1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

son's computer has a virus!

Discussion in 'Malware and Virus Removal Archive' started by oj0sverdes, 2008/08/16.

Page 1 of 2
  1. 2008/08/16
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    my son who actually believes' in free laptops and free tv offerings has done a number on his computer.....it actually has gotten a virus( trojan.Vundo.B) and i've been unsuccessful in removing it using the norton anti-virus that is loaded on his machine....will i have to reformat his pc or is there an alternative way to get rid of this pesky lil problem......machine is running norton antivirus corporate edition
     
    oj0sverdes,
    #1
  2. 2008/08/17
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi oj0sverdes

    Please do this and post the log.

    Download a copy of HijackThis installer from here and save it to your Desktop.

    1. Save HJTInstall.exe to your desktop.
    2. Double-click on the HJTintall.exe icon on your desktop.
      (Let it install to the default location C:\Program Files\Hijackthis)
    3. Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
    4. Put a check by Create a desktop icon and then click Next again.
    5. Continue to follow the rest of the prompts from there.
    6. At the final dialogue box click Finish and it will launch HijackThis.
    7. Click on the Do a system scan and save a log file button.
      (It will scan and the log should open in Notepad.)
    8. Click on "Edit" > "Select All" to highlight the entire Notepad contents.
    9. Then click on "Edit" > "Copy ".
    10. Come back here to this thread and Paste the log in your next reply.
      (Right-click in the message body field and select "Paste ".)
    CAUTION: DO NOT have HijackThis "fix" anything without carefully following expert guidance. Otherwise, you might render your computer unstable or even unbootable. Most of what HijackThis finds will be harmless or even required.

    Thanks
    Geri
     
    Geri,
    #2


  3. to hide this advert.

  4. 2008/08/17
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    ok i believe here it is....

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 4:25:56 PM, on 8/17/2008
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)
    Boot mode: Normal

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINNT\system32\spoolsv.exe
    C:\Program Files\NavNT\defwatch.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\Program Files\NavNT\rtvscan.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\System32\MsgSys.EXE
    C:\WINNT\Explorer.EXE
    C:\WINNT\SOUNDMAN.EXE
    C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
    C:\Program Files\NavNT\vptray.exe
    C:\Program Files\SpamBlockerUtility\Bin\4.8.4.0\SbOEAddOn.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\WINNT\System32\wuauclt.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Documents and Settings\Administrator\Desktop\HJTInstall.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
    O2 - BHO: (no name) - {148646EE-05A5-4BFC-BD51-18D72E050243} - C:\DOCUME~1\jc\LOCALS~1\Temp\iifdabAr.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll
    O2 - BHO: (no name) - {BFA7416F-6EBA-43E5-B485-D32C6C78E1DB} - C:\DOCUME~1\jc\LOCALS~1\Temp\rqRLbxYp.dll (file missing)
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O3 - Toolbar: (no name) - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - (no file)
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
    O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
    O4 - HKLM\..\Run: [SpamBlocker] C:\Program Files\SpamBlockerUtility\Bin\4.8.4.0\SbOEAddOn.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe "
    O4 - HKLM\..\Run: [BMbb826992] Rundll32.exe "C:\WINNT\System32\vyhaovgu.dll ",s
    O4 - HKLM\..\Run: [b8b15a0e] rundll32.exe "C:\WINNT\System32\njohvxdg.dll ",b
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKUS\S-1-5-19\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
    O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZJxdm035LSUS
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll
    O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    O10 - Unknown file in Winsock LSP: c:\winnt\system32\nwprovau.dll
    O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/ZwinkyInitialSetup1.0.0.15-3.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1161915113875
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1165107153968
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - http://atv.disney.go.com/global/download/otoy/OTOYAX29b.cab
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=19588
    O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://a532.g.akamai.net/f/532/6712...amai.com/6712/player/install3.5/installer.exe
    O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www5.incredimail.com/contents/setup/downloader/imloader.cab
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - Unknown owner - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe (file missing)
    O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
    O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe

    --
    End of file - 7372 bytes



     
    oj0sverdes,
    #3
  5. 2008/08/17
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi oj0sverdes
    OK please do this.

    Download ComboFix from Here to your Desktop.

    It's best to disable realtime protection applications as they sometimes interfere with the tool.
    Check this link for any applicable programs you may have.
    • Close all open programs and windows
    • Double click combofix.exe and follow the prompts.
    • Vista users right click Combofix.exe and select Run As Administrator.
    • When finished, it shall produce a log for you. Post the Combofix log
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall

    Note - ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.

    Note - Combofix makes some changes when run to prevent autorun/autoplay of ALL CDs, floppies and USB devices, to assist with malware removal & increase security. If this is an issue or makes it difficult for you to use those devices, please ask how to reset it.

    Thanks
    Geri
     
    Geri,
    #4
  6. 2008/08/18
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    cant post the log, forum says its too big......
     
    oj0sverdes,
    #5
  7. 2008/08/18
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    Split it between two post or what ever it takes.

    Thanks
    Geri
     
    Geri,
    #6
  8. 2008/08/18
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    ComboFix 08-08-17.03 - Administrator 2008-08-18 0:53:11.2 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.0.1252.1.1033.18.778 [GMT -4:00]
    Running from: C:\Documents and Settings\Administrator\Desktop\ComboFix.exe

