1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive [InActive] RUNDLL - vjwbqrfk.dll

Discussion in 'Malware and Virus Removal Archive' started by goldfish, 2009/01/17.

  1. 2009/01/17
    goldfish

    goldfish Well-Known Member Thread Starter

    Joined:
    2007/03/27
    Messages:
    32
    Likes Received:
    0
    Please help. Something has taken over my computer. When I first start up I get the following message:

    RUNDLL
    C:\windows\system32\vjwbqrfk.dll

    Then the background changes to a flashing "WARNING" sign and there is a constant pop up in the tool bar that says "Warning! Security report "

    And Internet Explorer keeps opening and directing me to a site hxxp://antivirusxppro2009.com/?co

    Thanks in advance
     
    goldfish,
    #1
  2. 2009/01/17
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    Hi,

    Read this post as indicated at the top of this forum & follow the instructions.
     
    Admin.,
    #2


  3. to hide this advert.

  4. 2009/01/17
    goldfish

    goldfish Well-Known Member Thread Starter

    Joined:
    2007/03/27
    Messages:
    32
    Likes Received:
    0
    here it is.


    DDS (Ver_09-01-07.01) - NTFSx86
    Run by Tamara at 20:33:58.87 on Sat 01/17/2009
    Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_03

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://home.bellsouth.net/
    uSearch Page = hxxp://www.google.com
    uSearch Bar = hxxp://www.google.com/ie
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    uInternet Connection Wizard,ShellNext = iexplore
    uInternet Settings,ProxyOverride = *.local
    mSearchAssistant = hxxp://www.google.com/ie
    BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
    BHO: {4b6c18a3-4f45-4500-9b15-4f34ac145f16}: {61f541ca-43f4-51b9-0054-54f43a81c6b4}
    BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll
    {6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c}
    BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
    BHO: {9d1f999d-2e66-4d7f-a51d-77450b368191} - c:\windows\system32\wvUmkjHY.dll
    BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar3.dll
    BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\4.1.805.4472\swg.dll
    TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar3.dll
    TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
    uRun: [Weather] c:\program files\aws\weatherbug\Weather.exe 1
    uRun: [Aim6]
    uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
    uRun: [updateMgr] "c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
    uRun: [Google Update] "c:\documents and settings\tamara\local settings\application data\google\update\GoogleUpdate.exe" /c
    uRun: [prunnet] "c:\windows\system32\prunnet.exe "
    mRun: [SynTPLpr] c:\program files\synaptics\syntp\SynTPLpr.exe
    mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
    mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
    mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
    mRun: [TPKMAPHELPER] c:\program files\thinkpad\utilities\TpKmapAp.exe -helper
    mRun: [TpShocks] TpShocks.exe
    mRun: [TPHOTKEY] c:\progra~1\thinkpad\pkgmgr\hotkey\TPHKMGR.exe
    mRun: [ControlCenter] "c:\program files\ibm fingerprint software\ctlcntr.exe" /startup
    mRun: [TP4EX] tp4ex.exe
    mRun: [EZEJMNAP] c:\progra~1\thinkpad\utilit~1\EzEjMnAp.Exe
    mRun: [SoundMAXPnP] c:\program files\analog devices\soundmax\SMax4PNP.exe
    mRun: [SoundMAX] c:\program files\analog devices\soundmax\Smax4.exe /tray
    mRun: [UpdateManager] "c:\program files\common files\sonic\update manager\sgtray.exe" /r
    mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
    mRun: [<NO NAME>]
    mRun: [IBMPRC] c:\ibmtools\utils\ibmprc.exe
    mRun: [QCWLICON] c:\program files\thinkpad\connectutilities\QCWLICON.EXE
    mRun: [PWRMGRTR] rundll32 c:\progra~1\thinkpad\utilit~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
    mRun: [BLOG] rundll32 c:\progra~1\thinkpad\utilit~1\BatLogEx.DLL,StartBattLog
    mRun: [ShStatEXE] "c:\program files\network associates\virusscan\SHSTAT.EXE" /STANDALONE
    mRun: [McAfeeUpdaterUI] "c:\program files\network associates\common framework\UpdaterUI.exe" /StartedFromRunKey
    mRun: [Network Associates Error Reporting Service] "c:\program files\common files\network associates\talkback\TBMon.exe "
    mRun: [OrderReminder] c:\program files\hewlett-packard\orderreminder\OrderReminder.exe
    mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_03\bin\jusched.exe "
    mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe "
    mRun: [Adobe Photo Downloader] "c:\program files\adobe\photoshop elements 6.0\apdproxy.exe "
    mRun: [a8bb330b] rundll32.exe "c:\windows\system32\vjwbqrfk.dll ",b
    mRun: [Framework Windows] frmwrk32.exe
    mRun: [Ndesip] rundll32.exe "c:\windows\Wdeco.dll ",e
    mRun: [Syidovitogoloput] rundll32.exe "c:\windows\ikesufolifasu.dll ",e
    uPolicies-explorer: NoSetActiveDesktop = 1 (0x1)
    uPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
    uPolicies-system: DisableTaskMgr = 1 (0x1)
    mPolicies-explorer: NoSetActiveDesktop = 1 (0x1)
    mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
    dPolicies-explorer: NoSetActiveDesktop = 1 (0x1)
    dPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
    dPolicies-system: DisableTaskMgr = 1 (0x1)
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
    IE: {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - c:\program files\lenovo\pkgmgr\\PkgMgr.exe
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
    LSP: c:\windows\temp\ntdll64.dll
    Trusted Zone: antimalwareguard.com
    Trusted Zone: gomyhit.com
    Trusted Zone: antimalwareguard.com
    Trusted Zone: gomyhit.com
    Notify: igfxcui - igfxsrvc.dll
    Notify: psfus - c:\program files\ibm fingerprint software\psfus.dll
    Notify: QConGina - QConGina.dll
    Notify: tphotkey - tphklock.dll
    AppInit_DLLs: vamydl.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    {6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c}
    LSA: Authentication Packages = msv1_0 c:\windows\system32\wvUmkjHY
    LSA: Notification Packages = scecli pwdmon

