Go Back   Computer Juice > Computer Software > Virus, Spyware & Security
Register Points Members New Posts Donate Unanswered Posts Site Spy Search

>>> Get Paid to Hang Out Here! Activity = Points = Prizes. Want to Know More? <<<

Reply
 
LinkBack Thread Tools
  #1  
Old 11-12-2007, 10:47 PM
No Avatar
CJ New Member
 
CallistaT is offline
 
Join Date: Dec 2007
Last Online: 14-12-2007 05:37 PM
Posts: 10
iTrader: (0)
CallistaT is on a distinguished road
Default Refreshed Hijack This log, Problem Worse

I was requested to uninstall the program downloaded which was open canvas (you can see from the old log file that I had already done so). I ran Hijack this once more, and this is the new log file. It doesn't look much different from the old one.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:44:06 PM, on 12/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\DRIVERS\WtSrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\WService.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\shell.exe
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [sysdp.exe] C:\WINDOWS\sysdp.exe
O4 - HKLM\..\Run: [winlh.exe] C:\WINDOWS\winlh.exe
O4 - HKLM\..\Run: [systm.exe] C:\WINDOWS\system32\systm.exe
O4 - HKLM\..\Run: [winmp32.exe] C:\WINDOWS\system32\winmp32.exe
O4 - HKLM\..\Run: [wingp.exe] C:\WINDOWS\system32\wingp.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [winll.exe] C:\WINDOWS\winll.exe
O4 - HKLM\..\Run: [msnsyslog] C:\WINDOWS\msnlogm.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [WService] WService.EXE
O4 - HKLM\..\Run: [avp] C:\WINDOWS\TEMP\winAD.exe
O4 - HKLM\..\Run: [Printer] C:\WINDOWS\system32\printer.exe
O4 - HKLM\..\Run: [smgr] mgrs.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exe
O4 - HKCU\..\Run: [Spoolsv] C:\WINDOWS\system32\spoolvs.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: findfast.exe
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe
O4 - Global Startup: autorun.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/game...lugin11USA.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/...toUploader.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) - http://gamedownload.ijjimax.com/game...Plugin9USA.cab
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\system32\DRIVERS\WtSrv.exe

--
End of file - 4184 bytes


Now my computer is running extremely slow in everything I do, even when I shut down as many tasks as I can in task manager.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #2  
Old 12-12-2007, 12:08 AM
evilfantasy's Avatar
CJ Moderator
Intel ATi
evilfantasy is online now
Send a message via Yahoo to evilfantasy
 
Join Date: Jul 2007
Last Online: Today 02:14 AM
Posts: 4,884
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default Refreshed Hijack This log, Problem Worse

OK, this is possibly the worst log I have seen in a while.

You may need to reinstall MSN Messenger if you use after we are done.

When posting the logs, just copy and then paste them into the thread. If you need to use two posts to get all of the logs in then please do so.

----------

Please download ATF Cleaner by Atribune. ATF Cleaner.exe

Make sure that all browser windows are closed.
* Double-click ATF-Cleaner.exe to run the program.
* Under Main choose: Select All and UNCHECK Cookies.
* Click the Empty Selected button.

If you use Firefox browser
* Click Firefox at the top and choose: Select All and UNCHECK Cookies.
* Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser
* Click Opera at the top and choose: Select All and UNCHECK Cookies.
* Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main ATF Cleaner menu to close the program.

----------

Please download Combofix by sUBs from either here or here

Save Combofix.exe to your your Desktop.

1. Double click combofix.exe & follow the prompts. (from the keyboard select 1 and press enter)
2. When finished, it will produce a log for you.
3. Post that log in your next reply.