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\Administrator\UserData\GT6J4LY7\YL[1].xml
    C:\Documents and Settings\jboogy\UserData\LUE5ZLZ7\YL[1].xml
    C:\Documents and Settings\jc\Application Data\DOBE~1\n?pdb.exe
    C:\Documents and Settings\jc\UserData\4NU1I3S1\YL[1].xml
    C:\WINNT\BMbb826992.txt
    C:\WINNT\BMbb826992.xml
    C:\WINNT\pskt.ini
    C:\WINNT\system32\xfgsdfxr.dll
    .
    ---- Previous Run -------
    .
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\SpamBlockerUtility.log
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1.sdf
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\819382.sdf
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\domains.txt
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1058
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\18906
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\30854
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\43979
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\44228
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\6292
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\64495
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\65770
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\67469
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\745415
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\745869
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\753197
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\369a.dat
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ads.cdf
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans.idx
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans1.dat
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\business_promo.htm
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\buttondir.txt
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\components.cdf
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\cursors.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_1000.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_2000.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_3000.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bar.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bbar1.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_logos.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_other.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_weather.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\default.cdf
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz1.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz10.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz11.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz12.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz13.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz14.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz15.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz16.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz17.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz18.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz19.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz2.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz20.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz3.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz4.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz5.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz6.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz7.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz8.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz9.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_categorize.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_comparison.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-Mails.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-people.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_fastutilities.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_favorites.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Games.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hide.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hotbarcom.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hotmail.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hsskin.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemster.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsterie.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsteruk.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jobsearch.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Mails.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_new.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_premium.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_reun.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_ringtones.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_SearchBoxTrapper.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchfor.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchgo.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_weather.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_yellowpages.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\editblbuttons.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-def-511724-9595.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-t1-bg.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hb_ie_menu.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium-hotbar-premium.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium.cdf
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar_promo.htm
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\icons2.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ie_games_icon.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ie_video.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords.idx
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords1.dat
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\layout.cdf
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\linkpathlegal.txt
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\progress.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\s_icons_buttons.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sales_buttons.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sbu_icon.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sdfmodifier.xml
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\t2_bg.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\theweb.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\top7.cdf
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Top7_theweb.mnu
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\tsd_bg.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\weathericon.res
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ads.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans1.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\buttondir.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\cursors.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\default.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\editblbuttons.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-t1-bg.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hb_ie_menu.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar_promo.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\icons2.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_games_icon.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_video.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords1.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\layout.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\s_icons_buttons.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sales_buttons.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.txt
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sbu_icon.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sdfmodifier.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\t2_bg.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\top7.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\weathericon.xip
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility_Icons
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility_Icons\Repair+System+Registry.ico
    C:\Documents and Settings\Administrator\Application Data\SpamBlockerUtility_Icons\Software_Online_8.ico
    C:\Documents and Settings\Administrator\Cookies\administrator@2o7[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@advertising[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@indextools[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@insightexpressai[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@web2.checkm8[1].txt
    C:\Documents and Settings\Administrator\UserData
    C:\Documents and Settings\Administrator\UserData\49QBWDA7\oWindowsUpdate[1].xml
    C:\Documents and Settings\Administrator\UserData\index.dat
    C:\Documents and Settings\Administrator\UserData\SH6VCXEF\oWindowsUpdate[1].xml
    C:\Documents and Settings\All Users\Application Data\Rabio
    C:\Documents and Settings\jboogy\Cookies\jboogy@trustedantivirus[2].txt
     
    oj0sverdes,
    #7
  9. 2008/08/18
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    C:\Documents and Settings\jboogy\UserData
    C:\Documents and Settings\jboogy\UserData\3PORRX98\oWindowsUpdate[1].xml
    C:\Documents and Settings\jboogy\UserData\9OADRNW4\oWindowsUpdate[1].xml
    C:\Documents and Settings\jboogy\UserData\AYDJT54A\oWindowsUpdate[1].xml
    C:\Documents and Settings\jboogy\UserData\index.dat
    C:\Documents and Settings\jc\Application Data\DOBE~1
    C:\Documents and Settings\jc\Application Data\FunWebProducts
    C:\Documents and Settings\jc\Application Data\FunWebProducts\Data\jc\avatar.dat
    C:\Documents and Settings\jc\Application Data\macromedia\Flash Player\#SharedObjects\XB74MJKV\interclick.com
    C:\Documents and Settings\jc\Application Data\macromedia\Flash Player\#SharedObjects\XB74MJKV\interclick.com\ud.sol
    C:\Documents and Settings\jc\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com
    C:\Documents and Settings\jc\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol
    C:\Documents and Settings\jc\Application Data\SMANTE~1
    C:\Documents and Settings\jc\Application Data\SMANTE~1\chkntfs.exe
    C:\Documents and Settings\jc\Application Data\SMANTE~1\S?mantec\
    C:\Documents and Settings\jc\Application Data\SpamBlocker
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1206983355.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1206987967.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1206990842.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1206993967.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1206997216.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1206999842.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207045443.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207046319.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207047446.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207047579.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207047714.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207047843.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207048046.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207048178.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207048443.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207048646.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207048778.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207048914.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207049043.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207049246.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207049378.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207049514.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207049643.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207049846.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207049978.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207050113.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207050243.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207050446.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207050578.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207050712.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207050841.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207051044.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207051178.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207051312.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207051441.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207051644.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207051778.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207051912.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207052041.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207052244.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207052378.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207052512.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207052641.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207052844.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207052978.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207053112.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207053241.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207053857.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207054312.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207054441.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207054644.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207054776.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207054837.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207055041.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207055244.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207055512.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207055641.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207055844.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207055976.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207056112.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207056442.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207056984.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207057045.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207057176.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207092999.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207093173.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207093309.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207093438.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207093642.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207093773.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207093909.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207094038.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207094242.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207094373.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207094511.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207094639.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207094842.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207094974.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207095109.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207095239.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207095442.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207095573.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207095709.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207102872.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207269433.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\SpamBlockerUtility_1207413780.log
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\030104_emte10_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\030104_emte11_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\030104_emte12_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\030104_emte13_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\030104_emte14_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\030104_emte19_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\030104_emte20_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\030104_emte21_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\030104_emte9_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\030203lib_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102angel_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102bigluf_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102bigsmile_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102birthday_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102cheers_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102flo_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102good_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102jump_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102king_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102lough_1_prv.gif
     
