID = 0)
1:32 PM: greenland16_9.jpg (ID = 0)
1:32 PM: twinvq2.cdb (ID = 0)
1:32 PM: winterfun4_3.jpg (ID = 0)
1:32 PM: cdrom.dll (ID = 0)
1:32 PM: mpgenc.dll (ID = 0)
1:32 PM: geniso.dll (ID = 0)
1:32 PM: crystal2_16_9.jpg (ID = 0)
1:32 PM: cdrom.dll (ID = 0)
1:32 PM: nehdblkaccess.dll (ID = 0)
1:32 PM: defconvertor.dll (ID = 0)
1:32 PM: neroshowtime_eng.chm (ID = 0)
1:32 PM: defconvertor.dll (ID = 0)
1:33 PM: easter_egg4_3.jpg (ID = 0)
1:33 PM: disco.nct (ID = 0)
1:33 PM: mmtools.dll (ID = 0)
1:33 PM: mmtools.dll (ID = 0)
1:33 PM: genudf.dll (ID = 0)
1:33 PM: nevcdengine.dll (ID = 0)
1:33 PM: first_school16_9.jpg (ID = 0)
1:33 PM: barbecue16_9.jpg (ID = 0)
1:33 PM: light_r3_16_9.jpg (ID = 0)
1:33 PM: jazz_classical.nct (ID = 0)
1:33 PM: leaves6_16_9.jpg (ID = 0)
1:33 PM: nerosoundtrax_eng.pdf (ID = 0)
1:33 PM: def.dat (ID = 0)
1:33 PM: textile3_16_9.jpg (ID = 0)
1:34 PM: greencove16_9.jpg (ID = 0)
1:34 PM: leaves10_16_9.jpg (ID = 0)
1:34 PM: leaves11_16_9.jpg (ID = 0)
1:34 PM: prism_ef_16_9.jpg (ID = 0)
1:34 PM: wnaspi32.dll (ID = 0)
1:34 PM: audiodata_b&w.nct (ID = 0)
1:34 PM: neroamp.dll (ID = 0)
1:34 PM: metal_f0_16_9.jpg (ID = 0)
1:34 PM: apreg.dll (ID = 0)
1:34 PM: vocal.nct (ID = 0)
1:34 PM: nerodb.dll (ID = 0)
1:34 PM: neroburningrom_eng.chm (ID = 0)
1:34 PM: light_r4_16_9.jpg (ID = 0)
1:34 PM: sardines_16_9.jpg (ID = 0)
1:34 PM: def.dat (ID = 0)
1:34 PM: graffiti_16_9.jpg (ID = 0)
1:34 PM: dsp_scaleplugin.dll (ID = 0)
1:34 PM: vegetables_4_3.jpg (ID = 0)
1:34 PM: prism_e4_4_3.jpg (ID = 0)
1:34 PM: flower12_4_3.jpg (ID = 0)
1:34 PM: nerocom.dll (ID = 0)
1:35 PM: neroshx.dll (ID = 0)
1:35 PM: neroshx.dll (ID = 0)
1:35 PM: neroshx.dll (ID = 0)
1:35 PM: gcfx.dll (ID = 0)
1:35 PM: drwebase.vdb (ID = 0)
1:35 PM: rock.nct (ID = 0)
1:35 PM: nerocoverdesigner_eng.chm (ID = 0)
1:35 PM: audiodata.nct (ID = 0)
1:35 PM: nevideo.ax (ID = 0)
1:35 PM: coverdes.exe (ID = 0)
1:35 PM: cdi_vcd.cfg (ID = 0)
1:35 PM: hfrebirth.pre (ID = 0)
1:35 PM: afterglow.nvp (ID = 0)
1:35 PM: black hole.nvp (ID = 0)
1:35 PM: bouncing betty.nvp (ID = 0)
1:35 PM: colorspray.nvp (ID = 0)
1:36 PM: crunch.nvp (ID = 0)
1:36 PM: dances with sprites.nvp (ID = 0)
1:36 PM: deep dive.nvp (ID = 0)
1:36 PM: drunk.nvp (ID = 0)
1:36 PM: groovy plasma.nvp (ID = 0)
1:36 PM: hotlines.nvp (ID = 0)
1:36 PM: ieltjes thing 2.nvp (ID = 0)
1:36 PM: in and out.nvp (ID = 0)
1:36 PM: inside.nvp (ID = 0)
1:36 PM: into the deep.nvp (ID = 0)
1:36 PM: kaleidoscope.nvp (ID = 0)
1:36 PM: plant.nvp (ID = 0)
1:36 PM: plumeau.nvp (ID = 0)
1:36 PM: quantum tunnel.nvp (ID = 0)
1:36 PM: renderexample2.nvp (ID = 0)
1:37 PM: ring.nvp (ID = 0)
1:37 PM: shining star.nvp (ID = 0)
1:37 PM: spacy.nvp (ID = 0)
1:37 PM: sparklin'.nvp (ID = 0)
1:37 PM: spiderrag.nvp (ID = 0)
1:37 PM: spin art.nvp (ID = 0)
1:37 PM: spyrodelic.nvp (ID = 0)
1:37 PM: squares.nvp (ID = 0)
1:37 PM: starfield.nvp (ID = 0)
1:37 PM: symmetry to the point.nvp (ID = 0)
1:37 PM: torus.nvp (ID = 0)
1:37 PM: waterfall.nvp (ID = 0)
1:37 PM: wormhole.nvp (ID = 0)
1:37 PM: cdi_vcd.cfg (ID = 0)
1:37 PM: cdi_vcd.cfg (ID = 0)
1:37 PM: hfrebirth.pre (ID = 0)
1:37 PM: afterglow.nvp (ID = 0)
1:38 PM: black hole.nvp (ID = 0)
1:38 PM: bouncing betty.nvp (ID = 0)
1:38 PM: colorspray.nvp (ID = 0)
1:38 PM: crunch.nvp (ID = 0)
1:38 PM: dances with sprites.nvp (ID = 0)
1:38 PM: deep dive.nvp (ID = 0)
1:38 PM: drunk.nvp (ID = 0)
1:38 PM: groovy plasma.nvp (ID = 0)
1:38 PM: hotlines.nvp (ID = 0)
1:38 PM: ieltjes thing 2.nvp (ID = 0)
1:38 PM: in and out.nvp (ID = 0)
1:38 PM: inside.nvp (ID = 0)
1:38 PM: into the deep.nvp (ID = 0)
1:38 PM: kaleidoscope.nvp (ID = 0)
1:39 PM: plant.nvp (ID = 0)
1:39 PM: plumeau.nvp (ID = 0)
1:39 PM: quantum tunnel.nvp (ID = 0)
1:39 PM: renderexample2.nvp (ID = 0)
1:39 PM: ring.nvp (ID = 0)
1:39 PM: shining star.nvp (ID = 0)
1:39 PM: spacy.nvp (ID = 0)
1:39 PM: sparklin'.nvp (ID = 0)
1:39 PM: spiderrag.nvp (ID = 0)
1:39 PM: spin art.nvp (ID = 0)
1:39 PM: spyrodelic.nvp (ID = 0)
1:39 PM: squares.nvp (ID = 0)
1:39 PM: starfield.nvp (ID = 0)
1:39 PM: symmetry to the point.nvp (ID = 0)
1:39 PM: torus.nvp (ID = 0)
1:39 PM: waterfall.nvp (ID = 0)
1:39 PM: wormhole.nvp (ID = 0)
1:39 PM: cdi_vcd.cfg (ID = 0)
1:39 PM: cdi_vcd.cfg (ID = 0)
1:40 PM: hfrebirth.pre (ID = 0)
1:40 PM: afterglow.nvp (ID = 0)
1:40 PM: black hole.nvp (ID = 0)
1:40 PM: bouncing betty.nvp (ID = 0)
1:40 PM: colorspray.nvp (ID = 0)
1:40 PM: crunch.nvp (ID = 0)
1:40 PM: dances with sprites.nvp (ID = 0)
1:40 PM: deep dive.nvp (ID = 0)
1:40 PM: drunk.nvp (ID = 0)
1:40 PM: groovy plasma.nvp (ID = 0)
1:40 PM: hotlines.nvp (ID = 0)
1:40 PM: ieltjes thing 2.nvp (ID = 0)
1:40 PM: in and out.nvp (ID = 0)
1:40 PM: inside.nvp (ID = 0)
1:40 PM: into the deep.nvp (ID = 0)
1:40 PM: kaleidoscope.nvp (ID = 0)
1:40 PM: plant.nvp (ID = 0)
1:41 PM: plumeau.nvp (ID = 0)
1:41 PM: quantum tunnel.nvp (ID = 0)
1:41 PM: renderexample2.nvp (ID = 0)
1:41 PM: ring.nvp (ID = 0)
1:41 PM: shining star.nvp (ID = 0)
1:41 PM: spacy.nvp (ID = 0)
1:41 PM: sparklin'.nvp (ID = 0)
1:41 PM: spiderrag.nvp (ID = 0)
1:41 PM: spin art.nvp (ID = 0)
1:41 PM: spyrodelic.nvp (ID = 0)
1:41 PM: squares.nvp (ID = 0)
1:41 PM: starfield.nvp (ID = 0)
1:41 PM: symmetry to the point.nvp (ID = 0)
1:41 PM: torus.nvp (ID = 0)
1:41 PM: waterfall.nvp (ID = 0)
1:41 PM: wormhole.nvp (ID = 0)
1:41 PM: cdi_vcd.cfg (ID = 0)
1:41 PM: cdi_vcd.cfg (ID = 0)
1:42 PM: File Sweep Complete, Elapsed Time: 01:19:08
1:42 PM: Full Sweep has completed. Elapsed time 01:29:16
1:42 PM: Traces Found: 1824
1:49 PM: Your spyware definitions have been updated.
********
1:26 PM: | Start of Session, Monday, November 07, 2005 |
1:26 PM: Spy Sweeper started
1:26 PM: Sweep initiated using definitions version 567
1:26 PM: Starting Memory Sweep
1:38 PM: Memory Sweep Complete, Elapsed Time: 00:11:45
1:38 PM: Starting Registry Sweep
1:38 PM: Found Adware: blazefind
1:38 PM: HKLM\software\classes\winservadx.installer\ (3 subtraces) (ID = 104512)
1:38 PM: HKLM\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/winservadx.dll\ (2 subtraces) (ID = 104527)
1:38 PM: HKCR\winservadx.installer\ (3 subtraces) (ID = 104577)
1:38 PM: Found Adware: delfin
1:38 PM: HKLM\software\microsoft\windows\currentversion\run\ || nsvcin (ID = 124867)
1:38 PM: HKLM\software\nsvcin\ (2 subtraces) (ID = 124886)
1:39 PM: Found Adware: directrevenue-abetterinternet
1:39 PM: HKLM\software\sdf7sdfgs324\ (ID = 146129)
1:39 PM: Found Adware: couponage
1:39 PM: HKLM\software\dealsonline\.data\ (2853 subtraces) (ID = 639276)
1:39 PM: Found Adware: ebates money maker
1:39 PM: HKU\S-1-5-21-2052111302-1060284298-1199715987-1003\software\microsoft\internet explorer\extensions\cmdmapping\ || {6685509e-b47b-4f47-8e16-9a5f3a62f683} (ID = 125587)
1:39 PM: Found Adware: instant access
1:39 PM: HKU\S-1-5-21-2052111302-1060284298-1199715987-1003\software\microsoft\windows\currentversion\wintrust\trust providers\software publishing\trust database\0\ || goicfboogidikkejccmclpieicihhlpo bgdjdn (ID = 128845)
1:39 PM: Registry Sweep Complete, Elapsed Time:00:00:51
1:39 PM: Starting Cookie Sweep
1:39 PM: Found Spy Cookie: 2o7.net cookie
1:39 PM: [email protected][1].txt (ID = 1957)
1:39 PM: Found Spy Cookie: 888 cookie
1:39 PM: [email protected][2].txt (ID = 2019)
1:39 PM: Found Spy Cookie: websponsors cookie
1:39 PM: [email protected][2].txt (ID = 3665)
1:39 PM: Found Spy Cookie: about cookie
1:39 PM: [email protected][1].txt (ID = 2037)
1:39 PM: Found Spy Cookie: yieldmanager cookie
1:39 PM: [email protected][2].txt (ID = 3751)
1:39 PM: Found Spy Cookie: adecn cookie
1:39 PM: [email protected][1].txt (ID = 2063)
1:39 PM: Found Spy Cookie: adknowledge cookie
1:39 PM: [email protected][2].txt (ID = 2072)
1:39 PM: Found Spy Cookie: hbmediapro cookie
1:39 PM: [email protected][2].txt (ID = 2768)
1:39 PM: Found Spy Cookie: hotbar cookie
1:39 PM: [email protected][2].txt (ID = 4207)
1:39 PM: Found Spy Cookie: specificclick.com cookie
1:39 PM: [email protected][2].txt (ID = 3400)
1:39 PM: Found Spy Cookie: adprofile cookie
1:39 PM: [email protected][2].txt (ID = 2084)
1:39 PM: Found Spy Cookie: adrevolver cookie
1:39 PM: [email protected][1].txt (ID = 2088)
1:39 PM: [email protected][3].txt (ID = 2088)
1:39 PM: Found Spy Cookie: addynamix cookie
1:39 PM: [email protected][2].txt (ID = 2062)
1:39 PM: Found Spy Cookie: cc214142 cookie
1:39 PM: [email protected][2].txt (ID = 2367)
1:39 PM: Found Spy Cookie: pointroll cookie
1:39 PM: [email protected][2].txt (ID = 3148)
1:39 PM: Found Spy Cookie: advertising cookie
1:39 PM: [email protected][2].txt (ID = 2175)
1:39 PM: [email protected][1].txt (ID = 2038)
1:39 PM: Found Spy Cookie: falkag cookie
1:39 PM: [email protected][1].txt (ID = 2650)
1:39 PM: [email protected][2].txt (ID = 2650)
1:39 PM: Found Spy Cookie: ask cookie
1:39 PM: [email protected][1].txt (ID = 2245)
1:39 PM: Found Spy Cookie: atlas dmt cookie
1:39 PM: [email protected][2].txt (ID = 2253)
1:39 PM: Found Spy Cookie: belnk cookie
1:39 PM: [email protected][2].txt (ID = 2293)
1:39 PM: Found Spy Cookie: atwola cookie
1:39 PM: [email protected][1].txt (ID = 2255)
1:39 PM: Found Spy Cookie: azjmp cookie
1:39 PM: [email protected][1].txt (ID = 2270)
1:39 PM: Found Spy Cookie: banner cookie
1:39 PM: [email protected][1].txt (ID = 2276)
1:39 PM: [email protected][2].txt (ID = 2292)
1:39 PM: Found Spy Cookie: belointeractive cookie
1:39 PM: [email protected][2].txt (ID = 2294)
1:39 PM: Found Spy Cookie: bizrate cookie
1:39 PM: [email protected][1].txt (ID = 2308)
1:39 PM: [email protected][1].txt (ID = 1958)
1:39 PM: Found Spy Cookie: casalemedia cookie
1:39 PM: [email protected][1].txt (ID = 2354)
1:39 PM: Found Spy Cookie: 360i cookie
1:39 PM: [email protected][2].txt (ID = 1962)
1:39 PM: [email protected][1].txt (ID = 2293)
1:39 PM: Found Spy Cookie: ru4 cookie
1:39 PM: [email protected][2].txt (ID = 3269)
1:39 PM: [email protected][1].txt (ID = 1958)
1:39 PM: [email protected][1].txt (ID = 2038)
1:39 PM: Found Spy Cookie: fastclick cookie
1:39 PM: [email protected][2].txt (ID = 2651)
1:39 PM: Found Spy Cookie: starware.com cookie
1:39 PM: [email protected][2].txt (ID = 3442)
1:39 PM: Found Spy Cookie: clickandtrack cookie
1:39 PM: [email protected][1].txt (ID = 2397)
1:39 PM: Found Spy Cookie: howstuffworks cookie
1:39 PM: [email protected][2].txt (ID = 2805)
1:39 PM: [email protected][1].txt (ID = 2038)
1:39 PM: Found Spy Cookie: screensavers.com cookie
1:39 PM: [email protected][2].txt (ID = 3298)
1:39 PM: Found Spy Cookie: ic-live cookie
1:39 PM: [email protected][1].txt (ID = 2821)
1:39 PM: Found Spy Cookie: linksynergy cookie
1:39 PM: [email protected][1].txt (ID = 2926)
1:39 PM: Found Spy Cookie: maxserving cookie
1:39 PM: [email protected][1].txt (ID = 2966)
1:39 PM: douglas[email protected][1].txt (ID = 1958)
1:39 PM: Found Spy Cookie: oinadserve cookie
1:39 PM: [email protected][1].txt (ID = 3091)
1:39 PM: Found Spy Cookie: touchclarity cookie
1:39 PM: [email protected][2].txt (ID = 3567)
1:39 PM: Found Spy Cookie: partypoker cookie
1:39 PM: [email protected][2].txt (ID = 3111)
1:39 PM: Found Spy Cookie: paypopup cookie
1:39 PM: [email protected][2].txt (ID = 3119)
1:39 PM: Found Spy Cookie: overture cookie
1:39 PM: [email protected][1].txt (ID = 3106)
1:39 PM: [email protected][1].txt (ID = 2038)
1:39 PM: Found Spy Cookie: stamps.com cookie
1:39 PM: [email protected][1].txt (ID = 3438)
1:39 PM: [email protected][1].txt (ID = 2038)
1:39 PM: Found Spy Cookie: questionmarket cookie
1:39 PM: [email protected][2].txt (ID = 3217)
1:39 PM: Found Spy Cookie: affiliatefuel.com cookie
1:39 PM: [email protected][1].txt (ID = 2202)
1:39 PM: Found Spy Cookie: directtrack cookie
1:39 PM: [email protected][2].txt (ID = 2528)
1:39 PM: Found Spy Cookie: realmedia cookie
1:39 PM: [email protected][2].txt (ID = 3235)
1:39 PM: Found Spy Cookie: revenue.net cookie
1:39 PM: [email protected][2].txt (ID = 3257)
1:39 PM: Found Spy Cookie: rn11 cookie
1:39 PM: [email protected][1].txt (ID = 3261)
1:39 PM: [email protected][1].txt (ID = 2806)
1:39 PM: Found Spy Cookie: servedby advertising cookie
1:39 PM: [email protected][1].txt (ID = 3335)
1:39 PM: Found Spy Cookie: serving-sys cookie
1:39 PM: [email protected][2].txt (ID = 3343)
1:39 PM: [email protected][2].txt (ID = 3437)
1:39 PM: [email protected][2].txt (ID = 3441)
1:39 PM: Found Spy Cookie: reliablestats cookie
1:39 PM: [email protected][2].txt (ID = 3254)
1:39 PM: Found Spy Cookie: tracking cookie
1:39 PM: [email protected][1].txt (ID = 3571)
1:39 PM: Found Spy Cookie: tradedoubler cookie
1:39 PM: [email protected][1].txt (ID = 3575)
1:39 PM: Found Spy Cookie: trafficmp cookie
1:39 PM: [email protected][1].txt (ID = 3581)
1:39 PM: Found Spy Cookie: tribalfusion cookie
1:39 PM: [email protected][1].txt (ID = 3589)
1:39 PM: Found Spy Cookie: burstbeacon cookie
1:39 PM: [email protected][2].txt (ID = 2335)
1:39 PM: [email protected][2].txt (ID = 3298)
1:39 PM: [email protected][1].txt (ID = 3438)
1:39 PM: Found Spy Cookie: seeq cookie
1:39 PM: [email protected][1].txt (ID = 3332)
1:39 PM: [email protected][2].txt (ID = 3749)
1:39 PM: Found Spy Cookie: adserver cookie
1:39 PM: [email protected][1].txt (ID = 2142)
1:39 PM: Cookie Sweep Complete, Elapsed Time: 00:00:07
1:39 PM: Starting File Sweep
1:39 PM: c:\documents and settings\all users.windows\application data\wsxs (17 subtraces) (ID = -2147481131)
1:39 PM: c:\documents and settings\all users.windows\application data\vmss (1 subtraces) (ID = -2147481132)
1:40 PM: Found Adware: winad
1:40 PM: c:\program files\windows taskad (ID = -2147480014)
1:40 PM: Found Adware: ezula ilookup
1:40 PM: ppqb2.tmp (ID = 110368)
1:43 PM: delfintg.ebd (ID = 57693)
1:43 PM: Error: Access violation at address 004054FB in module 'WRSSSDK.exe'. Read of address 05000000.
1:44 PM: Found Adware: look2me
1:44 PM: pdutoenr.dll (ID = 65934)
1:45 PM: Found Adware: whenu save
1:45 PM: ppq19.tmp (ID = 74388)
1:47 PM: Error: Access violation at address 004054FB in module 'WRSSSDK.exe'. Read of address 05000000.
1:47 PM: Found Adware: keyhost hijacker - jraun
1:47 PM: xizitb (ID = 65171)
1:48 PM: qwe (ID = 65171)
1:48 PM: Found Adware: 180search assistant/zango
1:48 PM: ncase.ini (ID = 70576)
1:48 PM: nim (ID = 65171)
1:48 PM: tracker7.exe (ID = 57793)
1:49 PM: mlcib6 (ID = 65171)
1:49 PM: Found Adware: altnet
1:49 PM: mysearch.cab (ID = 49849)
1:49 PM: adm25.dll (ID = 49782)
1:49 PM: phs3d (ID = 65171)
1:49 PM: dminstall2.cab (ID = 49825)
1:49 PM: tbjh9 (ID = 65171)
1:49 PM: iji (ID = 65171)
1:49 PM: delfinlo.ebd (ID = 57687)
1:50 PM: Found Adware: brilliant digital
1:50 PM: bdefdi.dll (ID = 51746)
1:50 PM: adm4.dll (ID = 49779)
1:50 PM: bdedownloader.dll (ID = 51741)
1:50 PM: bdedata2.dll (ID = 51739)
1:51 PM: dman25.dll (ID = 49816)
1:51 PM: Found Adware: squiresearch
1:51 PM: searchsquire33.inf (ID = 76864)
1:52 PM: Error: Access violation at address 004054FB in module 'WRSSSDK.exe'. Read of address 05000000.
1:52 PM: admfdi.dll (ID = 49789)
1:52 PM: Found Adware: keenvalue/perfectnav
1:52 PM: setup_incred_6.exe (ID = 64939)
1:54 PM: admprog.dll (ID = 49790)
1:56 PM: admdata.dll (ID = 49784)
1:57 PM: cpd9 (ID = 65171)
1:58 PM: Found Adware: bullguard popup ad
1:58 PM: bulldownload.exe (ID = 52017)
 

