Ergebnis 1 bis 7 von 7

Thema: pop-up troubles- nothing seems to be working

  1. #1
    Einsteiger
    Registriert seit
    31.05.2007
    Ort
    Hampshire, England
    Beiträge
    5

    pop-up troubles- nothing seems to be working

    Hello, recently I've been having a lot of popups from various companies. programs like Ad-Aware, AntiVir, Spybot- S&D seem to remove some of them, but a lot of them seem to stay.

    Also everytime I start windows I get an alert from my firewall (Outpost Firewall) that says "Attept to terminate Outpost Firewall Pro process is prevented. Application: QQFGWB.EXE, Path: C:\WINDOWS\SYSTEM32\QQFGWB.EXE" So I'm guessing this is what is letting in these popups. Also under the blocked connection section of Outpost firewall it seems to be blocking quite a number of outbound TCP connections on the HTTP port to various different urls, static.free6.com seems to be the most common, then www.lovefilm.com, upload.wikimedia.org, clit5.sextracker.com, adlog.com.com, servedby.advertising.com as well as some others.

    This is part of the log file from Outpost with just the connections from today by qqfgwb.exe that were blocked
    Code:
    17:36:10	qqfgwb.exe	OUT REFUSED 	TCP	66.218.77.90	HTTP	Block activity for application QQFGWB.EXE
    17:36:10	qqfgwb.exe	OUT REFUSED 	TCP	65.39.176.81	HTTP	Block activity for application QQFGWB.EXE
    17:36:10	qqfgwb.exe	OUT REFUSED 	TCP	65.39.176.80	HTTP	Block activity for application QQFGWB.EXE
    17:36:10	qqfgwb.exe	OUT REFUSED 	TCP	65.39.176.84	HTTP	Block activity for application QQFGWB.EXE
    17:36:10	qqfgwb.exe	OUT REFUSED 	TCP	65.39.176.83	HTTP	Block activity for application QQFGWB.EXE
    17:36:10	qqfgwb.exe	OUT REFUSED 	TCP	65.39.176.82	HTTP	Block activity for application QQFGWB.EXE
    17:36:10	qqfgwb.exe	OUT REFUSED 	TCP	65.39.176.81	HTTP	Block activity for application QQFGWB.EXE
    17:36:10	qqfgwb.exe	OUT REFUSED 	TCP	65.39.176.84	HTTP	Block activity for application QQFGWB.EXE
    17:36:10	qqfgwb.exe	OUT REFUSED 	TCP	65.39.176.82	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    17:36:10	qqfgwb.exe	OUT REFUSED 	TCP	65.39.176.80	HTTP	Block activity for application QQFGWB.EXE
    17:36:10	qqfgwb.exe	OUT REFUSED 	TCP	66.218.77.64	HTTP	Block activity for application QQFGWB.EXE
    17:36:10	qqfgwb.exe	OUT REFUSED 	TCP	65.39.176.83	HTTP	Block activity for application QQFGWB.EXE
    00:28:02	qqfgwb.exe	OUT REFUSED 	TCP	www.gamefaqs.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	servedby.advertising.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	servedby.advertising.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	servedby.advertising.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	servedby.advertising.com	HTTP	Block activity for application QQFGWB.EXE
    00:19:51	qqfgwb.exe	OUT REFUSED 	TCP	www.gamefaqs.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	servedby.advertising.com	HTTP	Block activity for application QQFGWB.EXE
    00:12:44	qqfgwb.exe	OUT REFUSED 	TCP	adlog.com.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:08:36	qqfgwb.exe	OUT REFUSED 	TCP	adlog.com.com	HTTP	Block activity for application QQFGWB.EXE
    00:19:51	qqfgwb.exe	OUT REFUSED 	TCP	adlog.com.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:21:56	qqfgwb.exe	OUT REFUSED 	TCP	adlog.com.com	HTTP	Block activity for application QQFGWB.EXE
    00:22:31	qqfgwb.exe	OUT REFUSED 	TCP	adlog.com.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	switch.atdmt.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:20:19	qqfgwb.exe	OUT REFUSED 	TCP	www.lovefilm.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	clit5.sextracker.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	clit5.sextracker.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    00:48:24	qqfgwb.exe	OUT REFUSED 	TCP	static.free6.com	HTTP	Block activity for application QQFGWB.EXE
    I can't find anything about QQFGWB.exe on the net, most likely because it sounds like a randomly generated file name. But I can't seem to find the .exe in my HijackThis log which confuses me.

    here it is anyway,
    Code:
    Logfile of HijackThis v1.99.1
    Scan saved at 17:26:21, on 31/05/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\system32\inetsrv\inetinfo.exe
    C:\Program Files\Kontiki\KService.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Agnitum\Outpost Firewall\op_viewer.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Documents and Settings\Paul\Desktop\HijackThis.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
    C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe
    C:\Program Files\hijackthis\HijackThis.exe
    
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.2.7.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [Outpost Firewall] C:\Program Files\Agnitum\Outpost Firewall\outpost.exe /waitservice
    O4 - HKLM\..\Run: [OutpostFeedBack] C:\Program Files\Agnitum\Outpost Firewall\feedback.exe /dump:os_startup
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
    O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: Outpost Firewall Pro Quick Tune - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\Program Files\Agnitum\Outpost Firewall\Plugins\BrowserBar\ie_bar.dll
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O18 - Protocol: bw+0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: offline-8876480 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: KService - Unknown owner - C:\Program Files\Kontiki\KService.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum Ltd. - C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
    O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    Thanks in advance for anyone who took the time to help me out and read this.

    Cheers.

  2. #2
    Ehrenmitglied Avatar von Karl
    Registriert seit
    01.12.2005
    Ort
    Berlin
    Beiträge
    8.393

    AW: pop-up troubles- nothing seems to be working

    Hi,

    this is strange and probably bad, but your hijackthis does not show something. For further analysis of the problem follow these steps:

    Rename hijackthis.exe to hjt.exe and create with the renamed executable a new log. Reason is that some malware is able to hide if it sees a running process hijackthis.exe.

    Please change settings as shown here to make sure, that you can see all files and folders.

    Here are two sites where you can upload files. They will be scanned with different scanners, the results will be displayed in your browser.Do this with the following files at one of this two sites, preferable virustotal:
    • C:\WINDOWS\SYSTEM32\QQFGWB.EXE
    Copy and paste the results into your answer. Don't forget to copy the lines with file name and size, MD5 and SHA1 checksums (if this lines are given). If you have problems in finding or uploading files tell us.

    We want to check the contents of some important folders, the instructions are here.

    Regards, Karl

  3. #3
    Einsteiger
    Registriert seit
    31.05.2007
    Ort
    Hampshire, England
    Beiträge
    5

    Re: pop-up troubles- nothing seems to be working

    I already had all the hidden files showing, but I ran through the steps that you linked to check that I had everything showing and I had. I have tried to look for qqfgwb.exe in explorer before and not found it, and still it isn't showing up.

    I ran that filelist.bat and I was pleased to see that qqfgwb showed up several times right at the top of the system32 list, although it means nothing to me but hopefully it will to you . Aswell as QQFGWB.exe showing up, it also showed qqfgwb.dat qqfgwb_nav.dat, qqfgwb_navps.dat. None of these are showing up in system32 either in explorer.

    Here is my filelist log
    Code:
    ----- Root ----------------------------- 
     Volume in drive C has no label.
     Volume Serial Number is C8EF-D675
    
     Directory of C:\
    
    31/05/2007  16:23     2,145,386,496 pagefile.sys
    05/05/2007  23:28               354 boot.ini
    14/04/2007  16:26             3,148 DV.txt
    10/02/2007  01:07                45 TEST.XML
    24/01/2007  14:56           196,116 BL_H10.rom
    
                  13 File(s)  2,146,584,382 bytes
                   0 Dir(s)   4,415,664,128 bytes free
     
    ----- System32 ------------------------- 
     Volume in drive C has no label.
     Volume Serial Number is C8EF-D675
    
     Directory of C:\WINDOWS\system32
    
    01/06/2007  00:25             4,741 qqfgwb.dat
    01/06/2007  00:10           262,293 qqfgwb_nav.dat
    31/05/2007  16:25            13,760 wpa.dbl
    31/05/2007  16:23            50,257 nvapps.xml
    28/05/2007  20:22               870 qqfgwb_navps.dat
    22/05/2007  21:41           108,144 CmdLineExt.dll
    21/05/2007  17:34           356,864 qqfgwb.exe
    18/05/2007  01:03             3,969 jupdate-1.6.0_01-b06.log
    06/05/2007  20:04            99,904 PnkBstrB.exe
    04/05/2007  16:14           431,776 FNTCACHE.DAT
    03/05/2007  23:25            63,040 PnkBstrA.exe
    03/05/2007  17:45            80,082 perfc009.dat
    03/05/2007  17:45           453,650 perfh009.dat
    03/05/2007  17:45           532,032 PerfStringBackup.INI
    27/04/2007  21:45        14,970,328 MRT.exe
    25/04/2007  13:36         2,137,088 kernel1.exe
    08/04/2007  22:44             9,296 jupdate-1.5.0_11-b03.log
    17/03/2007  14:43           292,864 winsrv.dll
    15/03/2007  18:19         1,476,992 LegitCheckControl.dll
    15/03/2007  18:17           336,768 WgaTray.exe
    15/03/2007  18:16           236,928 WgaLogon.dll
    14/03/2007  02:04            69,632 javacpl.cpl
    14/03/2007  02:04           139,264 javaws.exe
    14/03/2007  00:31           135,168 javaw.exe
    14/03/2007  00:31           135,168 java.exe
    09/03/2007  11:02           115,200 xpsp3res.dll
    08/03/2007  16:36           281,600 gdi32.dll
    08/03/2007  16:36           577,536 user32.dll
    08/03/2007  16:36            40,960 mf3216.dll
    08/03/2007  14:47         1,843,584 win32k.sys
    08/03/2007  00:51         1,628,920 pxsfs.dll
    08/03/2007  00:51           187,128 pxmas.dll
    08/03/2007  00:51            64,760 pxinsa64.exe
    08/03/2007  00:51           510,712 pxdrv.dll
    08/03/2007  00:51           379,640 pxwave.dll
    08/03/2007  00:51            64,760 pxcpya64.exe
    08/03/2007  00:51           129,784 pxafs.dll
    08/03/2007  00:51           547,576 px.dll
    08/03/2007  00:51            72,440 pxhpinst.exe
    28/02/2007  10:08         2,136,064 KERNEL.TMP
    28/02/2007  10:08         2,136,064 ntoskrnl.exe
    28/02/2007  09:38         2,015,744 ntkrnlpa.exe
    27/02/2007  11:42                22 nvs2.inf
    26/02/2007  09:45           122,198 TZLog.log
    16/02/2007  10:54            49,152 QuickTime.qts
    16/02/2007  10:54            65,536 QuickTimeVR.qtx
    13/02/2007  03:02             2,560 BitCometRes.dll
    05/02/2007  21:17           185,344 upnphost.dll
    30/01/2007  06:03           116,472 pxcpyi64.exe
    30/01/2007  06:03           118,520 pxinsi64.exe
    30/01/2007  06:03            39,672 vxblock.dll
    30/01/2007  05:56            53,248 dpuGUI10.dll
    30/01/2007  05:56           593,920 dpuGUI11.dll
    30/01/2007  05:56           344,064 dpus11.dll
    30/01/2007  05:56            57,344 dpv11.dll
    30/01/2007  05:56           294,912 dpu10.dll
    30/01/2007  05:56           294,912 dpu11.dll
    29/01/2007  09:58            60,416 tzchange.exe
    25/01/2007  13:48           615,424 urlmon.dll
    23/01/2007  20:29           546,304 hhctrl.ocx
    09/01/2007  11:48             8,599 jupdate-1.5.0_10-b03.log
    04/01/2007  14:37           658,944 wininet.dll
    04/01/2007  14:37         1,494,528 shdocvw.dll
    04/01/2007  14:37           474,112 shlwapi.dll
    04/01/2007  14:36            39,424 pngfilt.dll
    04/01/2007  14:36           532,480 mstime.dll
    04/01/2007  14:36           146,432 msrating.dll
    04/01/2007  14:36           448,512 mshtmled.dll
    04/01/2007  14:36         3,056,640 mshtml.dll
    04/01/2007  14:36            16,384 jsproxy.dll
    04/01/2007  14:36            96,256 inseng.dll
    04/01/2007  14:36            55,808 extmgr.dll
    04/01/2007  14:36           251,392 iepeers.dll
    04/01/2007  14:36           205,312 dxtrans.dll
    04/01/2007  14:36           357,888 dxtmsft.dll
    04/01/2007  14:36         1,054,208 danim.dll
    04/01/2007  14:36           151,040 cdfview.dll
    04/01/2007  14:36         1,023,488 browseui.dll
    19/12/2006  22:52         8,453,632 shell32.dll
    19/12/2006  22:52           134,656 shsvcs.dll
    19/12/2006  19:16           333,824 wiaservc.dll
    10/12/2006  14:10            14,640 spmsg.dll
    06/12/2006  12:52            16,832 amcompat.tlb
    06/12/2006  12:52            23,392 nscompat.tlb
    04/12/2006  15:21           414,720 msscp.dll
    
                2246 File(s)    496,775,505 bytes
                   0 Dir(s)   4,415,537,152 bytes free
     
    ----- Prefetch ------------------------- 
     Volume in drive C has no label.
     Volume Serial Number is C8EF-D675
    