    oj0sverdes,
    #8
  10. 2008/08/18
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102luf_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102smile_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102smiled_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102sor_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102thanx_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\033102uhu_1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\040103ahh_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\040103wow_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\040104_emi2_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\042102_1134_112_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\050103big_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\050103gig_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\050103hm_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\050103nomail_emoti_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\050103norm_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema15_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema16_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema17_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema18_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema19_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema20_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema21_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema24_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema25_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema26_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema30_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema33_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\060104_ema34_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\062802hippi_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\062802jumpie_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\080402argh_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\080402oops_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\080402ouch_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\082502no_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\082502yes_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_boring1_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_confused_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_crying_ugly_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_fantastic_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_feel_better_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_gimme_break_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_heehee_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_hlopaet_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_ign_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_lol_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_no_comment_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_peace_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_smashing_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\110103_talk2thehand_prv.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\block_sm.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\block_sm2.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\block_smli.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\block_smli2.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\blocked.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\blocked2.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\btn_add-but.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\btn_back-but.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\btn_left_cut_enabled_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\btn_left_enabled_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\btn_left_pressed_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\btn_middle_enabled_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\btn_middle_pressed_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\btn_right_cut_enabled_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\btn_right_enabled_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\btn_right_pressed_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\business_promo.htm
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\buttondir.txt
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\components.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\css_cattree.css
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\css_flashpreview.css
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\css2_main.css
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\css2_pagingmodule.css
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\css2_topbuttons.css
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\delete.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\edit_clear_sound.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\edit_fs.htm
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\edit_select.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-511724-512971.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-511724-512972.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-511724-549108.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-511724-589306.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-511724-591943.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-511724-592579.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-511724-598579.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-511724-603763.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-511724-9595.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-backgrounds.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-bcards.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-ecards.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-emoticons.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-estationery.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-funny.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-help.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-images.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-info.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-more.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-my.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-new.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-new2.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-options.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-people.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-photo.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-SpamBlocked.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-tell.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-temp.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-text.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def-email-voice.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-def.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-premium-email-premium.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\email-t7-bg.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\estatationery.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\flashpatch.js
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\flashpreview.htm
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\fs3.htm
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\hotbar_promo.htm
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_checked_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_close_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_close_pressed_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_edit_preview.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_edit_send.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_flash_preview.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_recently_used.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_remove_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_remove_pressed_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_sand-clock2.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_tell_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_tell_pressed_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_tree_null.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_unchecked_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\icon_unchecked_pressed_1.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\img_barlayout.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\img_barlayout2.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\img_barlayout4.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\img_corner_left.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\img_local_logo.gif
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\js2_basetemplate.js
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\HostOL\static\2\js2_hbgroups.js
     
    oj0sverdes,
    #9
  11. 2008/08/18
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
     
    oj0sverdes,
    #10
  12. 2008/08/18
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\61779
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\61837
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\6292
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\64404
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\64434
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\64446
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\64467
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\64495
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\6556
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\6558
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\6565
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\65770
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\6635
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\66836
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\67215
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\67466
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\67469
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\68021
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\69263
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\6938
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\70650
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\71375
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\71602
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\716588
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\73119
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\744260
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\744363
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\744786
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\744789
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\744881
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\745148
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\745175
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\745272
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\745759
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\747687
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\748176
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\748329
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\7487
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\749571
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\7518
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\7521
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\753044
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\753197
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\753300
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\753317
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\753335
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\753356
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\79246
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\79432
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\7946
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\79977
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\80026
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\80670
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\80815
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\83139
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85365
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87594
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87843
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89200
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90009
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90128
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91231
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93110
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93899
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93921
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93934
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95200
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95716
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95779
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95825
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9672
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\98248
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\98250
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99008
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3691.dat
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3692.dat
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ads.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans.idx
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans1.dat
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\business_promo.htm
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\buttondir.txt
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\components.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\cursors.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_1000.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_2000.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_3000.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bar.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bbar1.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_logos.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_other.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_weather.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\default.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz1.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz10.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz11.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz12.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz13.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz14.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz15.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz16.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz17.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz18.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz19.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz2.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz20.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz3.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz4.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz5.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz6.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz7.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz8.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz9.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_categorize.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_comparison.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-Mails.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-people.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_fastutilities.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_favorites.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Games.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hide.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hotbarcom.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hotmail.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hsskin.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemster.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsterie.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsteruk.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jobsearch.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Mails.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_new.mnu
     
    oj0sverdes,
    #11
  13. 2008/08/18
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_premium.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_reun.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_ringtones.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_SearchBoxTrapper.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchfor.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchgo.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_weather.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_yellowpages.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\editblbuttons.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-def-511724-9595.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-t1-bg.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hb_ie_menu.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium-hotbar-premium.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar_promo.htm
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\icons2.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ie_games_icon.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ie_video.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords.idx
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords1.dat
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\layout.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\linkpathlegal.txt
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\progress.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\s_icons_buttons.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sales_buttons.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sbu_icon.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sdfmodifier.xml
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\t2_bg.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\theweb.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\top7.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Top7_theweb.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\tsd_bg.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\weathericon.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans.idx
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans1.dat
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\business_promo.htm
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\buttondir.txt
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\cursors.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_1000.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_2000.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_3000.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bar.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bbar1.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_logos.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_other.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_weather.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\default.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_premium.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_searchfor.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_weather.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-t1-bg.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar_promo.htm
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ie_games_icon.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ie_video.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\keywords.idx
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\keywords1.dat
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\layout.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\linkpathlegal.txt
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\progress.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\s_icons_buttons.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sales_buttons.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sbu_icon.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\t2_bg.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\tsd_bg.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\weathericon.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ads.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ads.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.idx
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans1.dat
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans1.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.htm
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\buttondir.txt
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\buttondir.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\components.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\cursors.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\cursors.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\default.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\default.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz1.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz10.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz11.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz12.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz13.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz14.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz15.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz16.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz17.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz18.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz19.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz2.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz20.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz3.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz4.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz5.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz6.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz7.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz8.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_bidz9.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_categorize.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_comparison.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_em_PROFL_CA_flow_b_IEB.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_explorer-Mails.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_explorer-people.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_fastutilities.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_favorites.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_Games.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_Hide.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_hotbarcom.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_Hotmail.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_hsskin.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_jemster.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_jemsterie.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_jemsteruk.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_jobsearch.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_Mails.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_new.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_premium.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_reun.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_ringtones.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_SearchBoxTrapper.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_searchfor.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_searchgo.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_weather.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Default_yellowpages.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\editblbuttons.res
     