·
Registered
Joined
·
4 Posts
Discussion Starter #5
Now what (pt 3)

2:01 PM: admdloader.dll (ID = 49786)
2:02 PM: oie (ID = 65171)
2:03 PM: vaezyy (ID = 65171)
2:04 PM: Error: Access violation at address 004054FB in module 'WRSSSDK.exe'. Read of address 05000000.
2:04 PM: vwgoou (ID = 65171)
2:14 PM: delfinst.ebd (ID = 57692)
2:21 PM: Found Adware: purityscan
2:21 PM: searchinstall.exe (ID = 73267)
2:25 PM: dminfo2.cab (ID = 49821)
2:30 PM: remove.exe (ID = 64958)
2:30 PM: Found Adware: mindset interactive - favoriteman
2:30 PM: im64.dll (ID = 69841)
2:31 PM: delfinco.edx (ID = 57680)
2:31 PM: delfinbd.edx (ID = 57680)
2:31 PM: delfined.edx (ID = 57680)
2:31 PM: delfinld.edx (ID = 57680)
2:31 PM: delfinid.edx (ID = 57684)
2:31 PM: delfindl.edx (ID = 57680)
2:31 PM: delfinaf.edx (ID = 57679)
2:31 PM: delfinky.edx (ID = 57685)
2:31 PM: delfinsi.edx (ID = 57684)
2:31 PM: Found Adware: twain-tech
2:31 PM: ppq53.tmp (ID = 81856)
2:31 PM: twaintec.inf (ID = 81890)
2:31 PM: belt.inf (ID = 83154)
2:31 PM: twtini.inf (ID = 81897)
2:31 PM: alchem.inf (ID = 83109)
2:31 PM: biini.inf (ID = 83199)
2:31 PM: Found Adware: ieplugin
2:31 PM: wininit.ini (ID = 63389)
2:31 PM: Found Adware: isearch desktop search
2:31 PM: deskbar.ini (ID = 64321)
2:31 PM: Found System Monitor: potentially rootkit-masked files
2:31 PM: nmpeqlz.dll (ID = 0)
2:31 PM: generatr.dll (ID = 0)
2:31 PM: vocal.nct (ID = 0)
2:31 PM: data_b&w.nct (ID = 0)
2:31 PM: vqfenclib1.dll (ID = 0)
2:31 PM: nempg.ax (ID = 0)
2:31 PM: circumvent.nvp (ID = 0)
2:31 PM: neroapi.dll (ID = 0)
2:31 PM: fuzzy.nvp (ID = 0)
2:31 PM: jazz.nct (ID = 0)
2:31 PM: nerocoverdesigner_eng.chm (ID = 0)
2:31 PM: cdspeed.exe (ID = 0)
2:31 PM: cdrom.dll (ID = 0)
2:32 PM: cdcopy.dll (ID = 0)
2:32 PM: easter_egg16_9.jpg (ID = 0)
2:32 PM: first_school4_3.jpg (ID = 0)
2:32 PM: neroipp.dll (ID = 0)
2:32 PM: leaves10_4_3.jpg (ID = 0)
2:32 PM: dosbootimage.ima (ID = 0)
2:32 PM: nevcdengine.dll (ID = 0)
2:32 PM: dosbootimage.ima (ID = 0)
2:32 PM: metal_p2_16_9.jpg (ID = 0)
2:32 PM: infotool.exe (ID = 0)
2:32 PM: msa.dll (ID = 0)
2:32 PM: dws114x.dll (ID = 0)
2:32 PM: dws114x.dll (ID = 0)
2:32 PM: readhd32.dll (ID = 0)
2:32 PM: neroburnrightshelp.dll (ID = 0)
2:32 PM: blobz.nvp (ID = 0)
2:32 PM: karaoke.dll (ID = 0)
2:32 PM: jelly wormz.nvp (ID = 0)
2:32 PM: insufficient dictionary.nvp (ID = 0)
2:32 PM: owww.nvp (ID = 0)
2:32 PM: need sunglassez.nvp (ID = 0)
2:32 PM: nice.nvp (ID = 0)
2:32 PM: gencush.dll (ID = 0)
2:32 PM: mp3pro_hlp.dll (ID = 0)
2:32 PM: mp3pro_dmo.dll (ID = 0)
2:32 PM: hexagon_button.png (ID = 0)
2:32 PM: stairways.nvp (ID = 0)
2:32 PM: tubes.nvp (ID = 0)
2:32 PM: default.skn (ID = 0)
2:32 PM: explosion.nvp (ID = 0)
2:32 PM: dvd_button_4.png (ID = 0)
2:32 PM: nres_eng.msg (ID = 0)
2:32 PM: dvd_button_5.png (ID = 0)
2:32 PM: amcdom.dll (ID = 0)
2:32 PM: amcdom.dll (ID = 0)
2:32 PM: neroburnrights_eng.chm (ID = 0)
2:32 PM: the black lotus.nvp (ID = 0)
2:32 PM: gdires32.dll (ID = 0)
2:32 PM: 8pointstar_button.png (ID = 0)
2:32 PM: pointsquare_button.png (ID = 0)
2:32 PM: karaoke.dll (ID = 0)
2:32 PM: equalizer.pre (ID = 0)
2:32 PM: explosion.nvp (ID = 0)
2:32 PM: neroburnrights_eng.chm (ID = 0)
2:32 PM: ebonyframe_button.png (ID = 0)
2:32 PM: dancing flower.nvp (ID = 0)
2:32 PM: stocks.dat (ID = 0)
2:32 PM: nres_fra.msg (ID = 0)
2:32 PM: jazz_classical.nct (ID = 0)
2:32 PM: jazz_classical.nct (ID = 0)
2:32 PM: jazz_classical.nct (ID = 0)
2:32 PM: jazz_classical.nct (ID = 0)
2:32 PM: gcfilter.ax (ID = 0)
2:32 PM: nerocoverdesigner_eng.pdf (ID = 0)
2:32 PM: aacenc32.dll (ID = 0)
2:32 PM: mmtools.dll (ID = 0)
2:32 PM: genudf.dll (ID = 0)
2:32 PM: dynamicprocessor.pre (ID = 0)
2:32 PM: flower3_16_9.jpg (ID = 0)
2:32 PM: Warning: DDAFileExists failed to resolve the MFT number for: c:\documents and settings\douglas.douglas-y359tzb\local settings\temp\temporary directory 13 for ( software ) nero burning rom 6.0 ultra edition incl keygen & serial.zip\nero.burning.rom.6.0.ultra.edition.incl.keygen.&.serial\nero 6 ultra edition\common files\audioplugins\msa7\msa.dll.
2:32 PM: dws114x.dll (ID = 0)
2:32 PM: crystal3_16_9.jpg (ID = 0)
2:32 PM: light_r6_16_9.jpg (ID = 0)
2:32 PM: defconvertor.dll (ID = 0)
2:32 PM: denoise.pre (ID = 0)
2:32 PM: vcdengine.dll (ID = 0)
2:32 PM: wnaspi32.dll (ID = 0)
2:32 PM: def.dat (ID = 0)
2:32 PM: def.dat (ID = 0)
2:32 PM: cdr50s.dll (ID = 0)
2:32 PM: nevideoenc.ax (ID = 0)
2:32 PM: aacenc32.dll (ID = 0)
2:32 PM: backitup.exe (ID = 0)
2:32 PM: greenland16_9.jpg (ID = 0)
2:32 PM: shfolder.exe (ID = 0)
2:32 PM: nevcdengine.dll (ID = 0)
2:32 PM: delay.pre (ID = 0)
2:32 PM: nerowaveeditor_eng.chm (ID = 0)
2:32 PM: chorus.pre (ID = 0)
2:33 PM: vqfenclib1.dll (ID = 0)
2:33 PM: jazz.nct (ID = 0)
2:33 PM: drivespeed.exe (ID = 0)
2:33 PM: neromediacon.dll (ID = 0)
2:33 PM: neromediacon.dll (ID = 0)
2:33 PM: neromediacon.dll (ID = 0)
2:33 PM: neromediacon.dll (ID = 0)
2:33 PM: neromediacon.dll (ID = 0)
2:33 PM: default.bmp (ID = 0)
2:33 PM: expressui.dll (ID = 0)
2:33 PM: metal_f0_4_3.jpg (ID = 0)
2:33 PM: wmfdist.exe (ID = 0)
2:33 PM: bdant.cab (ID = 0)
2:33 PM: gclib.dll (ID = 0)
2:33 PM: gclib.dll (ID = 0)
2:33 PM: clippededges_button.png (ID = 0)
2:33 PM: dxnt.cab (ID = 0)
2:33 PM: directx.cab (ID = 0)
2:33 PM: expressui.dll (ID = 0)
2:33 PM: nerovision.exe (ID = 0)
2:33 PM: imagx5.dll (ID = 0)
2:33 PM: vocal.nct (ID = 0)
2:33 PM: vcdui.dll (ID = 0)
2:33 PM: vocal.nct (ID = 0)
2:33 PM: compilation.exe (ID = 0)
2:33 PM: vocal.nct (ID = 0)
2:33 PM: vocal.nct (ID = 0)
2:33 PM: wnaspi32.dll (ID = 0)
2:33 PM: gcfx.dll (ID = 0)
2:33 PM: ledmeter.ocx (ID = 0)
2:33 PM: ledmeter.ocx (ID = 0)
2:33 PM: nerocoverdesigner_eng.chm (ID = 0)
2:33 PM: nerocoverdesigner_eng.chm (ID = 0)
2:33 PM: effectctrl.ocx (ID = 0)
2:33 PM: effectctrl.ocx (ID = 0)
2:33 PM: wmfadist.exe (ID = 0)
2:33 PM: nerocoverdesigner_eng.pdf (ID = 0)
2:33 PM: nerocoverdesigner_eng.pdf (ID = 0)
2:33 PM: nerostartsmart.exe (ID = 0)
2:33 PM: metal_pl_16_9.jpg (ID = 0)
2:33 PM: ground8_16_9.jpg (ID = 0)
2:33 PM: nero6ultraeditionquickstart_eng.pdf (ID = 0)
2:33 PM: nero6ultraeditionquickstart_eng.pdf (ID = 0)
2:33 PM: wmfadist.exe (ID = 0)
2:33 PM: newtrf.dll (ID = 0)
2:33 PM: vfft.dll (ID = 0)
2:33 PM: soundtrax.exe (ID = 0)
2:33 PM: nerostartsmart.exe (ID = 0)
2:33 PM: gcfilter.ax (ID = 0)
2:33 PM: gcfilter.ax (ID = 0)
2:33 PM: gcfilter.ax (ID = 0)
2:33 PM: def.dat (ID = 0)
2:33 PM: dvd_button_3.png (ID = 0)
2:33 PM: metal_pl_16_9.jpg (ID = 0)
2:33 PM: nbj.exe (ID = 0)
2:33 PM: nbj.exe (ID = 0)
2:33 PM: nehdblkaccess.dll (ID = 0)
2:33 PM: infotool.exe.manifest (ID = 0)
2:33 PM: drivespeed.exe.manifest (ID = 0)
2:33 PM: coverdes.exe (ID = 0)
2:33 PM: audiodata_b&w.nct (ID = 0)
2:33 PM: neroshowtime_eng.pdf (ID = 0)
2:33 PM: audiocontrol.ocx (ID = 0)
2:33 PM: audiodata_b&w.nct (ID = 0)
2:33 PM: audiocontrol.ocx (ID = 0)
2:33 PM: nerocom.dll (ID = 0)
2:33 PM: mpgenc.dll (ID = 0)
2:33 PM: vcdui.dll (ID = 0)
2:33 PM: dancehiphop_b&w.nct (ID = 0)
2:33 PM: neroipp.dll (ID = 0)
2:33 PM: defconvertor.dll (ID = 0)
2:33 PM: msa.dll (ID = 0)
2:33 PM: cdcopy.dll (ID = 0)
2:33 PM: cdspeed.exe (ID = 0)
2:33 PM: equa_eng.prf (ID = 0)
2:33 PM: alienplanet4_3.jpg (ID = 0)
2:33 PM: vcddoc.dll (ID = 0)
2:33 PM: nevcdengine.dll (ID = 0)
2:34 PM: data_classic.nct (ID = 0)
2:34 PM: vcdengine.dll (ID = 0)
2:34 PM: leaves10_16_9.jpg (ID = 0)
2:34 PM: metal_p2_4_3.jpg (ID = 0)
2:34 PM: nres_ger.msg (ID = 0)
2:34 PM: metal_p2_16_9.jpg (ID = 0)
2:34 PM: dvd_button_2.png (ID = 0)
2:34 PM: wmpburn.exe (ID = 0)
2:34 PM: vqfenclib.dll (ID = 0)
2:34 PM: nerocbui.dll (ID = 0)
2:34 PM: cdu920.dll (ID = 0)
2:34 PM: audiodata.nct (ID = 0)
2:34 PM: audiodata.nct (ID = 0)
2:34 PM: nerocheck.exe (ID = 0)
2:34 PM: nefilesrc.ax (ID = 0)
2:34 PM: aiff.dll (ID = 0)
2:34 PM: nerodb.dll (ID = 0)
2:34 PM: aiff.dll (ID = 0)
2:34 PM: neroipp.dll (ID = 0)
2:34 PM: default.bmp (ID = 0)
2:34 PM: nerocoverdesigner_eng.pdf (ID = 0)
2:34 PM: gchw.dll (ID = 0)
2:34 PM: gchw.dll (ID = 0)
2:34 PM: newtrf.dll (ID = 0)
2:34 PM: dsetup.dll (ID = 0)
2:34 PM: nres_ita.msg (ID = 0)
2:34 PM: pdagreen.nps (ID = 0)
2:34 PM: necon.dll (ID = 0)
2:34 PM: necon.dll (ID = 0)
2:34 PM: imagedrv.inf (ID = 0)
2:34 PM: aacenc32.dll (ID = 0)
2:34 PM: infotool.exe (ID = 0)
2:34 PM: directx.cab (ID = 0)
2:34 PM: nres_jpn.msg (ID = 0)
2:34 PM: wmpburn.exe (ID = 0)
2:34 PM: backitup.exe (ID = 0)
2:34 PM: gcfilter.ax (ID = 0)
2:34 PM: gcfilter.ax (ID = 0)
2:34 PM: neroapi.dll (ID = 0)
2:34 PM: coveredctrl.ocx (ID = 0)
2:34 PM: nefilesrc.ax (ID = 0)
2:34 PM: coverdes.exe (ID = 0)
2:34 PM: dxnt.cab (ID = 0)
2:34 PM: rock.nct (ID = 0)
2:34 PM: rock.nct (ID = 0)
2:34 PM: expressdoc.dll (ID = 0)
2:34 PM: coveredctrl.ocx (ID = 0)
2:34 PM: shortcut.dll (ID = 0)
2:34 PM: msvcrt.dll (ID = 0)
2:34 PM: shortcut.dll (ID = 0)
2:34 PM: msvcrt.dll (ID = 0)
2:34 PM: nerowaveeditor_eng.pdf (ID = 0)
2:34 PM: dosbootimage.ima (ID = 0)
2:34 PM: coveredctrl.ocx (ID = 0)
2:34 PM: neroipp.dll (ID = 0)
2:34 PM: dvd_button_1.png (ID = 0)
2:34 PM: cdi_imag.rtf (ID = 0)
2:34 PM: coverdes.exe (ID = 0)
2:34 PM: metal_f2_4_3.jpg (ID = 0)
2:34 PM: nres_eng.msg (ID = 0)
2:34 PM: imagedrv.inf (ID = 0)
2:34 PM: amcuibase.dll (ID = 0)
2:34 PM: bda.cab (ID = 0)
2:34 PM: imagx5.dll (ID = 0)
2:34 PM: imagx5.dll (ID = 0)
2:34 PM: imagx5.dll (ID = 0)
2:34 PM: mfc42.dll (ID = 0)
2:34 PM: nerowaveeditor_eng.pdf (ID = 0)
2:34 PM: mp3pro.dll (ID = 0)
2:34 PM: mp3pro.dll (ID = 0)
2:35 PM: mp3pro.dll (ID = 0)
2:35 PM: mp3pro.dll (ID = 0)
2:35 PM: mp3pro.dll (ID = 0)
2:35 PM: cdu920.dll (ID = 0)
2:35 PM: cdu920.dll (ID = 0)
2:35 PM: dxsetup.exe (ID = 0)
2:35 PM: flower9_16_9.jpg (ID = 0)
2:35 PM: imagxpr5.dll (ID = 0)
2:35 PM: imagxpr5.dll (ID = 0)
2:35 PM: cdspeed_eng.chm (ID = 0)
2:35 PM: imagxpr5.dll (ID = 0)
2:35 PM: metal_f0_16_9.jpg (ID = 0)
2:35 PM: neroipp.dll (ID = 0)
2:35 PM: imagr5.dll (ID = 0)
2:35 PM: imagr5.dll (ID = 0)
2:35 PM: dvdengine.dll (ID = 0)
2:35 PM: showtime.exe (ID = 0)
2:35 PM: showtime.exe (ID = 0)
2:35 PM: Warning: DDAFileExists failed to resolve the MFT number for: c:\documents and settings\douglas.douglas-y359tzb\local settings\temp\temporary directory 4 for ( software ) nero burning rom 6.0 ultra edition incl keygen & serial.zip\nero.burning.rom.6.0.ultra.edition.incl.keygen.&.serial\nero 6 ultra edition\common files\audioplugins\msa7\msa.dll.
2:35 PM: shortcut.dll (ID = 0)
2:35 PM: naseditor.nvl (ID = 0)
2:35 PM: wav.dll (ID = 0)
2:35 PM: wav.dll (ID = 0)
2:35 PM: compilation.exe (ID = 0)
2:35 PM: jazz_classical.nct (ID = 0)
2:35 PM: leaves10_16_9.jpg (ID = 0)
2:35 PM: vegetables_16_9.jpg (ID = 0)
2:35 PM: imagegen.dll (ID = 0)
2:35 PM: nerocd95.vxd (ID = 0)
2:35 PM: atl.dll (ID = 0)
2:35 PM: halloween16_9.jpg (ID = 0)
2:35 PM: vaagheid galore.nvp (ID = 0)
2:35 PM: udfimporter.dll (ID = 0)
2:35 PM: image.dll (ID = 0)
2:35 PM: picn20.dll (ID = 0)
2:35 PM: spritescope.nvp (ID = 0)
2:35 PM: tomato2_16_9.jpg (ID = 0)
2:35 PM: artichoke2_4_3.jpg (ID = 0)
2:35 PM: nerowaveeditor_eng.chm (ID = 0)
2:35 PM: vis_nas.dll (ID = 0)
2:35 PM: artichoke2_16_9.jpg (ID = 0)
2:35 PM: nres_por.msg (ID = 0)
2:35 PM: circumvent.nvp (ID = 0)
2:35 PM: easter_egg16_9.jpg (ID = 0)