Note:
Do not mouseclick combofix's window while it's running. That may cause your computer to stall

----------

Please download the trial version of SpySweeper (2 week trial that can be uninstalled once we are done)

* Run the installer. Choosing to only install SpySweeper
* It will prompt you to update to the latest definitions, choose Yes (recommended) and click Next
* Once the definitions are installed, click I accept the agreement and then Next
* Choose Typical Installation then click Next
* Enter your email address then click Next
Important Uncheck the box Install the Webroot Ask toolbar Search Assistant, I agree to the terms above before clicking Next
* Click Install.
* Choose Yes, restart my computer now (recommended) then click Finish (the computer will restart)

* Once restarted open SpySweeper.
* Click the Options tab. (lower left)
* Under Options > Sweep Tab > Sweep Type choose Full Sweep (Recommended)
* Click the Always Apply tab and use the dropdown menu to select Always Quarantine
* Click the Home tab and choose Start Full sweep

* When it's done scanning, Make sure everything has a check next to it, then click the Quarantine Selected button.
* It will quarantine all of the items found.
* Click View Session Log in the upper right corner.
* Click the Save To File button.
* Click Desktop for the location.
* Next to the Save as type: be sure it is set to Text Document (.txt) and then click Save
* Copy and paste the SpySweeper Session Log in your next reply.

----------

Run a new HijackThis scan and post thelog.

----------

Next post please add
combofix.txt log
SpySweeper log
New HijackThis log
__________________
.
.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #3  
Old 12-12-2007, 01:49 AM
No Avatar
CJ New Member
 
CallistaT is offline
 
Join Date: Dec 2007
Last Online: 14-12-2007 05:37 PM
Posts: 10
iTrader: (0)
CallistaT is on a distinguished road
Default Refreshed Hijack This log, Problem Worse