    oj0sverdes,
    #12
  14. 2008/08/18
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\editblbuttons.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-def-511724-9595.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-t1-bg.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-t1-bg.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hb_ie_menu.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hb_ie_menu.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium-hotbar-premium.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar_promo.htm
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar_promo.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\icons2.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\icons2.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_games_icon.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_games_icon.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_video.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_video.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords.idx
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords1.dat
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords1.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\layout.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\layout.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.txt
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\s_icons_buttons.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\s_icons_buttons.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sales_buttons.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sales_buttons.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.txt
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sbu_icon.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sbu_icon.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sdfmodifier.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sdfmodifier.xml
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\t2_bg.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\t2_bg.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\theweb.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\top7.cdf
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\top7.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\Top7_theweb.mnu
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\weathericon.res
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\weathericon.xip
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility_Icons
    C:\Documents and Settings\jc\Application Data\SpamBlockerUtility_Icons\Software_Online_8.ico
    C:\Documents and Settings\jc\Application Data\YSTEM~1
    C:\Documents and Settings\jc\Application Data\YSTEM3~1
    C:\Documents and Settings\jc\Cookies\jc@2o7[1].txt
    C:\Documents and Settings\jc\Cookies\jc@2o7[4].txt
    C:\Documents and Settings\jc\Cookies\jc@2o7[5].txt
    C:\Documents and Settings\jc\Cookies\jc@2o7[6].txt
    C:\Documents and Settings\jc\Cookies\jc@2o7[7].txt
    C:\Documents and Settings\jc\Cookies\jc@85.12.43[2].txt
    C:\Documents and Settings\jc\Cookies\jc@a.hasbro[1].txt
    C:\Documents and Settings\jc\Cookies\jc@a.hasbro[3].txt
    C:\Documents and Settings\jc\Cookies\jc@a.seenon[1].txt
    C:\Documents and Settings\jc\Cookies\jc@ad.yieldmanager[1].txt
    C:\Documents and Settings\jc\Cookies\jc@ad.yieldmanager[2].txt
    C:\Documents and Settings\jc\Cookies\jc@ad.yieldmanager[3].txt
    C:\Documents and Settings\jc\Cookies\jc@ad.yieldmanager[4].txt
    C:\Documents and Settings\jc\Cookies\jc@ad.yieldmanager[6].txt
    C:\Documents and Settings\jc\Cookies\jc@ads.addynamix[2].txt
    C:\Documents and Settings\jc\Cookies\jc@adserver[2].txt
    C:\Documents and Settings\jc\Cookies\jc@adtrgt[2].txt
    C:\Documents and Settings\jc\Cookies\jc@adtrgt[3].txt
    C:\Documents and Settings\jc\Cookies\jc@advertising[1].txt
    C:\Documents and Settings\jc\Cookies\jc@advertising[2].txt
    C:\Documents and Settings\jc\Cookies\jc@amazon[3].txt
    C:\Documents and Settings\jc\Cookies\jc@antispywaremaster[2].txt
    C:\Documents and Settings\jc\Cookies\jc@antispywaresuite[2].txt
    C:\Documents and Settings\jc\Cookies\jc@casalemedia[1].txt
    C:\Documents and Settings\jc\Cookies\jc@contextweb[1].txt
    C:\Documents and Settings\jc\Cookies\jc@edge.ru4[2].txt
    C:\Documents and Settings\jc\Cookies\jc@ehg-dig.hitbox[1].txt
    C:\Documents and Settings\jc\Cookies\jc@ehg-verizon.hitbox[2].txt
    C:\Documents and Settings\jc\Cookies\jc@fastclick[2].txt
    C:\Documents and Settings\jc\Cookies\jc@fastclick[3].txt
    C:\Documents and Settings\jc\Cookies\jc@insightexpressai[1].txt
    C:\Documents and Settings\jc\Cookies\jc@myspace[1].txt
    C:\Documents and Settings\jc\Cookies\jc@nowayvirus[2].txt
    C:\Documents and Settings\jc\Cookies\jc@revsci[1].txt
    C:\Documents and Settings\jc\Cookies\jc@revsci[2].txt
    C:\Documents and Settings\jc\Cookies\jc@revsci[4].txt
    C:\Documents and Settings\jc\Cookies\jc@safepctool[1].txt
    C:\Documents and Settings\jc\Cookies\jc@serving-sys[1].txt
    C:\Documents and Settings\jc\Cookies\jc@spamblockerutility[1].txt
    C:\Documents and Settings\jc\Cookies\jc@stat.dealtime[2].txt
    C:\Documents and Settings\jc\Cookies\jc@systemerrorfixer[1].txt
    C:\Documents and Settings\jc\Cookies\jc@trafficmp[3].txt
    C:\Documents and Settings\jc\Cookies\jc@trafficmp[4].txt
    C:\Documents and Settings\jc\Cookies\jc@trustedantivirus[1].txt
    C:\Documents and Settings\jc\Cookies\jc@winanonymous[1].txt
    C:\Documents and Settings\jc\My Documents\CROSOF~1
    C:\Documents and Settings\jc\Start Menu\Programs\Outerinfo
    C:\Documents and Settings\jc\Start Menu\Programs\Outerinfo\Terms.lnk
    C:\Documents and Settings\jc\Start Menu\Programs\Outerinfo\Uninstall.lnk
    C:\Documents and Settings\jc\UserData
    C:\Documents and Settings\jc\UserData\ERYVQBAN\oWindowsUpdate[1].xml
    C:\Documents and Settings\jc\UserData\EVSTUXMT\bw_vul.pdf
    C:\Documents and Settings\jc\UserData\EVSTUXMT\oWindowsUpdate[1].xml
    C:\Documents and Settings\jc\UserData\EVSTUXMT\Setup_Swypeout.exe
    C:\Documents and Settings\jc\UserData\EVSTUXMT\spymaxx_setup.exe
    C:\Documents and Settings\jc\UserData\EVSTUXMT\Stop_The_Morbuzakh.dmg
    C:\Documents and Settings\jc\UserData\EVSTUXMT\Stop_the_Morbuzakh_Installer.exe
    C:\Documents and Settings\jc\UserData\index.dat
    C:\Program Files\180search assistant
    C:\Program Files\180search assistant\180sa.exe
    C:\Program Files\180search assistant\sau.exe
    C:\Program Files\180searchassistant
    C:\Program Files\180searchassistant\saap.exe
    C:\Program Files\180searchassistant\sac.exe
    C:\Program Files\180solutions
    C:\Program Files\180solutions\sais.exe
    C:\Program Files\AntiSpywareMaster