2:35 PM: diffuse_16_9.jpg (ID = 0)
2:35 PM: pentium.nvp (ID = 0)
2:35 PM: floor.nvp (ID = 0)
2:35 PM: zoomer.nvp (ID = 0)
2:35 PM: 5pointstar_button.png (ID = 0)
2:35 PM: dvd_button_0.png (ID = 0)
2:35 PM: quarter2_button.png (ID = 0)
2:35 PM: quarter3_button.png (ID = 0)
2:35 PM: quarter4_button.png (ID = 0)
2:35 PM: woodframe_button.png (ID = 0)
2:35 PM: metal_f0_16_9.jpg (ID = 0)
2:35 PM: stocks.dat (ID = 0)
2:35 PM: nero.txt (ID = 0)
2:35 PM: dancing flower.nvp (ID = 0)
2:35 PM: data_classic.nct (ID = 0)
2:35 PM: psychozoom.nvp (ID = 0)
2:35 PM: stocks.dat (ID = 0)
2:35 PM: nehdblkaccess.dll (ID = 0)
2:35 PM: nero.txt (ID = 0)
2:35 PM: 8pointstar_button.png (ID = 0)
2:35 PM: stocks.dat (ID = 0)
2:35 PM: dingdong.wav (ID = 0)
2:35 PM: evil germz.nvp (ID = 0)
2:35 PM: ieltjes carnaval.nvp (ID = 0)
2:36 PM: planar.nvp (ID = 0)
2:36 PM: dvd_button_6.png (ID = 0)
2:36 PM: pointframe_button.png (ID = 0)
2:36 PM: quarter1_button.png (ID = 0)
2:36 PM: stdole2.tlb (ID = 0)
2:36 PM: vcdengine.dll (ID = 0)
2:36 PM: vqfenclib1.dll (ID = 0)
2:36 PM: data_b&w.nct (ID = 0)
2:36 PM: data_b&w.nct (ID = 0)
2:36 PM: alienplanet16_9.jpg (ID = 0)
2:36 PM: dingdong.wav (ID = 0)
2:36 PM: wav.dll (ID = 0)
2:36 PM: wav.dll (ID = 0)
2:36 PM: audio_classic.nct (ID = 0)
2:36 PM: audiodata_classic.n (ID = 0)
2:36 PM: wav.dll (ID = 0)
2:36 PM: imagegen.dll (ID = 0)
2:36 PM: readhd32.dll (ID = 0)
2:36 PM: neroburnrightshelp.dll (ID = 0)
2:36 PM: sylvester16_9.jpg (ID = 0)
2:36 PM: greencove16_9.jpg (ID = 0)
2:36 PM: flower2_16_9.jpg (ID = 0)
2:36 PM: pdagreen.nps (ID = 0)
2:36 PM: vcddoc.dll (ID = 0)
2:36 PM: liquid.nvp (ID = 0)
2:36 PM: santa_claus16_9.jpg (ID = 0)
2:36 PM: readhd16.dll (ID = 0)
2:36 PM: nvdv.dll (ID = 0)
2:36 PM: greencove4_3.jpg (ID = 0)
2:36 PM: dvdui.dll (ID = 0)
2:36 PM: dvdui.dll (ID = 0)
2:36 PM: dvdui.dll (ID = 0)
2:36 PM: dvdui.dll (ID = 0)
2:36 PM: dvdblockacc.dll (ID = 0)
2:36 PM: cdspeed.exe.manifest (ID = 0)
2:36 PM: drivespeed.exe.manifest (ID = 0)
2:36 PM: infotool.exe.manifest (ID = 0)
2:36 PM: chorus.pre (ID = 0)
2:36 PM: delay.pre (ID = 0)
2:36 PM: denoise.pre (ID = 0)
2:36 PM: blobz.nvp (ID = 0)
2:36 PM: dynamicprocessor.pre (ID = 0)
2:36 PM: imagedrv.inf (ID = 0)
2:36 PM: equa_eng.prf (ID = 0)
2:36 PM: light_re_4_3.jpg (ID = 0)
2:36 PM: insufficient dictionary.nvp (ID = 0)
2:36 PM: need sunglassez.nvp (ID = 0)
2:36 PM: easter_egg16_9.jpg (ID = 0)
2:36 PM: stocks.dat (ID = 0)
2:36 PM: nero.txt (ID = 0)
2:36 PM: graffiti_4_3.jpg (ID = 0)
2:36 PM: crystal3_16_9.jpg (ID = 0)
2:36 PM: gdipainter.dll (ID = 0)
2:36 PM: jelly wormz.nvp (ID = 0)
2:36 PM: llight_r7_16_9.jpg (ID = 0)
2:36 PM: easter_egg4_3.jpg (ID = 0)
2:36 PM: artichoke2_16_9.jpg (ID = 0)
2:36 PM: nice.nvp (ID = 0)
2:36 PM: alienplanet16_9.jpg (ID = 0)
2:36 PM: dvdui.dll (ID = 0)
2:36 PM: zoomer.nvp (ID = 0)
2:36 PM: plasma.nvp (ID = 0)
2:36 PM: mp3pro_hlp.dll (ID = 0)
2:36 PM: neroipp.dll (ID = 0)
2:36 PM: 5pointstar_button.png (ID = 0)
2:36 PM: dancehiphop.nct (ID = 0)
2:36 PM: dvd_button_0.png (ID = 0)
2:36 PM: slime.nvp (ID = 0)
2:36 PM: watermorph.nvp (ID = 0)
2:36 PM: compmem.dll (ID = 0)
2:36 PM: nerocd95.vxd (ID = 0)
2:36 PM: picn20.dll (ID = 0)
2:36 PM: htmlgallery.dll (ID = 0)
2:36 PM: flower4_16_9.jpg (ID = 0)
2:36 PM: nevideofx.bitmaps (ID = 0)
2:36 PM: nerocd95.vxd (ID = 0)
2:36 PM: htmlgallery.dll (ID = 0)
2:36 PM: picn20.dll (ID = 0)
2:36 PM: llight_r7_16_9.jpg (ID = 0)
2:37 PM: liquid.nvp (ID = 0)
2:37 PM: plasma.nvp (ID = 0)
2:37 PM: nerocd95.vxd (ID = 0)
2:37 PM: neroipp.dll (ID = 0)
2:37 PM: neroipp.dll (ID = 0)
2:37 PM: picn20.dll (ID = 0)
2:37 PM: light_r2_16_9.jpg (ID = 0)
2:37 PM: neroadb.dll (ID = 0)
2:37 PM: manageddx.cab (ID = 0)
2:37 PM: data_b&w.nct (ID = 0)
2:37 PM: liquid.nvp (ID = 0)
2:37 PM: light_re_16_9.jpg (ID = 0)
2:37 PM: nerocd95.vxd (ID = 0)
2:37 PM: picn20.dll (ID = 0)
2:37 PM: stocks.dat (ID = 0)
2:37 PM: Warning: DDAFileExists failed to resolve the MFT number for: c:\documents and settings\douglas.douglas-y359tzb\local settings\temp\temporary directory 3 for ( software ) nero burning rom 6.0 ultra edition incl keygen & serial.zip\nero.burning.rom.6.0.ultra.edition.incl.keygen.&.serial\nero 6 ultra edition\common files\audioplugins\msa7\msa.dll.
2:37 PM: nero.txt (ID = 0)
2:37 PM: metal_p2_16_9.jpg (ID = 0)
2:37 PM: neroexpress_eng.pdf (ID = 0)
2:37 PM: equalizer.pre (ID = 0)
2:37 PM: plasma.nvp (ID = 0)
2:37 PM: quarter2_button.png (ID = 0)
2:37 PM: psychozoom.nvp (ID = 0)
2:37 PM: stocks.dat (ID = 0)
2:37 PM: slime.nvp (ID = 0)
2:37 PM: watermorph.nvp (ID = 0)
2:37 PM: compmem.dll (ID = 0)
2:37 PM: nero.txt (ID = 0)
2:37 PM: light_r9_16_9.jpg (ID = 0)
2:37 PM: htmlgallery.dll (ID = 0)
2:37 PM: light_r8_4_3.jpg (ID = 0)
2:37 PM: dvdblockacc.dll (ID = 0)
2:37 PM: nevideofx.bitmaps (ID = 0)
2:37 PM: oleaut32.dll (ID = 0)
2:37 PM: light_r9_4_3.jpg (ID = 0)
2:37 PM: oleaut32.dll (ID = 0)
2:37 PM: htmlgallery.dll (ID = 0)
2:37 PM: vegetables2_4_3.jpg (ID = 0)
2:37 PM: leaves11_16_9.jpg (ID = 0)
2:37 PM: slime.nvp (ID = 0)
2:37 PM: nemp3hlp.dll (ID = 0)
2:37 PM: aacmp32.dll (ID = 0)
2:37 PM: generatr.dll (ID = 0)
2:37 PM: flower12_16_9.jpg (ID = 0)
2:37 PM: watermorph.nvp (ID = 0)
2:37 PM: gdires16.dll (ID = 0)
2:37 PM: neaudioconv.ax (ID = 0)
2:37 PM: marble_button.png (ID = 0)
2:37 PM: gencush.dll (ID = 0)
2:37 PM: audiopluginmgr.dll (ID = 0)
2:37 PM: generatr.dll (ID = 0)
2:37 PM: gencush.dll (ID = 0)
2:37 PM: nve-mtmpl.bin (ID = 0)
2:37 PM: leaves10_16_9.jpg (ID = 0)
2:37 PM: nerender.ax (ID = 0)
2:37 PM: nemp3hlp.dll (ID = 0)
2:37 PM: imagedrive.cpl (ID = 0)
2:37 PM: neroipp.dll (ID = 0)
2:37 PM: aacmp32.dll (ID = 0)
2:37 PM: default.bmp (ID = 0)
2:37 PM: metal_f2_16_9.jpg (ID = 0)
2:37 PM: mp3pro_dmo.dll (ID = 0)
2:37 PM: generatr.dll (ID = 0)
2:37 PM: imagr5.dll (ID = 0)
2:37 PM: nerocbui.dll (ID = 0)
2:37 PM: vqf.dll (ID = 0)
2:37 PM: vqf.dll (ID = 0)
2:37 PM: neroscsi.dll (ID = 0)
2:37 PM: vegetables2_16_9.jpg (ID = 0)
2:37 PM: compmem.dll (ID = 0)
2:37 PM: tomato1_16_9.jpg (ID = 0)
2:37 PM: shfolder.exe (ID = 0)
2:37 PM: alienplanet4_3.jpg (ID = 0)
2:37 PM: htmlgallery.dll (ID = 0)
2:37 PM: nevideofx.bitmaps (ID = 0)
2:37 PM: mp3pro_hlp.dll (ID = 0)
2:37 PM: vqfenclib1.dll (ID = 0)
2:37 PM: vqfenclib1.dll (ID = 0)
2:37 PM: data_b&w.nct (ID = 0)
2:37 PM: cdrom.cfg (ID = 0)
2:37 PM: cdrom.cfg (ID = 0)
2:37 PM: vqf.dll (ID = 0)
2:37 PM: htmlgallery.dll (ID = 0)
2:38 PM: msa.dll (ID = 0)
2:38 PM: neaudioconv.ax (ID = 0)
2:38 PM: nefilesrc.ax (ID = 0)
2:38 PM: marble_button.png (ID = 0)
2:38 PM: vcdengine.dll (ID = 0)
2:38 PM: gencush.dll (ID = 0)
2:38 PM: necapture.ax (ID = 0)
2:38 PM: nres_fra.msg (ID = 0)
2:38 PM: audiopluginmgr.dll (ID = 0)
2:38 PM: msa.dll (ID = 0)
2:38 PM: cdcopy.dll (ID = 0)
2:38 PM: dancehiphop.nct (ID = 0)
2:38 PM: neromediacon.dll (ID = 0)
2:38 PM: nevcr.ax (ID = 0)
2:38 PM: twinvq2.cdb (ID = 0)
2:38 PM: twinvq2.cdb (ID = 0)
2:38 PM: twinvq2.cdb (ID = 0)
2:38 PM: twinvq2.cdb (ID = 0)
2:38 PM: karaoke.dll (ID = 0)
2:38 PM: aacmp32.dll (ID = 0)
2:38 PM: generatr.dll (ID = 0)
2:38 PM: ndparser.ax (ID = 0)
2:38 PM: light_r9_16_9.jpg (ID = 0)
2:38 PM: light_r9_16_9.jpg (ID = 0)
2:38 PM: audiopluginmgr.dll (ID = 0)
2:38 PM: nvdv.dll (ID = 0)
2:38 PM: equalize.dll (ID = 0)
2:38 PM: eula_eng.txt (ID = 0)
2:38 PM: flower10_16_9.jpg (ID = 0)
2:38 PM: audiopluginmgr.dll (ID = 0)
2:38 PM: generatr.dll (ID = 0)
2:38 PM: vcddoc.dll (ID = 0)
2:38 PM: imagedrv.mpd (ID = 0)
2:38 PM: gdires16.dll (ID = 0)
2:38 PM: quarter3_button.png (ID = 0)
2:38 PM: aiff.dll (ID = 0)
2:38 PM: downloaders.dll (ID = 0)
2:38 PM: flanger.pre (ID = 0)
2:38 PM: reverb.pre (ID = 0)
2:38 PM: timecorrection.pre (ID = 0)
2:38 PM: transpose.pre (ID = 0)
2:38 PM: quarter4_button.png (ID = 0)
2:38 PM: metal_f0_16_9.jpg (ID = 0)
2:38 PM: alien funk.nvp (ID = 0)
2:38 PM: equa_eng.prf (ID = 0)
2:38 PM: alien funk too.nvp (ID = 0)
2:38 PM: chaos.nvp (ID = 0)
2:38 PM: imagedrive.cpl (ID = 0)
2:38 PM: grid o'cubez.nvp (ID = 0)
2:38 PM: audiodata_b&w.nct (ID = 0)
2:38 PM: line art.nvp (ID = 0)
2:38 PM: nerocdnt.sys (ID = 0)
2:38 PM: nerocdnt.sys (ID = 0)
2:38 PM: eula_eng.txt (ID = 0)
2:38 PM: evil germz.nvp (ID = 0)
2:38 PM: audiodata_classic.nct (ID = 0)
2:38 PM: audio_classic.nct (ID = 0)
2:38 PM: flash.nvp (ID = 0)
2:38 PM: hypnotic.nvp (ID = 0)
2:38 PM: icicle 5 (can you feel it).n (ID = 0)
2:38 PM: atl.dll (ID = 0)
2:38 PM: eula_eng.txt (ID = 0)
2:38 PM: newtrf.dll (ID = 0)
2:38 PM: imagedrv.inf (ID = 0)
2:38 PM: aacmp32.dll (ID = 0)
2:38 PM: equa_eng.prf (ID = 0)
2:38 PM: greencove16_9.jpg (ID = 0)
2:38 PM: data_classic.nct (ID = 0)
2:38 PM: woodframe_button.png (ID = 0)
2:38 PM: flanger.pre (ID = 0)
2:38 PM: reverb.pre (ID = 0)
2:38 PM: timecorrection.pre (ID = 0)
2:38 PM: transpose.pre (ID = 0)
2:38 PM: cdspeed.exe.manifest (ID = 0)
2:38 PM: drivespeed.exe.manifest (ID = 0)
2:38 PM: infotool.exe.manifest (ID = 0)
2:38 PM: chorus.pre (ID = 0)
2:38 PM: delay.pre (ID = 0)
2:38 PM: denoise.pre (ID = 0)
2:38 PM: dynamicprocessor.pre (ID = 0)
2:39 PM: audiocontrols2.ocx (ID = 0)
2:39 PM: readhd32.dll (ID = 0)
2:39 PM: landscape.nvp (ID = 0)
2:39 PM: mj past and present.nvp (ID = 0)
2:39 PM: paddo tango.nvp (ID = 0)
2:39 PM: spring.nvp (ID = 0)
2:39 PM: renderexample3.nvp (ID = 0)
2:39 PM: crystal3_16_9.jpg (ID = 0)
2:39 PM: hwinfo.exe (ID = 0)
2:39 PM: neroburnrightshelp.dll (ID = 0)
2:39 PM: dingdong.wav (ID = 0)
2:39 PM: data_classic.nct (ID = 0)
2:39 PM: smudge.nvp (ID = 0)
2:39 PM: dancing flower.nvp (ID = 0)
2:39 PM: clippededges_button.png (ID = 0)
2:39 PM: blobz.nvp (ID = 0)
2:39 PM: dvd_button_1.png (ID = 0)
2:39 PM: explosion.nvp (ID = 0)
2:39 PM: dvd_button_2.png (ID = 0)
2:39 PM: dvd_button_3.png (ID = 0)
2:39 PM: dvd_button_6.png (ID = 0)
2:39 PM: fuzzy.nvp (ID = 0)
2:39 PM: mars.nvp (ID = 0)
2:39 PM: insufficient dictionary.nvp (ID = 0)
2:39 PM: microscope.nvp (ID = 0)
2:39 PM: light_r7_4_3.jpg (ID = 0)
2:39 PM: mindtwizt.nvp (ID = 0)
2:39 PM: perspective tunnel.nvp (ID = 0)
2:39 PM: need sunglassez.nvp (ID = 0)
2:39 PM: vaagheid galore.nvp (ID = 0)
2:39 PM: gdires16.dll (ID = 0)
2:39 PM: nice.nvp (ID = 0)
2:39 PM: ebonyframe_button.png (ID = 0)
2:39 PM: data_classic.nct (ID = 0)
2:39 PM: clippededges_button.png (ID = 0)
2:39 PM: hexagon_button.png (ID = 0)
2:39 PM: ebonyframe_button.png (ID = 0)
2:39 PM: nve-mtmpl.bin (ID = 0)
2:39 PM: pointframe_button.png (ID = 0)
2:39 PM: quarter1_button.png (ID = 0)
2:39 PM: zoomer.nvp (ID = 0)
2:39 PM: cdi_text.fnt (ID = 0)
2:39 PM: vegetables_16_9.jpg (ID = 0)
2:39 PM: metal_f2_16_9.jpg (ID = 0)
2:39 PM: light_r6_4_3.jpg (ID = 0)
2:39 PM: amcdom.dll (ID = 0)
2:39 PM: owww.nvp (ID = 0)
2:39 PM: gdipainter.dll (ID = 0)
2:39 PM: data_classic.nct (ID = 0)
2:39 PM: psychozoom.nvp (ID = 0)
2:39 PM: 5pointstar_button.png (ID = 0)
2:39 PM: light_r5_4_3.jpg (ID = 0)
2:39 PM: tri-act.nvp (ID = 0)
2:39 PM: dvd_button_0.png (ID = 0)
2:39 PM: quarter2_button.png (ID = 0)
2:39 PM: drivelocker.dll (ID = 0)
2:39 PM: vcddoc.dll (ID = 0)
2:39 PM: tunnel.nvp (ID = 0)
2:39 PM: nehdblkaccess.dll (ID = 0)
2:39 PM: cool_baptism4_3.jpg (ID = 0)
2:39 PM: mp3pro_dmo.dll (ID = 0)
2:39 PM: gdipainter.dll (ID = 0)