    ============= SERVICES / DRIVERS ===============


    =============== Created Last 30 ================

    2009-01-17 16:31 136,192 a------- c:\windows\ikesufolifasu.dll
    2009-01-17 16:18 125,440 a------- c:\windows\system32\ntdll64.exe
    2009-01-16 19:04 41,984 a------- c:\windows\Wdeco.dll
    2009-01-16 19:04 41,984 a------- c:\windows\system32\chert5-998.exe
    2009-01-16 18:50 4,785 a------- c:\windows\system32\warning.gif
    2009-01-16 18:50 1,347 a------- c:\windows\system32\ahtn.htm
    2009-01-16 18:50 491 a------- c:\windows\system32\win32hlp.cnf
    2009-01-16 18:49 1 a------- c:\windows\system32\uniq.tll
    2009-01-16 18:49 1 a------- c:\windows\system32\test.ttt
    2009-01-16 18:49 31,232 a------- c:\windows\system32\frmwrk32.exe
    2009-01-16 18:49 31,232 a------- c:\windows\system32\998.exe
    2009-01-16 18:30 <DIR> --d----- C:\QUARANTINE
    2009-01-16 00:48 1,375,225 ---sh--- c:\windows\system32\kfrqbwjv.ini
    2009-01-15 16:20 1,365,469 ---sh--- c:\windows\system32\ecvfnygv.ini
    2009-01-14 16:14 1,365,469 ---sh--- c:\windows\system32\shlecdpe.ini
    2009-01-13 11:50 1,352,104 ---sh--- c:\windows\system32\uwlikdnx.ini
    2009-01-13 11:50 0 a------- c:\windows\system32\xndkilwu.dll
    2009-01-12 12:21 1,266,872 ---sh--- c:\windows\system32\yvploiin.ini
    2009-01-12 11:17 80,896 a------- c:\windows\system32\yrpwworq.dll
    2009-01-12 11:16 1,653,969 a--sh--- c:\windows\system32\YHjkmUvw.ini2
    2009-01-12 11:16 1,653,969 a--sh--- c:\windows\system32\YHjkmUvw.ini
    2008-12-27 17:42 <DIR> --d----- c:\docume~1\alluse~1\applic~1\espionServerData
    2008-12-27 17:14 <DIR> --d----- c:\program files\common files\Macrovision Shared
    2008-12-27 17:00 9,464 -------- c:\windows\system32\drivers\cdralw2k.sys
    2008-12-27 17:00 9,336 -------- c:\windows\system32\drivers\cdr4_xp.sys
    2008-12-27 17:00 129,784 -------- c:\windows\system32\pxafs.dll

    ==================== Find3M ====================

    2008-12-13 01:40 3,593,216 -------- c:\windows\system32\dllcache\mshtml.dll
    2008-12-03 11:41 450,548 a------- c:\windows\jgzr.dat
    2008-10-24 06:21 455,296 -------- c:\windows\system32\dllcache\mrxsmb.sys
    2008-10-23 07:36 286,720 a------- c:\windows\system32\gdi32.dll
    2008-10-23 07:36 286,720 -------- c:\windows\system32\dllcache\gdi32.dll

    ============= FINISH: 20:36:14.37 ===============



    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_09-01-07.01)

    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume1
    Install Date: 8/19/2006 12:56:19 AM
    System Uptime: 1/17/2009 7:27:42 PM (1 hours ago)

    Motherboard: IBM | | 187124U
    Processor: Intel(R) Pentium(R) M processor 1.60GHz | None | 399/533mhz

    ==== Disk Partitions =========================

    C: is FIXED (NTFS) - 33 GiB total, 11.307 GiB free.
    D: is CDROM ()

    ==== Disabled Device Manager Items =============

    ==== System Restore Points ===================

    RP428: 1/12/2009 11:16:18 AM - System Checkpoint
    RP429: 1/12/2009 11:16:18 AM - System Checkpoint
    RP430: 1/12/2009 11:16:19 AM - Software Distribution Service 3.0
    RP431: 1/12/2009 11:16:19 AM - System Checkpoint
    RP432: 1/12/2009 11:16:19 AM - System Checkpoint
    RP433: 1/12/2009 11:16:21 AM - Software Distribution Service 3.0
    RP434: 1/12/2009 11:16:21 AM - System Checkpoint
    RP435: 1/12/2009 11:16:22 AM - Software Distribution Service 3.0
    RP436: 1/12/2009 11:16:23 AM - System Checkpoint
    RP437: 1/12/2009 11:16:23 AM - Software Distribution Service 3.0
    RP438: 1/12/2009 11:16:24 AM - System Checkpoint
    RP439: 1/12/2009 11:16:25 AM - System Checkpoint
    RP440: 1/12/2009 11:16:26 AM - System Checkpoint
    RP441: 1/12/2009 11:16:26 AM - Software Distribution Service 3.0
    RP442: 1/12/2009 11:16:26 AM - Software Distribution Service 3.0
    RP443: 1/12/2009 11:16:27 AM - Software Distribution Service 3.0
    RP444: 1/12/2009 11:16:27 AM - System Checkpoint
    RP445: 1/12/2009 11:16:28 AM - Removed Camera Window MC
    RP446: 1/12/2009 11:16:28 AM - Removed Camera Window DVC
    RP447: 1/12/2009 11:16:28 AM - Removed Camera Window DS
    RP448: 1/12/2009 11:16:29 AM - System Checkpoint
    RP449: 1/12/2009 11:16:29 AM - System Checkpoint
    RP450: 1/12/2009 11:16:29 AM - System Checkpoint
    RP451: 1/12/2009 11:16:29 AM - System Checkpoint
    RP452: 1/12/2009 11:16:30 AM - System Checkpoint
    RP453: 1/12/2009 11:16:30 AM - System Checkpoint
    RP454: 1/12/2009 11:16:30 AM - System Checkpoint
    RP455: 1/12/2009 11:16:30 AM - System Checkpoint
    RP456: 1/12/2009 11:16:30 AM - System Checkpoint
    RP457: 1/12/2009 11:16:31 AM - System Checkpoint
    RP458: 1/12/2009 11:16:31 AM - Software Distribution Service 3.0
    RP459: 1/12/2009 11:16:31 AM - Software Distribution Service 3.0
    RP460: 1/12/2009 11:16:31 AM - System Checkpoint
    RP461: 1/12/2009 11:16:32 AM - Installed Adobe Photoshop Elements 6.0.
    RP462: 1/12/2009 11:16:32 AM - Removed Photoshop Album
    RP463: 1/12/2009 11:16:32 AM - System Checkpoint
    RP464: 1/12/2009 11:16:34 AM - System Checkpoint
    RP465: 1/12/2009 11:16:34 AM - System Checkpoint
    RP466: 1/12/2009 11:16:34 AM - System Checkpoint
    RP467: 1/12/2009 11:16:34 AM - System Checkpoint
    RP468: 1/12/2009 11:16:34 AM - System Checkpoint
    RP469: 1/12/2009 11:16:44 AM - Last known good configuration