    C:\Program Files\Common Files\dobe~1
    C:\Program Files\Common Files\mantec~1
    C:\Program Files\Common Files\Yazzle1552OinAdmin.exe
    C:\Program Files\Common Files\Yazzle1552OinUninstaller.exe
    C:\Program Files\dobe~1
    C:\Program Files\Eroca
    C:\Program Files\Eroca\Eroca.exe
    C:\Program Files\FunWebProducts
    C:\Program Files\FunWebProducts\Installr\1.bin\F3EZSETP.DLL
    C:\Program Files\FunWebProducts\Installr\Cache\00A94A03.exe
    C:\Program Files\FunWebProducts\Installr\Cache\files.ini
    C:\Program Files\Hotbar
    C:\Program Files\inetget2
    C:\Program Files\MyWebSearch
    C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
    C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
    C:\Program Files\MyWebSearch\bar\History\search2
    C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat
    C:\Program Files\MyWebSearch\bar\Settings\setting2.htm
    C:\Program Files\MyWebSearch\bar\Settings\settings.dat
    C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
    C:\Program Files\outerinfo
    C:\Program Files\outerinfo\FF\chrome.manifest
    C:\Program Files\outerinfo\FF\components\OuterinfoAds.xpt
    C:\Program Files\outerinfo\FF\install.rdf
    C:\Program Files\outerinfo\Terms.rtf
    C:\Program Files\racle~1
    C:\Program Files\racle~1\??chost.exe
    C:\Program Files\seekmo
    C:\Program Files\seekmo\seekmohook.dll
    C:\Program Files\spamblockerutility
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\1_Trash.wav
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\2_Balloon.wav
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\3_Shot Gun.wav
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\ASAPCom.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\Cml.exe
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\dBenderC.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\Redemption.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SBClientSinkPS.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SbCoreSrv.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SbGuard.exe
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SbHostIE.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SbHostOE.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SbHostOL.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SBInst.exe
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SbInstIE.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SbOEAddOn.exe
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SBOLExp.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SBOLExt.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SbSrv.exe
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SBSrvPS.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SbToolbar.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SBTrayAppPS.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SBUIRes.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SBUISkin.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SbWallpaper.dll
    C:\Program Files\spamblockerutility\Bin\4.8.4.0\SpamBlocker.exe
    C:\Program Files\spamblockerutility\Bin\SbUninst.exe
    C:\Program Files\spamblockerutility\SBTV\SBTV.exe
    C:\Program Files\spamblockerutility\SBTV\sbtv_kyf.dat
    C:\Program Files\spamblockerutility\SBTV\sbtvau.dat
    C:\Program Files\spamblockerutility\SBTV\SBTVHelper.dll
    C:\Program Files\spamblockerutility\SBTV\uninstaller.exe
    C:\Program Files\SpyMaxx
    C:\Program Files\SpyMaxx\sm_ie_monitor.dll
    C:\Program Files\SpyMaxx\stat.bin
    C:\Program Files\SpyMaxx\uninstall.exe
    C:\Program Files\SpyMaxx\uninstall.log
    C:\Program Files\stc
    C:\Program Files\stc\csv5p070.exe
    C:\Program Files\Sysmnt
    C:\Program Files\Sysmnt\Ssmgr.exe
    C:\Program Files\zango
    C:\Program Files\zango\zango.exe
    C:\WINNT\123messenger.per
    C:\WINNT\180ax.exe
    C:\WINNT\2020search.dll
    C:\WINNT\2020search2.dll
    C:\WINNT\apphelp32.dll
    C:\WINNT\asferror32.dll
    C:\WINNT\asycfilt32.dll
    C:\WINNT\athprxy32.dll
    C:\WINNT\ati2dvaa32.dll
    C:\WINNT\ati2dvag32.dll
    C:\WINNT\audiosrv32.dll
    C:\WINNT\autodisc32.dll
    C:\WINNT\avifile32.dll
    C:\WINNT\avisynthex32.dll
    C:\WINNT\aviwrap32.dll
    C:\WINNT\b152.exe
    C:\WINNT\bjam.dll
    C:\WINNT\BMbb826992.txt
    C:\WINNT\BMbb826992.xml
    C:\WINNT\bokja.exe
    C:\WINNT\browserad.dll
    C:\WINNT\cdsm32.dll
    C:\WINNT\changeurl_30.dll
    C:\WINNT\cookies.ini
    C:\WINNT\didduid.ini
    C:\WINNT\Downloaded Program Files\setup.inf
    C:\WINNT\FLEOK
    C:\WINNT\FLEOK\180ax.exe
    C:\WINNT\licencia.txt
    C:\WINNT\msa64chk.dll
    C:\WINNT\msapasrc.dll
    C:\WINNT\mspphe.dll
    C:\WINNT\mssvr.exe
    C:\WINNT\ntnut.exe
    C:\WINNT\pskt.ini
    C:\WINNT\saiemod.dll
    C:\WINNT\salm.exe
    C:\WINNT\shdocpe.dll
    C:\WINNT\shdocpl.dll
    C:\WINNT\stcloader.exe
    C:\WINNT\swin32.dll
    C:\WINNT\system32\AutoRun.inf
    C:\WINNT\system32\awlsicnm.dll
    C:\WINNT\system32\bglisxeh.ini
    C:\WINNT\system32\bikekukc.dll
    C:\WINNT\system32\bthrrhuu.dll
    C:\WINNT\system32\ceuciexn.ini
    C:\WINNT\system32\cvvfswho.dll
    C:\WINNT\system32\dbrifmwk.dll
    C:\WINNT\system32\deaxhglo.dll
    C:\WINNT\system32\dldpyakd.dll
    C:\WINNT\system32\dxchrtcw.dll
    C:\WINNT\system32\egtvoenw.ini
    C:\WINNT\system32\ehwkxwrj.ini
    C:\WINNT\system32\gdxvhojn.ini
    C:\WINNT\system32\ggingasp.ini
    C:\WINNT\system32\gqphxwjj.dll
    C:\WINNT\system32\hsjgyeie.dll
    C:\WINNT\system32\jmqeocdh.dll
    C:\WINNT\system32\jrwxkwhe.dll
    C:\WINNT\system32\mcrh.tmp
    C:\WINNT\system32\mlhkneav.dll
    C:\WINNT\system32\mncislwa.ini
    C:\WINNT\system32\mncislwa.tmp2
    C:\WINNT\system32\msixu.dll
    C:\WINNT\system32\MSNSA32.dll
    C:\WINNT\system32\njoowjdb.dll
    C:\WINNT\system32\ntnut32.exe
    C:\WINNT\system32\nxeicuec.dll
    C:\WINNT\system32\peeljlot.ini
    C:\WINNT\system32\qhhjupbs.ini
    C:\WINNT\system32\qkdwaklv.ini
    C:\WINNT\system32\qkwhxoko.ini
    C:\WINNT\system32\qumlckxu.dll
    C:\WINNT\system32\riicdwri.dll
    C:\WINNT\system32\rycbujgx.dll
    C:\WINNT\system32\shdocpe.dll
    C:\WINNT\system32\SIPSPI32.dll
    C:\WINNT\system32\toljleep.dll
    C:\WINNT\system32\trtirovv.dll
    C:\WINNT\system32\tsiytmas.dll
    C:\WINNT\system32\uypkjcco.dll
    C:\WINNT\system32\vkrwrffs.ini
    C:\WINNT\system32\vlkawdkq.dll
    C:\WINNT\system32\vlxoplif.ini
    C:\WINNT\system32\wbobqluy.ini
    C:\WINNT\system32\wer8274.dll
    C:\WINNT\system32\winfrun32.bin
    C:\WINNT\system32\wneovtge.dll
    C:\WINNT\system32\xrkgbtlj.dll
    C:\WINNT\telefonos.txt
    C:\WINNT\TEMP\salm.exe
    C:\WINNT\textos.txt
    C:\WINNT\uninstall_nmon.vbs
    C:\WINNT\updatetc.exe
    C:\WINNT\voiceip.dll
    C:\WINNT\Web\default.htt
    C:\WINNT\winsb.dll