2:39 PM: dvdrealloc.dll (ID = 0)
2:39 PM: quarter3_button.png (ID = 0)
2:39 PM: quarter4_button.png (ID = 0)
2:39 PM: artichoke1_16_9.jpg (ID = 0)
2:39 PM: neroipp.dll (ID = 0)
2:39 PM: woodframe_button.png (ID = 0)
2:39 PM: drivelocker.dll (ID = 0)
2:39 PM: nvdv.dll (ID = 0)
2:39 PM: nvdv.dll (ID = 0)
2:39 PM: light_r8_16_9.jpg (ID = 0)
2:39 PM: pointsquare_button.png (ID = 0)
2:39 PM: nres_eng.msg (ID = 0)
2:40 PM: msa.dll (ID = 0)
2:40 PM: neroburnrights_eng.chm (ID = 0)
2:40 PM: prism_e2_16_9.jpg (ID = 0)
2:40 PM: nres_fra.msg (ID = 0)
2:40 PM: the black lotus.nvp (ID = 0)
2:40 PM: jelly wormz.nvp (ID = 0)
2:40 PM: gdires32.dll (ID = 0)
2:40 PM: the black lotus.nvp (ID = 0)
2:40 PM: unlimited objects.nvp (ID = 0)
2:40 PM: recording.ocx (ID = 0)
2:40 PM: vcdengine.dll (ID = 0)
2:40 PM: 8pointstar_button.png (ID = 0)
2:40 PM: pointsquare_button.png (ID = 0)
2:40 PM: vcddoc.dll (ID = 0)
2:40 PM: leaves1_16_9.jpg (ID = 0)
2:40 PM: gdires32.dll (ID = 0)
2:40 PM: audiodata_classic.n (ID = 0)
2:40 PM: owww.nvp (ID = 0)
2:40 PM: dancehiphop_b&w.nct (ID = 0)
2:40 PM: light_re_16_9.jpg (ID = 0)
2:40 PM: equalizer.pre (ID = 0)
2:40 PM: light_r9_16_9.jpg (ID = 0)
2:40 PM: karaoke.dll (ID = 0)
2:40 PM: unlimited objects.nvp (ID = 0)
2:40 PM: xyber.nvp (ID = 0)
2:40 PM: stairways.nvp (ID = 0)
2:40 PM: tubes.nvp (ID = 0)
2:40 PM: default.skn (ID = 0)
2:40 PM: dvd_button_4.png (ID = 0)
2:40 PM: audiodata_classic.n (ID = 0)
2:40 PM: audio_classic.nct (ID = 0)
2:40 PM: audio_classic.nct (ID = 0)
2:40 PM: cdi_text.fnt (ID = 0)
2:40 PM: nres_ger.msg (ID = 0)
2:40 PM: dvd_button_5.png (ID = 0)
2:40 PM: evil germz.nvp (ID = 0)
2:40 PM: data_classic.nct (ID = 0)
2:40 PM: amcdom.dll (ID = 0)
2:40 PM: cdi_text.fnt (ID = 0)
2:40 PM: nerocdnt.sys (ID = 0)
2:40 PM: nres_ita.msg (ID = 0)
2:40 PM: audiodata_classic.nct (ID = 0)
2:40 PM: nres_jpn.msg (ID = 0)
2:40 PM: audio_classic.nct (ID = 0)
2:40 PM: shadows.nvp (ID = 0)
2:40 PM: nefilesrc.ax (ID = 0)
2:40 PM: oleaut32.dll (ID = 0)
2:40 PM: dingdong.wav (ID = 0)
2:40 PM: flash.nvp (ID = 0)
2:40 PM: ieltjes carnaval.nvp (ID = 0)
2:40 PM: winterfun16_9.jpg (ID = 0)
2:40 PM: imagegen.dll (ID = 0)
2:40 PM: hypnotic.nvp (ID = 0)
2:40 PM: stairways.nvp (ID = 0)
2:40 PM: tubes.nvp (ID = 0)
2:40 PM: default.skn (ID = 0)
2:40 PM: imagedrive.cpl (ID = 0)
2:40 PM: ieltjes carnaval.nvp (ID = 0)
2:40 PM: planar.nvp (ID = 0)
2:40 PM: dvd_button_6.png (ID = 0)
2:40 PM: pointframe_button.png (ID = 0)
2:40 PM: dvd_button_4.png (ID = 0)
2:40 PM: dvd_button_5.png (ID = 0)
2:40 PM: textile4_16_9.jpg (ID = 0)
2:40 PM: amcdom.dll (ID = 0)
2:40 PM: amcdom.dll (ID = 0)
2:40 PM: light_r3_4_3.jpg (ID = 0)
2:40 PM: nvdv.dll (ID = 0)
2:40 PM: renderexample1.nvp (ID = 0)
2:40 PM: nres_por.msg (ID = 0)
2:40 PM: ndparser.ax (ID = 0)
2:40 PM: light_r2_16_9.jpg (ID = 0)
2:40 PM: mp3pro_hlp.dll (ID = 0)
2:40 PM: data_classic.nct (ID = 0)
2:40 PM: light_r5_16_9.jpg (ID = 0)
2:40 PM: flower13_4_3.jpg (ID = 0)
2:41 PM: readhd16.dll (ID = 0)
2:41 PM: leaves11_4_3.jpg (ID = 0)
2:41 PM: vcdengine.dll (ID = 0)
2:41 PM: vqfdeclib.dll (ID = 0)
2:41 PM: llight_r7_16_9.jpg (ID = 0)
2:41 PM: alien funk too.nvp (ID = 0)
2:41 PM: cdr50s.dll (ID = 0)
2:41 PM: cdr50s.dll (ID = 0)
2:41 PM: nbr.exe (ID = 0)
2:41 PM: alien funk.nvp (ID = 0)
2:41 PM: ieltjes thing.nvp (ID = 0)
2:41 PM: nerocheck.exe (ID = 0)
2:41 PM: Warning: DDAFileExists failed to resolve the MFT number for: c:\documents and settings\douglas.douglas-y359tzb\local settings\temp\temporary directory 2 for ( software ) nero burning rom 6.0 ultra edition incl keygen & serial.zip\nero.burning.rom.6.0.ultra.edition.incl.keygen.&.serial\nero 6 ultra edition\common files\audioplugins\msa7\msa.dll.
2:41 PM: hwinfo.exe (ID = 0)
2:41 PM: prism_e3_16_9.jpg (ID = 0)
2:41 PM: light_r2_4_3.jpg (ID = 0)
2:41 PM: light_r3_16_9.jpg (ID = 0)
2:41 PM: flower10_4_3.jpg (ID = 0)
2:41 PM: idrivesetup.dll (ID = 0)
2:41 PM: first_school16_9.jpg (ID = 0)
2:41 PM: dancehiphop_b&w.nct (ID = 0)
2:41 PM: textile2_16_9.jpg (ID = 0)
2:41 PM: quarter1_button.png (ID = 0)
2:41 PM: santa_claus4_3.jpg (ID = 0)
2:41 PM: mp4file.dll (ID = 0)
2:41 PM: light16_16_9.jpg (ID = 0)
2:41 PM: flower12_16_9.jpg (ID = 0)
2:41 PM: icicle 5 (can you feel it).n (ID = 0)
2:41 PM: ieltjes thing.nvp (ID = 0)
2:41 PM: cdi_imag.rtf (ID = 0)
2:41 PM: generatr.dll (ID = 0)
2:41 PM: vaagheid galore.nvp (ID = 0)
2:41 PM: renderexample1.nvp (ID = 0)
2:41 PM: shadows.nvp (ID = 0)
2:41 PM: nerocd95.vxd (ID = 0)
2:41 PM: prism_e2_16_9.jpg (ID = 0)
2:41 PM: flanger.pre (ID = 0)
2:41 PM: xyber.nvp (ID = 0)
2:41 PM: crystal2_4_3.jpg (ID = 0)
2:41 PM: nerender.ax (ID = 0)
2:41 PM: cool_baptism16_9.jpg (ID = 0)
2:41 PM: prism_e4_16_9.jpg (ID = 0)
2:41 PM: midi.dll (ID = 0)
2:41 PM: neaudioconv.ax (ID = 0)
2:41 PM: neroerr.dll (ID = 0)
2:41 PM: perspective tunnel.nvp (ID = 0)
2:41 PM: prism_ef_16_9.jpg (ID = 0)
2:41 PM: smudge.nvp (ID = 0)
2:41 PM: vqf.dll (ID = 0)
2:41 PM: vqf.dll (ID = 0)
2:41 PM: flower7_16_9.jpg (ID = 0)
2:41 PM: mindtwizt.nvp (ID = 0)
2:41 PM: pdagreen.nps (ID = 0)
2:41 PM: mp3pro.dll (ID = 0)
2:41 PM: spring.nvp (ID = 0)
2:41 PM: reverb.pre (ID = 0)
2:41 PM: light_r5_16_9.jpg (ID = 0)
2:41 PM: paddo tango.nvp (ID = 0)
2:41 PM: audiodata_classic.n (ID = 0)
2:41 PM: audiodata_classic.n (ID = 0)
2:41 PM: apreg.dll (ID = 0)
2:41 PM: audio_classic.nct (ID = 0)
2:41 PM: nres_ger.msg (ID = 0)
2:41 PM: cdi_text.fnt (ID = 0)
2:41 PM: metal_f2_16_9.jpg (ID = 0)
2:41 PM: prism_e3_4_3.jpg (ID = 0)
2:41 PM: halloween16_9.jpg (ID = 0)
2:41 PM: drivespeed.exe (ID = 0)
2:41 PM: drivespeed.exe (ID = 0)
2:41 PM: compilation.exe (ID = 0)
2:41 PM: vocal.nct (ID = 0)
2:41 PM: vcdui.dll (ID = 0)
2:41 PM: vcdui.dll (ID = 0)
2:41 PM: neromediacon.dll (ID = 0)
2:41 PM: imagx5.dll (ID = 0)
2:41 PM: vplugins.wpl (ID = 0)
2:41 PM: waveedit.dll (ID = 0)
2:41 PM: tunnel.nvp (ID = 0)
2:42 PM: artichoke1_4_3.jpg (ID = 0)
2:42 PM: mp3pro_dmo.dll (ID = 0)
2:42 PM: mp3pro_hlp.dll (ID = 0)
2:42 PM: ims.dll (ID = 0)
2:42 PM: ro1420c.dll (ID = 0)
2:42 PM: expressdoc.dll (ID = 0)
2:42 PM: msa.dll (ID = 0)
2:42 PM: marble_button.png (ID = 0)
2:42 PM: msa.dll (ID = 0)
2:42 PM: vfft.dll (ID = 0)
2:42 PM: cdr100.dll (ID = 0)
2:42 PM: expressdoc.dll (ID = 0)
2:42 PM: nevideofx.dll (ID = 0)
2:42 PM: nres_ita.msg (ID = 0)
2:42 PM: expressdoc.dll (ID = 0)
2:42 PM: shortcut.dll (ID = 0)
2:42 PM: gclib.dll (ID = 0)
2:42 PM: leaves11_16_9.jpg (ID = 0)
2:42 PM: cr2200cs.dll (ID = 0)
2:42 PM: naseditor.nvl (ID = 0)
2:42 PM: nve-mtmpl.bin (ID = 0)
2:42 PM: cdr100.dll (ID = 0)
2:42 PM: image.dll (ID = 0)
2:42 PM: floor.nvp (ID = 0)
2:42 PM: video.dll (ID = 0)
2:42 PM: gencush.dll (ID = 0)
2:42 PM: tri-act.nvp (ID = 0)
2:42 PM: pentium.nvp (ID = 0)
2:42 PM: nersdb.dll (ID = 0)
2:42 PM: light15_16_9.jpg (ID = 0)
2:42 PM: light_re_16_9.jpg (ID = 0)
2:42 PM: crystal3_16_9.jpg (ID = 0)
2:42 PM: first_school4_3.jpg (ID = 0)
2:42 PM: crystal_16_9.jpg (ID = 0)
2:42 PM: artichoke2_4_3.jpg (ID = 0)
2:42 PM: light_r4_4_3.jpg (ID = 0)
2:42 PM: spritescope.nvp (ID = 0)
2:42 PM: dvd_button_1.png (ID = 0)
2:42 PM: nempg.ax (ID = 0)
2:42 PM: cdrom.cfg (ID = 0)
2:42 PM: leaves3_16_9.jpg (ID = 0)
2:42 PM: mp3pro.dll (ID = 0)
2:42 PM: vis_nas.dll (ID = 0)
2:42 PM: artichoke1_16_9.jpg (ID = 0)
2:42 PM: cool_baptism4_3.jpg (ID = 0)
2:42 PM: apreg.dll (ID = 0)
2:42 PM: planar.nvp (ID = 0)
2:42 PM: chaos.nvp (ID = 0)
2:42 PM: grid o'cubez.nvp (ID = 0)
2:42 PM: prism_e4_16_9.jpg (ID = 0)
2:42 PM: imagedrive.exe (ID = 0)
2:42 PM: image.dll (ID = 0)
2:42 PM: eula_eng.txt (ID = 0)
2:42 PM: cdr100.dll (ID = 0)
2:42 PM: cr2200cs.dll (ID = 0)
2:42 PM: santa_claus16_9.jpg (ID = 0)
2:42 PM: dancehiphop_b&w.nct (ID = 0)
2:42 PM: dancehiphop_b&w.nct (ID = 0)
2:42 PM: flower11_16_9.jpg (ID = 0)
2:42 PM: neroerr.dll (ID = 0)
2:42 PM: vmpegenc.dll (ID = 0)
2:42 PM: light_r8_16_9.jpg (ID = 0)
2:42 PM: metal_pl_4_3.jpg (ID = 0)
2:42 PM: imagedrv.dll (ID = 0)
2:42 PM: imagedrv.mpd (ID = 0)
2:42 PM: santa_claus4_3.jpg (ID = 0)
2:42 PM: landscape.nvp (ID = 0)
2:42 PM: vplugins.wpl (ID = 0)
2:42 PM: imagedrv.sys (ID = 0)
2:42 PM: imagedrive.exe (ID = 0)
2:42 PM: imagegen.dll (ID = 0)
2:42 PM: neroadb.dll (ID = 0)
2:42 PM: metal_pl_16_9.jpg (ID = 0)
2:42 PM: aacplus.dll (ID = 0)
2:42 PM: vplugins.wpl (ID = 0)
2:42 PM: vegetables2_16_9.jpg (ID = 0)
2:42 PM: audiocontrols2.ocx (ID = 0)
2:42 PM: imagegen.dll (ID = 0)
2:43 PM: flower12_16_9.jpg (ID = 0)
2:43 PM: flower10_16_9.jpg (ID = 0)
2:43 PM: image.dll (ID = 0)
2:43 PM: nve-mtmpl.bin (ID = 0)
2:43 PM: vegetables_4_3.jpg (ID = 0)
2:43 PM: microscope.nvp (ID = 0)
2:43 PM: renderexample3.nvp (ID = 0)
2:43 PM: mars.nvp (ID = 0)
2:43 PM: light_r8_16_9.jpg (ID = 0)
2:43 PM: textile_16_9.jpg (ID = 0)
2:43 PM: sardines_16_9.jpg (ID = 0)
2:43 PM: light_r6_16_9.jpg (ID = 0)
2:43 PM: amcdocbase.dll (ID = 0)
2:43 PM: cdi_text.fnt (ID = 0)
2:43 PM: wav.dll (ID = 0)
2:43 PM: metal_pl_16_9.jpg (ID = 0)
2:43 PM: prism_e4_16_9.jpg (ID = 0)
2:43 PM: cdrom.cfg (ID = 0)
2:43 PM: cdrom.cfg (ID = 0)
2:43 PM: ro1420c.dll (ID = 0)
2:43 PM: idrivesetup.dll (ID = 0)
2:43 PM: stdole2.tlb (ID = 0)
2:43 PM: ieltjes thing.nvp (ID = 0)
2:43 PM: mj past and present.nvp (ID = 0)
2:43 PM: boo.wav (ID = 0)
2:43 PM: line art.nvp (ID = 0)
2:43 PM: nevcdengine.dll (ID = 0)
2:43 PM: ims.dll (ID = 0)
2:43 PM: nres_jpn.msg (ID = 0)
2:43 PM: vmpegenc.dll (ID = 0)
2:43 PM: cr2200cs.dll (ID = 0)
2:43 PM: gccore.dll (ID = 0)
2:43 PM: nerocoverdesigner_eng.chm (ID = 0)
2:43 PM: geniso.dll (ID = 0)
2:43 PM: audio_classic.nct (ID = 0)
2:43 PM: vegetables2_4_3.jpg (ID = 0)
2:43 PM: audiodata.nct (ID = 0)
2:43 PM: crystal4_16_9.jpg (ID = 0)
2:43 PM: shfolder.exe (ID = 0)
2:43 PM: cdspeed.exe.manifest (ID = 0)
2:43 PM: gencush.dll (ID = 0)
2:43 PM: neroapl.dll (ID = 0)
2:43 PM: drivelocker.dll (ID = 0)
2:43 PM: data_classic.nct (ID = 0)
2:43 PM: imagedrv.sys (ID = 0)
2:43 PM: aacplus.dll (ID = 0)
2:43 PM: cdr50s.dll (ID = 0)
2:43 PM: audiopluginmgr.dll (ID = 0)
2:43 PM: winterfun16_9.jpg (ID = 0)
2:43 PM: vmpegenc.dll (ID = 0)
2:43 PM: light_r4_16_9.jpg (ID = 0)
2:43 PM: coverdes.exe (ID = 0)
2:43 PM: smudge.nvp (ID = 0)
2:43 PM: mp3pro_hlp.dll (ID = 0)
2:43 PM: vmpegenc.dll (ID = 0)
2:43 PM: data.nct (ID = 0)
2:43 PM: data.nct (ID = 0)
2:43 PM: data.nct (ID = 0)
2:43 PM: data.nct (ID = 0)
2:43 PM: neroapi.dll (ID = 0)
2:43 PM: flower8_16_9.jpg (ID = 0)
2:43 PM: dvdblockacc.dll (ID = 0)
2:43 PM: nerocom.dll (ID = 0)
2:43 PM: nerocoverdesigner_eng.pdf (ID = 0)
2:43 PM: waveedit.exe (ID = 0)
2:43 PM: light_r5_16_9.jpg (ID = 0)
2:43 PM: sardines_4_3.jpg (ID = 0)
2:43 PM: landscape.nvp (ID = 0)
2:43 PM: readhd16.dll (ID = 0)
2:43 PM: sardines_16_9.jpg (ID = 0)
2:43 PM: midi.dll (ID = 0)
2:43 PM: vegetables_16_9.jpg (ID = 0)
2:43 PM: icicle 5 (can you feel it).n (ID = 0)
2:43 PM: hypnotic.nvp (ID = 0)
2:43 PM: line art.nvp (ID = 0)
2:43 PM: fuzzy.nvp (ID = 0)
2:43 PM: sardines_16_9.jpg (ID = 0)
2:44 PM: imagedrive.cpl (ID = 0)
2:44 PM: nemp3hlp.dll (ID = 0)
2:44 PM: imagedrv.sys (ID = 0)
2:44 PM: santa_claus4_3.jpg (ID = 0)
2:44 PM: imagedrv.dll (ID = 0)
2:44 PM: image.dll (ID = 0)
2:44 PM: trumpet1.wav (ID = 0)
2:44 PM: vegetables_4_3.jpg (ID = 0)