    ==== Installed Programs ======================

    Access IBM
    Access IBM Message Center
    Ad-Aware
    Adobe Flash Player ActiveX
    Adobe Flash Player Plugin
    Adobe Photoshop Elements 6.0
    Adobe Reader 7.0.5 Language Support
    Adobe Reader 7.0.9
    Adobe Shockwave Player
    Advertisement Service
    AIM 6
    Amazon MP3 Downloader 1.0.3
    Apple Mobile Device Support
    Apple Software Update
    Bonjour
    BUM
    Canon Camera Access Library
    Canon Camera Support Core Library
    CANON iMAGE GATEWAY Task for ZoomBrowser EX
    Canon Internet Library for ZoomBrowser EX
    Canon MOV Decoder
    Canon PhotoRecord
    Canon RAW Image Task for ZoomBrowser EX
    Canon Utilities CameraWindow
    Canon Utilities CameraWindow DC
    Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX
    Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
    Canon Utilities EOS Utility
    Canon Utilities MyCamera
    Canon Utilities MyCamera DC
    Canon Utilities PhotoStitch
    Canon Utilities RemoteCapture Task for ZoomBrowser EX
    Canon Utilities ZoomBrowser EX
    Canon ZoomBrowser EX Memory Card Utility
    CCleaner (remove only)
    DivX Web Player
    EPSON CX6000 Series User's Guide
    EPSON Stylus CX6000 Scanner Driver Update
    FrostWire 4.17.0
    Google Chrome
    Google Earth
    Google Toolbar for Internet Explorer
    Google Updater
    Hotfix for Windows Internet Explorer 7 (KB947864)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB952287)
    IBM 32-bit Runtime Environment for Java 2, v1.4.2
    IBM Access Connections
    IBM Active Protection System
    IBM DLA
    IBM fingerprint software 4.5.5
    IBM Integrated 56K Modem
    IBM RecordNow!
    IBM Rescue and Recovery with Rapid Restore
    IBM SATA Power Management Driver
    IBM Themes
    IBM ThinkPad Configuration
    IBM ThinkPad EasyEject Utility
    IBM ThinkPad Keyboard Customizer Utility
    IBM ThinkPad Power Management Driver
    IBM ThinkPad Power Manager
    IBM ThinkPad Presentation Director
    IBM ThinkPad UltraNav Driver
    IBM ThinkPad UltraNav Wizard
    IBM ThinkVantage Technologies Welcome Message
    IBM TrackPoint Accessibility Features
    Image Web Server 8.1 IE Plugins (Build:3,4,0,242)
    Intel(R) Graphics Media Accelerator Driver for Mobile
    Intel(R) PROSet/Wireless Software
    InterVideo WinDVD
    iTunes
    Java(TM) 6 Update 3
    KODAK EASYSHARE Gallery Easy Upload, v2.1
    KODAK EASYSHARE Gallery Upload ActiveX Control
    LaserJet 1020 series
    Lenovo Battery Program
    McAfee VirusScan Enterprise
    mCore
    mDriver
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Hotfix (KB928366)
    Microsoft .NET Framework 2.0
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft National Language Support Downlevel APIs
    Microsoft Office 2003 Web Components
    Microsoft Office Converter Pack
    Microsoft Office OneNote 2003
    Microsoft Office Professional Edition 2003
    Microsoft Silverlight
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    mMHouse
    Move Networks Media Player for Internet Explorer
    mPfMgr
    mProSafe
    MSN
    MSXML 4.0 SP2 (KB927978)
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    mWlsSafe
    mXML
    Ofoto Print@Home ActiveX Control
    OrderReminder HP LaserJet 1020
    PC-Doctor for Windows
    Post-it® Software Notes Lite
    QuickTime
    RAW Image Task 2.1
    RealPlayer
    Safari
    Sandlot Games Client Services
    Scrabble Deluxe
    Security Update for Step By Step Interactive Training (KB898458)
    Security Update for Step By Step Interactive Training (KB923723)
    Security Update for Windows Internet Explorer 7 (KB942615)
    Security Update for Windows Internet Explorer 7 (KB944533)
    Security Update for Windows Internet Explorer 7 (KB950759)
    Security Update for Windows Internet Explorer 7 (KB953838)
    Security Update for Windows Internet Explorer 7 (KB956390)
    Security Update for Windows Internet Explorer 7 (KB958215)
    Security Update for Windows Internet Explorer 7 (KB960714)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player 10 (KB917734)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows XP (KB938464)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951376)
    Security Update for Windows XP (KB951698)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB953839)
    Security Update for Windows XP (KB954211)
    Security Update for Windows XP (KB954459)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956391)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956841)
    Security Update for Windows XP (KB957095)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958644)
    SofTest
    Software Installer
    Sonic Update Manager
    SoundMAX
    ThinkPad FullScreen Magnifier
    Update for Windows XP (KB951072-v2)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955839)
    URGE
    Viewpoint Manager (Remove Only)
    Viewpoint Media Player
    Wallpapers
    WeatherBug
    WebFldrs XP
    Windows Genuine Advantage Notifications (KB905474)
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Internet Explorer 7
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows XP Service Pack 3

    ==== Event Viewer Messages From Past Week ========

    1/12/2009 7:46:38 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the stisvc service.
    1/12/2009 5:10:26 PM, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\Canon\ZoomBrowser EX\Program\MFC80U.DLL. Reference error message: The operation completed successfully. .
    1/12/2009 5:10:26 PM, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC. Reference error message: The referenced assembly is not installed on your system. .
    1/12/2009 5:10:26 PM, error: SideBySide [32] - Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last Error was The referenced assembly is not installed on your system.
    1/12/2009 11:11:09 AM, error: Service Control Manager [7034] - The Windows Installer service terminated unexpectedly. It has done this 1 time(s).
    1/12/2009 9:41:12 AM, error: Dhcp [1002] - The IP address lease 192.168.1.104 for the Network Card with network address 00166FAEDF71 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
    1/12/2009 7:53:47 AM, error: Dhcp [1002] - The IP address lease 192.168.1.110 for the Network Card with network address 00166FAEDF71 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
    1/11/2009 5:29:01 PM, error: Dhcp [1002] - The IP address lease 192.168.1.105 for the Network Card with network address 00166FAEDF71 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
    1/14/2009 5:04:22 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments " " in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
    1/14/2009 7:57:03 PM, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 00166FAEDF71. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
    1/15/2009 2:23:42 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the WZCSVC service.
    1/16/2009 7:21:50 PM, error: WMPNetworkSvc [14336] - Service 'WMPNetworkSvc' did not start correctly because IUPnPDeviceFinder::StartAsyncFind(MediaRenderer) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.
    1/17/2009 4:18:00 PM, error: Dhcp [1002] - The IP address lease 192.168.1.100 for the Network Card with network address 00166FAEDF71 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
    1/16/2009 6:53:21 PM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file userinit.exe. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.

    ==== End Of File ===========================
     
    goldfish,
    #3
  5. 2009/01/18
    goldfish

    goldfish Well-Known Member Thread Starter

    Joined:
    2007/03/27
    Messages:
    32
    Likes Received:
    0
    I ran a virus scan today and found the following file:

    c:\windows\system32\ntdll64.exe

    Thanks
     
    goldfish,
    #4
  6. 2009/01/19
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Hi goldfish,

    Please visit the following webpage for instructions for downloading and running ComboFix

    How to use ComboFix


    Download ComboFix by sUBs from here, saving the file to your desktop.


    Disable realtime protection applications as they sometimes interfere with the tool. Check this link for your applicable programs.

    • Close all open programs and windows
    • Double click ComboFix.exe and follow the prompts.
    • It may reboot your computer and resume running when you logon. Wait for it to complete. When finished, it will open a log for you. Post that log in your next reply.
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall

    **NOTE - I recommend you allow the Recovery Console to be downloaded and installed if or when prompted.
     
    noahdfear,
    #5
  7. 2009/01/19
    goldfish

    goldfish Well-Known Member Thread Starter

    Joined:
    2007/03/27
    Messages:
    32
    Likes Received:
    0
    combofixlog p.1

    the log was too long to post in one reply so here is p.1: (thanks!)