    .
    ((((((((((((((((((((((((( Files Created from 2008-07-18 to 2008-08-18 )))))))))))))))))))))))))))))))
    .

    2008-08-17 16:23 . 2008-08-17 16:23 <DIR> d-------- C:\Program Files\Trend Micro

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2006-10-27 00:17 271 --sh--w C:\Program Files\desktop.ini
    2006-10-27 00:17 21,952 ---h--w C:\Program Files\folder.htt
    2005-07-29 21:24 472 --sha-r C:\WINNT\dGhlIGtpZHM\x315K3QDtJg.vbs
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0373CCDF-3BAD-4A8A-89FC-1F83C0768BD7}]
    2008-03-29 19:10 267776 --a------ C:\DOCUME~1\jc\LOCALS~1\Temp\iifdabAr.dll

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "swg "= "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-14 07:51 68856]
    "MSMSGS "= "C:\Program Files\Messenger\msmsgs.exe" [2001-08-02 08:14 1077277]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "HPDJ Taskbar Utility "= "C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe" [2001-11-07 14:44 196608]
    "vptray "= "C:\Program Files\NavNT\vptray.exe" [2001-09-24 08:59 73728]
    "SunJavaUpdateSched "= "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
    "Synchronization Manager "= "mobsync.exe" [2001-08-23 12:00 135680 C:\WINNT\system32\mobsync.exe]
    "SoundMan "= "SOUNDMAN.EXE" [2003-07-16 10:50 55296 C:\WINNT\SOUNDMAN.EXE]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "swg "= "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-14 07:51 68856]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "^SetupICWDesktop "= "C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe" [2001-08-23 12:00 209408]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "aux "= mmdrv.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys]
    @= "Driver "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tga.sys]
    @= "Driver "

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
    path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
    backup=C:\WINNT\pss\WinZip Quick Pick.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
    --a------ 2001-08-02 08:14 1077277 C:\Program Files\Messenger\msmsgs.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
    --a------ 2006-10-26 20:53 26112 C:\Program Files\Real\RealPlayer\realplay.exe

    S3 usbhub20;USB 2.0 Root Hub Support;C:\WINNT\System32\DRIVERS\usbhub20.sys [2003-06-19 15:05]
    S3 viafilter;VIA USB Filter;C:\WINNT\System32\Drivers\viausb.sys [2003-06-18 16:48]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08
    HPService REG_MULTI_SZ HPSLPSVC
    .
    Contents of the 'Scheduled Tasks' folder

    2008-08-18 C:\WINNT\Tasks\Symantec NetDetect.job
    - C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE [2001-07-26 12:23]
    .
    - - - - ORPHANS REMOVED - - - -

    HKCU-Run-Aim6 - (no file)
    HKLM-Run-AOLDialer - C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
    HKLM-Run-b8b15a0e - C:\WINNT\System32\njohvxdg.dll
    HKLM-Run-BMbb826992 - C:\WINNT\System32\xfgsdfxr.dll
    MSConfigStartUp-AOL Fast Start - C:\Program Files\America Online 9.0\AOL.EXE


    .
    ------- Supplementary Scan -------
    .
    FireFox -: Profile - C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\ifvddhwo.default\


    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-18 00:57:26
    Windows 5.1.2600 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    PROCESS: C:\WINNT\system32\winlogon.exe
    -> C:\WINNT\System32\NavLogon.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\NavNT\defwatch.exe
    .
    **************************************************************************
    .
    Completion time: 2008-08-18 1:00:24 - machine was rebooted [Administrator]
    ComboFix-quarantined-files.txt 2008-08-18 05:00:13

    Pre-Run: 74,596,622,336 bytes free
    Post-Run: 74,551,119,872 bytes free

    1275 --- E O F --- 2008-04-12 07:08:26
     
    oj0sverdes,
    #13
  15. 2008/08/18
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi oj0sverdes
    OK, WOW :eek:
    I would make sure you show your son this log so he knows what happens when clicking on ads and banners.:(

    Please do this.

    Highlight and copy the contents of the code box below and paste it into a blank notepad, then save it to your desktop as;

    Filename: CFScript.txt
    Save As Type: All Files (*.*)

    Close all other windows and programs. Now drag the CFScript.txt onto ComboFix.exe and drop it, using the left mouse button.
    Click here to see how to use CFScript.txt
    Combofix should run and may reboot the computer when it's done. A log will open when it's complete. Post the contents of that log and another fresh HijackThis log.

    Please do not click on the ComboFix window while it is running a scan. This can cause it to stall.