     Directory of C:\WINDOWS\Prefetch
    
    01/06/2007  00:25            13,854 FIND.EXE-0EC32F1E.pf
    01/06/2007  00:25            33,340 CMD.EXE-087B4001.pf
    01/06/2007  00:23            48,636 FIREFOX.EXE-28641590.pf
    01/06/2007  00:21            22,992 NOTEPAD.EXE-336351A9.pf
    01/06/2007  00:21            67,794 WINRAR.EXE-39C6DAD9.pf
    01/06/2007  00:16            19,880 VERCLSID.EXE-3667BD89.pf
    01/06/2007  00:13            50,524 HJT.EXE-26883FDA.pf
    31/05/2007  18:37            79,312 HELPSVC.EXE-2878DDA2.pf
    31/05/2007  18:37           102,868 WMIPRVSE.EXE-28F301A9.pf
    31/05/2007  18:33            98,146 DFRGNTFS.EXE-269967DF.pf
    31/05/2007  18:33            19,146 DEFRAG.EXE-273F131E.pf
    31/05/2007  18:33           574,768 Layout.ini
    31/05/2007  18:15            43,008 AUPDRUN.EXE-25A3B9A4.pf
    31/05/2007  17:46            53,840 OP_VIEWER.EXE-38FFA127.pf
    31/05/2007  17:36            19,314 REGEDIT.EXE-1B606482.pf
    31/05/2007  17:26            71,804 HELPCTR.EXE-3862B6F5.pf
    31/05/2007  17:07            65,134 DRWTSN32.EXE-2B4B52AC.pf
    31/05/2007  17:07            89,564 DWWIN.EXE-30875ADC.pf
    31/05/2007  16:53            20,202 FLASHGOT.EXE-1D031BA0.pf
    31/05/2007  16:52           120,338 WMPLAYER.EXE-18DDEF9D.pf
    31/05/2007  16:30            90,900 SPYBOTSD.EXE-1344276B.pf
    31/05/2007  16:28            44,220 AD-AWARE.EXE-2ED3360E.pf
    31/05/2007  16:25            64,930 WGATRAY.EXE-0ED38BED.pf
    31/05/2007  16:25            52,128 ALG.EXE-0F138680.pf
    31/05/2007  16:25            64,960 IPODSERVICE.EXE-3192DE38.pf
    31/05/2007  16:25            19,730 IMAPI.EXE-0BF740A4.pf
    31/05/2007  16:25            73,560 WUAUCLT.EXE-399A8E72.pf
    31/05/2007  16:24            47,070 SVCHOST.EXE-3530F672.pf
    31/05/2007  16:24            29,146 RUNDLL32.EXE-35A483DA.pf
    31/05/2007  16:24            38,426 WSCNTFY.EXE-1B24F5EB.pf
    31/05/2007  16:24           931,152 NTOSBOOT-B00DFAAD.pf
    31/05/2007  00:54            25,422 TASKMGR.EXE-20256C55.pf
    31/05/2007  00:04            30,832 RUNDLL32.EXE-2A94BB85.pf
    31/05/2007  00:04            33,908 RUNDLL32.EXE-2E5AF1D7.pf
    30/05/2007  23:33            61,580 AVNOTIFY.EXE-2774DD28.pf
    29/05/2007  12:46            93,322 MSIEXEC.EXE-2F8A8CAE.pf
    28/05/2007  20:26            69,038 UTORRENT.EXE-3888D1B0.pf
    21/05/2007  17:34            70,864 QQFGWB.EXE-1A6C295D.pf
                  38 File(s)      3,455,652 bytes
                   0 Dir(s)   4,415,553,536 bytes free
     
    ----- Windows -------------------------- 
     Volume in drive C has no label.
     Volume Serial Number is C8EF-D675
    
     Directory of C:\WINDOWS
    
    31/05/2007  17:24               498 ODBC.INI
    31/05/2007  16:24               159 wiadebug.log
    31/05/2007  16:24                50 wiaservc.log
    31/05/2007  16:24                 0 0.log
    31/05/2007  16:23         1,088,632 WindowsUpdate.log
    31/05/2007  16:23                49 transp.gif
    31/05/2007  16:23             2,048 bootstat.dat
    31/05/2007  01:04            32,640 SchedLgU.Txt
    31/05/2007  00:52             1,409 QTFont.for
    31/05/2007  00:52            54,156 QTFont.qfn
    31/05/2007  00:51               116 NeroDigital.ini
    29/05/2007  12:45           113,017 DirectX.log
    26/05/2007  17:04            60,416 ALCFDRTM.VER
    22/05/2007  19:11           144,109 wmsetup.log
    22/05/2007  19:07            47,645 setupapi.log
    15/05/2007  19:42             3,287 KB930916.log
    15/05/2007  00:24               210 GSdx9.INI
    06/05/2007  15:27                16 popcinfot.dat
    05/05/2007  23:28               246 system.ini
    05/05/2007  23:28               624 win.ini
    04/05/2007  01:03             1,446 COM+.log
    29/04/2007  11:06             4,804 mozver.dat
    21/04/2007  23:27            42,257 spupdsvc.log
    21/04/2007  23:24            38,552 ocmsn.log
    21/04/2007  23:24           323,910 tsoc.log
    21/04/2007  23:24             1,374 imsins.log
    21/04/2007  23:24           146,013 ntdtcsetup.log
    21/04/2007  23:24           239,898 comsetup.log
    21/04/2007  23:24           992,480 iis6.log
    21/04/2007  23:24            34,571 tabletoc.log
    21/04/2007  23:24            15,261 KB931784.log
    21/04/2007  23:24           121,043 netfxocm.log
    21/04/2007  23:24            35,106 msgsocm.log
    21/04/2007  23:24            48,685 MedCtrOC.log
    21/04/2007  23:24           356,786 ocgen.log
    21/04/2007  23:24           681,829 FaxSetup.log
    21/04/2007  23:24           224,830 msmqinst.log
    21/04/2007  23:24             1,374 imsins.BAK
    21/04/2007  23:24            13,312 KB931261.log
    21/04/2007  23:24            13,321 KB917537.log
    21/04/2007  23:24            13,615 KB930178.log
    21/04/2007  23:24            43,792 updspapi.log
    21/04/2007  23:24            13,125 KB932168.log
    21/04/2007  23:19            25,693 WgaNotify.log
    17/04/2007  23:57                 0 frontpg.ini
    17/04/2007  23:41               352 KB823354.log
    14/04/2007  16:21               203 GSdx9 sse2.INI
    05/04/2007  01:41            14,504 KB925902.log
    03/04/2007  15:48                86 popcinfo.dat
    01/04/2007  21:42             6,928 KB929399.log
    01/04/2007  21:42            14,311 KB929338.log
    11/03/2007  22:37                 0 popcreg.dat
    27/02/2007  11:42           177,137 pack.epk
    26/02/2007  09:45            19,714 KB927779.log
    26/02/2007  09:45            16,810 KB927802.log
    26/02/2007  09:45            16,467 KB928255.log
    26/02/2007  09:45            12,980 KB924667.log
    26/02/2007  09:45            25,466 KB931836.log
    26/02/2007  09:45            14,943 KB926436.log
    26/02/2007  09:45            15,145 KB918118.log
    26/02/2007  09:44            19,340 KB928090.log
    26/02/2007  09:44            12,100 KB928843.log
    22/02/2007  14:21               325 acpr.ini
    15/02/2007  18:17         1,057,363 setupapi.log.0.old
    30/01/2007  03:30            22,993 KB925454.log
    30/01/2007  03:30            16,367 KB929969.log
    30/01/2007  03:30            11,306 KB925398.log
    30/01/2007  03:30            16,500 KB923980.log
    30/01/2007  03:30            14,949 KB924270.log
    30/01/2007  03:29            13,468 KB926255.log
    30/01/2007  03:29            13,644 KB920213.log
    30/01/2007  03:29            12,130 KB923694.log
    20/12/2006  00:02           134,878 FFXI App Setup Log.txt
    06/12/2006  12:59               890 wmsetup10.log
    06/12/2006  12:53             7,441 KB926239.log
    06/12/2006  12:53             4,482 MSCompPackV1.log
    06/12/2006  12:52            16,126 wmp11.log
    06/12/2006  12:52            22,372 WMFDist11.log
    06/12/2006  12:51             7,884 Wudf01000Inst.log
    
                 228 File(s)     21,789,957 bytes
                   0 Dir(s)   4,415,537,152 bytes free
     
    ----- Tasks ---------------------------- 
     Volume in drive C has no label.
     Volume Serial Number is C8EF-D675
    
     Directory of C:\WINDOWS\tasks
    
    31/05/2007  16:23                 6 SA.DAT
    17/05/2007  16:18               284 AppleSoftwareUpdate.job
    
                   3 File(s)            355 bytes
                   0 Dir(s)   4,415,541,248 bytes free
     
    ----- Wintemp -------------------------- 
     Volume in drive C has no label.
     Volume Serial Number is C8EF-D675
    