2:44 PM: cdi_vcd.app (ID = 0)
2:44 PM: vegetables2_4_3.jpg (ID = 0)
2:44 PM: mj past and present.nvp (ID = 0)
2:44 PM: bda.cab (ID = 0)
2:44 PM: cdi_imag.rtf (ID = 0)
2:44 PM: cdi_imag.rtf (ID = 0)
2:44 PM: mp3pro_dmo.dll (ID = 0)
2:44 PM: cdi_imag.rtf (ID = 0)
2:44 PM: gccore.dll (ID = 0)
2:44 PM: dvdblockacc.dll (ID = 0)
2:44 PM: vegetables2_16_9.jpg (ID = 0)
2:44 PM: neroshowtime_eng.pdf (ID = 0)
2:44 PM: light_r2_16_9.jpg (ID = 0)
2:44 PM: light_r4_16_9.jpg (ID = 0)
2:44 PM: dsetup.dll (ID = 0)
2:44 PM: audiodata_b&w.nct (ID = 0)
2:44 PM: hwinfo.exe (ID = 0)
2:44 PM: neroshowtime_eng.pdf (ID = 0)
2:44 PM: light14_16_9.jpg (ID = 0)
2:44 PM: data.nct (ID = 0)
2:44 PM: audiocontrol.ocx (ID = 0)
2:44 PM: audiodata_b&w.nct (ID = 0)
2:44 PM: gccore.dll (ID = 0)
2:44 PM: cdrom.cfg (ID = 0)
2:44 PM: wav.dll (ID = 0)
2:44 PM: artichoke2_4_3.jpg (ID = 0)
2:44 PM: grid o'cubez.nvp (ID = 0)
2:44 PM: rock.nct (ID = 0)
2:44 PM: rock.nct (ID = 0)
2:44 PM: rock.nct (ID = 0)
2:44 PM: rock.nct (ID = 0)
2:44 PM: nevideofx.dll (ID = 0)
2:44 PM: shadows.nvp (ID = 0)
2:44 PM: renderexample3.nvp (ID = 0)
2:44 PM: aac.dll (ID = 0)
2:44 PM: renderexample1.nvp (ID = 0)
2:44 PM: dvdblockacc.dll (ID = 0)
2:44 PM: santa_claus16_9.jpg (ID = 0)
2:44 PM: sylvester16_9.jpg (ID = 0)
2:44 PM: data.nct (ID = 0)
2:44 PM: data.nct (ID = 0)
2:44 PM: data.nct (ID = 0)
2:44 PM: hdcc.dll (ID = 0)
2:44 PM: nevideofx.dll (ID = 0)
2:44 PM: nerocbui.dll (ID = 0)
2:44 PM: drivelocker.dll (ID = 0)
2:44 PM: ro1420c.dll (ID = 0)
2:44 PM: hdcc.dll (ID = 0)
2:44 PM: hdcc.dll (ID = 0)
2:44 PM: audiodata_classic.n (ID = 0)
2:44 PM: drivelocker.dll (ID = 0)
2:44 PM: hdcc.dll (ID = 0)
2:44 PM: audiodata.nct (ID = 0)
2:44 PM: soundtrax.exe (ID = 0)
2:44 PM: hdcc.dll (ID = 0)
2:44 PM: audio_classic.nct (ID = 0)
2:44 PM: coverdes.exe (ID = 0)
2:44 PM: vqfdeclib.dll (ID = 0)
2:44 PM: nerostartsmart.exe (ID = 0)
2:44 PM: sylvester16_9.jpg (ID = 0)
2:44 PM: light_r4_16_9.jpg (ID = 0)
2:44 PM: hdcc.dll (ID = 0)
2:44 PM: imagedrv.dll (ID = 0)
2:44 PM: imagegen.dll (ID = 0)
2:44 PM: nero.txt (ID = 0)
2:44 PM: equalize.dll (ID = 0)
2:44 PM: artichoke2_16_9.jpg (ID = 0)
2:44 PM: vqfdeclib.dll (ID = 0)
2:44 PM: alienplanet16_9.jpg (ID = 0)
2:45 PM: cr2200cs.dll (ID = 0)
2:45 PM: light_re_16_9.jpg (ID = 0)
2:45 PM: trumpet1.wav (ID = 0)
2:45 PM: msvcrt.dll (ID = 0)
2:45 PM: flash.nvp (ID = 0)
2:45 PM: cdr100.dll (ID = 0)
2:45 PM: picn20.dll (ID = 0)
2:45 PM: neroerr.dll (ID = 0)
2:45 PM: nerovision.exe (ID = 0)
2:45 PM: vmpegenc.dll (ID = 0)
2:45 PM: easter_egg4_3.jpg (ID = 0)
2:45 PM: textile2_16_9.jpg (ID = 0)
2:45 PM: unlimited objects.nvp (ID = 0)
2:45 PM: shortcut.dll (ID = 0)
2:45 PM: llight_r7_16_9.jpg (ID = 0)
2:45 PM: first_school4_3.jpg (ID = 0)
2:45 PM: rock.nct (ID = 0)
2:45 PM: neroerr.dll (ID = 0)
2:45 PM: data_b&w.nct (ID = 0)
2:45 PM: santa_claus16_9.jpg (ID = 0)
2:45 PM: shortcut.dll (ID = 0)
2:45 PM: nerobackitup_eng.chm (ID = 0)
2:45 PM: fx1.nvl (ID = 0)
2:45 PM: sunrise_16_9.jpg (ID = 0)
2:45 PM: amcdocbase.dll (ID = 0)
2:45 PM: first_school16_9.jpg (ID = 0)
2:45 PM: prism_e3_16_9.jpg (ID = 0)
2:45 PM: tri-act.nvp (ID = 0)
2:45 PM: circumvent.nvp (ID = 0)
2:45 PM: floor.nvp (ID = 0)
2:45 PM: mars.nvp (ID = 0)
2:45 PM: paddo tango.nvp (ID = 0)
2:45 PM: isofs.dll (ID = 0)
2:45 PM: dancehiphop.nct (ID = 0)
2:45 PM: neaudioenc.ax (ID = 0)
2:45 PM: neroamp.dll (ID = 0)
2:45 PM: dancehiphop.nct (ID = 0)
2:45 PM: isofs.dll (ID = 0)
2:45 PM: chaos.nvp (ID = 0)
2:45 PM: ground2_16_9.jpg (ID = 0)
2:45 PM: drwebase.vdb (ID = 0)
2:45 PM: drwebase.vdb (ID = 0)
2:45 PM: metal_f2_16_9.jpg (ID = 0)
2:45 PM: light13_16_9.jpg (ID = 0)
2:45 PM: flower11_16_9.jpg (ID = 0)
2:45 PM: nerender.ax (ID = 0)
2:45 PM: nefilesrc.ax (ID = 0)
2:45 PM: pentium.nvp (ID = 0)
2:45 PM: audio_classic.nct (ID = 0)
2:45 PM: perspective tunnel.nvp (ID = 0)
2:45 PM: vis_nas.dll (ID = 0)
2:45 PM: inetcddb.dll (ID = 0)
2:45 PM: vcdmenu.dll (ID = 0)
2:45 PM: gdipainter.dll (ID = 0)
2:45 PM: nempg.ax (ID = 0)
2:45 PM: light_r6_16_9.jpg (ID = 0)
2:45 PM: vocal.nct (ID = 0)
2:45 PM: manageddx.cab (ID = 0)
2:45 PM: nerodb.dll (ID = 0)
2:45 PM: cdi_vcd.app (ID = 0)
2:45 PM: artichoke1_4_3.jpg (ID = 0)
2:45 PM: cool_baptism16_9.jpg (ID = 0)
2:45 PM: nmpeqlz.dll (ID = 0)
2:45 PM: crystal2_16_9.jpg (ID = 0)
2:45 PM: neroscsi.dll (ID = 0)
2:45 PM: first_school16_9.jpg (ID = 0)
2:45 PM: imagedrv.mpd (ID = 0)
2:45 PM: ro1420c.dll (ID = 0)
2:45 PM: vcdui.dll (ID = 0)
2:45 PM: neroburningrom_eng.chm (ID = 0)
2:45 PM: nero.exe (ID = 0)
2:45 PM: nerosoundtrax_eng.chm (ID = 0)
2:45 PM: gdiplus.dll (ID = 0)
2:45 PM: nersdb.dll (ID = 0)
2:45 PM: nres_por.msg (ID = 0)
2:45 PM: light12_16_9.jpg (ID = 0)
2:45 PM: msvcp60.dll (ID = 0)
2:45 PM: shortcut.dll (ID = 0)
2:46 PM: textile3_16_9.jpg (ID = 0)
2:46 PM: greenland16_9.jpg (ID = 0)
2:46 PM: cdr100.dll (ID = 0)
2:46 PM: spring.nvp (ID = 0)
2:46 PM: nbj.exe (ID = 0)
2:46 PM: mindtwizt.nvp (ID = 0)
2:46 PM: vcdmenu.dll (ID = 0)
2:46 PM: audiodata_classic.nct (ID = 0)
2:46 PM: graffiti_16_9.jpg (ID = 0)
2:46 PM: genudf.dll (ID = 0)
2:46 PM: audio_classic.nct (ID = 0)
2:46 PM: audiodata_classic (ID = 0)
2:46 PM: graffiti_16_9.jpg (ID = 0)
2:46 PM: tunnel.nvp (ID = 0)
2:46 PM: oranges_16_9.jpg (ID = 0)
2:46 PM: mp3pro_dmo.dll (ID = 0)
2:46 PM: imagegen.dll (ID = 0)
2:46 PM: nevideoenc.ax (ID = 0)
2:46 PM: cdr50s.dll (ID = 0)
2:46 PM: cdr100.dll (ID = 0)
2:46 PM: cdi_text.fnt (ID = 0)
2:46 PM: amcuibase.dll (ID = 0)
2:46 PM: dsetup.dll (ID = 0)
2:46 PM: hexagon_button.png (ID = 0)
2:46 PM: mp3pro_hlp.dll (ID = 0)
2:46 PM: neroapl.dll (ID = 0)
2:46 PM: dvd_button_3.png (ID = 0)
2:46 PM: dvd_button_2.png (ID = 0)
2:46 PM: alien funk too.nvp (ID = 0)
2:46 PM: nerobackitup_eng.pdf (ID = 0)
2:46 PM: neroformatconv.ax (ID = 0)
2:46 PM: nerovision.exe (ID = 0)
2:46 PM: textile4_16_9.jpg (ID = 0)
2:46 PM: halloween16_9.jpg (ID = 0)
2:46 PM: mpgenc.dll (ID = 0)
2:46 PM: downloaders.dll (ID = 0)
2:46 PM: aiff.dll (ID = 0)
2:46 PM: audiopluginmgr.dll (ID = 0)
2:46 PM: cdi_text.fnt (ID = 0)
2:46 PM: dvdblockacc.dll (ID = 0)
2:46 PM: stdole2.tlb (ID = 0)
2:46 PM: timecorrection.pre (ID = 0)
2:46 PM: nerocheck.exe (ID = 0)
2:46 PM: shortcut.dll (ID = 0)
2:46 PM: msa.dll (ID = 0)
2:46 PM: greenland4_3.jpg (ID = 0)
2:46 PM: neroburnplugin.dll (ID = 0)
2:46 PM: pdagreen.bmp (ID = 0)
2:46 PM: video.dll (ID = 0)
2:46 PM: video.dll (ID = 0)
2:46 PM: imagxpr5.dll (ID = 0)
2:46 PM: cdrom.dll (ID = 0)
2:46 PM: apreg.dll (ID = 0)
2:46 PM: cdspeed_eng.chm (ID = 0)
2:46 PM: winterfun16_9.jpg (ID = 0)
2:46 PM: sylvester16_9.jpg (ID = 0)
2:46 PM: textile4_4_3.jpg (ID = 0)
2:46 PM: pdagreen.bmp (ID = 0)
2:46 PM: idrivesetup.dll (ID = 0)
2:46 PM: drivelocker.dll (ID = 0)
2:46 PM: nersdb.dll (ID = 0)
2:46 PM: nefilesrc.ax (ID = 0)
2:46 PM: nerovideoproc.ax (ID = 0)
2:46 PM: nerodb.dll (ID = 0)
2:46 PM: alien funk.nvp (ID = 0)
2:46 PM: data_classic.nct (ID = 0)
2:46 PM: wmfdist.exe (ID = 0)
2:46 PM: nerobackitup_eng.chm (ID = 0)
2:46 PM: transpose.pre (ID = 0)
2:46 PM: coveredctrl.ocx (ID = 0)
2:46 PM: atl.dll (ID = 0)
2:46 PM: vcdmenu.dll (ID = 0)
2:46 PM: nerocbui.dll (ID = 0)
2:46 PM: vqfdeclib.dll (ID = 0)
2:46 PM: coverdes.exe (ID = 0)
2:46 PM: audiodata.nct (ID = 0)
2:46 PM: flower13_16_9.jpg (ID = 0)
2:47 PM: gencush.dll (ID = 0)
2:47 PM: neromediacon.dll (ID = 0)
2:47 PM: vocal.nct (ID = 0)
2:47 PM: microscope.nvp (ID = 0)
2:47 PM: nescenedetector.ax (ID = 0)
2:47 PM: audiodata_b&w.nct (ID = 0)
2:47 PM: eula_eng.txt (ID = 0)
2:47 PM: cr2200cs.dll (ID = 0)
2:47 PM: ro1420c.dll (ID = 0)
2:47 PM: ndparser.ax (ID = 0)
2:47 PM: drivelocker.dll (ID = 0)
2:47 PM: xyber.nvp (ID = 0)
2:47 PM: neroapi.dll (ID = 0)
2:47 PM: vcdui.dll (ID = 0)
2:47 PM: jazz_classical.nct (ID = 0)
2:47 PM: nemp3hlp.dll (ID = 0)
2:47 PM: dxnt.cab (ID = 0)
2:47 PM: neaudio.ax (ID = 0)
2:47 PM: imagr5.dll (ID = 0)
2:47 PM: halloween16_9.jpg (ID = 0)
2:47 PM: neroformatconv.ax (ID = 0)
2:47 PM: neroexpress_eng.chm (ID = 0)
2:47 PM: neroexpress_eng.chm (ID = 0)
2:47 PM: audiodata_b&w.nct (ID = 0)
2:47 PM: audiodata_b&w.nct (ID = 0)
2:47 PM: light11_16_9.jpg (ID = 0)
2:47 PM: newtrf.dll (ID = 0)
2:47 PM: geniso.dll (ID = 0)
2:47 PM: cdrom.dll (ID = 0)
2:47 PM: prism_e3_16_9.jpg (ID = 0)
2:47 PM: expressui.dll (ID = 0)
2:47 PM: disco.nct (ID = 0)
2:47 PM: disco.nct (ID = 0)
2:47 PM: midi.dll (ID = 0)
2:47 PM: nerender.ax (ID = 0)
2:47 PM: leaves11_16_9.jpg (ID = 0)
2:47 PM: light_r3_16_9.jpg (ID = 0)
2:47 PM: textile3_16_9.jpg (ID = 0)
2:47 PM: nemp3dmo.dll (ID = 0)
2:47 PM: necon.dll (ID = 0)
2:47 PM: necon.dll (ID = 0)
2:47 PM: idrivesetup.dll (ID = 0)
2:47 PM: gdipainter.dll (ID = 0)
2:47 PM: dsetup32.dll (ID = 0)
2:47 PM: vqf.dll (ID = 0)
2:47 PM: vqf.dll (ID = 0)
2:47 PM: nemp3dmo.dll (ID = 0)
2:47 PM: flower5_16_9.jpg (ID = 0)
2:47 PM: nerocoverdesigner_eng.pdf (ID = 0)
2:47 PM: nemp3dmo.dll (ID = 0)
2:47 PM: expressdoc.dll (ID = 0)
2:47 PM: easter_egg16_9.jpg (ID = 0)
2:47 PM: dxsetup.exe (ID = 0)
2:47 PM: mmc.dll (ID = 0)
2:47 PM: gclib.dll (ID = 0)
2:47 PM: expressui.dll (ID = 0)
2:47 PM: nemp3dmo.dll (ID = 0)
2:47 PM: jazz.nct (ID = 0)
2:47 PM: msvcp60.dll (ID = 0)
2:47 PM: msvcp60.dll (ID = 0)
2:47 PM: msvcp60.dll (ID = 0)
2:47 PM: light10_16_9.jpg (ID = 0)
2:47 PM: neaudio.ax (ID = 0)
2:47 PM: neaudio.ax (ID = 0)
2:47 PM: neaudio.ax (ID = 0)
2:47 PM: backitup.exe (ID = 0)
2:47 PM: dws114x.dll (ID = 0)
2:47 PM: mmtools.dll (ID = 0)
2:47 PM: neroexpress_eng.pdf (ID = 0)
2:47 PM: nerobackitup_eng.pdf (ID = 0)
2:47 PM: nerobackitup_eng.pdf (ID = 0)
2:47 PM: cdu920.dll (ID = 0)
2:47 PM: flower6_16_9.jpg (ID = 0)
2:47 PM: pyramids16_9.jpg (ID = 0)
2:47 PM: leaves7_16_9.jpg (ID = 0)
2:47 PM: greenland16_9.jpg (ID = 0)
2:47 PM: greencove16_9.jpg (ID = 0)
2:48 PM: aac.dll (ID = 0)
2:48 PM: aac.dll (ID = 0)
2:48 PM: aac.dll (ID = 0)
2:48 PM: aac.dll (ID = 0)
2:48 PM: cdu920.dll (ID = 0)
2:48 PM: coveredctrl.ocx (ID = 0)
2:48 PM: neroburningrom_eng.pdf (ID = 0)
2:48 PM: drivelocker.dll (ID = 0)
2:48 PM: dws114x.dll (ID = 0)
2:48 PM: textile3_4_3.jpg (ID = 0)
2:48 PM: crystal1_4_3.jpg (ID = 0)
2:48 PM: bdant.cab (ID = 0)
2:48 PM: geniso.dll (ID = 0)
2:48 PM: cdcopy.dll (ID = 0)
2:48 PM: flower10_16_9.jpg (ID = 0)
2:48 PM: leaves9_16_9.jpg (ID = 0)
2:48 PM: data.nct (ID = 0)
2:48 PM: dws114x.dll (ID = 0)
2:48 PM: twinvq2.cdb (ID = 0)
2:48 PM: disco.nct (ID = 0)
2:48 PM: nerosoundtrax_eng.pdf (ID = 0)
2:48 PM: nerovision.exe (ID = 0)
2:48 PM: dancehiphop_b&w.nct (ID = 0)
2:48 PM: flower13_16_9.jpg (ID = 0)
2:48 PM: artichoke2_4_3.jpg (ID = 0)
2:48 PM: artichoke2_16_9.jpg (ID = 0)
2:48 PM: trumpet1.wav (ID = 0)
2:48 PM: coveredctrl.ocx (ID = 0)
2:48 PM: alienplanet16_9.jpg (ID = 0)
2:48 PM: prism_ef_4_3.jpg (ID = 0)
2:48 PM: cr2200cs.dll (ID = 0)
2:48 PM: equalize.dll (ID = 0)
2:48 PM: cdi_vcd.app (ID = 0)
2:48 PM: apreg.dll (ID = 0)
2:48 PM: twinvq2.cdb (ID = 0)
2:48 PM: audiodata.nct (ID = 0)
2:48 PM: audiodata.nct (ID = 0)
2:48 PM: audiodata.nct (ID = 0)
2:48 PM: gccore.dll (ID = 0)
2:48 PM: audiodata.nct (ID = 0)
2:48 PM: imagedrv.dll (ID = 0)
2:48 PM: imagedrv.mpd (ID = 0)
2:48 PM: prism_e2_16_9.jpg (ID = 0)
2:48 PM: textile4_16_9.jpg (ID = 0)
2:48 PM: neroerr.dll (ID = 0)