    Code:
    File::
C:\WINNT\dGhlIGtpZHM\x315K3QDtJg.vbs
C:\DOCUME~1\jc\LOCALS~1\Temp\iifdabAr.dll

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0373CCDF-3BAD-4A8A-89FC-1F83C0768BD7}]
    Please post the combofix log.

    Thanks
    Geri
     
    Geri,
    #14
  16. 2008/08/18
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    combo fix log:
    ComboFix 08-08-17.03 - Administrator 2008-08-19 0:23:06.3 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.0.1252.1.1033.18.766 [GMT -4:00]
    Running from: C:\Documents and Settings\Administrator\Desktop\ComboFix.exe
    Command switches used :: C:\Documents and Settings\Administrator\Desktop\CFScript.txt
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\jc\Cookies\jc@ads.pointroll[1].txt

    .
    ((((((((((((((((((((((((( Files Created from 2008-07-19 to 2008-08-19 )))))))))))))))))))))))))))))))
    .

    2008-08-17 16:23 . 2008-08-17 16:23 <DIR> d-------- C:\Program Files\Trend Micro

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-08-18 05:13 --------- d-----w C:\Program Files\Common Files\Real
    2006-10-27 00:17 271 --sh--w C:\Program Files\desktop.ini
    2006-10-27 00:17 21,952 ---h--w C:\Program Files\folder.htt
    2005-07-29 21:24 472 --sha-r C:\WINNT\dGhlIGtpZHM\x315K3QDtJg.vbs
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "swg "= "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-14 07:51 68856]
    "MSMSGS "= "C:\Program Files\Messenger\msmsgs.exe" [2001-08-02 08:14 1077277]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "HPDJ Taskbar Utility "= "C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe" [2001-11-07 14:44 196608]
    "vptray "= "C:\Program Files\NavNT\vptray.exe" [2001-09-24 08:59 73728]
    "SunJavaUpdateSched "= "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
    "Synchronization Manager "= "mobsync.exe" [2001-08-23 12:00 135680 C:\WINNT\system32\mobsync.exe]
    "SoundMan "= "SOUNDMAN.EXE" [2003-07-16 10:50 55296 C:\WINNT\SOUNDMAN.EXE]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "swg "= "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-14 07:51 68856]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "^SetupICWDesktop "= "C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe" [2001-08-23 12:00 209408]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "aux "= mmdrv.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys]
    @= "Driver "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tga.sys]
    @= "Driver "

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
    path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
    backup=C:\WINNT\pss\WinZip Quick Pick.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
    --a------ 2001-08-02 08:14 1077277 C:\Program Files\Messenger\msmsgs.exe

    S3 usbhub20;USB 2.0 Root Hub Support;C:\WINNT\System32\DRIVERS\usbhub20.sys [2003-06-19 15:05]
    S3 viafilter;VIA USB Filter;C:\WINNT\System32\Drivers\viausb.sys [2003-06-18 16:48]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08
    HPService REG_MULTI_SZ HPSLPSVC
    .
    Contents of the 'Scheduled Tasks' folder

    2008-08-19 C:\WINNT\Tasks\Symantec NetDetect.job
    - C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE [2001-07-26 12:23]
    .
    - - - - ORPHANS REMOVED - - - -

    MSConfigStartUp-RealTray - C:\Program Files\Real\RealPlayer\RealPlay.exe


    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-19 00:24:28
    Windows 5.1.2600 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    PROCESS: C:\WINNT\system32\winlogon.exe
    -> C:\WINNT\System32\NavLogon.dll
    .
    Completion time: 2008-08-19 0:26:13
    ComboFix-quarantined-files.txt 2008-08-19 04:25:47
    ComboFix2.txt 2008-08-18 05:00:25

    Pre-Run: 73,927,057,408 bytes free
    Post-Run: 74,544,943,104 bytes free

    84 --- E O F --- 2008-04-12 07:08:26
     
    oj0sverdes,
    #15
  17. 2008/08/18
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:31:19 AM, on 8/19/2008
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)
    Boot mode: Normal

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINNT\system32\spoolsv.exe
    C:\Program Files\NavNT\defwatch.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\SOUNDMAN.EXE
    C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
    C:\Program Files\NavNT\vptray.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
    C:\WINNT\System32\wuauclt.exe
    C:\WINNT\explorer.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
    O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe "
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKUS\S-1-5-19\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
    O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZJxdm035LSUS
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    O10 - Unknown file in Winsock LSP: c:\winnt\system32\nwprovau.dll
    O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1161915113875
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1165107153968
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - http://atv.disney.go.com/global/download/otoy/OTOYAX29b.cab
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=19588
    O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://a532.g.akamai.net/f/532/6712...amai.com/6712/player/install3.5/installer.exe
    O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www5.incredimail.com/contents/setup/downloader/imloader.cab
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - Unknown owner - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe (file missing)
    O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
    O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe

    --
    End of file - 6435 bytes
     
    oj0sverdes,
    #16
  18. 2008/08/18
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:31:19 AM, on 8/19/2008
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)
    Boot mode: Normal

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINNT\system32\spoolsv.exe
    C:\Program Files\NavNT\defwatch.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\SOUNDMAN.EXE
    C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
    C:\Program Files\NavNT\vptray.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
    C:\WINNT\System32\wuauclt.exe
    C:\WINNT\explorer.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
    O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe "
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKUS\S-1-5-19\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
    O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZJxdm035LSUS
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    O10 - Unknown file in Winsock LSP: c:\winnt\system32\nwprovau.dll
    O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1161915113875
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1165107153968
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - http://atv.disney.go.com/global/download/otoy/OTOYAX29b.cab
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=19588
    O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://a532.g.akamai.net/f/532/6712...amai.com/6712/player/install3.5/installer.exe
    O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www5.incredimail.com/contents/setup/downloader/imloader.cab
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - Unknown owner - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe (file missing)
    O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
    O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe

    --
    End of file - 6435 bytes


     
    oj0sverdes,
    #17
  19. 2008/08/18
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi oj0sverdes
    Ok that didn't work. Make sure you disable all real time protections before doing it, or if you are having any questions on how to do this please ask..

    Lets try it again.

    Check this link for any applicable programs you may have.