First Combo fix log:
ComboFix 07-12-12.3 - main 2007-12-11 21:14:12.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.240 [GMT -5:00]
Running from: C:\Documents and Settings\main\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Application Data.\lixojkjo.dll
C:\Documents and Settings\All Users\Application Data.\nghivepy.dll
C:\Documents and Settings\All Users\Start Menu\Live Safety Center.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\autorun.exe
C:\Documents and Settings\main\Application Data\trant.exe
C:\Documents and Settings\main\Desktop\Live Safety Center.lnk
C:\Documents and Settings\main\Desktop\Online Security Guide.lnk
C:\Documents and Settings\main\Desktop\Startup\findfast.exe
C:\Documents and Settings\main\Favorites\Online Security Guide.lnk
C:\Program Files\Common Files\microsoft shared\web folders\ibm00001.dll
C:\Program Files\Common Files\microsoft shared\web folders\ibm00002.dll
C:\Program Files\Mgfbaniy
C:\Program Files\Mgfbaniy\fssmryzm.dll
C:\Program Files\outlook
C:\Program Files\outlook\outlook.exe
C:\Program Files\outlook\p.zip
C:\Program Files\outlook\v.tmp
C:\Program Files\rysubszj
C:\Program Files\rysubszj\xsrezubs.dll
C:\WINDOWS\inf\ultra.inf
C:\WINDOWS\msnimport.exe
C:\WINDOWS\pack.epk
C:\WINDOWS\system32\ddayw.dll
C:\WINDOWS\system32\drivers\npf.sys
C:\WINDOWS\system32\gsdflihz.dllbox
C:\WINDOWS\system32\ibpjvamx.ini
C:\WINDOWS\system32\iifdbab.dll
C:\WINDOWS\system32\ljjgeby.dll
C:\WINDOWS\system32\mrkguity.exe
C:\WINDOWS\system32\mssv32.exe
C:\WINDOWS\system32\nsp64.dll
C:\WINDOWS\system32\ntgnqjad.dll
C:\WINDOWS\system32\nuinopsd
C:\WINDOWS\system32\nuinopsd\bg1.gif
C:\WINDOWS\system32\nuinopsd\bgtop.gif
C:\WINDOWS\system32\nuinopsd\bottom1.gif
C:\WINDOWS\system32\nuinopsd\essentials.gif
C:\WINDOWS\system32\nuinopsd\icon1.ico
C:\WINDOWS\system32\nuinopsd\install1.gif
C:\WINDOWS\system32\nuinopsd\left1.gif
C:\WINDOWS\system32\nuinopsd\li.gif
C:\WINDOWS\system32\nuinopsd\logo.gif
C:\WINDOWS\system32\nuinopsd\main.htm
C:\WINDOWS\system32\nuinopsd\mainframe.htm
C:\WINDOWS\system32\nuinopsd\nuinopsd1.exe
C:\WINDOWS\system32\nuinopsd\nuinopsd2.exe
C:\WINDOWS\system32\nuinopsd\nuinopsd3.exe
C:\WINDOWS\system32\nuinopsd\reinstall1.gif
C:\WINDOWS\system32\nuinopsd\right1.gif
C:\WINDOWS\system32\nuinopsd\s1.htm
C:\WINDOWS\system32\nuinopsd\s2.htm
C:\WINDOWS\system32\nuinopsd\s3.htm
C:\WINDOWS\system32\nuinopsd\SMTop1.gif
C:\WINDOWS\system32\nuinopsd\SMTop2.gif
C:\WINDOWS\system32\nuinopsd\SMTop3.gif
C:\WINDOWS\system32\nuinopsd\SMTop4.gif
C:\WINDOWS\system32\nuinopsd\soft1_off.gif
C:\WINDOWS\system32\nuinopsd\soft1_off_ext.gif
C:\WINDOWS\system32\nuinopsd\soft1_on.gif
C:\WINDOWS\system32\nuinopsd\soft1_on_ext.gif
C:\WINDOWS\system32\nuinopsd\soft2_off.gif
C:\WINDOWS\system32\nuinopsd\soft2_off_ext.gif
C:\WINDOWS\system32\nuinopsd\soft2_on.gif
C:\WINDOWS\system32\nuinopsd\soft2_on_ext.gif
C:\WINDOWS\system32\nuinopsd\soft3_off.gif
C:\WINDOWS\system32\nuinopsd\soft3_off_ext.gif
C:\WINDOWS\system32\nuinopsd\soft3_on.gif
C:\WINDOWS\system32\nuinopsd\soft3_on_ext.gif
C:\WINDOWS\system32\nuinopsd\softbottom_off.gif
C:\WINDOWS\system32\nuinopsd\softbottom_on.gif
C:\WINDOWS\system32\nuinopsd\softleft_off.gif
C:\WINDOWS\system32\nuinopsd\softleft_on.gif
C:\WINDOWS\system32\nuinopsd\top1.gif
C:\WINDOWS\system32\nuinopsd\top2.gif
C:\WINDOWS\system32\nuinopsd\turnoff1.gif
C:\WINDOWS\system32\nuinopsd\turnon1.gif
C:\WINDOWS\system32\nvs2.inf
C:\WINDOWS\system32\packet.dll
C:\WINDOWS\system32\pthreadVC.dll
C:\WINDOWS\system32\qniplntu.ini
C:\WINDOWS\system32\rqrpoom.dll
C:\WINDOWS\system32\utnlpinq.dll
C:\WINDOWS\system32\wanpacket.dll
C:\WINDOWS\system32\winzgn32.dll
C:\WINDOWS\system32\wpcap.dll
C:\WINDOWS\system32\wyadd.ini
C:\WINDOWS\system32\wyadd.ini2
C:\WINDOWS\system32\xmavjpbi.dll
C:\WINDOWS\system32\xpdx.sys
C:\WINDOWS\system32\xxyayvt.dll
C:\WINDOWS\system32\zkhuun.dat
C:\WINDOWS\system32\zkhuun_nav.dat
C:\WINDOWS\system32\zkhuun_navps.dat
C:\WINDOWS\system32\zkhuun_navup.dat
C:\WINDOWS\winhp32.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_DOMAINSERVICE
-------\LEGACY_NPF
-------\LEGACY_NTMLSVC
-------\DomainService
-------\NPF
-------\NtmlSvc
-------\xpdx


((((((((((((((((((((((((( Files Created from 2007-11-12 to 2007-12-12 )))))))))))))))))))))))))))))))
.