    ComboFix 09-01-18.03 - Tamara 2009-01-19 9:00:55.1 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1681 [GMT -5:00]
    Running from: c:\documents and settings\Tamara\Desktop\ComboFix.exe

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\accessories\cup.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\accessories\customer_cup.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\accessories\heart.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\accessories\menu_down.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\accessories\menu_up.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\accessories\plates.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\accessories\ticket.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\accessories\tray.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\music\mainmenumusic.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_bring_check_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_deliver_food_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_deliver_order_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_diner.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_dish_dropoff_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_food_ready_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_gain_heart_1.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_get_drinks_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_party_arrive_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_pencil_write_2.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_pickup_food_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_rollover_1.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\audio\sfx\sfx_seat_people_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\choosedifficulty.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\credits.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\flo_lose.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\flo_win.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\help1.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\help2.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\highscores.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\levelintro.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\levelintro_mask.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\levelover.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\levelover_mask.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\mainmenu.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\popup.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\popup_mask.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\upgradegrid.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\upgradetitle.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\backgrounds\upsell.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\arrowleft_blue.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\arrowleft_yellow.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\arrowright_blue.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\arrowright_yellow.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\back_blue.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\back_yellow.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\backchalk.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\backchalkup.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\backtomenu_blue.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\backtomenu_yellow.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\cancel.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\cancelup.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\career.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\career_over.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\close.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\closeup.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\continue.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\continueover.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\credits_blue.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\credits_yellow.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\download_blue.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\download_yellow.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\easy.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\easy_over.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\endlessshift.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\endlessshift_over.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\hard.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\hard_over.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\help.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\help_over.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\highscores.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\highscores_over.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\instructions_blue.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\instructions_yellow.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\letsplay.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\letsplayover.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\medium.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\medium_over.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\moreinfo.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\moreinfoup.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\off.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\off_on.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\on.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\on_on.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\pause.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\pauseover.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\quit.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\quitgame.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\quitgameover.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\quitover.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\resumegame.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\resumegameover.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\submit.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\submitup.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\tryagain.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\tryagainover.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\upgrade_over.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\upgrade_up.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\viewglobal.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\viewglobalup.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\viewhighscore.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\viewhighscoreon.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\viewlocal.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\buttons\viewlocalup.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\comics\webcomic.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\config\career.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\config\customer.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\config\endless.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\config\global.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\config\powerups.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\cook\cook.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\cook\cook.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\cook\stove.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\cursor\arrow.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\cursor\click.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\cursor\click2.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\cursor\grab.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\cursor\open.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\anim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\blue\anim.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\blue\anim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\blue\sit_legs.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\green\anim.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\green\anim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\green\sit_legs.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\purple\anim.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\purple\anim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\purple\sit_legs.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\red\anim.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\red\anim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\red\sit_legs.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\yellow\anim.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\yellow\anim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\old_male\yellow\sit_legs.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\anim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\blue\anim.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\blue\anim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\blue\sit_legs.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\green\anim.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\green\anim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\green\sit_legs.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\purple\anim.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\purple\anim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\purple\sit_legs.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\red\anim.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\red\anim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\red\sit_legs.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\yellow\anim.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\yellow\anim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\customers\young_female\yellow\sit_legs.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\flo\idle.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\flo\idle.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\flo\lower.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\flo\lower.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\flo\upper.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\flo\upper.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\fonts\arial.mvec
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\fonts\komikaaxis.mvec
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\furniture\chair.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\furniture\chair.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\furniture\dirt2top.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\furniture\dirt4top.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\furniture\dishcart.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\furniture\dishcart.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\furniture\drinkstation_off.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\furniture\drinkstation_on1.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\furniture\drinkstation_on2.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\furniture\ticketstation.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\furniture\ticketstation.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\hiscore\arrowdown.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\hiscore\arrowdownon.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\hiscore\arrowleft.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\hiscore\arrowlefton.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\hiscore\arrowright.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\hiscore\arrowrighton.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\hiscore\arrowup.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\hiscore\arrowupon.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\hiscore\p1icon.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\hiscore\textedit.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\hiscore\title.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_1.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_1_a.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_1_b.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_1_c.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_2.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_2_a.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_2_b.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_2_c.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_2_d.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_3.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_3_a.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_3_b.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_3_c.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\endless_1_3_d.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\fifth_level_diner.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\first_level_diner.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\fourth_level_diner.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\layouts\second_level_diner.txt
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\playfirst_logo.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\background.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\food\food1.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\food\food1.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\food\food2.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\food\food2.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\food\food3.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\food\food3.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\frames\upgrade_0001.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\tables\2top.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\tables\2top.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\tables\4top.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\tables\4top.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\diner\upgrades.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\restaurants\tableshadow.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\choosedifficulty.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\chooseplayer.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\chooserestaurant.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\credits.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\game.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\gothighscore.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\help.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\help2.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\hiscore.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\hiscoreinfo.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\hiscoresubmit.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\levelintro.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\levelover.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\loading.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\mainloop.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\mainmenu.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\ok.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\pause.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\style.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\tutorialintro.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\upgrade.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\upsell.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\webcomic.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\scripts\yesno.lua
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\splash\aol_logo.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\splash\gamelabsplash.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\splash\playfirst_logo.jpg
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\strings.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\angersmoke.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\angersmoke.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\chairflags.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\chairflags.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\check.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\checkmark.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\clock.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\closed.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\closingtime.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\coinflip.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\coinflip.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\dollar.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\doodles\coffee.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\doodles\tables.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\doodles\wallpaper.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\expert.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\expertscore.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\foodpoof.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\foodpoof.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\fork_timer.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\goalcompleted.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\heartgrow.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\heartgrow.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\jar.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\jar.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\level.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\level_career.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\score.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\sound.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\staroff.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\staron.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\tablenumber.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\tablenumberup.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\traynumber.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\tutorial_character.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\tutorialarrow.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\tutorialbox.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\upgradeanim.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\upgradeanim.xml
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\upgrades\drinks.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\upgrades\maitred.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\upgrades\oven.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\upgrades\select.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\upgrades\shoes.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\upgrades\stereo.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\assets\ui\upgrades\table.png
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72\dinerdash.exe
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\accessories\dirty_dishes.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\accessories\foodtray.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\accessories\heart1.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\accessories\heart2.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\accessories\heart3.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\accessories\menu_down.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\accessories\menu_up.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\accessories\mop_prop.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\accessories\ticket.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\music\cafe\cafe_music_a1.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\music\cafe\cafe_music_a2.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\music\cafe\cafe_music_a3.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\music\cafe\cafe_music_a4.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\music\mainmenumusic.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\baby_cry.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\chef_cook1.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\closing_time.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\customer_ditch.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\dialog_down.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\dialog_up.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\drink_table.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\expert.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\highchair_deliver.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\highchair_pickup.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\keystroke2.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\level_lose.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\level_win.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\menu_click.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\menu_rollover.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\mop_pickup.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\mop_spill.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\sfx_bring_check_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\sfx_deliver_food_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\sfx_dish_dropoff_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\sfx_dropoff_drinks_1.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\sfx_food_ready_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\sfx_gain_heart_1.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\sfx_get_drinks_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\sfx_menu_down.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\sfx_party_arrive_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\sfx_pencil_write_2.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\sfx_pickup_food_1_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\sfx_seat_people_snd.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\spill.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\table_drink.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\audio\sfx\tip_2.ogg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\flo_lose.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\flo_win.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\fullscreendialog.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\high_score_menu_bg.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\levelintro.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\levelintro.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\levelover.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\longdialog.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\longdialog.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\mainmenu.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\mainmenu_logo.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\popup.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\popup.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\textfield.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\backgrounds\upgrade_lines.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\arrowdown_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\arrowdown_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\arrowdown_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\arrowup_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\arrowup_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\arrowup_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\checkbox_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\checkbox_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\checkbox_rotated_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\checkbox_rotated_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\decor_highlight.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\decor_normal.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\decor_selected.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\dialog_button_a_large_1.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\dialog_button_a_large_2.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\dialog_button_a_large_3.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\dialog_button_a_small_1.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\dialog_button_a_small_2.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\dialog_button_a_small_3.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\dialog_button_a1.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\dialog_button_a2.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\dialog_button_a3.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\left_arrow_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\left_arrow_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\left_arrow_c.png
     