     Directory of C:\WINDOWS\temp
    
    01/06/2007  00:24                 0 sdbC4.tmp
    31/05/2007  23:24                 0 sdbBE.tmp
    31/05/2007  22:24                 0 sdbBA.tmp
    31/05/2007  21:24                 0 sdbB1.tmp
    31/05/2007  20:24                 0 sdbA9.tmp
    31/05/2007  19:24                 0 sdbA1.tmp
    31/05/2007  18:24                 0 sdb96.tmp
    31/05/2007  17:24                 0 sdb73.tmp
    31/05/2007  17:24                 0 JET877F.tmp
    31/05/2007  16:25               409 WGANotify.settings
    31/05/2007  16:24                 0 sdb38.tmp
    31/05/2007  16:23            16,384 Perflib_Perfdata_280.dat
    31/05/2007  16:23               255 WGAErrLog.txt
    31/05/2007  00:32                 0 sdb76.tmp
    30/05/2007  23:32                 0 sdb5C.tmp
    30/05/2007  23:31                 0 UpdD.tmp
    30/05/2007  19:15                 0 sdb68.tmp
    30/05/2007  18:15                 0 sdb48.tmp
    30/05/2007  18:14            16,384 Perflib_Perfdata_700.dat
    30/05/2007  01:01            16,384 Perflib_Perfdata_6cc.dat
    30/05/2007  00:25                 0 sdbB9.tmp
    29/05/2007  23:25                 0 sdbB3.tmp
    29/05/2007  22:25                 0 sdbAC.tmp
    29/05/2007  21:25                 0 sdbA6.tmp
    29/05/2007  20:25                 0 sdbA0.tmp
    29/05/2007  19:25                 0 sdb97.tmp
    29/05/2007  18:25                 0 sdb92.tmp
    29/05/2007  17:25                 0 sdb89.tmp
    29/05/2007  16:25                 0 sdb81.tmp
    29/05/2007  15:25                 0 sdb79.tmp
    29/05/2007  14:25                 0 sdb69.tmp
    29/05/2007  13:25                 0 sdb59.tmp
    29/05/2007  12:25                 0 sdb34.tmp
    29/05/2007  11:26                 0 sdbC9.tmp
    29/05/2007  10:26                 0 sdbC3.tmp
    29/05/2007  09:26                 0 sdbB8.tmp
    29/05/2007  08:26                 0 sdbB2.tmp
    29/05/2007  07:26                 0 sdbAD.tmp
    29/05/2007  06:26                 0 sdbA8.tmp
    29/05/2007  05:26                 0 sdbA3.tmp
    29/05/2007  04:26                 0 sdb9E.tmp
    29/05/2007  03:26                 0 sdb98.tmp
    29/05/2007  02:49                 0 sdb8F.tmp
    29/05/2007  02:26                 0 sdb87.tmp
    29/05/2007  01:26                 0 sdb7E.tmp
    29/05/2007  00:26                 0 sdb77.tmp
    28/05/2007  23:26                 0 sdb6D.tmp
    28/05/2007  22:26                 0 sdb5F.tmp
    28/05/2007  21:26                 0 sdb4C.tmp
    28/05/2007  20:26                 0 sdb2E.tmp
    28/05/2007  20:24            16,384 Perflib_Perfdata_57c.dat
    28/05/2007  19:50                 0 sdbB5.tmp
    28/05/2007  19:26            77,824 JETDF0C.tmp
    28/05/2007  18:50                 0 sdbB0.tmp
    28/05/2007  17:50                 0 sdbAA.tmp
    28/05/2007  16:50                 0 sdbA5.tmp
    28/05/2007  15:50                 0 sdb9D.tmp
    28/05/2007  14:50                 0 sdb99.tmp
    28/05/2007  13:50                 0 sdb95.tmp
    28/05/2007  12:50                 0 sdb90.tmp
    28/05/2007  11:50                 0 sdb8B.tmp
    28/05/2007  10:50                 0 sdb85.tmp
    28/05/2007  09:50                 0 sdb7F.tmp
    28/05/2007  08:50                 0 sdb7A.tmp
    28/05/2007  07:50                 0 sdb74.tmp
    28/05/2007  06:50                 0 sdb6A.tmp
    28/05/2007  05:50                 0 sdb60.tmp
    28/05/2007  04:50                 0 sdb55.tmp
    28/05/2007  03:50                 0 sdb45.tmp
    28/05/2007  02:50                 0 sdb2D.tmp
    28/05/2007  02:49            16,384 Perflib_Perfdata_6e4.dat
    28/05/2007  02:26           405,504 JETAEAC.tmp
    28/05/2007  01:57                 0 sdb91.tmp
    28/05/2007  00:57                 0 sdb8C.tmp
    27/05/2007  23:57                 0 sdb86.tmp
    27/05/2007  22:57                 0 sdb82.tmp
    27/05/2007  21:57                 0 sdb7D.tmp
    27/05/2007  20:57                 0 sdb78.tmp
    27/05/2007  19:57                 0 sdb6F.tmp
    27/05/2007  18:57                 0 sdb64.tmp
    27/05/2007  17:57                 0 sdb5E.tmp
    27/05/2007  16:57                 0 sdb54.tmp
    27/05/2007  15:57                 0 sdb43.tmp
    27/05/2007  14:57                 0 sdb16.tmp
    27/05/2007  14:56            16,384 Perflib_Perfdata_548.dat
    27/05/2007  14:23                 0 sdb58.tmp
    27/05/2007  13:23                 0 sdb3D.tmp
    27/05/2007  12:24                 0 Upd2E.tmp
    27/05/2007  12:23                 0 sdb1E.tmp
    27/05/2007  00:37                 0 sdb5A.tmp
    26/05/2007  23:37                 0 sdb53.tmp
    26/05/2007  22:37                 0 sdb46.tmp
    26/05/2007  21:37                 0 sdb3C.tmp
    26/05/2007  20:37                 0 sdb20.tmp
    26/05/2007  20:35            16,384 Perflib_Perfdata_688.dat
    26/05/2007  20:04                 0 sdb3E.tmp
    26/05/2007  19:04                 0 sdb36.tmp
    26/05/2007  18:04                 0 sdb2A.tmp
    26/05/2007  17:04                 0 Upd17.tmp
    26/05/2007  17:04                 0 sdb14.tmp
    26/05/2007  17:03            16,384 Perflib_Perfdata_4a8.dat
    26/05/2007  16:11                 0 sdb49.tmp
    26/05/2007  15:11                 0 sdb44.tmp
    26/05/2007  14:11                 0 sdb3A.tmp
    26/05/2007  13:11                 0 sdb32.tmp
    26/05/2007  12:11                 0 sdb27.tmp
    26/05/2007  11:11                 0 sdbC.tmp
    26/05/2007  01:07                 0 sdb31.tmp
    26/05/2007  00:08                 0 sdb23.tmp
    26/05/2007  00:07                 0 sdbF.tmp
    26/05/2007  00:06            16,384 Perflib_Perfdata_6b8.dat
    25/05/2007  00:20                 0 sdb50.tmp
    24/05/2007  23:20                 0 sdb47.tmp
    24/05/2007  22:20                 0 sdb40.tmp
    24/05/2007  21:20                 0 sdb3B.tmp
    24/05/2007  20:20                 0 sdb35.tmp
    24/05/2007  19:20                 0 sdb2F.tmp
    24/05/2007  19:05                 0 sdb29.tmp
    24/05/2007  18:20                 0 sdb1C.tmp
    24/05/2007  17:20                 0 sdbE.tmp
    24/05/2007  17:20            16,384 Perflib_Perfdata_488.dat
    23/05/2007  22:46                 0 sdb3F.tmp
    23/05/2007  21:46                 0 sdb39.tmp
    23/05/2007  20:46                 0 sdb33.tmp
    23/05/2007  19:46                 0 sdb2B.tmp
    23/05/2007  19:05                 0 sdb26.tmp
    23/05/2007  18:46                 0 sdb17.tmp
    23/05/2007  17:46                 0 UpdC.tmp
    23/05/2007  17:46                 0 sdbB.tmp
    22/05/2007  23:05                 0 sdb66.tmp
    22/05/2007  22:05                 0 sdb4F.tmp
    22/05/2007  21:05                 0 sdb37.tmp
    22/05/2007  20:05                 0 sdb18.tmp
    22/05/2007  19:06                 0 sdb10.tmp
    22/05/2007  19:05                 0 sdbA.tmp
    22/05/2007  19:05            16,384 Perflib_Perfdata_494.dat
    22/05/2007  00:53                 0 sdb71.tmp
    21/05/2007  23:53                 0 sdb65.tmp
    21/05/2007  22:53                 0 sdb4B.tmp
    21/05/2007  21:53                 0 sdb1A.tmp
    21/05/2007  20:53                 0 sdb15.tmp
    21/05/2007  19:53                 0 sdbD.tmp
    21/05/2007  18:53                 0 sdb8.tmp
    21/05/2007  18:52            16,384 Perflib_Perfdata_69c.dat
    21/05/2007  18:42            65,536 JET4C3F.tmp
    21/05/2007  18:34                 0 sdb11.tmp
    21/05/2007  17:34                 0 Upd9.tmp
    21/05/2007  17:34                 6 msksetup.log
    21/05/2007  17:34                 0 sdb7.tmp
    21/05/2007  17:32            16,384 Perflib_Perfdata_560.dat
    21/05/2007  00:13                 0 sdb75.tmp
    20/05/2007  23:13                 0 sdb70.tmp
    20/05/2007  22:13                 0 sdb6C.tmp
    20/05/2007  21:13                 0 sdb67.tmp
    20/05/2007  20:13                 0 sdb63.tmp
    20/05/2007  19:13                 0 sdb5D.tmp
    20/05/2007  18:13                 0 sdb56.tmp
    20/05/2007  17:13                 0 sdb51.tmp
    20/05/2007  16:13                 0 sdb41.tmp
    20/05/2007  15:13                 0 sdb28.tmp
    20/05/2007  14:13                 0 sdb22.tmp
    20/05/2007  13:13                 0 sdb1B.tmp
    20/05/2007  12:13                 0 sdb12.tmp
    20/05/2007  11:13                 0 sdb6.tmp
    20/05/2007  11:11            16,384 Perflib_Perfdata_6d0.dat
    20/05/2007  01:38                 0 sdb72.tmp
    20/05/2007  00:38                 0 sdb6B.tmp
    19/05/2007  23:38                 0 sdb61.tmp
    19/05/2007  22:38                 0 sdb5B.tmp
    19/05/2007  21:38                 0 sdb57.tmp
    19/05/2007  20:38                 0 sdb52.tmp
    19/05/2007  19:38                 0 sdb4E.tmp
    19/05/2007  18:38                 0 sdb4A.tmp
    19/05/2007  17:38                 0 sdb42.tmp
    19/05/2007  16:38                 0 sdb30.tmp
    19/05/2007  15:38                 0 sdb2C.tmp
    19/05/2007  14:38                 0 sdb24.tmp
    19/05/2007  13:38                 0 sdb1F.tmp
    19/05/2007  12:38                 0 sdb13.tmp
    19/05/2007  11:38                 0 sdb5.tmp
    19/05/2007  11:37            16,384 Perflib_Perfdata_484.dat
    18/05/2007  18:18                 0 sdb9.tmp
    18/05/2007  17:18                 0 sdb4.tmp
    18/05/2007  17:17            16,384 Perflib_Perfdata_4a4.dat
    18/05/2007  01:50                 0 sdb180.tmp
    18/05/2007  00:50                 0 sdb157.tmp
    17/05/2007  23:50                 0 sdb152.tmp
    17/05/2007  22:50                 0 sdb14E.tmp
    17/05/2007  22:37                 0 sdb147.tmp
    17/05/2007  21:50                 0 sdb141.tmp
    17/05/2007  20:50                 0 sdb13D.tmp
    17/05/2007  19:50                 0 sdb139.tmp
    17/05/2007  18:50                 0 sdb135.tmp
    17/05/2007  17:50                 0 sdb130.tmp
    17/05/2007  16:50                 0 sdb12B.tmp
    17/05/2007  15:50                 0 sdb126.tmp
    17/05/2007  14:50                 0 sdb121.tmp
    17/05/2007  13:50                 0 sdb11D.tmp
    17/05/2007  12:50                 0 sdb118.tmp
    17/05/2007  11:50                 0 sdb113.tmp
    17/05/2007  10:50                 0 sdb10E.tmp
    17/05/2007  09:50                 0 sdb10A.tmp
    17/05/2007  08:50                 0 sdb105.tmp
    17/05/2007  07:50                 0 sdb100.tmp
    17/05/2007  06:50                 0 sdbFC.tmp
    17/05/2007  05:50                 0 sdbF8.tmp
    17/05/2007  04:50                 0 sdbF3.tmp
    17/05/2007  03:50                 0 sdbEF.tmp
    17/05/2007  02:50                 0 sdbEA.tmp
    17/05/2007  01:50                 0 sdbE6.tmp
    17/05/2007  00:50                 0 sdbE1.tmp
    16/05/2007  23:50                 0 sdbC6.tmp
    16/05/2007  22:50                 0 sdb25.tmp
    16/05/2007  21:50                 0 sdb21.tmp
    16/05/2007  20:50                 0 sdb1D.tmp
    16/05/2007  20:47                 0 sdb19.tmp
    16/05/2007  14:51                 0 UpdB.tmp
    16/05/2007  14:51                 0 UpdA.tmp
    16/05/2007  14:49                 0 Upd8.tmp
    16/05/2007  14:49            16,384 Perflib_Perfdata_6ec.dat
    15/05/2007  17:39            16,384 Perflib_Perfdata_6c8.dat
    14/05/2007  20:26            16,384 Perflib_Perfdata_6f4.dat
    14/05/2007  17:29            16,384 Perflib_Perfdata_46c.dat
    13/05/2007  11:44            16,384 Perflib_Perfdata_6b0.dat
    12/05/2007  15:06            16,384 Perflib_Perfdata_66c.dat
    11/05/2007  16:29            16,384 Perflib_Perfdata_490.dat
    10/05/2007  22:55            16,384 Perflib_Perfdata_67c.dat
    10/05/2007  17:24            16,384 Perflib_Perfdata_5c8.dat
    09/05/2007  13:31            16,384 Perflib_Perfdata_670.dat
    08/05/2007  22:21            16,384 Perflib_Perfdata_68c.dat
    08/05/2007  19:24           667,648 JETF64C.tmp
    07/05/2007  15:22                 0 Upd42.tmp
    06/05/2007  10:50            16,384 Perflib_Perfdata_714.dat
    05/05/2007  11:37            16,384 Perflib_Perfdata_330.dat
    05/05/2007  00:41         2,347,008 JET5BAB.tmp
    04/05/2007  16:15            16,384 Perflib_Perfdata_748.dat
    03/05/2007  17:28            16,384 Perflib_Perfdata_7f4.dat
    03/05/2007  17:28                 0 Upd7.tmp
    02/05/2007  13:49            16,384 Perflib_Perfdata_6e8.dat
    01/05/2007  16:08            16,384 Perflib_Perfdata_7dc.dat
    28/04/2007  17:35            16,384 Perflib_Perfdata_72c.dat
    28/04/2007  17:22            16,384 Perflib_Perfdata_778.dat
    28/04/2007  10:48            16,384 Perflib_Perfdata_728.dat
    27/04/2007  23:01            16,384 Perflib_Perfdata_750.dat
    26/04/2007  17:23            16,384 Perflib_Perfdata_668.dat
    25/04/2007  23:27                 0 Upd6.tmp
    25/04/2007  23:26                 0 Upd5.tmp
    25/04/2007  23:26            16,384 Perflib_Perfdata_77c.dat
    25/04/2007  22:44           516,096 JET75BC.tmp
    25/04/2007  07:14            16,384 Perflib_Perfdata_694.dat
    24/04/2007  15:48            16,384 Perflib_Perfdata_4d8.dat
    24/04/2007  15:48                 0 Upd2.tmp
    23/04/2007  16:51            16,384 Perflib_Perfdata_734.dat
    21/04/2007  23:29                 0 Upd4.tmp
    21/04/2007  23:29                 0 Upd3.tmp
    21/04/2007  23:27            16,384 Perflib_Perfdata_24c.dat
    21/04/2007  23:16            16,384 Perflib_Perfdata_764.dat
    21/04/2007  23:13            90,112 JET1AA4.tmp
    21/04/2007  13:12            16,384 Perflib_Perfdata_7f0.dat
    20/04/2007  20:18            16,384 Perflib_Perfdata_444.dat
    20/04/2007  16:32            16,384 Perflib_Perfdata_f0.dat
    19/04/2007  17:26            16,384 Perflib_Perfdata_78c.dat
    18/04/2007  23:51            16,384 Perflib_Perfdata_6d8.dat
    18/04/2007  22:25           708,608 JETFC11.tmp
    18/04/2007  12:21            16,384 Perflib_Perfdata_4bc.dat
    17/04/2007  17:55            16,384 Perflib_Perfdata_4c4.dat
    16/04/2007  21:47            16,384 Perflib_Perfdata_9d8.dat
    06/04/2007  16:33                 0 cmpB.tmp
    06/04/2007  16:33                 0 JET762B.tmp
    31/03/2007  13:47           544,768 JET9B81.tmp
    23/03/2007  22:06                 0 Upd1F.tmp
    23/03/2007  22:06                 0 Upd1D.tmp
    11/03/2007  18:58           225,280 JET90E5.tmp
    07/03/2007  14:23                 0 JET9F4D.tmp
    27/02/2007  11:42           177,091 install_SP.exe
    
                 293 File(s)      6,732,365 bytes
                   0 Dir(s)   4,415,504,384 bytes free
     
    ----- Temp ----------------------------- 
     Volume in drive C has no label.
     Volume Serial Number is C8EF-D675
    