2007-12-11 21:38 . 2007-12-11 21:38 13 --a------ C:\WINDOWS\reset5.dt3
2007-12-11 21:38 . 2007-12-11 21:38 13 --a------ C:\WINDOWS\reset5.dt2
2007-12-11 21:38 . 2007-12-11 21:38 13 --a------ C:\WINDOWS\reset5.dt1
2007-12-11 01:05 . 2007-12-11 18:52 143 --a------ C:\WINDOWS\system32\mcrh.tmp
2007-12-10 23:09 . 2007-12-10 23:09 10,240 --a------ C:\Program Files\spoolsv.exe
2007-12-10 22:29 . 2007-12-10 22:29 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Lavasoft
2007-12-09 20:23 . 2007-12-09 21:09 24,073 --a------ C:\Documents and Settings\main\Application Data\info.dat
2007-12-09 19:41 . 2007-12-09 19:41 <DIR> d-------- C:\Program Files\uTorrent
2007-12-09 19:40 . 2007-12-09 21:11 <DIR> d-------- C:\Documents and Settings\main\Application Data\uTorrent
2007-12-09 14:03 . 2007-12-09 14:03 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
2007-12-08 22:26 . 2007-12-08 22:26 46,592 --a------ C:\WINDOWS\system32\e404d.dll
2007-12-08 22:25 . 2007-12-08 22:25 <DIR> d-------- C:\Program Files\Helper
2007-11-13 21:12 . 2007-11-13 21:15 <DIR> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
2007-11-13 21:11 . 2007-11-13 21:16 <DIR> d-------- C:\Program Files\Windows Live
2007-11-13 21:11 . 2007-11-13 21:11 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2007-12-11 04:13 --------- d-----w C:\Documents and Settings\main\Application Data\Xfire
2007-12-11 03:27 --------- d-s---w C:\Program Files\Xfire
2007-12-09 22:11 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-09 22:07 --------- d-----w C:\Program Files\QuickTime
2007-12-09 22:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2007-12-09 21:55 --------- d-----w C:\Program Files\DivX
2007-12-09 19:04 --------- d-----w C:\Documents and Settings\main\Application Data\Azureus
2007-11-15 01:23 --------- d-----w C:\Program Files\Java
2007-11-14 02:17 --------- d-----w C:\Program Files\MSN Messenger
2007-10-24 22:47 --------- d--h--w C:\Documents and Settings\main\Application Data\ijjigame
2007-10-24 22:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\IJJIGame
1999-07-07 00:00 6 -csh--r C:\WINDOWS\@@desktop.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{05C14565-6A58-3226-F0E3-0143E875B618}]
2005-10-21 13:30 88828 --a------ C:\WINDOWS\system32\atlax32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{08BCB6C5-94A9-56B1-A201-207E4F3D194B}]
C:\WINDOWS\addig32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{08CC5E40-8C58-29E6-174D-52D53EB571EA}]
C:\WINDOWS\system32\ippk32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{097FBE5D-0CB9-381B-B07B-EDBEFEEADD4B}]
2005-11-09 02:30 88828 --a------ C:\WINDOWS\ipks.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{150966D5-46D3-0335-7635-7DEE72CD070B}]
C:\WINDOWS\system32\iefh.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1BE2B2AB-53D2-4036-F80C-58CE9EFF47A6}]
C:\WINDOWS\mshf.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1EB77D8F-DC5A-7E55-59FC-844CAE64FC70}]
2005-10-04 14:53 88615 --a------ C:\WINDOWS\sysme.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{24E3BE10-F69B-E844-6C5C-4F99122C2344}]
C:\WINDOWS\system32\netsc.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2DAD5652-3FF5-FF26-8446-2EE69A7D486A}]
C:\WINDOWS\syswv.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2F7660FB-0CEA-4B11-A8C5-3175CFDBA441}]
C:\WINDOWS\system32\windj32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{32A6B01D-983B-8AF2-A16D-062280B34476}]
C:\WINDOWS\system32\ienh32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{487713EC-4DF7-2CDD-B24B-394D255BB3E8}]
C:\WINDOWS\system32\atldn32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4A91B99F-D4CA-0C93-F3F2-1D4062632089}]
C:\WINDOWS\system32\msdc.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4CC7119A-4ABC-8D35-FD7C-F27B7C371F4F}]
C:\WINDOWS\ipnk32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5646F55E-CC51-A18C-A479-66A146E21E8B}]
C:\WINDOWS\system32\addhu32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5A3E5C8D-F226-CCF0-347E-3AB510C1A210}]