    goldfish,
    #6
  8. 2009/01/19
    goldfish

    goldfish Well-Known Member Thread Starter

    Joined:
    2007/03/27
    Messages:
    32
    Likes Received:
    0
    combofix log p.2

    part 2 of the combofix log

    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\main_menu_button1_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\main_menu_button1_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\main_menu_button1_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\main_menu_button1_mask.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\main_menu_button2_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\main_menu_button2_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\main_menu_button2_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\main_menu_button2_mask.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\map_button_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\map_button_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\map_button_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\right_arrow_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\right_arrow_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\right_arrow_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\upgrade_down.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\upgrade_over.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\upgrade_up.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\buttons\welcome_player.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\config\actionpoints.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\config\career.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\config\customer.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\config\endless.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\config\global.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\config\powerups.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\cook\stove.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\cursor\arrow.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\cursor\click.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\cursor\click2.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\cursor\grab.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\cursor\open.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\dad_male\anim.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\dad_male\anim.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\dad_male\blue.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\dad_male\blue_legs.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\dad_male\legs.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\dad_male\red.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\dad_male\red_legs.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\kid_male\anim.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\kid_male\anim.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\kid_male\blue.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\kid_male\blue_legs.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\kid_male\legs.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\kid_male\red.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\kid_male\red_legs.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\mom_female\anim.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\mom_female\anim.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\mom_female\baby.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\mom_female\baby.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\mom_female\blue.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\mom_female\blue_baby.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\mom_female\blue_legs.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\mom_female\legs.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\mom_female\red.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\mom_female\red_baby.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\mom_female\red_legs.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\young_female\anim.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\young_female\anim.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\young_female\blue.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\young_female\blue_legs.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\young_female\legs.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\young_female\red.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\customers\young_female\red_legs.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\flo\idle.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\flo\idle.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\flo\lower.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\flo\lower.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\flo\upper.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\flo\upper.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\fonts\mercurius.mvec
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\bench.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\bench.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\blue_highchairbaby.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\chair.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\chair.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\dirt2top.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\dirt4top.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\dishcart.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\dishcart.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\green_highchairbaby.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\highchair_prop_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\highchair_prop_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\highchairbaby.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\highchairbaby.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\luxury_bench.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\luxury_bench.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\mop_station_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\mop_station_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\mop_station_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\podium.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\podium_heart.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\podium_heart.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\purple_highchairbaby.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\radio.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\red_highchairbaby.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\spill.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\spill.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\stereo.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\ticketstation.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\ticketstation.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\furniture\yellow_highchairbaby.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\help\family.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\help\help_dividerline.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\help\help1_colormatch1.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\help\help1_colormatch2.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\help\help1_noise.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\help\help1_score.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\help\help2_cleardishes.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\help\help2_givecheck.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\help\help2_pickupfood.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\help\help2_servefood.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\help\help2_takeorder.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\hiscore\local-hs-bb.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\hiscore\p1icon.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\layouts\career_1_1.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\layouts\career_1_2.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\layouts\career_1_3.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\layouts\career_1_4.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\layouts\career_1_5.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\layouts\career_1_6.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\layouts\endless_1_1.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\layouts\endless_1_1_a.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\layouts\endless_1_1_b.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\layouts\endless_1_1_c.bin
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\playfirstlogo.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\background.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\chairs\blue.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\chairs\green.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\chairs\green.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\chairs\grey.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\chairs\red.pal
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\food\cup1.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\food\food.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\food\food.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\frames\2_0.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\frames\2_1.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\furniture\drinkstation1_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\furniture\drinkstation1_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\furniture\drinkstation1_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\people\cook.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\people\cook.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\props\cup_prop1.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\tables\2top.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\tables\2top.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\tables\4top.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\tables\4top.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\upgrade_icons\cafe_icon_2_0.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\upgrade_icons\cafe_icon_2_1.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\cafe\upgrades.xml
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\restaurants\tableshadow.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\careerupgrade.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\choosedifficulty.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\closeconfirm.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\entername.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\game.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\getmoregames.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\help1.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\help2.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\hiscore.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\hiscoreinfo.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\hiscoresubmit.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\levelintro.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\levelover.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\loading.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\mainloop.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\mainmenu.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\ok.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\pause.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\style.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\upgrade.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\upsell.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\scripts\yesno.lua
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\splash\aol_logo.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\splash\playfirst_logo.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\strings.xml
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\angersmoke.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\angersmoke.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\bubbles\request_bubble.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\bubbles\request_mop.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\bubbles\request_rejectmeal.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\chairflags.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\chairflags.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\check.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\checkmark.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\closed.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\coinflip.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\coinflip.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\decor_lines.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\dollar.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\expert.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\foodpoof.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\foodpoof.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\heartgrow.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\heartgrow.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\jar.anm
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\jar.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\lives_icon.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\noisering.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\notes\music_boost_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\notes\music_boost_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\notes\music_boost_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\notes\music_boost_d.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\notes\music_boost_e.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\notes\music_boost_f.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\tablenumber_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\tablenumber_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\traynumber.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\tutorialarrow.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\tutorialbox.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\ui_base.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\ui_hand.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\ui_timer_off.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\ui_timer_on.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgradeanim.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_bench_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_bench_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_bench_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_drink_station1_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_drink_station1_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_drink_station1_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_luxury_bench_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_luxury_bench_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_luxury_bench_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_oven_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_oven_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_oven_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_podium_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_podium_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_podium_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_powerbars_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_powerbars_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_powerbars_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_radio_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_radio_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_radio_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_stereo_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_stereo_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_stereo_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_table_a.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_table_b.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\ui\upgrades\icon_table_c.png
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\upsell\dd1.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\upsell\dd2.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\upsell\dd3.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\assets\upsell\dd4.jpg
    c:\windows\Downloaded Program Files\DinerDash2.1.0.0.55\dinerdash2.exe
    c:\windows\system32\998.exe
    c:\windows\system32\ahtn.htm
    c:\windows\system32\drivers\seneka.sys
    c:\windows\system32\drivers\senekalxedrowk.sys
    c:\windows\system32\frmwrk32.exe
    c:\windows\system32\MabryObj.dll
    c:\windows\system32\ntdll64.exe
    c:\windows\system32\senekadf.dat
    c:\windows\system32\senekadjysxipw.dll
    c:\windows\system32\senekalog.dat
    c:\windows\system32\senekattabuycr.dat
    c:\windows\system32\senekayegkkoth.dll
    c:\windows\system32\test.ttt
    c:\windows\system32\uniq.tll
    c:\windows\system32\warning.gif
    c:\windows\system32\win32hlp.cnf
    c:\windows\system32\xndkilwu.dll
    c:\windows\system32\YHjkmUvw.ini
    c:\windows\system32\YHjkmUvw.ini2
    c:\windows\system32\yrpwworq.dll
    c:\windows\Tasks\vnvqjlrd.job