     Directory of C:\DOCUME~1\Paul\LOCALS~1\Temp
    
    01/06/2007  00:25           140,404 filelist.txt
    01/06/2007  00:20               634 filelist.zip
    31/05/2007  17:24                 0 JET881B.tmp
    31/05/2007  17:07            16,384 ~DFFF0F.tmp
    31/05/2007  17:06            16,384 ~DF1449.tmp
    31/05/2007  17:06           212,849 HijackThis.zip
    31/05/2007  00:51         2,337,981 clip3.wmv
    31/05/2007  00:48                 0 nlv7D.tmp
    29/05/2007  13:21                 0 4e7f_appcompat.txt
    29/05/2007  12:54            65,536 drm_dialogs.dll
    29/05/2007  12:54           212,992 drm_dyndata_7290009.dll
    29/05/2007  12:46               308 MSI4b18c.LOG
    28/05/2007  18:55               727 TWAIN.LOG
    28/05/2007  18:55                 4 Twain001.Mtx
    28/05/2007  18:55               156 Twunk001.MTX
    27/05/2007  14:47             4,648 groups_medium.gif
    22/05/2007  21:47         3,151,609 gtt-cc14.rar
    22/05/2007  21:42            13,592 temp.ani
    22/05/2007  21:41           208,896 drm_dyndata_7320010.dll
    22/05/2007  01:46                 0 80n7F.tmp
    22/05/2007  01:44                 0 9ry7C.tmp
    22/05/2007  01:44                 0 heg79.tmp
    21/05/2007  17:34            16,384 Perflib_Perfdata_3a0.dat
    21/05/2007  00:32            16,384 ~WRS2569.tmp
    20/05/2007  21:43               850 mso72.wmf
    20/05/2007  21:43               714 mso71.wmf
    20/05/2007  21:43               738 mso5D.wmf
    20/05/2007  21:43               746 mso5E.wmf
    20/05/2007  21:43               826 mso4E.wmf
    20/05/2007  21:43               714 mso5F.wmf
    20/05/2007  21:43               714 mso10.wmf
    20/05/2007  21:43               816 mso3C8.wmf
    20/05/2007  21:43            36,353 c2 mathematical symbols.doc
    20/05/2007  14:11            16,384 ~WRF4070.tmp
    20/05/2007  12:36             5,780 jar_cache35218.tmp
    20/05/2007  12:17             5,780 jar_cache35216.tmp
    20/05/2007  12:17             1,685 jar_cache35217.tmp
    20/05/2007  11:58            40,237 java_install_reg.log
    20/05/2007  00:00            18,894 Peep.Show.S04E06.WS.PDTV.XviD-RiVER.[eztv] -{mininova.org}-.torrent
    20/05/2007  00:00            18,866 Peep.Show.S04E05.WS.PDTV.XviD-RiVER.[eztv] -[mininova.org]-.torrent
    19/05/2007  18:28        37,904,878 Temp1.wav
    19/05/2007  13:27           372,736 21  the factor theorem.ppt
    19/05/2007  13:27               162 ~$ctor theorem.doc
    19/05/2007  13:27            19,969 factor theorem.doc
    19/05/2007  13:17           758,784 22  division and the remainder theorem.ppt
    19/05/2007  13:13             1,162 mso8E.wmf
    19/05/2007  13:13             1,426 mso70.wmf
    19/05/2007  13:13                 0 mso19.tmp
    19/05/2007  13:13             1,476 mso19.wmf
    19/05/2007  13:13            16,384 ~WRF0609.tmp
    19/05/2007  13:13               162 ~$ algebraic long division.doc
    19/05/2007  13:13            25,089 c1 algebraic long division.doc
    19/05/2007  12:30           126,418 jar_cache14958.tmp
    19/05/2007  12:18            17,811 PORCUPINE TREE - In Absentia -=mininova.org=-.torrent
    19/05/2007  12:11            45,151 Porcupine Tree +{mininova.org}+.torrent
    18/05/2007  01:33           126,418 jar_cache24405.tmp
    18/05/2007  01:09         2,471,424 18 May 2007.doc
    18/05/2007  01:03           116,872 jusched.log
    17/05/2007  22:39             5,925 DJ Jean-Madhouse (538)-CABLE-13-01-2006-1REAL ^mininova.org^'.torrent
    17/05/2007  08:02            56,184 Lost.S03E21.HR.HDTV.XviD-TVFF.[eztv]  b-mininova.org-d .torrent
    17/05/2007  03:18               260 05EE1EEF.TMP
    16/05/2007  22:58           126,418 jar_cache57982.tmp
    16/05/2007  22:47            28,353 {mininova.org} 28 Days Later - DVDRip XviD.torrent
    16/05/2007  15:08                 0 bwt12.tmp
    16/05/2007  15:07                 0 dzr11.tmp
    16/05/2007  15:06                 0 5sv10.tmp
    16/05/2007  15:04                 0 pq6F.tmp
    16/05/2007  15:02                 0 hkaE.tmp
    16/05/2007  15:01                 0 kzdD.tmp
    16/05/2007  15:00                 0 8q2C.tmp
    16/05/2007  00:28               145 browserview-27710b0.htm
    16/05/2007  00:20                 0 kee43.tmp
    16/05/2007  00:19                 0 3x042.tmp
    15/05/2007  01:42                 0 rkv2A.tmp
    14/05/2007  21:48           174,592 3c05e7e.mst
    14/05/2007  21:48           174,592 3bf9fb2.mst
    14/05/2007  21:48           174,592 3bfede1.mst
    14/05/2007  20:43               145 browserview-2779f08.htm
    13/05/2007  16:52            56,160 -{mininova.org}- Lost.S03E20.HR.HDTV.XviD-TVFF.[eztv].torrent
    11/05/2007  02:03               145 browserview-162fa18.htm
    11/05/2007  02:03               145 browserview-24dfa10.htm
    09/05/2007  00:01         3,152,931 htd-cc14.rar
    08/05/2007  23:35             2,655 Daemon Tools 4.0.8 -[mininova.org]-.torrent
    08/05/2007  23:19             1,509 Daemon_Tools_v4.0.8 -[mininova.org]-.torrent
    08/05/2007  22:56             2,730 {mininova.org} Alcohol120_retail_1.9.6.4719 Full Edition  by { www. extratorrent .com ].torrent
    08/05/2007  20:16             6,265 Porcupine Tree - Fear Of A Blank Planet - 2007 {mininova.org}.torrent
    06/05/2007  19:59            72,192 ~e5.0001
    06/05/2007  15:02               990 HTM7.tmp
    05/05/2007  18:37            56,229 Lost.S03E19.HR.HDTV.XviD-TVFF.[eztv] [mininova.org].torrent
    04/05/2007  01:03               145 browserview-1652048.htm
    03/05/2007  17:46             2,369 dotNetFx.log
    03/05/2007  17:46         2,759,800 netfx.log
    03/05/2007  17:45            12,694 ASPNETSetup.log
    03/05/2007  17:43             3,584 1110d6.mst
    02/05/2007  20:42           370,688 31 arithmetic sequences and series.ppt
    01/05/2007  23:56               145 browserview-16668a0.htm
    01/05/2007  01:49               145 browserview-1654828.htm
    01/05/2007  00:23            14,465 -{mininova.org}- Training Day.torrent
    30/04/2007  22:44            14,253 The.Simpsons.S18E18.PDTV.XviD-LOL.[eztv]  b-mininova.org-d .torrent
    30/04/2007  00:22               122 9E4253B3.TMP
    29/04/2007  20:06            31,549 ^mininova.org^ The_Football_Factory_LIMITED_DVDRip_XviD_SCREAM.torrent
    29/04/2007  18:45               785 jar_cache49901.tmp
    29/04/2007  11:30           126,418 jar_cache56771.tmp
    29/04/2007  11:06           126,418 jar_cache26493.tmp
    29/04/2007  11:03             1,160 jinstall.cfg
    29/04/2007  11:03           135,512 tmp-9.xpi
    29/04/2007  11:02           135,512 tmp-8.xpi
    29/04/2007  01:46         2,147,036 303_1310497.wmv
    28/04/2007  15:22           126,418 jar_cache34382.tmp
    28/04/2007  15:11           126,418 jar_cache63521.tmp
    27/04/2007  00:23            59,964 Adobelm_Cleanup.0001
    26/04/2007  07:14            56,168   mininova.org   Lost.S03E18.HR.HDTV.XviD-TVFF.[eztv].torrent
    25/04/2007  22:32               145 browserview-1a4a4f8.htm
    25/04/2007  19:23               512 ~DF2655.tmp
    25/04/2007  18:45               512 ~DF5678.tmp
    25/04/2007  18:42            16,384 ~WRF3075.tmp
    25/04/2007  18:42               512 ~DF8259.tmp
    25/04/2007  12:15            16,384 Perflib_Perfdata_2c4.dat
    25/04/2007  07:11               145 browserview-1a39278.htm
    24/04/2007  16:35            65,536 adb79.tmp
    24/04/2007  16:28            65,536 adb77.tmp
    24/04/2007  16:19            65,536 adb76.tmp
    24/04/2007  15:52            65,536 adb75.tmp
    24/04/2007  15:51            65,536 adb74.tmp
    23/04/2007  23:44               738 mso214.wmf
    23/04/2007  23:44               702 mso213.wmf
    23/04/2007  23:44               810 mso20B.wmf
    23/04/2007  23:44               756 mso1CB.wmf
    23/04/2007  23:44            16,384 ~WRF1646.tmp
    23/04/2007  18:24            65,536 adb73.tmp
    23/04/2007  18:23            65,536 adb72.tmp
    23/04/2007  18:21            65,536 adb71.tmp
    23/04/2007  18:20            65,536 adb70.tmp
    23/04/2007  18:13            65,536 adb6F.tmp
    23/04/2007  17:49            65,536 adb6E.tmp
    23/04/2007  17:48            65,536 adb6D.tmp
    23/04/2007  17:31            65,536 adb6C.tmp
    23/04/2007  17:28            65,536 adb5C.tmp
    23/04/2007  17:28            65,536 adb59.tmp
    22/04/2007  21:07               162 ~$uble angle formulae-1.doc
    22/04/2007  21:07            19,969 double angle formulae-1.doc
    22/04/2007  21:05               738 msoED.wmf
    22/04/2007  21:05               702 msoE9.wmf
    22/04/2007  21:05               810 msoE8.wmf
    22/04/2007  21:05               756 msoBA.wmf
    22/04/2007  21:05               162 ~$ double angle formulae-1.doc
    22/04/2007  21:05            25,089 c4 double angle formulae-1.doc
    22/04/2007  21:01            19,969 double angle formulae.doc
    22/04/2007  13:19            16,384 ~WRF1975.tmp
    22/04/2007  13:19               162 ~$mpound angle formulae.doc
    22/04/2007  13:19            20,993 compound angle formulae.doc
    22/04/2007  13:06           126,418 jar_cache35953.tmp
    22/04/2007  12:53            31,233 scalar product.doc
    22/04/2007  12:45           376,832 scalar product formula.ppt
    22/04/2007  12:32            22,017 intersection of 2 lines.doc
    22/04/2007  12:19           126,418 jar_cache36008.tmp
    22/04/2007  12:13           126,418 jar_cache16555.tmp
    22/04/2007  12:01            20,481 c4 diff eqns for exp growth decay.doc
    22/04/2007  12:00            21,505 c4 exp growth decay.doc
    22/04/2007  12:00            26,113 c4 separable variables.doc
    22/04/2007  11:59            27,137 c4 binomial series.doc
    22/04/2007  11:59            24,065 c4 partial fractions.doc
    22/04/2007  11:59            23,041 c4 implicit functions.doc
    22/04/2007  11:58            29,185 c4 parametric functions.doc
    22/04/2007  11:58            22,529 c4 rsin(x+a).doc
    22/04/2007  11:57            22,529 c4 integrating trig functions.doc
    22/04/2007  11:57            25,089 c4 double angle formulae.doc
    22/04/2007  11:56            23,553 c4 compound angle formulae.doc
    22/04/2007  11:56            31,233 c4 vectors.doc
    22/04/2007  02:16            32,289 ^mininova.org^ Kill Bill Vol 1 IPOD Movie.torrent
    22/04/2007  02:16            14,240 -=mininova.org=- 1509.torrent
    22/04/2007  02:15            14,273 Kill.Bill.Vol.1.DVDRip.XviD.SWEsub-KizzE +[mininova.org]+.torrent
    22/04/2007  02:11            57,353 Sin City (2005)[ENG] DVDRip -^mininova.org^-.torrent
    22/04/2007  02:08            53,451 Pulp Fiction.avi -^mininova.org^-.torrent
    22/04/2007  02:06            13,421 -^mininova.org^- 1618.torrent
    22/04/2007  01:58            32,917 -=mininova.org=- Reservoir Dogs [Eng][DVDrip].torrent
    22/04/2007  01:38            16,948 Blades of Glory 2007 20th TeleSync KVCD Brady(TUS Release) -=mininova.org=-.torrent
    21/04/2007  23:19               409 WGANotify.settings
    21/04/2007  23:11                 0 aax2B.tmp
    21/04/2007  21:19                 0 aax29.tmp
    21/04/2007  20:03            16,384 Perflib_Perfdata_398.dat
    21/04/2007  14:53            14,114 caec_appcompat.txt
    21/04/2007  14:52            29,385 5BDEEB.dmp
    21/04/2007  14:52            16,296 d703_appcompat.txt
    21/04/2007  14:25             7,332 South_Park_1106_-_D-Yikes!_DSR.XviD-NoTV.avi   mininova.org  .torrent
    21/04/2007  14:11            14,250 ^mininova.org^' South.Park.S11E06.DSR.XviD-NoTV.[eztv].torrent
    21/04/2007  14:05            14,250 SouthPark_1106_-_D-Yikes!__avi_MrTwig_net_-1.torrent
    21/04/2007  14:05            14,173 SouthPark_1107_-_Night_of_the_Living_Homeless__avi_MrTwig_net_-1.torrent
    21/04/2007  14:04            14,250 SouthPark_1106_-_D-Yikes!__avi_MrTwig_net_.torrent
    21/04/2007  14:02            14,173 SouthPark_1107_-_Night_of_the_Living_Homeless__avi_MrTwig_net_.torrent
    21/04/2007  14:00            56,247 Lost.S03E17.HR.HDTV.XviD-TVFF.[eztv] -~mininova.org~-.torrent
    20/04/2007  19:33            65,536 adb6B.tmp
    20/04/2007  19:32            65,536 adb6A.tmp
    20/04/2007  19:31            65,536 adb69.tmp
    20/04/2007  19:30            65,536 adb68.tmp
    20/04/2007  19:29            65,536 adb67.tmp
    20/04/2007  19:27            65,536 adb66.tmp
    20/04/2007  19:26            65,536 adb65.tmp
    20/04/2007  19:24            65,536 adb64.tmp
    20/04/2007  19:22            65,536 adb63.tmp
    20/04/2007  19:20            65,536 adb62.tmp
    20/04/2007  19:11            65,536 adb61.tmp
    20/04/2007  19:09            65,536 adb60.tmp
    20/04/2007  19:02            65,536 adb5F.tmp
    20/04/2007  18:52            65,536 adb5E.tmp
    20/04/2007  18:45            65,536 adb5D.tmp