C:\WINDOWS\system32\ipqt32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5D68BA70-12FA-3F02-B027-5446BD84B481}]
C:\WINDOWS\addpm.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{64CDF8EE-8744-A3BF-4F77-0ADBBEE622A8}]
2005-11-08 07:03 88828 --a------ C:\WINDOWS\system32\apiwx.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6522CC06-085B-0152-B86B-5DEFD59319F2}]
C:\WINDOWS\appwl.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6B10CE97-0404-CE37-A21D-4A74318C961A}]
C:\WINDOWS\d3ls32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6CB6FA3E-4E06-6264-2A77-866A236736C8}]
C:\WINDOWS\apihq32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74325928-F826-D0FB-6353-6D46D5064E50}]
2005-10-30 06:45 88828 --a------ C:\WINDOWS\apirv.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8227E624-0D80-2ABA-0149-6F487ADE838B}]
C:\WINDOWS\msze.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{82FCD2C0-6CAF-9AD2-CAC6-D68F740206C3}]
C:\WINDOWS\winjx.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{890A94EB-5589-BE5C-9376-880D77A957A8}]
2005-10-11 13:07 89113 --a------ C:\WINDOWS\apifd32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8A4878A1-2428-847B-7D80-D1F2596F5212}]
2005-11-11 01:38 88828 --a------ C:\WINDOWS\addql32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8C5AD1C6-CA25-D27C-6D0E-FF3D0E2E6CB4}]
C:\WINDOWS\system32\apibg.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{93FF3D4B-E0B0-30B9-A889-E121FA74F446}]
C:\WINDOWS\system32\ipbo.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95595C72-5D9C-0109-122D-63FD127A8BCC}]
C:\WINDOWS\system32\atlbd32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A08177D7-8544-A546-ADBE-242AF76010DD}]
C:\WINDOWS\system32\addql32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A24BD490-0AA3-E365-DEE2-5C39334F5386}]
C:\WINDOWS\d3km.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C3F45515-C97C-FE89-7CF4-93B09594255D}]
C:\WINDOWS\winmt32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{CB7CE715-26F7-1C43-E3C5-72E056878705}]
C:\WINDOWS\apiyc32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{CC22FEF2-3F13-D4D7-35C2-C66D30943149}]
2005-10-20 00:01 88615 --a------ C:\WINDOWS\appoi32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D9B53A46-47B7-D878-52B2-44D6F9883DB1}]
2005-11-15 23:23 88828 --a------ C:\WINDOWS\system32\ielx.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{daa873d4-958c-453c-81ca-3fe6f3676a87}]
C:\WINDOWS\System32:fxaa.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{DFEFC2E4-F483-9FA6-4309-4E2EDB1D0426}]
C:\WINDOWS\iefn.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E2157285-80E2-5E41-66C6-A683E585E5A0}]
C:\WINDOWS\system32\crez32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EA94B086-CDBC-1A5F-231F-FB067C388DF8}]
C:\WINDOWS\system32\ipgo32.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EFEBB260-C21E-967D-CA15-0C1770C3C5C5}]
C:\WINDOWS\mfcsd.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F3C75FFF-A823-44E1-C9F9-844ABEF26351}]
C:\WINDOWS\system32\d3zh.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FBD80149-1788-BAA8-F013-FC8D8764DB34}]
2005-10-29 07:37 88828 --a------ C:\WINDOWS\atlam.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"AIM"="C:\Program Files\AIM\aim.exe" [2004-08-10 09:37]
"LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-06-08 16:44]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"sysdp.exe"="C:\WINDOWS\sysdp.exe" []
"winlh.exe"="C:\WINDOWS\winlh.exe" []
"systm.exe"="C:\WINDOWS\system32\systm.exe" []
"winmp32.exe"="C:\WINDOWS\system32\winmp32.exe " []
"wingp.exe"="C:\WINDOWS\system32\wingp.exe" []
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 19:32]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-06-08 17:24]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-06-08 17:14]
"winll.exe"="C:\WINDOWS\winll.exe" []
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"WService"="WService.EXE" [2002-09-07 13:23 C:\WINDOWS\system32\WService.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\RunOnce]
"tscuninstall"="C:\WINDOWS\system32\tscupgrd.e xe" [2004-08-03 23:59]