2:48 PM: nevdec.ax (ID = 0)
2:48 PM: vcddoc.dll (ID = 0)
2:48 PM: nersdb.dll (ID = 0)
2:48 PM: nevcdengine.dll (ID = 0)
2:48 PM: neroerr.dll (ID = 0)
2:48 PM: vocal.nct (ID = 0)
2:48 PM: ground4_16_9.jpg (ID = 0)
2:48 PM: crystal4_16_9.jpg (ID = 0)
2:48 PM: genudf.dll (ID = 0)
2:48 PM: necapture.ax (ID = 0)
2:48 PM: amcuibase.dll (ID = 0)
2:48 PM: dvdui.dll (ID = 0)
2:48 PM: jazz_classical.nct (ID = 0)
2:48 PM: nerowaveeditor_eng.chm (ID = 0)
2:48 PM: drivelocker.dll (ID = 0)
2:48 PM: flower13_16_9.jpg (ID = 0)
2:48 PM: mfc42.dll (ID = 0)
2:48 PM: jazz.nct (ID = 0)
2:48 PM: dvddoc.dll (ID = 0)
2:48 PM: dvddoc.dll (ID = 0)
2:48 PM: dvddoc.dll (ID = 0)
2:48 PM: nevideo.ax (ID = 0)
2:48 PM: dosbootimage.ima (ID = 0)
2:48 PM: bdaxp.cab (ID = 0)
2:48 PM: bdaxp.cab (ID = 0)
2:48 PM: aacenc32.dll (ID = 0)
2:48 PM: aacenc32.dll (ID = 0)
2:48 PM: aacenc32.dll (ID = 0)
2:48 PM: nerocoverdesigner_eng.chm (ID = 0)
2:48 PM: vqfenclib.dll (ID = 0)
2:48 PM: birthday16_9.jpg (ID = 0)
2:48 PM: prism_ef_16_9.jpg (ID = 0)
2:48 PM: dancehiphop_b&w.nct (ID = 0)
2:49 PM: dancehiphop_b&w.nct (ID = 0)
2:49 PM: nersdb.dll (ID = 0)
2:49 PM: soundtrax.exe (ID = 0)
2:49 PM: cdi_imag.rtf (ID = 0)
2:49 PM: nerocoverdesigner_eng.chm (ID = 0)
2:49 PM: light_r5_16_9.jpg (ID = 0)
2:49 PM: neroapi.dll (ID = 0)
2:49 PM: neroapi.dll (ID = 0)
2:49 PM: coveredctrl.ocx (ID = 0)
2:49 PM: udfimporter.dll (ID = 0)
2:49 PM: udfimporter.dll (ID = 0)
2:49 PM: udfimporter.dll (ID = 0)
2:49 PM: udfimporter.dll (ID = 0)
2:49 PM: udfimporter.dll (ID = 0)
2:49 PM: vqfenclib1.dll (ID = 0)
2:49 PM: data_b&w.nct (ID = 0)
2:49 PM: data_b&w.nct (ID = 0)
2:49 PM: artichoke1_16_9.jpg (ID = 0)
2:49 PM: cool_baptism4_3.jpg (ID = 0)
2:49 PM: wnaspi32.dll (ID = 0)
2:49 PM: prism_ef_16_9.jpg (ID = 0)
2:49 PM: neroscsi.dll (ID = 0)
2:49 PM: neroscsi.dll (ID = 0)
2:49 PM: mp3pro_dmo.dll (ID = 0)
2:49 PM: nersdb.dll (ID = 0)
2:49 PM: naseditor.nvl (ID = 0)
2:49 PM: nerosoundtrax_eng.chm (ID = 0)
2:49 PM: vqfdeclib.dll (ID = 0)
2:49 PM: vqfdeclib.dll (ID = 0)
2:49 PM: vqfdeclib.dll (ID = 0)
2:49 PM: dvdengine.dll (ID = 0)
2:49 PM: nerocoverdesigner_eng.pdf (ID = 0)
2:49 PM: mmtools.dll (ID = 0)
2:49 PM: newtrf.dll (ID = 0)
2:49 PM: bda.cab (ID = 0)
2:49 PM: vqfenclib.dll (ID = 0)
2:49 PM: crystal4_16_9.jpg (ID = 0)
2:49 PM: directx.cab (ID = 0)
2:49 PM: coverdes.exe (ID = 0)
2:49 PM: coveredctrl.ocx (ID = 0)
2:49 PM: nvdv.dll (ID = 0)
2:49 PM: imagedrive.exe (ID = 0)
2:49 PM: mmc.dll (ID = 0)
2:49 PM: gclib.dll (ID = 0)
2:49 PM: gclib.dll (ID = 0)
2:49 PM: mmc.dll (ID = 0)
2:49 PM: dxsetup.exe (ID = 0)
2:49 PM: nerocoverdesigner_eng.pdf (ID = 0)
2:49 PM: nerosoundtrax_eng.chm (ID = 0)
2:49 PM: aacenc32.dll (ID = 0)
2:49 PM: showtime.exe (ID = 0)
2:49 PM: expressui.dll (ID = 0)
2:49 PM: drweb32.dll (ID = 0)
2:49 PM: neromediacon.dll (ID = 0)
2:49 PM: wnaspi32.dll (ID = 0)
2:49 PM: nerocoverdesigner_eng.pdf (ID = 0)
2:49 PM: easter_egg4_3.jpg (ID = 0)
2:49 PM: amcuibase.dll (ID = 0)
2:49 PM: prism_e2_4_3.jpg (ID = 0)
2:49 PM: dvdrealloc.dll (ID = 0)
2:49 PM: def.dat (ID = 0)
2:49 PM: wnaspi32.dll (ID = 0)
2:49 PM: dancehiphop.nct (ID = 0)
2:49 PM: isofs.dll (ID = 0)
2:49 PM: dancehiphop.nct (ID = 0)
2:49 PM: vmpegenc.dll (ID = 0)
2:49 PM: neroexpress_eng.chm (ID = 0)
2:49 PM: coveredctrl.ocx (ID = 0)
2:49 PM: amcdocbase.dll (ID = 0)
2:49 PM: amcuibase.dll (ID = 0)
2:49 PM: jazz_classical.nct (ID = 0)
2:49 PM: coveredctrl.ocx (ID = 0)
2:49 PM: drweb32.dll (ID = 0)
2:49 PM: drweb32.dll (ID = 0)
2:49 PM: drweb32.dll (ID = 0)
2:49 PM: drwebase.vdb (ID = 0)
2:50 PM: aac.dll (ID = 0)
2:50 PM: gcfx.dll (ID = 0)
2:50 PM: gcfx.dll (ID = 0)
2:50 PM: gcfx.dll (ID = 0)
2:50 PM: gcfx.dll (ID = 0)
2:50 PM: light_r8_16_9.jpg (ID = 0)
2:50 PM: nerocbui.dll (ID = 0)
2:50 PM: neroburningrom_eng.pdf (ID = 0)
2:50 PM: mmtools.dll (ID = 0)
2:50 PM: cdi_vcd.app (ID = 0)
2:50 PM: dvdrealloc.dll (ID = 0)
2:50 PM: nrestore.exe (ID = 0)
2:50 PM: cdspeed_eng.chm (ID = 0)
2:50 PM: wmfadist.exe (ID = 0)
2:50 PM: prism_e2_16_9.jpg (ID = 0)
2:50 PM: santa_claus4_3.jpg (ID = 0)
2:50 PM: neroshowtime_eng.chm (ID = 0)
2:50 PM: nerocoverdesigner_eng.pdf (ID = 0)
2:50 PM: drivelocker.dll (ID = 0)
2:50 PM: nevcr.ax (ID = 0)
2:50 PM: imagedrive.exe (ID = 0)
2:50 PM: cdi_imag.rtf (ID = 0)
2:50 PM: languages.nvl (ID = 0)
2:50 PM: languages.nvl (ID = 0)
2:50 PM: languages.nvl (ID = 0)
2:50 PM: dvddoc.dll (ID = 0)
2:50 PM: expressui.dll (ID = 0)
2:50 PM: vfft.dll (ID = 0)
2:50 PM: newtrf.dll (ID = 0)
2:50 PM: gchw.dll (ID = 0)
2:50 PM: gchw.dll (ID = 0)
2:50 PM: dancehiphop_b&w.nct (ID = 0)
2:50 PM: aac.dll (ID = 0)
2:50 PM: nevideo.ax (ID = 0)
2:50 PM: nerovision.exe (ID = 0)
2:50 PM: nevideo.ax (ID = 0)
2:50 PM: nevideo.ax (ID = 0)
2:50 PM: dvddoc.dll (ID = 0)
2:50 PM: nero6ultraeditionquickstart_eng.pdf (ID = 0)
2:50 PM: crystal4_16_9.jpg (ID = 0)
2:50 PM: spritescope.nvp (ID = 0)
2:50 PM: metal_p2_16_9.jpg (ID = 0)
2:50 PM: imagxpr5.dll (ID = 0)
2:50 PM: drivelocker.dll (ID = 0)
2:50 PM: nevideo.ax (ID = 0)
2:50 PM: neroburnplugin.dll (ID = 0)
2:50 PM: ledmeter.ocx (ID = 0)
2:50 PM: nero.exe (ID = 0)
2:50 PM: nerobackitup_eng.chm (ID = 0)
2:50 PM: light_r6_16_9.jpg (ID = 0)
2:50 PM: cdi_vcd.app (ID = 0)
2:50 PM: msa.dll (ID = 0)
2:50 PM: axis.ocx (ID = 0)
2:50 PM: nerovideoproc.ax (ID = 0)
2:50 PM: textile4_16_9.jpg (ID = 0)
2:50 PM: textile3_16_9.jpg (ID = 0)
2:50 PM: dvddoc.dll (ID = 0)
2:50 PM: cool_baptism4_3.jpg (ID = 0)
2:50 PM: artichoke1_16_9.jpg (ID = 0)
2:50 PM: cdrom.dll (ID = 0)
2:50 PM: mmc.dll (ID = 0)
2:50 PM: nevdec.ax (ID = 0)
2:50 PM: geniso.dll (ID = 0)
2:50 PM: cdspeed.exe (ID = 0)
2:50 PM: msvcrt.dll (ID = 0)
2:50 PM: cdrom.dll (ID = 0)
2:50 PM: dvdengine.dll (ID = 0)
2:50 PM: dvdengine.dll (ID = 0)
2:50 PM: dvdengine.dll (ID = 0)
2:50 PM: dvdengine.dll (ID = 0)
2:50 PM: aiff.dll (ID = 0)
2:50 PM: nerodb.dll (ID = 0)
2:50 PM: aiff.dll (ID = 0)
2:50 PM: nrestore.exe (ID = 0)
2:50 PM: nrestore.exe (ID = 0)
2:50 PM: neaudio.ax (ID = 0)
2:50 PM: recording.ocx (ID = 0)
2:50 PM: axis.ocx (ID = 0)
2:50 PM: nbr.exe (ID = 0)
2:51 PM: wmpburn.exe (ID = 0)
2:51 PM: nbr.exe (ID = 0)
2:51 PM: downloaders.dll (ID = 0)
2:51 PM: gdiplus.dll (ID = 0)
2:51 PM: vqfenclib.dll (ID = 0)
2:51 PM: vqfenclib.dll (ID = 0)
2:51 PM: vqfenclib.dll (ID = 0)
2:51 PM: vqfenclib.dll (ID = 0)
2:51 PM: aiff.dll (ID = 0)
2:51 PM: nerodb.dll (ID = 0)
2:51 PM: nerosoundtrax_eng.pdf (ID = 0)
2:51 PM: neroburnplugin.dll (ID = 0)
2:51 PM: effectctrl.ocx (ID = 0)
2:51 PM: mp4file.dll (ID = 0)
2:51 PM: flower13_16_9.jpg (ID = 0)
2:51 PM: neroburningrom_eng.pdf (ID = 0)
2:51 PM: audiopluginmgr.dll (ID = 0)
2:51 PM: coverdes.exe (ID = 0)
2:51 PM: rock.nct (ID = 0)
2:51 PM: bdaxp.cab (ID = 0)
2:51 PM: cdu920.dll (ID = 0)
2:51 PM: inetcddb.dll (ID = 0)
2:51 PM: dsetup32.dll (ID = 0)
2:51 PM: fx1.nvl (ID = 0)
2:51 PM: axis.ocx (ID = 0)
2:51 PM: msvcrt.dll (ID = 0)
2:51 PM: nerovision.exe (ID = 0)
2:51 PM: msvcrt.dll (ID = 0)
2:51 PM: cdu920.dll (ID = 0)
2:51 PM: imagedrv.sys (ID = 0)
2:51 PM: nerocoverdesigner_eng.chm (ID = 0)
2:51 PM: defconvertor.dll (ID = 0)
2:51 PM: defconvertor.dll (ID = 0)
2:51 PM: amcuibase.dll (ID = 0)
2:51 PM: light_r3_16_9.jpg (ID = 0)
2:51 PM: nerocmd.exe (ID = 0)
2:51 PM: nerocmd.exe (ID = 0)
2:51 PM: neroamp.dll (ID = 0)
2:51 PM: bdant.cab (ID = 0)
2:51 PM: neaudioenc.ax (ID = 0)
2:51 PM: dancehiphop.nct (ID = 0)
2:51 PM: dancehiphop.nct (ID = 0)
2:51 PM: geniso.dll (ID = 0)
2:51 PM: isofs.dll (ID = 0)
2:51 PM: dancehiphop.nct (ID = 0)
2:51 PM: data_b&w.nct (ID = 0)
2:51 PM: vqfenclib1.dll (ID = 0)
2:51 PM: data_b&w.nct (ID = 0)
2:51 PM: manageddx.cab (ID = 0)
2:51 PM: nevdec.ax (ID = 0)
2:51 PM: gdiplus.dll (ID = 0)
2:51 PM: audiocontrols2.ocx (ID = 0)
2:51 PM: gccore.dll (ID = 0)
2:51 PM: nerocoverdesigner_eng.chm (ID = 0)
2:51 PM: coverdes.exe (ID = 0)
2:51 PM: amcdocbase.dll (ID = 0)
2:51 PM: gchw.dll (ID = 0)
2:51 PM: gchw.dll (ID = 0)
2:51 PM: sylvester4_3.jpg (ID = 0)
2:51 PM: data.nct (ID = 0)
2:51 PM: inetcddb.dll (ID = 0)
2:51 PM: fx1.nvl (ID = 0)
2:51 PM: nerocmd.exe (ID = 0)
2:51 PM: neroexpress_eng.pdf (ID = 0)
2:51 PM: cdr50s.dll (ID = 0)
2:51 PM: nevideoenc.ax (ID = 0)
2:51 PM: aacplus.dll (ID = 0)
2:51 PM: nerowaveeditor_eng.pdf (ID = 0)
2:51 PM: ro1420c.dll (ID = 0)
2:51 PM: nerocbui.dll (ID = 0)
2:51 PM: dancehiphop.nct (ID = 0)
2:51 PM: neaudio.ax (ID = 0)
2:51 PM: expressdoc.dll (ID = 0)
2:51 PM: leaves8_16_9.jpg (ID = 0)
2:51 PM: isofs.dll (ID = 0)
2:51 PM: imagr5.dll (ID = 0)
2:51 PM: imagx5.dll (ID = 0)
2:51 PM: graffiti_16_9.jpg (ID = 0)
2:52 PM: neaudio.ax (ID = 0)
2:52 PM: geniso.dll (ID = 0)
2:52 PM: ground7_16_9.jpg (ID = 0)
2:52 PM: dsp_scaleplugin.dll (ID = 0)
2:52 PM: dsp_scaleplugin.dll (ID = 0)
2:52 PM: genudf.dll (ID = 0)
2:52 PM: genudf.dll (ID = 0)
2:52 PM: genudf.dll (ID = 0)
2:52 PM: flower11_16_9.jpg (ID = 0)
2:52 PM: flower10_16_9.jpg (ID = 0)
2:52 PM: crystal2_16_9.jpg (ID = 0)
2:52 PM: cool_baptism16_9.jpg (ID = 0)
2:52 PM: wmfdist.exe (ID = 0)
2:52 PM: winterfun16_9.jpg (ID = 0)
2:52 PM: shortcut.dll (ID = 0)
2:52 PM: eula_eng.txt (ID = 0)
2:52 PM: eula_eng.txt (ID = 0)
2:52 PM: nerocmd.exe (ID = 0)
2:52 PM: msa.dll (ID = 0)
2:52 PM: necapture.ax (ID = 0)
2:52 PM: msvcp60.dll (ID = 0)
2:52 PM: msvcp60.dll (ID = 0)
2:52 PM: nefilesrc.ax (ID = 0)
2:52 PM: def.dat (ID = 0)
2:52 PM: first_school4_3.jpg (ID = 0)
2:52 PM: neroadb.dll (ID = 0)
2:52 PM: flower11_4_3.jpg (ID = 0)
2:52 PM: crystal4_4_3.jpg (ID = 0)
2:52 PM: light_r2_16_9.jpg (ID = 0)
2:52 PM: neroapl.dll (ID = 0)
2:52 PM: neroformatconv.ax (ID = 0)
2:52 PM: leaves4_16_9.jpg (ID = 0)
2:52 PM: nescenedetector.ax (ID = 0)
2:52 PM: halloween4_3.jpg (ID = 0)
2:52 PM: ground3_16_9.jpg (ID = 0)
2:52 PM: drivelocker.dll (ID = 0)
2:52 PM: cdi_vcd.app (ID = 0)
2:52 PM: dvdrealloc.dll (ID = 0)
2:52 PM: prism_e3_16_9.jpg (ID = 0)
2:52 PM: ground1_16_9.jpg (ID = 0)
2:52 PM: waveedit.exe (ID = 0)
2:52 PM: leaves5_16_9.jpg (ID = 0)
2:52 PM: vegetables2_16_9.jpg (ID = 0)
2:52 PM: gdipainter.dll (ID = 0)
2:52 PM: dws114x.dll (ID = 0)
2:52 PM: leaves2_16_9.jpg (ID = 0)
2:52 PM: flower12_16_9.jpg (ID = 0)
2:52 PM: vegetables2_4_3.jpg (ID = 0)
2:52 PM: vegetables_16_9.jpg (ID = 0)
2:52 PM: equalize.dll (ID = 0)
2:52 PM: waveedit.exe (ID = 0)
2:52 PM: nerovideoproc.ax (ID = 0)
2:52 PM: vegetables_4_3.jpg (ID = 0)
2:52 PM: ground5_16_9.jpg (ID = 0)
2:52 PM: ground6_16_9.jpg (ID = 0)
2:52 PM: nescenedetector.ax (ID = 0)
2:52 PM: textile2_16_9.jpg (ID = 0)
2:52 PM: nmpeqlz.dll (ID = 0)
2:52 PM: prism_e4_16_9.jpg (ID = 0)
2:52 PM: textile2_4_3.jpg (ID = 0)
2:52 PM: nero.exe (ID = 0)
2:52 PM: nero.exe (ID = 0)
2:52 PM: imagr5.dll (ID = 0)
2:52 PM: mpgenc.dll (ID = 0)
2:52 PM: drivelocker.dll (ID = 0)
2:52 PM: alienplanet4_3.jpg (ID = 0)
2:52 PM: cdi_vcd.app (ID = 0)
2:52 PM: artichoke1_4_3.jpg (ID = 0)
2:52 PM: jazz_classical.nct (ID = 0)
2:52 PM: neroshowtime_eng.chm (ID = 0)
2:52 PM: defconvertor.dll (ID = 0)
2:52 PM: mfc42.dll (ID = 0)
2:52 PM: cdr50s.dll (ID = 0)
2:52 PM: textile2_16_9.jpg (ID = 0)
2:52 PM: image.dll (ID = 0)
2:52 PM: ims.dll (ID = 0)
2:52 PM: artichoke1_4_3.jpg (ID = 0)
2:52 PM: neroscsi.dll (ID = 0)
2:52 PM: cool_baptism16_9.jpg (ID = 0)