    20/04/2007  18:44            10,925 ObjectDock.xml
    20/04/2007  18:44            48,743 ObjectDock.dmp
    20/04/2007  18:43            65,536 adb5B.tmp
    20/04/2007  18:34            65,536 adb5A.tmp
    20/04/2007  18:33            65,536 adb58.tmp
    20/04/2007  18:28            65,536 adb57.tmp
    20/04/2007  18:27            65,536 adb56.tmp
    20/04/2007  17:32            65,536 adb55.tmp
    20/04/2007  02:02               145 browserview-19f7c50.htm
    19/04/2007  17:42                 0 1db3.tmp
    19/04/2007  17:37                 0 evc2.tmp
    18/04/2007  15:56            29,913 +{mininova.org}+ Movie_Layer_Cake,_DivX_DVD_Rip { www.IPTorrents.com }.torrent
    18/04/2007  15:54            29,913 Movie_Layer_Cake,_DivX_DVD_Rip { www.IPTorrents.com } +-mininova.org-+.torrent
    17/04/2007  02:40               145 browserview-19afef0.htm
    16/04/2007  21:47           471,682 4oD.log
    14/04/2007  00:03            62,464 ~WRS2151.tmp
    14/04/2007  00:01         2,523,239 PCSX2_0.9.2_Files.7z
    13/04/2007  11:05            16,384 ~WRF0987.tmp
    11/04/2007  18:24            65,536 adb54.tmp
    11/04/2007  18:23            65,536 adb53.tmp
    11/04/2007  18:06            65,536 adb52.tmp
    11/04/2007  18:06            65,536 adb51.tmp
    11/04/2007  18:04            65,536 adb50.tmp
    11/04/2007  18:03            65,536 adb4F.tmp
    11/04/2007  18:01            65,536 adb4E.tmp
    11/04/2007  17:52            65,536 adb4D.tmp
    11/04/2007  17:33            65,536 adb4C.tmp
    11/04/2007  17:16            65,536 adb7.tmp
    11/04/2007  14:41            65,536 adb4B.tmp
    11/04/2007  14:32            65,536 adb4A.tmp
    11/04/2007  14:24            65,536 adb49.tmp
    11/04/2007  14:17            65,536 adb48.tmp
    11/04/2007  14:15            65,536 adb47.tmp
    11/04/2007  14:15            65,536 adb46.tmp
    11/04/2007  14:13            65,536 adb45.tmp
    11/04/2007  14:09            65,536 adb44.tmp
    11/04/2007  14:08            65,536 adb43.tmp
    11/04/2007  14:04            65,536 adb3F.tmp
    11/04/2007  14:04           102,618 UA_3E.dmp
    11/04/2007  14:02            65,536 adb3D.tmp
    11/04/2007  13:46            65,536 adb3B.tmp
    11/04/2007  13:18            65,536 adb38.tmp
    11/04/2007  12:58            65,536 adb1E.tmp
    11/04/2007  12:35            65,536 adb1C.tmp
    11/04/2007  00:08           126,976 ~A7.tmp
    10/04/2007  15:03            16,384 ~DF400.tmp
    10/04/2007  13:11            25,012 results.html
    09/04/2007  17:16           158,767 UA_C2.dmp
    09/04/2007  16:46            65,536 adbC1.tmp
    09/04/2007  16:44            65,536 adbC0.tmp
    09/04/2007  16:14            65,536 adbBF.tmp
    09/04/2007  16:13            65,536 adbBE.tmp
    09/04/2007  15:56            65,536 adbBD.tmp
    09/04/2007  15:53                 0 4478742.dmp
    09/04/2007  15:53           165,838 UA_BC.dmp
    09/04/2007  15:26            65,536 adbBB.tmp
    09/04/2007  13:14               196 ChooseDegree_red.gif
    09/04/2007  01:10            10,657 sellon.jpg
    09/04/2007  00:21            17,442 [mininova.org] Biomechanical - Eight Moons  (2002)- GP.torrent
    08/04/2007  22:31           158,142 UA_1C.dmp
    08/04/2007  21:42            65,536 adb1B.tmp
    08/04/2007  21:23            65,536 adb1A.tmp
    08/04/2007  21:22            65,536 adb19.tmp
    08/04/2007  21:22                 0 4E05E0.dmp
    08/04/2007  21:22           160,923 UA_11.dmp
    08/04/2007  21:01            65,536 adb10.tmp
    07/04/2007  18:07               145 browserview-26a6c38.htm
    07/04/2007  18:07               145 browserview-18bbb20.htm
    07/04/2007  17:00            65,536 adbBA.tmp
    07/04/2007  16:31            65,536 adbB9.tmp
    07/04/2007  14:51           440,744 switchsetup.exe
    07/04/2007  14:51           409,512 rpsetup.exe
    07/04/2007  14:51           329,128 ripsetup.exe
    07/04/2007  14:51           266,152 burnsetup.exe
    07/04/2007  00:55               118 24E77225.TMP
    06/04/2007  22:30            65,536 adb15.tmp
    06/04/2007  21:54            65,536 adbF.tmp
    06/04/2007  21:25            65,536 adbB.tmp
    06/04/2007  21:24            65,536 adbA.tmp
    06/04/2007  21:17            65,536 adb9.tmp
    06/04/2007  21:17           145,718 UA_7.dmp
    06/04/2007  21:16            65,536 adb6.tmp
    06/04/2007  21:00            65,536 adb3.tmp
    06/04/2007  20:22               145 browserview-193ec08.htm
    06/04/2007  20:21               145 browserview-18de178.htm
    06/04/2007  20:19           122,880 ~49.tmp
    06/04/2007  18:39            65,536 adb42.tmp
    06/04/2007  18:38            65,536 adb41.tmp
    06/04/2007  18:29            65,536 adb40.tmp
    06/04/2007  18:29           130,515 UA_3F.dmp
    06/04/2007  18:28            65,536 adb3E.tmp
    06/04/2007  18:28           155,590 UA_3D.dmp
    06/04/2007  18:21            65,536 adb3C.tmp
    06/04/2007  18:20            65,536 adb3A.tmp
    06/04/2007  17:57            65,536 adb39.tmp
    06/04/2007  17:57           162,515 UA_38.dmp
    06/04/2007  17:50            65,536 adb37.tmp
    06/04/2007  17:48            65,536 adb34.tmp
    06/04/2007  17:48                 0 4384D9.dmp
    06/04/2007  17:48           132,204 UA_30.dmp
    06/04/2007  17:20            65,536 adb2E.tmp
    06/04/2007  15:11            16,384 Perflib_Perfdata_6b0.dat
    06/04/2007  15:09            16,384 Perflib_Perfdata_2b0.dat
    06/04/2007  13:12               145 browserview-18dd1c0.htm
    06/04/2007  13:10               145 browserview-26f86f0.htm
    06/04/2007  13:10               145 browserview-18bd1c0.htm
    06/04/2007  12:19            14,313 SouthPark_1105_-_Fantastic_Easter_Special__avi_MrTwig_net_.torrent
    06/04/2007  12:19            56,294 {mininova.org} Lost.S03E15.PROPER.HR.HDTV.XviD-CTU.[eztv].torrent
    06/04/2007  12:18             1,980 2.tmp
    06/04/2007  12:03               145 browserview-26a84b0.htm
    06/04/2007  11:59           146,977 UA_37.dmp
    06/04/2007  11:38            65,536 adb36.tmp
    06/04/2007  11:37            65,536 adb35.tmp
    06/04/2007  11:22            65,536 adb33.tmp
    06/04/2007  10:58            65,536 adb32.tmp
    06/04/2007  10:57            65,536 adb31.tmp
    06/04/2007  10:54            65,536 adb30.tmp
    06/04/2007  10:50            65,536 adb2F.tmp
    06/04/2007  10:41            65,536 adb2D.tmp
    06/04/2007  09:57            65,536 adb2C.tmp
    06/04/2007  09:51            65,536 adb21.tmp
    05/04/2007  17:46            65,536 adb8.tmp
    05/04/2007  17:45           176,715 UA_6.dmp
    05/04/2007  17:37            65,536 adb5.tmp
    05/04/2007  16:57            65,536 adb4.tmp
    05/04/2007  16:57                 0 24851F.dmp
    05/04/2007  16:57           178,660 UA_3.dmp
    05/04/2007  16:23            65,536 adb2.tmp
    05/04/2007  13:32               145 browserview-26f7e68.htm
    05/04/2007  13:30               145 browserview-269ef08.htm
    05/04/2007  13:30               145 browserview-18b9790.htm
    05/04/2007  13:03            65,536 adb18.tmp
    05/04/2007  12:56            65,536 adb17.tmp
    05/04/2007  12:52            65,536 adb16.tmp
    05/04/2007  12:51           128,939 UA_15.dmp
    05/04/2007  12:50            65,536 adb14.tmp
    05/04/2007  12:46            65,536 adb13.tmp
    05/04/2007  12:39            65,536 adb12.tmp
    05/04/2007  12:20            65,536 adb11.tmp
    05/04/2007  12:13           125,825 UA_10.dmp
    05/04/2007  12:03            65,536 adbE.tmp
    05/04/2007  11:44            65,536 adbD.tmp
    05/04/2007  11:42            65,536 adbC.tmp
    05/04/2007  11:35         5,761,107 gta_sa.exe.zip
    05/04/2007  11:27               145 browserview-181b460.htm
    05/04/2007  11:27               145 browserview-23cf6e0.htm
    05/04/2007  10:47               145 browserview-18b8088.htm
    05/04/2007  10:45        15,113,008 Outpost Firewall Pro 4.0 1007.591.145.exe
    05/04/2007  10:40            10,022 -'mininova.org'- Outpost_Firewall_Pro_4_0_1007_591_145_with_WORKING_key_+-Demonoid.com-+_813474.556.torrent
    05/04/2007  10:38             5,053 -'mininova.org'- Outpost_Firewall_Pro_4.0.964.6926_Final_Multi_New_+_key-((Demonoid.com))_1967398.4252.torrent
    05/04/2007  01:40               145 browserview-18a9790.htm
    05/04/2007  01:40               145 browserview-26df7d8.htm
    05/04/2007  00:16            43,162 Rage Against the Machine-Battle of Los Angeles(Darkside_RG)  d-mininova.org-b .torrent
    04/04/2007  22:32            69,766 [Demonoid.com]-Ozzy_Discography_656388.1444 +-mininova.org-+.torrent
    04/04/2007  22:30            10,410 The Stone Roses - The Complete Stone Roses -'mininova.org'-.torrent
    04/04/2007  20:04            65,536 adb2B.tmp
    04/04/2007  20:02            65,536 adb28.tmp
    04/04/2007  14:36               145 browserview-1899790.htm
    04/04/2007  14:36               145 browserview-267f638.htm
    04/04/2007  13:21            65,536 adb2A.tmp
    04/04/2007  13:17            65,536 adb29.tmp
    04/04/2007  13:14            16,244 Obj28.tmp
    04/04/2007  13:12            65,536 adb27.tmp
    04/04/2007  13:11            65,536 adb26.tmp
    04/04/2007  13:07            65,536 adb25.tmp
    04/04/2007  13:06            65,536 adb24.tmp
    04/04/2007  13:06            65,536 adb23.tmp
    04/04/2007  13:06            65,536 adb22.tmp
    04/04/2007  13:02            65,536 adb20.tmp
    04/04/2007  12:58            65,536 adb1F.tmp
    04/04/2007  12:57                 0 57C7BD.dmp
    04/04/2007  12:57           149,890 UA_1E.dmp
    04/04/2007  12:55            65,536 adb1D.tmp
    04/04/2007  01:16               145 browserview-26cf7d8.htm
    03/04/2007  17:24               145 browserview-26d8ff0.htm
    03/04/2007  17:24               145 browserview-189b1c0.htm
    03/04/2007  14:14           184,532 UA_12.dmp
    03/04/2007  01:32               145 browserview-26c9718.htm
    03/04/2007  01:21         1,093,844 BUSTYAZN.4.wmv
    02/04/2007  20:52               145 browserview-18c37b0.htm
    02/04/2007  09:24           220,863 IRON_MAIDEN_40_Discs_1979_2005_Quality_from_192_320_Kbps-_=Demonoid.com=__1192170.7602 -~mininova.org~-.torrent
    02/04/2007  09:11            28,744 Gua4.tmp
    01/04/2007  21:41               145 browserview-d3f7a8.htm
    01/04/2007  21:41               145 browserview-189eab0.htm
    01/04/2007  01:22             3,228 1e1f_appcompat.txt
    01/04/2007  01:22           142,188 UA_9.dmp
    01/04/2007  00:19               145 browserview-26d7da0.htm
    31/03/2007  22:06               145 browserview-26d4770.htm
    31/03/2007  22:06               145 browserview-189c410.htm
    31/03/2007  20:15            76,594 Skid_Row_Discography_O-Demonoid.com-O_1192170.7602 {mininova.org}.torrent
    31/03/2007  20:12            25,083 =mininova.org= Skid_Row_Discography-[[Demonoid.com]]_656388.1444.torrent
    31/03/2007  13:53             1,430 iTunesSetup804.log
    31/03/2007  13:52               305 GEARInstall.log
    31/03/2007  13:51         1,858,676 iTunesSetupAdminA80.log
    31/03/2007  13:51             2,961 QTInstallCode.log
    31/03/2007  13:51             3,930 qtplugin.log
    31/03/2007  10:18            58,768 Standard20.fxV2_Q30_MESH_WEIGHTED_BLEND
    31/03/2007  10:18            27,556 Standard30.fxV2_Q30_MESH_WEIGHTED_BLEND
    31/03/2007  10:18            58,284 Standard20.fxV2_Q30_MESH_STANDARD_BUMP_PARALLAX_SPECULAR_REFLECTION
    31/03/2007  10:18            36,776 Standard30.fxV2_Q30_MESH_STANDARD_BUMP_PARALLAX_SPECULAR_REFLECTION
    31/03/2007  10:18            46,956 WaterSurface.fxV2_Q30_MESH_STANDARD_BUMP_SPECULAR_REFLECTION2D_REFRACTION2D_SCROLL
    31/03/2007  10:18            46,000 Standard13.fxV2_Q30_MESH_STANDARD_BUMP_SPECULAR_REFLECTION2D_REFRACTION2D_SCROLL
    31/03/2007  10:18            53,856 Standard20.fxV2_Q30_MESH_STANDARD_BUMP_SPECULAR_REFLECTION2D_REFRACTION2D_SCROLL
    31/03/2007  10:18            36,500 Standard30.fxV2_Q30_MESH_STANDARD_BUMP_SPECULAR_REFLECTION2D_REFRACTION2D_SCROLL
    31/03/2007  10:18            56,496 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_BUMP_PARALLAX_SPECULAR
    31/03/2007  10:18            33,828 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_BUMP_PARALLAX_SPECULAR
    31/03/2007  10:18            52,928 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_BUMP_BUMPDETAIL
    31/03/2007  10:18            30,740 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_BUMP_BUMPDETAIL
    31/03/2007  10:18            56,612 Standard20.fxV2_Q30_MESH_STANDARD_BUMP_PARALLAX_SPECULAR_ILLUMINATION
    31/03/2007  10:18            36,120 Standard30.fxV2_Q30_MESH_STANDARD_BUMP_PARALLAX_SPECULAR_ILLUMINATION
    31/03/2007  10:18            25,688 Mirror.fxV2_Q30_MESH_STANDARD_MIRROR_MIRRORMASK