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Service_SENEKA


    ((((((((((((((((((((((((( Files Created from 2008-12-19 to 2009-01-19 )))))))))))))))))))))))))))))))
    .

    2009-01-18 16:40 . 2009-01-18 16:40 410,984 --a------ c:\windows\system32\deploytk.dll
    2009-01-17 16:31 . 2009-01-17 16:31 136,192 --a------ c:\windows\ikesufolifasu.dll
    2009-01-16 19:04 . 2009-01-16 19:04 41,984 --a------ c:\windows\Wdeco.dll
    2009-01-16 19:04 . 2009-01-16 19:04 41,984 --a------ c:\windows\system32\chert5-998.exe
    2009-01-16 18:30 . 2009-01-16 18:32 <DIR> d-------- C:\QUARANTINE
    2009-01-16 00:48 . 2009-01-16 00:49 1,375,225 ---hs---- c:\windows\system32\kfrqbwjv.ini
    2009-01-15 16:20 . 2009-01-15 16:21 1,365,469 ---hs---- c:\windows\system32\ecvfnygv.ini
    2009-01-14 16:14 . 2009-01-14 16:15 1,365,469 ---hs---- c:\windows\system32\shlecdpe.ini
    2009-01-13 11:50 . 2009-01-13 12:23 1,352,104 ---hs---- c:\windows\system32\uwlikdnx.ini
    2009-01-12 12:21 . 2009-01-12 12:25 1,266,872 ---hs---- c:\windows\system32\yvploiin.ini
    2008-12-27 17:42 . 2008-12-27 17:42 <DIR> d-------- c:\documents and settings\All Users\Application Data\espionServerData
    2008-12-27 17:19 . 2008-12-27 17:19 <DIR> d-------- c:\documents and settings\All Users\Application Data\FLEXnet
    2008-12-27 17:14 . 2008-12-27 17:14 <DIR> d-------- c:\program files\Common Files\Macrovision Shared
    2008-12-27 17:00 . 2008-12-27 16:59 129,784 --------- c:\windows\system32\pxafs.dll
    2008-12-27 17:00 . 2008-12-27 16:59 9,464 --------- c:\windows\system32\drivers\cdralw2k.sys
    2008-12-27 17:00 . 2008-12-27 16:59 9,336 --------- c:\windows\system32\drivers\cdr4_xp.sys

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-01-18 21:40 --------- d-----w c:\program files\Java
    2009-01-16 15:31 --------- d-----w c:\documents and settings\All Users\Application Data\Google Updater
    2009-01-14 21:15 --------- d-----w c:\documents and settings\Tamara\Application Data\WeatherBug
    2009-01-12 22:16 --------- d-----w c:\documents and settings\Tamara\Application Data\ZoomBrowser EX
    2009-01-12 22:11 --------- d-----w c:\documents and settings\Tamara\Application Data\CameraWindowDC
    2009-01-11 13:13 --------- d-----w c:\documents and settings\Tamara\Application Data\FrostWire
    2009-01-11 13:02 --------- d-----w c:\program files\FrostWire
    2009-01-10 20:42 --------- d-----w c:\program files\StudySmartMPRE
    2009-01-06 14:19 --------- d--h--w c:\documents and settings\Tamara\Application Data\Move Networks
    2008-12-27 22:22 --------- d--h--w c:\program files\InstallShield Installation Information
    2008-12-26 01:10 --------- d-----w c:\documents and settings\Tamara\Application Data\Apple Computer
    2008-12-10 00:24 --------- d-----w c:\program files\CCleaner
    2008-12-09 22:52 --------- d-----w c:\program files\epson
    2008-12-09 22:39 --------- d-----w c:\program files\MSN Games
    2008-12-09 18:20 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
    2008-12-09 17:20 --------- d-----w c:\documents and settings\All Users\Application Data\Sandlot Games
    2008-12-09 17:18 --------- d-----w c:\program files\Oberon Media
    2008-12-08 22:22 --------- d-----w c:\documents and settings\Tamara\Application Data\PlayFirst
    2008-12-08 22:22 --------- d-----w c:\documents and settings\All Users\Application Data\PlayFirst
    2008-12-03 18:32 --------- d-----w c:\documents and settings\Tamara\Application Data\Amazon
    2008-12-03 18:31 --------- d-----w c:\program files\Amazon
    2008-12-03 16:42 --------- d-----w c:\documents and settings\All Users\Application Data\Examsoft
    2008-11-23 20:55 --------- d-----w c:\documents and settings\Tamara\Application Data\CANON INC
    2007-04-25 02:25 61,475 -c--a-w c:\program files\mozilla firefox\plugins\NCScnet.dll
    2007-04-25 02:32 1,384,482 -c--a-w c:\program files\mozilla firefox\plugins\NCSEcw.dll
    2007-04-25 02:24 147,491 -c--a-w c:\program files\mozilla firefox\plugins\NCSUtil.dll
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Weather "= "c:\program files\AWS\WeatherBug\Weather.exe" [2006-04-07 1343488]
    "swg "= "c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-05 68856]
    "updateMgr "= "c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
    "Google Update "= "c:\documents and settings\Tamara\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-10-21 133104]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SynTPLpr "= "c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2004-11-08 110592]
    "SynTPEnh "= "c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-11-08 512000]
    "IgfxTray "= "c:\windows\system32\igfxtray.exe" [2005-05-04 155648]
    "HotKeysCmds "= "c:\windows\system32\hkcmd.exe" [2005-05-04 126976]
    "TPKMAPHELPER "= "c:\program files\ThinkPad\Utilities\TpKmapAp.exe" [2004-02-04 897024]
    "TPHOTKEY "= "c:\progra~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe" [2005-04-04 94208]
    "ControlCenter "= "c:\program files\IBM fingerprint software\ctlcntr.exe" [2005-04-12 286821]
    "EZEJMNAP "= "c:\progra~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2005-03-23 217088]
    "SoundMAXPnP "= "c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 1388544]
    "UpdateManager "= "c:\program files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 110592]
    "dla "= "c:\windows\system32\dla\tfswctrl.exe" [2004-09-02 127035]
    "IBMPRC "= "c:\ibmtools\UTILS\ibmprc.exe" [2005-04-27 90112]
    "QCWLICON "= "c:\program files\ThinkPad\ConnectUtilities\QCWLICON.EXE" [2005-03-18 86016]
    "PWRMGRTR "= "c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2005-04-14 139264]
    "BLOG "= "c:\progra~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2005-04-14 208896]
    "ShStatEXE "= "c:\program files\Network Associates\VirusScan\SHSTAT.EXE" [2004-09-22 94208]
    "McAfeeUpdaterUI "= "c:\program files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 139320]
    "Network Associates Error Reporting Service "= "c:\program files\Common Files\Network Associates\TalkBack\TBMon.exe" [2003-10-07 147514]
    "OrderReminder "= "c:\program files\Hewlett-Packard\OrderReminder\OrderReminder.exe" [2006-01-30 98304]
    "SunJavaUpdateSched "= "c:\program files\Java\jre6\bin\jusched.exe" [2009-01-18 136600]
    "QuickTime Task "= "c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
    "iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2008-09-08 289576]
    "Adobe Photo Downloader "= "c:\program files\Adobe\Photoshop Elements 6.0\apdproxy.exe" [2007-09-11 67488]
    "Ndesip "= "c:\windows\Wdeco.dll" [2009-01-16 41984]
    "Syidovitogoloput "= "c:\windows\ikesufolifasu.dll" [2009-01-17 136192]
    "TpShocks "= "TpShocks.exe" [2005-04-05 c:\windows\system32\TpShocks.exe]
    "TP4EX "= "tp4ex.exe" [2004-11-12 c:\windows\system32\TP4EX.exe]