2:53 PM: crystal2_16_9.jpg (ID = 0)
2:53 PM: drivelocker.dll (ID = 0)
2:53 PM: cdr100.dll (ID = 0)
2:53 PM: cr2200cs.dll (ID = 0)
2:53 PM: ims.dll (ID = 0)
2:53 PM: amcdocbase.dll (ID = 0)
2:53 PM: flower11_16_9.jpg (ID = 0)
2:53 PM: audiodata_b&w.nct (ID = 0)
2:53 PM: dancehiphop_b&w.nc (ID = 0)
2:53 PM: crystal3_4_3.jpg (ID = 0)
2:53 PM: gccore.dll (ID = 0)
2:53 PM: alienplanet4_3.jpg (ID = 0)
2:53 PM: dsetup32.dll (ID = 0)
2:53 PM: recording.ocx (ID = 0)
2:53 PM: isofs.dll (ID = 0)
2:53 PM: waveedit.dll (ID = 0)
2:53 PM: neroburningrom_eng.chm (ID = 0)
2:53 PM: nerocoverdesigner_eng.chm (ID = 0)
2:53 PM: image.dll (ID = 0)
2:53 PM: pdagreen.bmp (ID = 0)
2:53 PM: mp4file.dll (ID = 0)
2:53 PM: neaudioenc.ax (ID = 0)
2:53 PM: isofs.dll (ID = 0)
2:53 PM: amcdocbase.dll (ID = 0)
2:53 PM: cdrom.cfg (ID = 0)
2:53 PM: waveedit.dll (ID = 0)
2:53 PM: neroscsi.dll (ID = 0)
2:53 PM: imagxpr5.dll (ID = 0)
2:53 PM: nevideo.ax (ID = 0)
2:53 PM: nevcr.ax (ID = 0)
2:53 PM: nerocbui.dll (ID = 0)
2:53 PM: infotool.exe (ID = 0)
2:53 PM: rock.nct (ID = 0)
2:53 PM: greenland16_9.jpg (ID = 0)
2:53 PM: twinvq2.cdb (ID = 0)
2:53 PM: winterfun4_3.jpg (ID = 0)
2:53 PM: cdrom.dll (ID = 0)
2:53 PM: mpgenc.dll (ID = 0)
2:53 PM: geniso.dll (ID = 0)
2:53 PM: crystal2_16_9.jpg (ID = 0)
2:53 PM: cdrom.dll (ID = 0)
2:53 PM: nehdblkaccess.dll (ID = 0)
2:53 PM: defconvertor.dll (ID = 0)
2:53 PM: neroshowtime_eng.chm (ID = 0)
2:53 PM: defconvertor.dll (ID = 0)
2:53 PM: easter_egg4_3.jpg (ID = 0)
2:53 PM: disco.nct (ID = 0)
2:53 PM: mmtools.dll (ID = 0)
2:53 PM: mmtools.dll (ID = 0)
2:53 PM: genudf.dll (ID = 0)
2:53 PM: nevcdengine.dll (ID = 0)
2:53 PM: first_school16_9.jpg (ID = 0)
2:53 PM: barbecue16_9.jpg (ID = 0)
2:53 PM: light_r3_16_9.jpg (ID = 0)
2:53 PM: jazz_classical.nct (ID = 0)
2:53 PM: leaves6_16_9.jpg (ID = 0)
2:53 PM: nerosoundtrax_eng.pdf (ID = 0)
2:53 PM: def.dat (ID = 0)
2:53 PM: textile3_16_9.jpg (ID = 0)
2:53 PM: greencove16_9.jpg (ID = 0)
2:53 PM: leaves10_16_9.jpg (ID = 0)
2:53 PM: leaves11_16_9.jpg (ID = 0)
2:53 PM: prism_ef_16_9.jpg (ID = 0)
2:53 PM: wnaspi32.dll (ID = 0)
2:53 PM: audiodata_b&w.nct (ID = 0)
2:53 PM: neroamp.dll (ID = 0)
2:53 PM: metal_f0_16_9.jpg (ID = 0)
2:53 PM: apreg.dll (ID = 0)
2:53 PM: vocal.nct (ID = 0)
2:53 PM: nerodb.dll (ID = 0)
2:53 PM: neroburningrom_eng.chm (ID = 0)
2:53 PM: light_r4_16_9.jpg (ID = 0)
2:53 PM: sardines_16_9.jpg (ID = 0)
2:53 PM: def.dat (ID = 0)
2:53 PM: graffiti_16_9.jpg (ID = 0)
2:53 PM: dsp_scaleplugin.dll (ID = 0)
2:53 PM: vegetables_4_3.jpg (ID = 0)
2:53 PM: prism_e4_4_3.jpg (ID = 0)
2:53 PM: flower12_4_3.jpg (ID = 0)
2:54 PM: nerocom.dll (ID = 0)
2:54 PM: neroshx.dll (ID = 0)
2:54 PM: neroshx.dll (ID = 0)
2:54 PM: neroshx.dll (ID = 0)
2:54 PM: gcfx.dll (ID = 0)
2:54 PM: drwebase.vdb (ID = 0)
2:54 PM: rock.nct (ID = 0)
2:54 PM: nerocoverdesigner_eng.chm (ID = 0)
2:54 PM: audiodata.nct (ID = 0)
2:54 PM: nevideo.ax (ID = 0)
2:54 PM: coverdes.exe (ID = 0)
2:54 PM: cdi_vcd.cfg (ID = 0)
2:54 PM: hfrebirth.pre (ID = 0)
2:54 PM: afterglow.nvp (ID = 0)
2:54 PM: black hole.nvp (ID = 0)
2:54 PM: bouncing betty.nvp (ID = 0)
2:54 PM: colorspray.nvp (ID = 0)
2:54 PM: crunch.nvp (ID = 0)
2:54 PM: dances with sprites.nvp (ID = 0)
2:54 PM: deep dive.nvp (ID = 0)
2:54 PM: drunk.nvp (ID = 0)
2:54 PM: groovy plasma.nvp (ID = 0)
2:54 PM: hotlines.nvp (ID = 0)
2:54 PM: ieltjes thing 2.nvp (ID = 0)
2:54 PM: in and out.nvp (ID = 0)
2:54 PM: inside.nvp (ID = 0)
2:54 PM: into the deep.nvp (ID = 0)
2:54 PM: kaleidoscope.nvp (ID = 0)
2:54 PM: plant.nvp (ID = 0)
2:54 PM: plumeau.nvp (ID = 0)
2:54 PM: quantum tunnel.nvp (ID = 0)
2:54 PM: renderexample2.nvp (ID = 0)
2:54 PM: ring.nvp (ID = 0)
2:54 PM: shining star.nvp (ID = 0)
2:54 PM: spacy.nvp (ID = 0)
2:54 PM: sparklin'.nvp (ID = 0)
2:54 PM: spiderrag.nvp (ID = 0)
2:54 PM: spin art.nvp (ID = 0)
2:54 PM: spyrodelic.nvp (ID = 0)
2:54 PM: squares.nvp (ID = 0)
2:54 PM: starfield.nvp (ID = 0)
2:54 PM: symmetry to the point.nvp (ID = 0)
2:54 PM: torus.nvp (ID = 0)
2:54 PM: waterfall.nvp (ID = 0)
2:54 PM: wormhole.nvp (ID = 0)
2:54 PM: cdi_vcd.cfg (ID = 0)
2:54 PM: cdi_vcd.cfg (ID = 0)
2:54 PM: hfrebirth.pre (ID = 0)
2:54 PM: afterglow.nvp (ID = 0)
2:54 PM: black hole.nvp (ID = 0)
2:54 PM: bouncing betty.nvp (ID = 0)
2:54 PM: colorspray.nvp (ID = 0)
2:54 PM: crunch.nvp (ID = 0)
2:54 PM: dances with sprites.nvp (ID = 0)
2:54 PM: deep dive.nvp (ID = 0)
2:54 PM: drunk.nvp (ID = 0)
2:54 PM: groovy plasma.nvp (ID = 0)
2:54 PM: hotlines.nvp (ID = 0)
2:54 PM: ieltjes thing 2.nvp (ID = 0)
2:54 PM: in and out.nvp (ID = 0)
2:54 PM: inside.nvp (ID = 0)
2:54 PM: into the deep.nvp (ID = 0)
2:54 PM: kaleidoscope.nvp (ID = 0)
2:54 PM: plant.nvp (ID = 0)
2:54 PM: plumeau.nvp (ID = 0)
2:54 PM: quantum tunnel.nvp (ID = 0)
2:54 PM: renderexample2.nvp (ID = 0)
2:54 PM: ring.nvp (ID = 0)
2:54 PM: shining star.nvp (ID = 0)
2:54 PM: spacy.nvp (ID = 0)
2:54 PM: sparklin'.nvp (ID = 0)
2:54 PM: spiderrag.nvp (ID = 0)
2:54 PM: spin art.nvp (ID = 0)
2:54 PM: spyrodelic.nvp (ID = 0)
2:55 PM: squares.nvp (ID = 0)
2:55 PM: starfield.nvp (ID = 0)
2:55 PM: symmetry to the point.nvp (ID = 0)
2:55 PM: torus.nvp (ID = 0)
2:55 PM: waterfall.nvp (ID = 0)
2:55 PM: wormhole.nvp (ID = 0)
2:55 PM: cdi_vcd.cfg (ID = 0)
2:55 PM: cdi_vcd.cfg (ID = 0)
2:55 PM: hfrebirth.pre (ID = 0)
2:55 PM: afterglow.nvp (ID = 0)
2:55 PM: black hole.nvp (ID = 0)
2:55 PM: bouncing betty.nvp (ID = 0)
2:55 PM: colorspray.nvp (ID = 0)
2:55 PM: crunch.nvp (ID = 0)
2:55 PM: dances with sprites.nvp (ID = 0)
2:55 PM: deep dive.nvp (ID = 0)
2:55 PM: drunk.nvp (ID = 0)
2:55 PM: groovy plasma.nvp (ID = 0)
2:55 PM: hotlines.nvp (ID = 0)
2:55 PM: ieltjes thing 2.nvp (ID = 0)
2:55 PM: in and out.nvp (ID = 0)
2:55 PM: inside.nvp (ID = 0)
2:55 PM: into the deep.nvp (ID = 0)
2:55 PM: kaleidoscope.nvp (ID = 0)
2:55 PM: plant.nvp (ID = 0)
2:55 PM: plumeau.nvp (ID = 0)
2:55 PM: quantum tunnel.nvp (ID = 0)
2:55 PM: renderexample2.nvp (ID = 0)
2:55 PM: ring.nvp (ID = 0)
2:55 PM: shining star.nvp (ID = 0)
2:55 PM: spacy.nvp (ID = 0)
2:55 PM: sparklin'.nvp (ID = 0)
2:55 PM: spiderrag.nvp (ID = 0)
2:55 PM: spin art.nvp (ID = 0)
2:55 PM: spyrodelic.nvp (ID = 0)
2:55 PM: squares.nvp (ID = 0)
2:55 PM: starfield.nvp (ID = 0)
2:55 PM: symmetry to the point.nvp (ID = 0)
2:55 PM: torus.nvp (ID = 0)
2:55 PM: waterfall.nvp (ID = 0)
2:55 PM: wormhole.nvp (ID = 0)
2:55 PM: cdi_vcd.cfg (ID = 0)
2:55 PM: cdi_vcd.cfg (ID = 0)
2:56 PM: File Sweep Complete, Elapsed Time: 01:16:48
2:56 PM: Full Sweep has completed. Elapsed time 01:29:45
2:56 PM: Traces Found: 4848
4:14 PM: Removal process initiated
4:15 PM: Quarantining All Traces: 180search assistant/zango
4:15 PM: Quarantining All Traces: directrevenue-abetterinternet
4:15 PM: Quarantining All Traces: isearch desktop search
4:15 PM: Quarantining All Traces: look2me
4:15 PM: Quarantining All Traces: purityscan
4:15 PM: Quarantining All Traces: blazefind
4:15 PM: Quarantining All Traces: altnet
4:15 PM: Quarantining All Traces: brilliant digital
4:15 PM: Quarantining All Traces: bullguard popup ad
4:15 PM: Quarantining All Traces: couponage
4:15 PM: Quarantining All Traces: delfin
4:15 PM: Quarantining All Traces: ebates money maker
4:15 PM: Quarantining All Traces: ezula ilookup
4:15 PM: Quarantining All Traces: ieplugin
4:15 PM: Quarantining All Traces: instant access
4:15 PM: Quarantining All Traces: keenvalue/perfectnav
4:15 PM: Quarantining All Traces: keyhost hijacker - jraun
4:15 PM: Quarantining All Traces: mindset interactive - favoriteman
4:15 PM: Quarantining All Traces: squiresearch
4:15 PM: Quarantining All Traces: twain-tech
4:15 PM: Quarantining All Traces: whenu save
4:15 PM: Quarantining All Traces: winad
4:15 PM: Quarantining All Traces: 2o7.net cookie
4:15 PM: Quarantining All Traces: 360i cookie
4:15 PM: Quarantining All Traces: 888 cookie
4:15 PM: Quarantining All Traces: about cookie
4:15 PM: Quarantining All Traces: addynamix cookie
4:15 PM: Quarantining All Traces: adecn cookie
4:15 PM: Quarantining All Traces: adknowledge cookie
4:15 PM: Quarantining All Traces: adprofile cookie
4:15 PM: Quarantining All Traces: adrevolver cookie
4:15 PM: Quarantining All Traces: adserver cookie
4:15 PM: Quarantining All Traces: advertising cookie
4:15 PM: Quarantining All Traces: affiliatefuel.com cookie
4:15 PM: Quarantining All Traces: ask cookie
4:15 PM: Quarantining All Traces: atlas dmt cookie
4:15 PM: Quarantining All Traces: atwola cookie
4:15 PM: Quarantining All Traces: azjmp cookie
4:15 PM: Quarantining All Traces: banner cookie
4:15 PM: Quarantining All Traces: belnk cookie
4:15 PM: Quarantining All Traces: belointeractive cookie
4:15 PM: Quarantining All Traces: bizrate cookie
4:15 PM: Quarantining All Traces: burstbeacon cookie
4:15 PM: Quarantining All Traces: casalemedia cookie
4:15 PM: Quarantining All Traces: cc214142 cookie
4:15 PM: Quarantining All Traces: clickandtrack cookie
4:15 PM: Quarantining All Traces: directtrack cookie
4:15 PM: Quarantining All Traces: falkag cookie
4:15 PM: Quarantining All Traces: fastclick cookie
4:15 PM: Quarantining All Traces: hbmediapro cookie
4:15 PM: Quarantining All Traces: hotbar cookie
4:15 PM: Quarantining All Traces: howstuffworks cookie
4:15 PM: Quarantining All Traces: ic-live cookie
4:15 PM: Quarantining All Traces: linksynergy cookie
4:15 PM: Quarantining All Traces: maxserving cookie
4:15 PM: Quarantining All Traces: oinadserve cookie
4:15 PM: Quarantining All Traces: overture cookie
4:15 PM: Quarantining All Traces: partypoker cookie
4:15 PM: Quarantining All Traces: paypopup cookie
4:15 PM: Quarantining All Traces: pointroll cookie
4:15 PM: Quarantining All Traces: questionmarket cookie
4:15 PM: Quarantining All Traces: realmedia cookie
4:15 PM: Quarantining All Traces: reliablestats cookie
4:15 PM: Quarantining All Traces: revenue.net cookie
4:15 PM: Quarantining All Traces: rn11 cookie
4:15 PM: Quarantining All Traces: ru4 cookie
4:15 PM: Quarantining All Traces: screensavers.com cookie
4:15 PM: Quarantining All Traces: seeq cookie
4:15 PM: Quarantining All Traces: servedby advertising cookie
4:15 PM: Quarantining All Traces: serving-sys cookie
4:16 PM: Quarantining All Traces: specificclick.com cookie
4:16 PM: Quarantining All Traces: stamps.com cookie
4:16 PM: Quarantining All Traces: starware.com cookie
4:16 PM: Quarantining All Traces: touchclarity cookie
4:16 PM: Quarantining All Traces: tracking cookie
4:16 PM: Quarantining All Traces: tradedoubler cookie
4:16 PM: Quarantining All Traces: trafficmp cookie
4:16 PM: Quarantining All Traces: tribalfusion cookie
4:16 PM: Quarantining All Traces: websponsors cookie
4:16 PM: Quarantining All Traces: yieldmanager cookie
4:16 PM: Removal process completed. Elapsed time 00:02:36
4:21 PM: Sent error log: C:\Documents and Settings\Douglas.DOUGLAS-Y359TZB\Application Data\Webroot\Spy Sweeper\Logs\bugreport.txt
12:13 PM: | End of Session, Tuesday, November 08, 2005 |
********
1:16 PM: | Start of Session, Monday, November 07, 2005 |
1:16 PM: Spy Sweeper started
1:18 PM: Your spyware definitions have been updated.
1:19 PM: BHO Shield: found: -- BHO installation allowed at user request
1:26 PM: | End of Session, Monday, November 07, 2005
 