    31/03/2007  10:18            34,360 Standard13.fxV2_Q30_MESH_STANDARD_MIRROR_MIRRORMASK
    31/03/2007  10:18            41,132 Standard20.fxV2_Q30_MESH_STANDARD_MIRROR_MIRRORMASK
    31/03/2007  10:18            24,588 Standard30.fxV2_Q30_MESH_STANDARD_MIRROR_MIRRORMASK
    31/03/2007  10:18            51,180 Standard20.fxV2_Q30_MESH_STANDARD_BUMP_REFLECTION
    31/03/2007  10:18            30,712 Standard30.fxV2_Q30_MESH_STANDARD_BUMP_REFLECTION
    31/03/2007  10:18            25,500 Mirror.fxV2_Q30_MESH_STANDARD_MIRROR
    31/03/2007  10:18            34,360 Standard13.fxV2_Q30_MESH_STANDARD_MIRROR
    31/03/2007  10:18            41,132 Standard20.fxV2_Q30_MESH_STANDARD_MIRROR
    31/03/2007  10:17            24,588 Standard30.fxV2_Q30_MESH_STANDARD_MIRROR
    31/03/2007  10:17            61,736 Standard20.fxV2_Q30_MESH_STANDARD_BUMP_BUMPDETAIL_PARALLAX_SPECULAR_REFLECTION
    31/03/2007  10:17            39,752 Standard30.fxV2_Q30_MESH_STANDARD_BUMP_BUMPDETAIL_PARALLAX_SPECULAR_REFLECTION
    31/03/2007  10:17            57,080 Standard20.fxV2_Q30_MESH_STANDARD_SPECULAR_REFLECTION_ILLUMINATION
    31/03/2007  10:17            33,704 Standard30.fxV2_Q30_MESH_STANDARD_SPECULAR_REFLECTION_ILLUMINATION
    31/03/2007  10:17            54,192 Standard20.fxV2_Q30_MESH_STANDARD_BUMP_BUMPDETAIL_PARALLAX_SPECULAR
    31/03/2007  10:17            36,424 Standard30.fxV2_Q30_MESH_STANDARD_BUMP_BUMPDETAIL_PARALLAX_SPECULAR
    31/03/2007  10:17            50,888 Standard20.fxV2_Q30_MESH_STANDARD_BUMP_BUMPDETAIL_SPECULAR
    31/03/2007  10:17            33,460 Standard30.fxV2_Q30_MESH_STANDARD_BUMP_BUMPDETAIL_SPECULAR
    31/03/2007  10:17            47,172 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_ALPHAFADE
    31/03/2007  10:17            25,440 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_ALPHAFADE
    31/03/2007  10:17            23,336 Glow20.fxV2_Q30_MESH_STANDARD_BLEND_ALPHAFADE
    31/03/2007  10:17            44,184 Standard20.fxV2_Q30_MESH_STANDARD_BUMP
    31/03/2007  10:17            27,384 Standard30.fxV2_Q30_MESH_STANDARD_BUMP
    31/03/2007  10:17            51,488 Standard20.fxV2_Q30_MESH_RIGID_BUMP_PARALLAX_SPECULAR
    31/03/2007  10:17            33,408 Standard30.fxV2_Q30_MESH_RIGID_BUMP_PARALLAX_SPECULAR
    31/03/2007  10:17            23,828 Glow20.fxV2_Q30_MESH_RIGID
    31/03/2007  10:17            58,272 Standard20.fxV2_Q30_MESH_RIGID_BUMP_SPECULAR_REFLECTION_REFRACTION2D
    31/03/2007  10:17            36,832 Standard30.fxV2_Q30_MESH_RIGID_BUMP_SPECULAR_REFLECTION_REFRACTION2D
    31/03/2007  10:17            39,016 Glass.fxV2_Q30_MESH_RIGID_BUMP_SPECULAR_REFLECTION_REFRACTION2D
    31/03/2007  10:17            49,708 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_BUMP
    31/03/2007  10:17            27,764 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_BUMP
    31/03/2007  10:17            56,412 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_BUMP_BUMPDETAIL_SPECULAR
    31/03/2007  10:17            33,840 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_BUMP_BUMPDETAIL_SPECULAR
    31/03/2007  10:17            55,212 Standard20.fxV2_Q30_MESH_RIGID_BUMP_SPECULAR_REFLECTION
    31/03/2007  10:17            33,772 Standard30.fxV2_Q30_MESH_RIGID_BUMP_SPECULAR_REFLECTION
    31/03/2007  10:17            50,124 Standard20.fxV2_Q30_MESH_RIGID_BLEND_BUMP
    31/03/2007  10:17            27,724 Standard30.fxV2_Q30_MESH_RIGID_BLEND_BUMP
    31/03/2007  10:17            52,016 Standard20.fxV2_Q30_MESH_RIGID_SPECULAR_REFLECTION
    31/03/2007  10:17            30,992 Standard30.fxV2_Q30_MESH_RIGID_SPECULAR_REFLECTION
    31/03/2007  10:17            47,080 Standard20.fxV2_Q30_MESH_RIGID_BLEND
    31/03/2007  10:17            24,928 Standard30.fxV2_Q30_MESH_RIGID_BLEND
    31/03/2007  10:17            26,480 Glow20.fxV2_Q30_MESH_RIGID_BLEND
    31/03/2007  10:17            50,808 Standard20.fxV2_Q30_MESH_RIGID_BLEND_SPECULAR
    31/03/2007  10:17            28,044 Standard30.fxV2_Q30_MESH_RIGID_BLEND_SPECULAR
    31/03/2007  10:17            53,772 Standard20.fxV2_Q30_MESH_RIGID_BLEND_BUMP_SPECULAR
    31/03/2007  10:17            30,824 Standard30.fxV2_Q30_MESH_RIGID_BLEND_BUMP_SPECULAR
    31/03/2007  10:17            70,832 Standard20.fxV2_Q30_MESH_WEIGHTED_BUMP_SPECULAR_REFLECTION
    31/03/2007  10:17            36,400 Standard30.fxV2_Q30_MESH_WEIGHTED_BUMP_SPECULAR_REFLECTION
    31/03/2007  10:17            35,304 Cloth30.fxV2_Q30_MESH_WEIGHTED_BUMP_PARALLAX_RIMLIGHTING_SPECULAR
    31/03/2007  10:17            64,424 Standard20.fxV2_Q30_MESH_WEIGHTED_BUMP_PARALLAX_RIMLIGHTING_SPECULAR
    31/03/2007  10:17            35,984 Standard30.fxV2_Q30_MESH_WEIGHTED_BUMP_PARALLAX_RIMLIGHTING_SPECULAR
    31/03/2007  10:17            41,300 Skin20.fxV2_Q30_MESH_WEIGHTED_BUMP_PARALLAX_RIMLIGHTING_SPECULAR
    31/03/2007  10:17            35,656 Skin30.fxV2_Q30_MESH_WEIGHTED_BUMP_PARALLAX_RIMLIGHTING_SPECULAR
    31/03/2007  10:17            47,668 Standard20.fxV2_Q30_MESH_STANDARD_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:17            30,484 Standard30.fxV2_Q30_MESH_STANDARD_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:17            34,320 Cloth30.fxV2_Q30_MESH_STANDARD_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:17            41,516 Standard20.fxV2_Q30_MESH_RIGID
    31/03/2007  10:17            24,548 Standard30.fxV2_Q30_MESH_RIGID
    31/03/2007  10:17            60,188 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_BUMP_SPECULAR_REFLECTION
    31/03/2007  10:17            34,192 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_BUMP_SPECULAR_REFLECTION
    31/03/2007  10:17            61,224 Standard20.fxV2_Q30_MESH_WEIGHTED_BUMP_SPECULAR
    31/03/2007  10:17            33,072 Standard30.fxV2_Q30_MESH_WEIGHTED_BUMP_SPECULAR
    31/03/2007  10:17            53,396 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_REFLECTION
    31/03/2007  10:17            28,296 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_REFLECTION
    31/03/2007  10:17            29,256 Glow20.fxV2_Q30_MESH_STANDARD_BLEND_REFLECTION
    31/03/2007  10:17            47,896 Standard20.fxV2_Q30_MESH_STANDARD_REFLECTION
    31/03/2007  10:17            27,916 Standard30.fxV2_Q30_MESH_STANDARD_REFLECTION
    31/03/2007  10:17            27,796 Glow20.fxV2_Q30_MESH_STANDARD_REFLECTION
    31/03/2007  10:14            29,384 StaticShadow.fxV2_Q30_MESH_STANDARD
    31/03/2007  10:14            46,772 Standard20.fxV2_Q30_MESH_STANDARD_ILLUMINATION
    31/03/2007  10:14            27,260 Standard30.fxV2_Q30_MESH_STANDARD_ILLUMINATION
    31/03/2007  10:14            47,492 Standard20.fxV2_Q30_MESH_TWEENED_BLEND
    31/03/2007  10:14            25,324 Standard30.fxV2_Q30_MESH_TWEENED_BLEND
    31/03/2007  10:14            22,868 Glow20.fxV2_Q30_MESH_TWEENED_BLEND
    31/03/2007  10:14            50,316 Standard20.fxV2_Q30_MESH_STANDARD_SPECULAR_ILLUMINATION
    31/03/2007  10:14            30,376 Standard30.fxV2_Q30_MESH_STANDARD_SPECULAR_ILLUMINATION
    31/03/2007  10:14            52,344 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_ILLUMINATION
    31/03/2007  10:14            27,640 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_ILLUMINATION
    31/03/2007  10:14            58,904 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_BUMP_SPECULAR_ILLUMINATION
    31/03/2007  10:14            33,536 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_BUMP_SPECULAR_ILLUMINATION
    31/03/2007  10:14            56,940 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_SPECULAR_REFLECTION
    31/03/2007  10:14            31,412 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_SPECULAR_REFLECTION
    31/03/2007  10:14            53,192 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_BUMP_SPECULAR
    31/03/2007  10:14            30,864 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_BUMP_SPECULAR
    31/03/2007  10:14            26,996 ScatterBillboard.fxV2_Q30_MESH_STANDARD_BLEND
    31/03/2007  10:14            50,176 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_SPECULAR
    31/03/2007  10:14            28,084 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_SPECULAR
    31/03/2007  10:14            50,972 Standard20.fxV2_Q30_MESH_STANDARD_BUMP_PARALLAX_SPECULAR
    31/03/2007  10:14            33,448 Standard30.fxV2_Q30_MESH_STANDARD_BUMP_PARALLAX_SPECULAR
    31/03/2007  10:14            54,664 Standard20.fxV2_Q30_MESH_STANDARD_BUMP_SPECULAR_REFLECTION
    31/03/2007  10:14            33,812 Standard30.fxV2_Q30_MESH_STANDARD_BUMP_SPECULAR_REFLECTION
    31/03/2007  10:14            25,352 Bad.fxV2_Q30_MESH_STANDARD_ZBUFFERWRITE
    31/03/2007  10:14            47,668 Standard20.fxV2_Q30_MESH_STANDARD_BUMP_SPECULAR
    31/03/2007  10:14            30,484 Standard30.fxV2_Q30_MESH_STANDARD_BUMP_SPECULAR
    31/03/2007  10:14            44,676 Standard20.fxV2_Q30_MESH_STANDARD_SPECULAR
    31/03/2007  10:14            27,704 Standard30.fxV2_Q30_MESH_STANDARD_SPECULAR
    31/03/2007  10:14            66,992 Standard20.fxV2_Q30_MESH_WEIGHTED_REFLECTION_REFRACTION2D
    31/03/2007  10:14            33,564 Standard30.fxV2_Q30_MESH_WEIGHTED_REFLECTION_REFRACTION2D
    31/03/2007  10:14            35,328 Glass.fxV2_Q30_MESH_WEIGHTED_REFLECTION_REFRACTION2D
    31/03/2007  10:14            32,948 Cloth30.fxV2_Q30_MESH_WEIGHTED_BLEND_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:14            65,460 Standard20.fxV2_Q30_MESH_WEIGHTED_BLEND_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:14            33,452 Standard30.fxV2_Q30_MESH_WEIGHTED_BLEND_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:14            40,168 Skin20.fxV2_Q30_MESH_WEIGHTED_BLEND_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:14            33,300 Skin30.fxV2_Q30_MESH_WEIGHTED_BLEND_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:14            32,640 Cloth30.fxV2_Q30_MESH_WEIGHTED_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:14            61,224 Standard20.fxV2_Q30_MESH_WEIGHTED_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:14            33,072 Standard30.fxV2_Q30_MESH_WEIGHTED_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:14            38,636 Skin20.fxV2_Q30_MESH_WEIGHTED_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:14            32,992 Skin30.fxV2_Q30_MESH_WEIGHTED_BUMP_RIMLIGHTING_SPECULAR
    31/03/2007  10:14            65,460 Standard20.fxV2_Q30_MESH_WEIGHTED_BLEND_BUMP_SPECULAR
    31/03/2007  10:14            33,452 Standard30.fxV2_Q30_MESH_WEIGHTED_BLEND_BUMP_SPECULAR
    31/03/2007  10:14            61,224 Standard20.fxV2_Q30_MESH_WEIGHTED_BUMP_RIMLIGHTING_SUBSURFACE_SPECULAR
    31/03/2007  10:14            33,072 Standard30.fxV2_Q30_MESH_WEIGHTED_BUMP_RIMLIGHTING_SUBSURFACE_SPECULAR
    31/03/2007  10:14            38,636 Skin20.fxV2_Q30_MESH_WEIGHTED_BUMP_RIMLIGHTING_SUBSURFACE_SPECULAR
    31/03/2007  10:14            32,992 Skin30.fxV2_Q30_MESH_WEIGHTED_BUMP_RIMLIGHTING_SUBSURFACE_SPECULAR
    31/03/2007  10:14            44,536 Standard20.fxV2_Q30_MESH_RIGID_BUMP
    31/03/2007  10:14            27,344 Standard30.fxV2_Q30_MESH_RIGID_BUMP
    31/03/2007  10:14            45,220 Standard20.fxV2_Q30_MESH_RIGID_SPECULAR
    31/03/2007  10:14            27,664 Standard30.fxV2_Q30_MESH_RIGID_SPECULAR
    31/03/2007  10:14            48,184 Standard20.fxV2_Q30_MESH_RIGID_BUMP_SPECULAR
    31/03/2007  10:14            30,444 Standard30.fxV2_Q30_MESH_RIGID_BUMP_SPECULAR
    31/03/2007  10:14            56,244 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_SPECULAR_ILLUMINATION_SCROLL
    31/03/2007  10:14            30,884 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_SPECULAR_ILLUMINATION_SCROLL
    31/03/2007  10:14            60,304 Standard20.fxV2_Q30_MESH_STANDARD_BUMP_SPECULAR_REFLECTION_ILLUMINATION
    31/03/2007  10:14            36,484 Standard30.fxV2_Q30_MESH_STANDARD_BUMP_SPECULAR_REFLECTION_ILLUMINATION
    31/03/2007  10:14            51,440 Standard20.fxV2_Q30_MESH_STANDARD_SPECULAR_REFLECTION
    31/03/2007  10:14            31,032 Standard30.fxV2_Q30_MESH_STANDARD_SPECULAR_REFLECTION
    31/03/2007  10:14            47,468 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_ALPHAFADE_SCROLL
    31/03/2007  10:14            25,564 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_ALPHAFADE_SCROLL
    31/03/2007  10:14            23,460 Glow20.fxV2_Q30_MESH_STANDARD_BLEND_ALPHAFADE_SCROLL
    31/03/2007  10:14            46,932 Standard20.fxV2_Q30_MESH_STANDARD_BLEND_SCROLL
    31/03/2007  10:14            25,096 Standard30.fxV2_Q30_MESH_STANDARD_BLEND_SCROLL
    31/03/2007  10:14            22,824 Glow20.fxV2_Q30_MESH_STANDARD_BLEND_SCROLL
    31/03/2007  10:14            46,632 Standard20.fxV2_Q30_MESH_STANDARD_BLEND
    31/03/2007  10:14            24,968 Standard30.fxV2_Q30_MESH_STANDARD_BLEND