    c:\documents and settings\Tamara\Start Menu\Programs\Startup\
    Microsoft Office OneNote 2003 Quick Launch.lnk - c:\program files\Microsoft Office\OFFICE11\ONENOTEM.EXE [2005-03-17 59080]

    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 29696]
    Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2006-08-11 24576]
    Post-itr Software Notes Lite.lnk - c:\program files\3M\PSNLite\PsnLite.exe [2004-10-15 2080768]

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
    "NoSetActiveDesktop "= 1 (0x1)
    "NoActiveDesktopChanges "= 1 (0x1)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
    2005-04-12 18:39 110179 c:\program files\IBM fingerprint software\psfus.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\QConGina]
    2005-03-18 05:07 262144 c:\windows\system32\QConGina.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tphotkey]
    2004-08-12 22:11 24576 c:\windows\system32\tphklock.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs "=vamydl.dll

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Notification Packages REG_MULTI_SZ scecli pwdmon

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe "=
    "c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe "=
    "c:\\PROGRA~1\\ExamSoft\\SofTest\\SoftLnch.exe "=
    "c:\\PROGRA~1\\ExamSoft\\SofTest\\softest.exe "= c:\\PROGRA~1\\ExamSoft\\SofTest\\SofTest.exe
    "%windir%\\Network Diagnostic\\xpnetdiag.exe "=
    "c:\\Program Files\\AIM6\\aim6.exe "=
    "c:\\Program Files\\Microsoft Office\\OFFICE11\\ONENOTE.EXE "=
    "c:\\Program Files\\3M\\PSNLite\\PsnLite.exe "=
    "c:\\Program Files\\ExamSoft\\SofTest\\SoftLnch.exe "= c:\\Program Files\\ExamSoft\\SoftLnch.exe
    "c:\\Program Files\\ExamSoft\\SofTest\\softest.exe "= c:\\Program Files\\ExamSoft\\SofTest.exe
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe "=
    "c:\\Program Files\\iTunes\\iTunes.exe "=
    "c:\\Program Files\\FrostWire\\FrostWire.exe "=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "59057:TCP "= 59057:TCP:pORT_59057
    "12004:TCP "= 12004:TCP:pORT_12004
    "51805:TCP "= 51805:TCP:pORT_51805
    "52731:TCP "= 52731:TCP:pORT_52731
    "60074:TCP "= 60074:TCP:pORT_60074
    "36801:TCP "= 36801:TCP:pORT_36801
    "45430:TCP "= 45430:TCP:pORT_45430
    "36917:TCP "= 36917:TCP:pORT_36917
    "27938:TCP "= 27938:TCP:pORT_27938
    "5750:TCP "= 5750:TCP:pORT_5750
    "19075:TCP "= 19075:TCP:BitComet 19075 TCP
    "19075:UDP "= 19075:UDP:BitComet 19075 UDP

    R0 Shockprf;Shockprf;c:\windows\system32\drivers\shockprf.sys [2006-08-11 59776]
    R0 TPDiskPM;TPDiskPM;c:\windows\system32\drivers\TPDiskPM.sys [2006-08-11 14208]
    R1 ANC;ANC;c:\windows\system32\drivers\ANC.sys [2006-08-11 11520]
    R1 IBMTPCHK;IBMTPCHK;c:\windows\system32\drivers\IBMBLDID.SYS [2006-08-11 2432]
    R1 NaiAvTdi1;NaiAvTdi1;c:\windows\system32\drivers\mvstdi5x.sys [2006-08-19 58048]
    R1 ShockMgr;ShockMgr;c:\windows\system32\drivers\ShockMgr.sys [2006-08-11 4608]
    R1 TPPWRIF;TPPWRIF;c:\windows\system32\drivers\TPPWRIF.SYS [2006-08-11 4442]
    R3 TPInput;TPInput;c:\windows\system32\drivers\TPInput.sys [2006-08-11 6016]
    R3 TPM11;NSC Integrated Trusted Platform Module 1.1;c:\windows\system32\drivers\nsctpm11.sys [1980-01-01 14336]
    R4 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6;c:\program files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [2007-09-11 124832]
    R4 ibmfilter;ibmfilter;c:\windows\system32\drivers\ibmfilter.sys [2005-04-27 63616]
    R4 SmiHlp;SMI helper driver;c:\program files\IBM fingerprint software\smihlp.sys [2005-04-12 3328]
    R4 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2007-01-11 24652]
    S3 QCNDISIF;QCNDISIF;c:\windows\system32\drivers\qcndisif.sys [2006-08-11 12288]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0a55a316-5d21-11db-87e2-00166faedf71}]
    \Shell\AutoRun\command - E:\LaunchU3.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0a55a317-5d21-11db-87e2-00166faedf71}]
    \Shell\AutoRun\command - G:\setupSNK.exe
    .
    Contents of the 'Scheduled Tasks' folder