    Highlight and copy the contents of the code box below and paste it into a blank notepad, then save it to your desktop as;

    Filename: CFScript.txt
    Save As Type: All Files (*.*)

    Close all other windows and programs. Now drag the CFScript.txt onto ComboFix.exe and drop it, using the left mouse button.
    Click here to see how to use CFScript.txt
    Combofix should run and may reboot the computer when it's done. A log will open when it's complete. Post the contents of that log and another fresh HijackThis log.

    Please do not click on the ComboFix window while it is running a scan. This can cause it to stall.

    Code:
    KillAll::
File::
C:\WINNT\dGhlIGtpZHM\x315K3QDtJg.vbs
C:\DOCUME~1\jc\LOCALS~1\Temp\iifdabAr.dll

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0373CCDF-3BAD-4A8A-89FC-1F83C0768BD7}]
    Please post the combofix log.

    Thanks
    Geri
     
    Geri,
    #18
  20. 2008/08/19
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    i double checked the real time, its all disabled, i think i didnt copy the code box completely before...tried it again

    ComboFix 08-08-17.03 - Administrator 2008-08-19 7:40:32.4 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.0.1252.1.1033.18.780 [GMT -4:00]
    Running from: C:\Documents and Settings\Administrator\Desktop\ComboFix.exe
    Command switches used :: C:\Documents and Settings\Administrator\Desktop\CFScript.txt
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

    FILE ::
    C:\DOCUME~1\jc\LOCALS~1\Temp\iifdabAr.dll
    C:\WINNT\dGhlIGtpZHM\x315K3QDtJg.vbs
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\WINNT\dGhlIGtpZHM\x315K3QDtJg.vbs

    .
    ((((((((((((((((((((((((( Files Created from 2008-07-19 to 2008-08-19 )))))))))))))))))))))))))))))))
    .

    2008-08-17 16:23 . 2008-08-17 16:23 <DIR> d-------- C:\Program Files\Trend Micro

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-08-18 05:13 --------- d-----w C:\Program Files\Common Files\Real
    2006-10-27 00:17 271 --sh--w C:\Program Files\desktop.ini
    2006-10-27 00:17 21,952 ---h--w C:\Program Files\folder.htt
    .

    ((((((((((((((((((((((((((((( snapshot@2008-08-18_ 0.59.55.20 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2008-08-18 04:56:20 16,384 ----a-w C:\WINNT\system32\config\systemprofile\Cookies\index.dat
    + 2008-08-19 11:46:01 16,384 ----a-w C:\WINNT\system32\config\systemprofile\Cookies\index.dat
    - 2008-08-18 04:56:20 32,768 ----a-w C:\WINNT\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2008-08-19 11:46:01 32,768 ----a-w C:\WINNT\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    - 2008-08-18 04:56:20 32,768 ----a-w C:\WINNT\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2008-08-19 11:46:01 32,768 ----a-w C:\WINNT\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "swg "= "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-14 07:51 68856]
    "MSMSGS "= "C:\Program Files\Messenger\msmsgs.exe" [2001-08-02 08:14 1077277]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "HPDJ Taskbar Utility "= "C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe" [2001-11-07 14:44 196608]
    "vptray "= "C:\Program Files\NavNT\vptray.exe" [2001-09-24 08:59 73728]
    "SunJavaUpdateSched "= "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
    "Synchronization Manager "= "mobsync.exe" [2001-08-23 12:00 135680 C:\WINNT\system32\mobsync.exe]
    "SoundMan "= "SOUNDMAN.EXE" [2003-07-16 10:50 55296 C:\WINNT\SOUNDMAN.EXE]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "swg "= "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-14 07:51 68856]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "^SetupICWDesktop "= "C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe" [2001-08-23 12:00 209408]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "aux "= mmdrv.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys]
    @= "Driver "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tga.sys]
    @= "Driver "

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
    path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
    backup=C:\WINNT\pss\WinZip Quick Pick.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
    --a------ 2001-08-02 08:14 1077277 C:\Program Files\Messenger\msmsgs.exe

    S3 usbhub20;USB 2.0 Root Hub Support;C:\WINNT\System32\DRIVERS\usbhub20.sys [2003-06-19 15:05]
    S3 viafilter;VIA USB Filter;C:\WINNT\System32\Drivers\viausb.sys [2003-06-18 16:48]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08
    HPService REG_MULTI_SZ HPSLPSVC
    .
    Contents of the 'Scheduled Tasks' folder

    2008-08-19 C:\WINNT\Tasks\Symantec NetDetect.job
    - C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE [2001-07-26 12:23]
    .
    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-19 07:47:40
    Windows 5.1.2600 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    PROCESS: C:\WINNT\system32\winlogon.exe
    -> C:\WINNT\System32\NavLogon.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\NavNT\defwatch.exe
    .
    **************************************************************************
    .
    Completion time: 2008-08-19 7:50:40 - machine was rebooted
    ComboFix-quarantined-files.txt 2008-08-19 11:50:33
    ComboFix2.txt 2008-08-19 04:26:14
    ComboFix3.txt 2008-08-18 05:00:25

    Pre-Run: 74,522,628,096 bytes free
    Post-Run: 74,526,785,536 bytes free

    101 --- E O F --- 2008-08-19 07:00:18


     
    oj0sverdes,
    #19
  21. 2008/08/19
    oj0sverdes

    oj0sverdes Inactive Thread Starter

    Joined:
    2006/12/07
    Messages:
    69
    Likes Received:
    0
    hijack file
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 7:55:14 AM, on 8/19/2008
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)
    Boot mode: Normal

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINNT\system32\spoolsv.exe
    C:\Program Files\NavNT\defwatch.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\SOUNDMAN.EXE
    C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
    C:\Program Files\NavNT\vptray.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\WINNT\System32\wuauclt.exe
    C:\WINNT\explorer.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
    O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe "
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKUS\S-1-5-19\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
    O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZJxdm035LSUS
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    O10 - Unknown file in Winsock LSP: c:\winnt\system32\nwprovau.dll
    O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1161915113875
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1165107153968
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - http://atv.disney.go.com/global/download/otoy/OTOYAX29b.cab
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=19588
    O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://a532.g.akamai.net/f/532/6712...amai.com/6712/player/install3.5/installer.exe
    O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www5.incredimail.com/contents/setup/downloader/imloader.cab
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - Unknown owner - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe (file missing)
    O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
    O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe

    --
    End of file - 6434 bytes


     
    oj0sverdes,
    #20
Page 1 of 2

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...