    31/03/2007  10:14            22,696 Glow20.fxV2_Q30_MESH_STANDARD_BLEND
    31/03/2007  10:14            41,132 Standard20.fxV2_Q30_MESH_STANDARD
    31/03/2007  10:14            24,588 Standard30.fxV2_Q30_MESH_STANDARD
    31/03/2007  10:14            21,236 Glow20.fxV2_Q30_MESH_STANDARD
    31/03/2007  10:14            29,852 StaticShadowTextureShadow.fxV2_Q30_MESH_STANDARD_BLEND
    31/03/2007  10:14            32,076 StaticShadow.fxV2_Q30_MESH_STANDARD_BLEND
    31/03/2007  10:14            33,808 Sprite.fxV2_Q30_SPRITES
    31/03/2007  00:28             6,082 SouthPark_914_-_Bloody_Mary__rm_MrTwig_net_.torrent
    31/03/2007  00:26            40,803 +[mininova.org]+ GTA San Andreas.torrent
    31/03/2007  00:19            28,803 +[mininova.org]+ v_for_vendetta_(2006)_[dvdrip][english+spanish[1].subs][xvid_mp3].torrent
    30/03/2007  22:50            22,031 GTA IV Trailer HDTV 1280x720.wmv +[mininova.org]+.torrent
    30/03/2007  21:30               145 browserview-261cfe8.htm
    30/03/2007  21:30               145 browserview-1907c48.htm
    26/03/2007  11:27            16,384 Perflib_Perfdata_c0.dat
    26/03/2007  05:47               145 browserview-26ac090.htm
    26/03/2007  05:47               145 browserview-188dec8.htm
    24/03/2007  22:25           243,917 UA_22D.dmp
    24/03/2007  22:25           212,685 UA_22C.dmp
    24/03/2007  20:24             2,264 anagrammer-1.gif
    24/03/2007  19:16             2,264 anagrammer.gif
    24/03/2007  03:01               145 browserview-26af3c0.htm
    24/03/2007  03:01               145 browserview-1884888.htm
    23/03/2007  00:21           226,242 UA_47.dmp
    23/03/2007  00:21           184,220 UA_46.dmp
    22/03/2007  23:26            21,799 goatse-5832.jpg
    22/03/2007  02:57               145 browserview-23dca18.htm
    21/03/2007  15:32            15,585 -'mininova.org'- Dream_Theater_Master_Of_Puppets_[Official_Bootleg].torrent
    21/03/2007  15:30                40 welcome-home-sanitarium-250842.m3u
    21/03/2007  15:27                40 five-years-258120.m3u
    21/03/2007  15:25                40 in-response-to-stars-258113.m3u
    21/03/2007  13:57             6,003 SouthPark_1006_-_Manbearpig__rm_MrTwig_net_.torrent
    21/03/2007  13:29                 0 9xy17.tmp
    21/03/2007  13:29                 0 dvs14.tmp
    21/03/2007  13:29                 0 y8r12.tmp
    21/03/2007  04:25               145 browserview-23cca18.htm
    21/03/2007  04:25               145 browserview-1845160.htm
    20/03/2007  04:15               145 browserview-2284ae0.htm
    20/03/2007  04:15               145 browserview-1825160.htm
    19/03/2007  03:21             6,120 SouthPark_811_-_Quest_For_Ratings__rm_MrTwig_net_.torrent
    19/03/2007  01:52            21,677 SouthPark_911_-_Ginger_Kids__avi_MrTwig_net_-1.torrent
    19/03/2007  01:52            90,081 SouthPark_908-914__vob_MrTwig_net_.torrent
    19/03/2007  01:51            21,677 SouthPark_911_-_Ginger_Kids__avi_MrTwig_net_.torrent
    19/03/2007  01:26            40,849 SouthPark_Season_5__avi_MrTwig_net_.torrent
    19/03/2007  01:14            14,263 SouthPark_1103_-_Lice_Capades__avi_MrTwig_net_.torrent
    18/03/2007  23:07           168,712 AAX113.tmp
    18/03/2007  23:07            62,412 AAX111.tmp
    18/03/2007  23:07            51,956 AAX110.tmp
    18/03/2007  23:07            53,760 AAX10F.tmp
    18/03/2007  23:07            55,368 AAX10E.tmp
    18/03/2007  23:07             7,468 AAX10D.tmp
    18/03/2007  22:30           168,712 AAX109.tmp
    18/03/2007  22:30            46,424 AAX108.tmp
    18/03/2007  22:30            62,412 AAX107.tmp
    18/03/2007  22:30            51,956 AAX106.tmp
    18/03/2007  22:30            53,760 AAX105.tmp
    18/03/2007  22:30            55,368 AAX104.tmp
    18/03/2007  22:30             7,468 AAX103.tmp
    18/03/2007  20:05                 0 gn4E2.tmp
    18/03/2007  20:04                 0 nzqE1.tmp
    18/03/2007  20:03                 0 kecE0.tmp
    17/03/2007  15:22            56,242 SouthPark_701-704__avi_MrTwig_net_.torrent
    17/03/2007  14:35               230 dw.log
    16/03/2007  09:28               145 browserview-225c7a8.htm
    16/03/2007  02:46            56,250 Lost.S03E12.HR.HDTV.iNT.XviD-CRiMSON.[eztv] -_mininova.org_-.torrent
    16/03/2007  00:01                 0 h6e7E.tmp
    15/03/2007  23:56                 0 odm7D.tmp
    15/03/2007  23:55                 0 4jb7C.tmp
    15/03/2007  23:54                 0 0107B.tmp
    15/03/2007  23:54                 0 4847A.tmp
    13/03/2007  22:40            29,035 South Park 1101 - With Apologies to Jesse Jackson - VOstfr  d-mininova.org-b .torrent
    13/03/2007  20:36            16,384 ~WRF0882.tmp
    11/03/2007  18:58               145 browserview-1724bc8.htm
    11/03/2007  02:39               145 browserview-1714bc8.htm
    10/03/2007  17:40               145 browserview-254c5e8.htm
    10/03/2007  17:40               145 browserview-171b608.htm
    10/03/2007  14:42         3,025,633 02-10.wmv
    10/03/2007  14:41         1,017,987 01-10.wmv
    10/03/2007  14:39         2,018,823 isabella dior-1.wmv
    10/03/2007  14:38         2,018,823 isabella dior.wmv
    10/03/2007  14:37         4,101,988 vilicity-1.wmv
    10/03/2007  14:08         4,101,988 vilicity.wmv
    10/03/2007  13:55            16,384 ~WRF1774.tmp
    10/03/2007  02:32                 0 hkrA8.tmp
    10/03/2007  02:27                 0 95oA6.tmp
    10/03/2007  02:27                 0 osoA5.tmp
    10/03/2007  02:26                 0 op2A4.tmp
    09/03/2007  04:56               145 browserview-2194b58.htm
    09/03/2007  04:56               145 browserview-16ead78.htm
    08/03/2007  23:29            16,384 ~DF1A3E.tmp
    08/03/2007  19:15            15,274   mininova.org   Deftones-Saturday_Night_Wrist-(Explicit_Retail)-2006-MTD.torrent
    08/03/2007  18:35            26,036 =mininova.org= Lamb Of God.torrent
    08/03/2007  18:33            16,393 TOOL - 10000 Days (2006) -_mininova.org_-.torrent
    08/03/2007  18:31            45,537 -_mininova.org_- [[Demonoid.com]]-Deftones_Discography_656388.1444.torrent
    08/03/2007  18:29            56,262 Lost.S03E11.HR.HDTV.XviD-2HD.[eztv] -_mininova.org_-.torrent
    07/03/2007  21:09               145 browserview-173dcb8.htm
    07/03/2007  14:23               145 browserview-1742eb8.htm
    06/03/2007  23:50               145 browserview-23caf58.htm
    06/03/2007  23:50               145 browserview-1622eb8.htm
    06/03/2007  16:37            56,333 Prison.Break.S02E19.HR.HDTV.XviD-CTU.[eztv] +-mininova.org-+.torrent
    06/03/2007  11:07               874 Outlook Startup.Log
    06/03/2007  01:20                 0 a1p1AC.tmp
    06/03/2007  01:18                 0 qoa1AB.tmp
    06/03/2007  01:16                 0 jaa1AA.tmp
    06/03/2007  01:16                 0 bw01A9.tmp
    06/03/2007  01:16                 0 ncz1A8.tmp
    06/03/2007  01:15                 0 vqj1A7.tmp
    06/03/2007  01:12                 0 72l1A6.tmp
    06/03/2007  01:09                 0 3sh1A5.tmp
    06/03/2007  01:07                 0 pyg1A4.tmp
    06/03/2007  01:05                 0 5fy1A3.tmp
    06/03/2007  00:59         8,056,358 01-9.wmv
    06/03/2007  00:58         5,990,678 02-9.wmv
    06/03/2007  00:56         6,983,012 03-5.wmv
    06/03/2007  00:55         5,990,678 02-8.wmv
    05/03/2007  23:52            15,366 Biomechanical   Eight Moons [-www.meganova.org-].torrent
    05/03/2007  23:48           216,067 METAL_ALBUMS[www.btmon.com].torrent
    05/03/2007  23:06                 0 ryj88.tmp
    05/03/2007  23:02                 0 n706D.tmp
    05/03/2007  01:57               145 browserview-24b7aa8.htm
    04/03/2007  02:33               145 browserview-1599b00.htm
    03/03/2007  23:08                 0 70h1B4.tmp
    03/03/2007  23:08                 0 pa71B2.tmp
    03/03/2007  23:03                 0 n8r1AE.tmp
    03/03/2007  14:43                 0 faoEF.tmp
    03/03/2007  14:24                 0 qsiB9.tmp
    03/03/2007  14:23                 0 otdB8.tmp
    02/03/2007  21:56           251,519 UA_131.dmp
    02/03/2007  21:22                 0 tuz129.tmp
    02/03/2007  21:22                 0 zvs128.tmp
    02/03/2007  17:41            23,552 SouthPark_1011_-_Hell_On_Earth_2006__rm_MrTwig_net_.torrent
    02/03/2007  17:37            53,846 South Park Season 10 (complete) -[mininova.org]-.torrent
    02/03/2007  02:49               145 browserview-15978b4.htm
    01/03/2007  08:39            56,086 +[mininova.org]+ Lost.S03E10.HR.HDTV.XviD-CRiMSON.[eztv].torrent
    01/03/2007  08:38            16,545 ^mininova.org^ Lost.S03E10.HDTV.XViD-NoTV.torrent
    01/03/2007  00:02            28,270 Prison.Break.S02E18.HDTV.XviD-XOR.[eztv] +[mininova.org]+.torrent
    01/03/2007  00:01            28,328 Prison.Break.S02E17.HDTV.XViD-NoTV.[eztv] +-mininova.org-+.torrent
    01/03/2007  00:00            56,368 Prison.Break.S02E16.HDTV.XViD-NoTV.[eztv] ^mininova.org^.torrent
    28/02/2007  23:59            56,287 Prison.Break.S02E15.HDTV.XviD-XOR.[eztv]  d-mininova.org-b .torrent
    28/02/2007  23:58            56,805 ^mininova.org^ Prison.Break-S02E14-HDTV-by Max007.torrent
    28/02/2007  21:32            14,232 Prison.Break.S02E13.HDTV.XviD-XOR.[eztv] ^mininova.org^.torrent
    28/02/2007  18:49            56,187 =mininova.org= Prison.Break.S02E12.HDTV.XviD-XOR.[eztv].torrent
    28/02/2007  18:48            56,154 -_mininova.org_- Prison Break S02E11 PROPER HDTV XviD-XOR [eztv].torrent
    28/02/2007  16:19            16,074 Prison.Break.S02E09.HDTV.XviD-LOL.3548700.TPB -~mininova.org~-.torrent
    28/02/2007  16:17            56,154 -~mininova.org~- Prison.Break.S02E09.PROPER.HDTV.XviD-XOR.[eztv].torrent
    28/02/2007  16:09                 0 csr18.tmp
    28/02/2007  16:09                 0 k2z17.tmp
    28/02/2007  16:08                 0 nh716.tmp
    28/02/2007  08:33               145 browserview-23bbfec.htm
    28/02/2007  08:19            55,951 Prison.Break.S02E10.HDTV.XviD-LOL.[eztv]   mininova.org  .torrent
    28/02/2007  08:19            56,167 Prison.Break.S02E09.HDTV.XviD-LOL.[eztv] -~mininova.org~-.torrent
    26/02/2007  09:44               145 browserview-178c184.htm
    26/02/2007  09:44               145 browserview-14f5644.htm
    26/02/2007  09:37            14,403 Prison.Break.S02E05.HDTV.XviD-XOR.[www.torrentfive.com] +{mininova.org}+.torrent
    26/02/2007  09:35            14,750  d-mininova.org-b  Prison.Break.S02E04.HDTV.XviD-LOL.[www.torrentfive.com].torrent
    26/02/2007  09:34            14,866 Prison.Break.S02E03.HDTV.XviD-LOL +{mininova.org}+.torrent
    26/02/2007  00:44            28,441  d-mininova.org-b  Prison.Break.S02E02.HDTV.XviD-LOL.avi.torrent
    26/02/2007  00:44            28,441  d-mininova.org-b  Prison.Break.S02E02.HDTV.XviD-LOL.avi-1.torrent
    26/02/2007  00:40            14,332 ^mininova.org^' Prison_Break_S02E02_HDTV_XviD-LOL.torrent
    25/02/2007  23:37            14,886  d-mininova.org-b  Prison.Break.S02E02.HDTV.XviD-LOL.[www.torrentfive.com].torrent
    25/02/2007  23:35            14,220 Prison.Break.S02E02.HDTV.Xvid.avi  d-mininova.org-b .torrent
    25/02/2007  21:26            14,220 +-mininova.org-+ Prison.Break.S02E02.HDTV.Xvid.avi.torrent
    24/02/2007  15:28            16,384 ~DF7E05.tmp
    24/02/2007  01:41               145 browserview-14d5644.htm
    24/02/2007  01:41               145 browserview-1680654.htm
    24/02/2007  01:41            47,860 fdcc_appcompat.txt
    23/02/2007  17:44            28,346 Lost.S03E09.HDTV.XViD-NoTV.[eztv] ^mininova.org^'.torrent
    23/02/2007  15:48           707,348 IMT7C.xml
    23/02/2007  15:48               426 IMT7B.xml
    23/02/2007  15:48             1,994 IMT7A.xml
    23/02/2007  15:45           707,348 IMT73.xml
    23/02/2007  15:45               426 IMT72.xml
    23/02/2007  15:45             1,994 IMT71.xml
    23/02/2007  05:12                 0 gvb52.tmp
    23/02/2007  05:12                 0 z5h51.tmp
    23/02/2007  05:11                 0 1mn50.tmp
    23/02/2007  05:11                 0 xxq4F.tmp
    23/02/2007  03:59            81,920 ~DF523A.tmp
    23/02/2007  03:55            81,920 ~DF5314.tmp
    23/02/2007  01:29           253,956 drm_dyndata.dll
    22/02/2007  23:04           202,240 patchw32.dll
    22/02/2007  13:04            16,384 ~DFD213.tmp
    22/02/2007  12:53               145 browserview-14c78b4.htm
    22/02/2007  03:13                 0 250E3.tmp
    22/02/2007  03:13                 0 x5iE0.tmp
    22/02/2007  03:13                 0 wnyDE.tmp
    22/02/2007  02:48                 0 ynbAC.tmp
    22/02/2007  02:41             6,987 Behemoth - Demigod  b-mininova.org-d .torrent
    22/02/2007  01:51            66,203 O-Demonoid.com-O_In_Flames_-_All_Albums_mp3_656388.1444 {mininova.org}.torrent
    22/02/2007  01:48            30,664 In_Flames_swedish_death_metal_full_discography-[]Demonoid.com[]_1192170.7602 {mininova.org}.torrent