C:\Documents and Settings\main\Desktop\Startup\
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 18:16:50]
Xfire.lnk - C:\Program Files\Xfire\xfire.exe [2007-12-04 21:25:52]

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\explorer]
"NoBandCustomize"= 0 (0x0)
"DisallowRun"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\cur rentversion\policies\explorer]
"NoBandCustomize"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"System"="csddp.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\gsdflihz]
gsdflihz.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\reset5]
reset5.dll 2002-09-09 15:30 17408 C:\WINDOWS\system32\reset5.dll

S3 DCamUSBBVI;SiPix StyleCam BlinkII Dual Mode Camera;C:\WINDOWS\system32\Drivers\biomini.sys
S3 PsSdk30;PsSdk30;\??\C:\WINDOWS\system32\Drivers\Ps Sdk30.drv
S3 W8100PCI;D-Link AirPlus G Wireless Driver;C:\WINDOWS\system32\DRIVERS\MRV8K51.sys

.
************************************************** ************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-11 21:39:18
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

C:\WINDOWS\stub14.ini:yayzix 11801 bytes executable
C:\WINDOWS\desktop(2).ini:uwbegc 11801 bytes executable
C:\WINDOWS\_default(10)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(10)(2).pif:fjaqhp 11801 bytes executable
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #4  
Old 12-12-2007, 01:50 AM
No Avatar
CJ New Member
 
CallistaT is offline
 
Join Date: Dec 2007
Last Online: 14-12-2007 05:37 PM
Posts: 10
iTrader: (0)
CallistaT is on a distinguished road
Default Refreshed Hijack This log, Problem Worse

Part 2:

C:\WINDOWS\_default(10)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(10)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(10)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(10)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(10)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(10)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(10)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(10)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(10)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(10)(3).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(10).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(10).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(10).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(10).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(10).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(10).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(10).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(10).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(10).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(10).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(10).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(11)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(11).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(11).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(11).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(11).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(11).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(11).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(11).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(11).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(11).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(11).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(11).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(11).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(11).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(11).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(11).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(11).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(11).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(11).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(11).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(11).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(11).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(11).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(11).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(12)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(12).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(12).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(12).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(12).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(12).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(12).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(12).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(12).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(12).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(12).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(12).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(12).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(12).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(12).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(12).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(12).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(12).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(12).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(12).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(12).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(12).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(12).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(12).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(13)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(13).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(13).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(13).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(13).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(13).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(13).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(13).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(13).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(13).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(13).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(13).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(13).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(13).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(13).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(13).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(13).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(13).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(13).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(13).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(13).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(13).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(13).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(13).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(14)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(14).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(14).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(14).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(14).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(14).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(14).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(14).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(14).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(14).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(14).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(14).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(14).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(14).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(14).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(14).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(14).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(14).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(14).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(14).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(14).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(14).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(14).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(14).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(15)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(15).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(15).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(15).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(15).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(15).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(15).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(15).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(15).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(15).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(15).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(15).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(15).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(15).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(15).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(15).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(15).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(15).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(15).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(15).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(15).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(15).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(15).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(15).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(16)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(16)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(16)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(16)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(16).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(16).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(16).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(16).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(16).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(16).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(16).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(16).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(16).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(16).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(16).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(16).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(16).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(16).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(16).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(16).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(16).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(16).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(16).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(16).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(16).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(16).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(16).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(16).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(16).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(16).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(16).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(16).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(16).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(16).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(17)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(17)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(17)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(17)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(17).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(17).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(17).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(17).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(17).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(17).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(17).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(17).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(17).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(17).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(17).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(17).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(17).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(17).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(17).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(17).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(17).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(17).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(17).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(17).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(17).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(17).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(17).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(17).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(17).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(17).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(17).pif:wsdkvt 11801 bytes executable
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #5  
Old 12-12-2007, 01:51 AM
No Avatar
CJ New Member
 
CallistaT is offline
 
Join Date: Dec 2007
Last Online: 14-12-2007 05:37 PM
Posts: 10
iTrader: (0)
CallistaT is on a distinguished road
Default Refreshed Hijack This log, Problem Worse