    2009-01-06 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

    2009-01-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3027340500-3215107844-791897460-1005.job
    - c:\documents and settings\Tamara\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-10-21 15:58]

    2009-01-19 c:\windows\Tasks\PMTask.job
    - c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2005-04-14 03:01]
    .
    - - - - ORPHANS REMOVED - - - -

    BHO-{4b6c18a3-4f45-4500-9b15-4f34ac145f16} - (no file)
    BHO-{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - (no file)
    BHO-{9D1F999D-2E66-4D7F-A51D-77450B368191} - c:\windows\system32\wvUmkjHY.dll
    HKCU-Run-prunnet - c:\windows\system32\prunnet.exe
    HKCU-Run-Aim6 - (no file)
    HKLM-Run-a8bb330b - c:\windows\system32\vjwbqrfk.dll
    ShellExecuteHooks-{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - (no file)


    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://home.bellsouth.net/
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    uInternet Connection Wizard,ShellNext = iexplore
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    LSP: c:\windows\TEMP\ntdll64.dll
    Trusted Zone: *.antimalwareguard.com
    Trusted Zone: *.gomyhit.com
    Trusted Zone: *.antimalwareguard.com
    Trusted Zone: *.gomyhit.com

    c:\windows\system32\preinsres_cht.dll - c:\windows\system32\presinsexe.exe
    O16 -: {13149882-F480-4F6B-8C6A-0764F75B99ED}
    hxxp://plug-in.reallusion.com/crazytalk4.cab
    c:\windows\Downloaded Program Files\crazytalk.inf

    O16 -: {76A2A0AB-38B7-46DB-8E47-F10CDE4D7920} - hxxp://aerial.leepa.org/ecwplugins/NCS.cab
    c:\windows\Downloaded Program Files\NCSview.inf

    c:\windows\cpbrkpie.ocx - O16 -: {9522B3FB-7A2B-4646-8AF6-36E7F593073C}
    hxxp://a19.g.akamai.net/7/19/7125/4058/ftp.coupons.com/r3302/Coupons.cab
    c:\windows\Downloaded Program Files\cpbrkpie.inf

    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72.dll - O16 -: {DC75FEF6-165D-4D25-A518-C8C4BDA7BAA6}
    hxxp://aolsvc.aol.com/onlinegames/dinerdash/DinerDash.1.0.0.72.cab
    c:\windows\Downloaded Program Files\DinerDash.1.0.0.72.inf
    .

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-01-19 09:07:42
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'winlogon.exe'(916)
    c:\program files\IBM fingerprint software\psfus.dll
    c:\program files\Common Files\Virtual Token\psutil.dll
    c:\windows\system32\tphklock.dll

    - - - - - - - > 'lsass.exe'(972)
    c:\windows\system32\pwdmon.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\program files\Common Files\Virtual Token\vtserver.exe
    c:\windows\system32\ibmpmsvc.exe
    c:\program files\Intel\Wireless\Bin\EvtEng.exe
    c:\program files\Intel\Wireless\Bin\S24EvMon.exe
    c:\program files\Lavasoft\Ad-Aware\aawservice.exe
    c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    c:\program files\Bonjour\mDNSResponder.exe
    c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe
    c:\program files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
    c:\program files\Network Associates\Common Framework\FrameworkService.exe
    c:\program files\Network Associates\VirusScan\VsTskMgr.exe
    c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    c:\progra~1\NETWOR~1\COMMON~1\naPrdMgr.exe
    c:\windows\system32\QCONSVC.EXE
    c:\program files\Intel\Wireless\Bin\RegSrvc.exe
    c:\program files\Analog Devices\SoundMAX\SMAgent.exe
    c:\windows\system32\TPHDEXLG.exe
    c:\windows\system32\TpKmpSvc.exe
    c:\program files\Canon\CAL\CALMAIN.exe
    c:\program files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
    c:\program files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
    c:\windows\system32\rundll32.exe
    c:\windows\system32\rundll32.exe
    c:\windows\system32\rundll32.exe
    c:\program files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    c:\windows\system32\wscntfy.exe
    c:\progra~1\3M\PSNLite\PSNGive.exe
    c:\program files\iPod\bin\iPodService.exe
    .
    **************************************************************************
    .
    Completion time: 2009-01-19 9:12:18 - machine was rebooted
    ComboFix-quarantined-files.txt 2009-01-19 14:11:58

    Pre-Run: 12,077,907,968 bytes free
    Post-Run: 13,273,952,256 bytes free

    901 --- E O F --- 2008-12-25 12:49:50
     
    goldfish,
    #7
  9. 2009/01/20
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Once again, disable any realtime protection applications. Highlight and copy the contents of the code box below and paste it into a blank notepad, then save it to your desktop as;

    Filename: CFScript.txt
    Save As Type: All Files (*.*)

    Code:
    
http://www.windowsbbs.com/malware-virus-removal/80631-active-rundll-vjwbqrfk-dll.html#post439293
Collect::
c:\windows\ikesufolifasu.dll
c:\windows\Wdeco.dll
c:\windows\system32\chert5-998.exe
c:\windows\system32\kfrqbwjv.ini
c:\windows\system32\ecvfnygv.ini
c:\windows\system32\shlecdpe.ini
c:\windows\system32\uwlikdnx.ini
c:\windows\system32\yvploiin.ini
DirLook::
C:\QUARANTINE
File::
c:\windows\cpbrkpie.ocx
c:\windows\Downloaded Program Files\cpbrkpie.inf
c:\windows\Downloaded Program Files\DinerDash.1.0.0.72.dll 
Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 "Ndesip "=-
 "Syidovitogoloput "=-
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
 "NoSetActiveDesktop "=-
 "NoActiveDesktopChanges "=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
 "AppInit_DLLs "=" "
DDS::
LSP: c:\windows\TEMP\ntdll64.dll
Trusted Zone: *.antimalwareguard.com
Trusted Zone: *.gomyhit.com
Trusted Zone: *.antimalwareguard.com
Trusted Zone: *.gomyhit.com
O16 -: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} - hxxp://a19.g.akamai.net/7/19/7125/4058/ftp.coupons.com/r3302/Coupons.cab
O16 -: {DC75FEF6-165D-4D25-A518-C8C4BDA7BAA6} - hxxp://aolsvc.aol.com/onlinegames/dinerdash/DinerDash.1.0.0.72.cab
    Close all other windows and programs. Now drag the CFScript.txt onto ComboFix.exe and drop it, using the left mouse button. Combofix should run and may reboot the computer when it's done. A log will open when it's complete. Post the contents of that log here.

    Please do not click on the ComboFix window while it is running a scan. This can cause it to stall.

    **NOTE - Allow ComboFix to update if prompted.

    Please note that I have instructed CFScript to collect some files. This means that when ComboFix finishes, you will be prompted to allow ComboFix to upload a zip file that was created. The zip contains the aforementioned files. If the upload fails you will be be presented with instructions for uploading it manually. Please do so and let me know the results. This will assist the author in adding the files for removal in future updates. Thanks!
     
    noahdfear,
    #8

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...