·
TSF Security Team, Emeritus
Joined
·
6,962 Posts
Please post ONLY the logs requested. I did NOT ask for an Adaware log.

Download and install CleanUp! but do not run it yet.

*WARNING* Cleanup deletes EVERYTHING out of temp/temporary folders and does not make backups.

Download, install, and update Ewido Security Suite
  • Install ewido security suite
  • Launch ewido, there should be a big E icon on your desktop, double-click it.
  • The program will prompt you to update click the OK button
  • The program will now go to the main screen
You will need to update ewido to the latest definition files.
  • On the left hand side of the main screen click update
  • Click on Start
The update will start and a progress bar will show the updates being installed.
After the updates are installed, exit Ewido

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu). Set the program up as follows:
*Click "Options..."
*Move the arrow down to "Custom CleanUp!"
*Put a check next to the following:
  • Empty Recycle Bins
  • Delete Cookies
  • Delete Prefetch files
    [X]Scan local drives for temporary files (Please uncheck this option)
  • Cleanup! All Users
Click OK
Press the CleanUp! button to start the program. Reboot/logoff when prompted.

Reboot into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight Safe Mode, then hit enter.

Run hijackthis and fix the following entrys....

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cus...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cus...//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {96426D73-829D-AC13-E76C-8F7AE1EA0ECD} - C:\WINDOWS\system32\ysffpwb.dll
O4 - HKCU\..\Run: [Piq] C:\WINDOWS\system32\w?auboot.exe
O4 - HKCU\..\Run: [Spet] "C:\Program Files\onbh\nacc.exe" -vt ndrv
O20 - Winlogon Notify: ThemeManager - C:\WINDOWS\system32\fcsrch.dll (file missing)


C:\WINDOWS\system32\ysffpwb.dll<--delete that file

C:\WINDOWS\system32\w?auboot.exe<--delete that file

C:\Program Files\onbh<--delete that folder

C:\WINDOWS\system32\fcsrch.dll <--delete that file

Run Ewido:
  • Click [Scanner]
  • Click [Complete System Scan] to begin scanning.
  • Click [OK] when prompted to clean files
  • With the first file it prompts to clean, select the option - "Perform action on all infections" - & choose clean and click [OK].
  • Once finished, click the [Save report] button
  • Save the report to your desktop
Close Ewido

Run SpySweeper again. No log required this time.

Once you reboot......

Perform an online scan with Internet Explorer with Panda ActiveScan
** click on "Free use ActiveScan" located on the top right hand corner
  1. Click Scan your PC & a 'pop up' window shall appear. *ensure that your pop up blocker doesn't block it
  2. Click Scan Now
  3. Enter your e-mail address & click Scan Now ...begins downloading 8 MB Panda's ActiveX controls
Begin the scan by selecting My Computer
  • If it finds any malware, it will offer you a report.
    [*] Click on see report. Then click Save report
Please post that log in your next reply along with the Ewido log and a new hijackthis log.
 
1 - 6 of 6 Posts
Status
Not open for further replies.
Top