Pt 3


C:\WINDOWS\_default(22).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(22).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(22).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(22).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(22).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(22).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(22).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(22).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(22).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(22).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(22).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(22).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(22).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(22).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(22).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(22).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(22).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(22).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(22).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(22).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(22).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(22).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(22).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(22).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(23)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:btdljo 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(23)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(23)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(23)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(23).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(23).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(23).pif:btdljo 11801 bytes executable
C:\WINDOWS\_default(23).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(23).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(23).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(23).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(23).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(23).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(23).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(23).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(23).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(23).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(23).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(23).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(23).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(23).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(23).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(23).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(23).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(23).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(23).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(23).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(23).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(23).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(23).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(23).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(23).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(23).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(23).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(23).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(24)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(24)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(24)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(24)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(24).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(24).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(24).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(24).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(24).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(24).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(24).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(24).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(24).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(24).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(24).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(24).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(24).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(24).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(24).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(24).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(24).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(24).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(24).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(24).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(24).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(24).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(24).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(24).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(24).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(24).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(24).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(24).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(24).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(24).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(25)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(25)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(25)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(25)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(25).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(25).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(25).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(25).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(25).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(25).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(25).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(25).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(25).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(25).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(25).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(25).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(25).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(25).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(25).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(25).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(25).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(25).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(25).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(25).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(25).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(25).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(25).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(25).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(25).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(25).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(25).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(25).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(25).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(25).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(26)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(26)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(26)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(26)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(26).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(26).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(26).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(26).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(26).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(26).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(26).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(26).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(26).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(26).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(26).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(26).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(26).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(26).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(26).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(26).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(26).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(26).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(26).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(26).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(26).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(26).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(26).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(26).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(26).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(26).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(26).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(26).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(26).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(26).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(27)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(27)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(27)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(27)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(27).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(27).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(27).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(27).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(27).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(27).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(27).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(27).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(27).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(27).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(27).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(27).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(27).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(27).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(27).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(27).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(27).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(27).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(27).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(27).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(27).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(27).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(27).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(27).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(27).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(27).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(27).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(27).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(27).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(27).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(28)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(28)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(28)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(28)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(28).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(28).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(28).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(28).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(28).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(28).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(28).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(28).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(28).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(28).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(28).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(28).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(28).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(28).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(28).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(28).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(28).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(28).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(28).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(28).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(28).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(28).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(28).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(28).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(28).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(28).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(28).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(28).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(28).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(28).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(29)(2).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(29)(2).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(29)(2).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(29)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(29).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(29).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(29).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(29).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(29).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(29).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(29).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(29).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(29).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(29).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(29).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(29).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(29).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(29).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(29).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(29).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(29).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(29).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(29).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(29).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(29).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(29).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(29).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(29).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(29).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(29).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(29).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(29).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(29).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(29).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(21).pif:bhbewd 86997 bytes executable
C:\WINDOWS\_default(21).pif:bmfchi 11801 bytes executable
C:\WINDOWS\_default(21).pif:cwdffu 86997 bytes executable
C:\WINDOWS\_default(21).pif:dqqreq 11801 bytes executable
C:\WINDOWS\_default(21).pif:dzpyip 11801 bytes executable
C:\WINDOWS\_default(21).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(21).pif:fxeocp 11801 bytes executable
C:\WINDOWS\_default(21).pif:gtbjzm 11801 bytes executable
C:\WINDOWS\_default(21).pif:hdzuaz 11801 bytes executable
C:\WINDOWS\_default(21).pif:hiodty 11801 bytes executable
C:\WINDOWS\_default(21).pif:iioumy 11801 bytes executable
C:\WINDOWS\_default(21).pif:jakrdk 11801 bytes executable
C:\WINDOWS\_default(21).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(21).pif:lyjusv 11801 bytes executable
C:\WINDOWS\_default(21).pif:mafpsq 11801 bytes executable
C:\WINDOWS\_default(21).pif:nbajek 11801 bytes executable
C:\WINDOWS\_default(21).pif:ojnrks 11801 bytes executable
C:\WINDOWS\_default(21).pif:potrjg 11801 bytes executable
C:\WINDOWS\_default(21).pif:qcxrjb 11801 bytes executable
C:\WINDOWS\_default(21).pif:rwjpq 86997 bytes executable
C:\WINDOWS\_default(21).pif:teszgh 11801 bytes executable
C:\WINDOWS\_default(21).pif:tjditi 11801 bytes executable
C:\WINDOWS\_default(21).pif:tnkdcq 11801 bytes executable
C:\WINDOWS\_default(21).pif:uwmgbm 11801 bytes executable
C:\WINDOWS\_default(21).pif:uyolwm 11801 bytes executable
C:\WINDOWS\_default(21).pif:vwnkze 11801 bytes executable
C:\WINDOWS\_default(21).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(21).pif:ymrxvd 11801 bytes executable
C:\WINDOWS\_default(21).pif:zdsnxo 11801 bytes executable
C:\WINDOWS\_default(21).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\_default(3)(2).pif:fjaqhp 11801 bytes executable
C:\WINDOWS\_default(3)(2).pif:klnnbi 11801 bytes executable
C:\WINDOWS\_default(3)(2).pif:wsdkvt 11801 bytes executable
C:\WINDOWS\_default(3)(2).pif:zgkgrx 11801 bytes executable
C:\WINDOWS\wiaservc.log:mwlusn 11801 bytes executable
************************************************** ************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\WINDOWS\system32\reset5.dll
.
Completion time: 2007-12-11 21:42:39 - machine was rebooted
.
2007-12-11 04:10:05 --- E O F ---
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #6  
Old 12-12-2007, 01:59 AM
evilfantasy's Avatar
CJ Moderator
Intel ATi
evilfantasy is online now
Send a message via Yahoo to evilfantasy
 
Join Date: Jul 2007
Last Online: Today 02:14 AM
Posts: 4,884
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default Refreshed Hijack This log, Problem Worse

You have definately got a bad infection. Hold off on the other scans until I post the next reply in a few minut