    22/02/2007  01:44            11,398  b-mininova.org-d  Dark Tranquility - Damage Done.torrent
    22/02/2007  01:44            12,194 Dark Tranquility - Character -{mininova.org}-.torrent
    22/02/2007  01:36             7,752 Lamb Of God - Sacrament =mininova.org=.torrent
    22/02/2007  01:35            22,994 LambofGodDiscography1674162.Demonoid.com -{mininova.org}-.torrent
    22/02/2007  01:01            28,807 Prison Break Season 1 - S01E05 - English, Fitz or Percy {mininova.org}.torrent
    22/02/2007  00:57            16,384 ~DFA083.tmp
    22/02/2007  00:25               145 browserview-2380904.htm
    22/02/2007  00:25               145 browserview-14fa5d4.htm
    21/02/2007  17:49            85,054 -=mininova.org=- Prison.Break.S01E17.To.S01E22.HDTV.www.globalroms.com.torrent
    21/02/2007  03:24                 0 fpd2F6.tmp
    21/02/2007  03:24                 0 w7w2F1.tmp
    21/02/2007  03:24                 0 ryk2EC.tmp
    20/02/2007  01:17            16,384 ~DFCD67.tmp
    19/02/2007  17:26               145 browserview-222958c.htm
    19/02/2007  17:26               145 browserview-14f727c.htm
    19/02/2007  14:17            16,384 ~DF65A1.tmp
    18/02/2007  20:03            33,280 ~WRS0686.tmp
    18/02/2007  20:02               145 browserview-210c804.htm
    18/02/2007  20:02               145 browserview-14b852c.htm
    18/02/2007  12:50                 0 01w77.tmp
    18/02/2007  12:07            16,384 ~WRF3819.tmp
    18/02/2007  11:46            16,384 ~DF7C71.tmp
    18/02/2007  03:22               145 browserview-1f8c8b4.htm
    18/02/2007  03:22               145 browserview-14d3a1c.htm
    18/02/2007  02:33                 0 fux1BC.tmp
    18/02/2007  01:36                 0 ucb9B.tmp
    17/02/2007  22:58            16,384 ~DF30E0.tmp
    17/02/2007  17:04               145 browserview-1f7ca24.htm
    17/02/2007  16:06                 0 ht3C3.tmp
    17/02/2007  16:06                 0 1saB9.tmp
    17/02/2007  16:05                 0 jdgB4.tmp
    17/02/2007  13:34            16,384 ~DF1FE8.tmp
    16/02/2007  21:02               145 browserview-207ca24.htm
    16/02/2007  20:53                 0 TempCover2
    16/02/2007  20:23                 0 zvkB4.tmp
    16/02/2007  20:19                 0 pjbAD.tmp
    16/02/2007  12:15            16,384 ~DFBFF8.tmp
    15/02/2007  19:44            16,384 ~DFC484.tmp
    15/02/2007  00:38             1,640 39fe_appcompat.txt
    14/02/2007  23:52            16,384 ~DFD825.tmp
    14/02/2007  23:47               145 browserview-21c9f9c.htm
    14/02/2007  13:53            16,384 ~DF97A5.tmp
    14/02/2007  00:44               145 browserview-171278c.htm
    14/02/2007  00:44               145 browserview-14f054c.htm
    13/02/2007  16:55            16,384 ~DF850.tmp
    13/02/2007  03:02            16,384 ~DFD4BE.tmp
    12/02/2007  18:00                 0 mso21.tmp
    12/02/2007  08:39            56,225 Lost.S03E13.HR.HDTV.XviD-CTU.[eztv] -_mininova.org_-.torrent
    12/02/2007  01:43               145 browserview-2bb2504.htm
    12/02/2007  01:13               145 browserview-17a5160.htm
    12/02/2007  01:13               145 browserview-222ca18.htm
    11/02/2007  19:41             6,438 Porcupine Tree-2005 Deadwing -[mininova.org]-.torrent
    11/02/2007  19:13                 0 w7w54.tmp
    11/02/2007  18:18               145 browserview-1dc486c.htm
    11/02/2007  18:17            16,384 ~DF966B.tmp
    11/02/2007  18:16               145 browserview-2bb202c.htm
    11/02/2007  01:53           176,983 Dream Theater Discografia Oficial 1989-2006  b-mininova.org-d .torrent
    11/02/2007  01:38            27,799 -{mininova.org}- Biomechanical - The Empires Of The Worlds - 2005.torrent
    11/02/2007  01:38            15,294 {mininova.org} BIOMECHANICAL - EIGHT MOONS (2002).torrent
    10/02/2007  23:19            16,384 ~DFD640.tmp
    10/02/2007  17:39               145 browserview-222c9e8.htm
    10/02/2007  17:39               145 browserview-1785160.htm
    10/02/2007  17:20            16,384 ~DF8883.tmp
    10/02/2007  16:46               145 browserview-2931da4.htm
    10/02/2007  12:40            16,384 ~DFCB36.tmp
    10/02/2007  02:57            28,287 +-mininova.org-+ Prison.Break.S02E20.HDTV.XviD-LOL.[eztv].torrent
    10/02/2007  01:17            30,203 +-mininova.org-+ Style.XP.V3.19- LUCiANOS.zip.torrent
    10/02/2007  00:07            28,797 [Snarf-It.org] Prison.Break.S02E20.PROPER.HDTV.XviD-2HD [eztv].rar.torrent
    09/02/2007  23:44            27,821 ^mininova.org^ StyleXP 3.19 Full by COLOMBO-BT.torrent
    09/02/2007  23:42            28,108 +{mininova.org}+ Prison Break S02E20 HDTV XviD-XOR.torrent
    09/02/2007  23:40            27,178 Style XP 3.0 + Keygen + Themes + Boot Screens By Knoedel.rar +{mininova.org}+.torrent
    09/02/2007  23:06         1,194,607 NeroDigitalAudio-1.zip
    09/02/2007  22:47         1,194,607 NeroDigitalAudio.zip
    09/02/2007  22:14            16,384 ~DFFCE0.tmp
    09/02/2007  22:13               145 browserview-29fd104.htm
    09/02/2007  22:12               379 mod7B.tmp
    09/02/2007  22:03            16,384 ~DF2435.tmp
    09/02/2007  19:12            24,253 flourish.mid
    09/02/2007  02:14            11,496 1247_brian_boitano_s_lua_anti_virus_pack__4.zip
    09/02/2007  01:56               145 browserview-17d5160.htm
    09/02/2007  01:56               145 browserview-235ca18.htm
    09/02/2007  01:39               990 HTM27.tmp
    09/02/2007  01:38            88,974 artsplotch_I.abr
    09/02/2007  00:23            16,384 ~DF81D3.tmp
    08/02/2007  20:06           206,583 UA_16.dmp
    08/02/2007  18:59            18,269 Lost.S03E07.HR.HDTV.XviD-CRiMSON.3613428.TPB [mininova.org].torrent
    08/02/2007  18:28           112,150 Lost.S03E07.HR.HDTV.XviD-CRiMSON.[eztv] [mininova.org].torrent
    08/02/2007  17:56            16,384 ~DFBF55.tmp
    08/02/2007  17:56               145 browserview-1dc983c.htm
    07/02/2007  18:32            41,298 +{mininova.org}+ Dillinger Escape Plan Discography - 5 Albums.torrent
    07/02/2007  14:36         3,939,026 bh.wmv
    06/02/2007  17:08               145 browserview-1e28cb4.htm
    06/02/2007  17:08            16,384 ~DFFCFF.tmp
    06/02/2007  03:36               145 browserview-2bb210c.htm
    05/02/2007  23:19            32,768 ~DF92B9.tmp
    05/02/2007  21:12             4,299 -=mininova.org=- Bigfish Games - Poker Superstars II + Crack (Reflexive).torrent
    05/02/2007  18:20            16,384 ~DF70FC.tmp
    04/02/2007  16:40               145 browserview-1dc3a6c.htm
    04/02/2007  11:47            16,384 ~DF7C4.tmp
    04/02/2007  01:26            55,296 mkvbm15437.tmp
    04/02/2007  01:06            55,296 mkvbm15436.tmp
    04/02/2007  00:57            55,296 mkvbm15435.tmp
    03/02/2007  23:25               990 HTMF.tmp
    03/02/2007  23:25               990 HTMD.tmp
    03/02/2007  23:25               990 HTMB.tmp
    03/02/2007  23:20            16,384 ~DF7DDB.tmp
    03/02/2007  16:54               145 browserview-2bb40d4.htm
    03/02/2007  15:29                 0 1if7.tmp
    03/02/2007  12:04               145 browserview-1dcd1ac.htm
    03/02/2007  12:04            16,384 ~DF6167.tmp
    02/02/2007  03:53               145 browserview-28339c4.htm
    31/01/2007  13:31            16,384 ~DF7F3B.tmp
    30/01/2007  03:28               145 browserview-1f65f0c.htm
    30/01/2007  00:47               460 RunTime.ini
    30/01/2007  00:33           498,872 ADMInstaller.exe
    30/01/2007  00:32           109,961 AQA-MD02-W-QP-JUN05.PDF
    26/01/2007  19:10            95,744 UA_E.dmp
    26/01/2007  19:10           204,667 UA_D.dmp
    26/01/2007  02:31               145 browserview-2baf0dc.htm
    26/01/2007  02:24                 0 69x5.tmp
    25/01/2007  08:28           233,699 flashgot-0.5.97.03.xpi
    23/01/2007  14:51            57,344 _uninstop.exe
    23/01/2007  02:24                 0 a2m63.tmp
    21/01/2007  18:08           187,715 UA_C.dmp
    21/01/2007  16:18            28,500 -~mininova.org~- Trainspotting.torrent
    19/01/2007  23:54        18,895,728 Install_Messenger.exe
    19/01/2007  00:43        18,297,715 Realtek_AC97_MB.zip
    18/01/2007  23:06           122,880 ~27.tmp
    16/01/2007  17:28            16,384 ~DF9B15.tmp
    16/01/2007  17:18                 0 2iv18.tmp
    16/01/2007  17:17                 0 opq17.tmp
    15/01/2007  18:47            22,017 3 Shell Sort.doc
    15/01/2007  18:44            22,017 2 shuttle sort.doc
    15/01/2007  18:43            24,577 1 Bubble Sort.doc
    15/01/2007  18:30            21,505 ch1 bubble sort.doc
    15/01/2007  17:50            16,384 ~DF566E.tmp
    15/01/2007  00:59            16,384 ~DFEA2F.tmp
    14/01/2007  19:15            16,384 ~WRF0004.tmp
    14/01/2007  09:50             4,616 ~WRS0564.tmp
    13/01/2007  15:32            16,384 ~WRF0003.tmp
    13/01/2007  11:20            16,384 ~DF3C58.tmp
    12/01/2007  13:58            28,433 LockStockandTwoSmokingBarrelsXVIDwFRAand1536448.Demonoid.com [mininova.org].torrent
    12/01/2007  13:54            84,230 Opeth - Discografia (www.heavytorrents.org) [mininova.org].torrent
    12/01/2007  13:44            16,384 ~DF2F4C.tmp
    12/01/2007  13:44            56,838 [TBox] Snakes.On.A.Plane[2006]DvDrip[Eng]-aXXo [mininova.org].torrent
    12/01/2007  12:42            32,768 CPT1Summary10.1-1.doc
    12/01/2007  12:40           216,576 PPQs_CPT2_11.4.doc
    12/01/2007  12:40            60,416 PPQs_CPT2_11.3.doc
    12/01/2007  12:40           161,792 PPQs_CPT2_11.2.doc
    12/01/2007  12:40           332,288 PPQs_CPT2_11.1.doc
    12/01/2007  12:40           598,016 PPQs_CPT1_10.4.doc
    12/01/2007  12:40            44,032 PPQs_CPT1_10.3.doc
    12/01/2007  12:40            88,064 PPQs_CPT1_10.2.doc
    12/01/2007  12:40            41,984 PPQs_CPT1_10.1.doc
    12/01/2007  12:39            26,624 Notes_CPT1_General_Purpose_Packages.doc
    12/01/2007  12:39            24,064 More_Revision_Questions_CPT1_Answers.doc
    12/01/2007  12:39            23,040 More_Revision_Questions_CPT1.doc
    12/01/2007  12:39            27,648 CPT2Summary11.4.doc
    12/01/2007  12:39            26,624 CPT2Summary11.3.doc
    12/01/2007  12:39            26,112 CPT2Summary11.2b.doc
    12/01/2007  12:39            42,496 CPT2summary11.2.doc
    12/01/2007  12:39            42,496 CPT2Summary11.1.doc
    12/01/2007  12:38            56,320 CPT1Summary10.4.doc
    12/01/2007  12:38            35,328 CPT1Summary10.3.doc
    12/01/2007  12:38            61,952 CPT1Summary10.2.doc
    12/01/2007  12:38            32,768 CPT1Summary10.1.doc
    12/01/2007  03:34                 0 gvf1D.tmp
    12/01/2007  02:36            36,864 roll_calculator_v3.xls
    09/01/2007  18:35            83,969 booklet core 2 binomial expansion-1.doc
    09/01/2007  17:22               702 msoEC.wmf
    09/01/2007  17:22               362 msoD5.wmf
    09/01/2007  17:22               362 msoD4.wmf
    09/01/2007  17:22               348 msoD2.wmf
    09/01/2007  17:22               582 msoD1.wmf
    09/01/2007  17:22               510 msoD0.wmf
    09/01/2007  17:22               510 msoCF.wmf
    09/01/2007  17:22               510 msoCE.wmf
    09/01/2007  17:22               272 msoCD.wmf
    09/01/2007  17:22               348 msoD3.wmf
    09/01/2007  17:22               272 msoC4.wmf
    09/01/2007  17:22               752 msoCB.wmf
    09/01/2007  17:22               702 msoCC.wmf
    09/01/2007  17:22               694 msoC2.wmf
    09/01/2007  17:22               408 msoC1.wmf
    09/01/2007  17:22               766 msoC0.wmf
    09/01/2007  17:22               348 msoBF.wmf
    09/01/2007  17:22               348 msoBE.wmf
    09/01/2007  17:22               348 msoBD.wmf
    09/01/2007  17:22               694 msoC3.wmf
    09/01/2007  17:22               510 msoBC.wmf
    09/01/2007  17:22               510 msoB4.wmf
    09/01/2007  17:22               510 msoB3.wmf
    09/01/2007  17:22               510 msoB2.wmf
    09/01/2007  17:22               680 msoB1.wmf
    09/01/2007  17:22               282 msoB0.wmf
    09/01/2007  17:22               374 msoAF.wmf
    09/01/2007  17:22               602 msoAE.wmf
    09/01/2007  17:22               470 msoAD.wmf
    09/01/2007  17:22               500 msoAC.wmf
    09/01/2007  17:22               356 msoAB.wmf
    09/01/2007  17:22               604 mso9F.wmf
    09/01/2007  17:22               584 mso9E.wmf
    09/01/2007  17:22               518 mso9D.wmf
    09/01/2007  17:22               282 mso8D.wmf
    09/01/2007  17:22               500 mso82.wmf
    09/01/2007  17:22               568 mso6F.wmf
    09/01/2007  17:22               420 mso80.wmf
    09/01/2007  17:22               348 mso7D.wmf
    09/01/2007  17:22               272 mso81.wmf
    09/01/2007  17:22               566 mso7F.wmf
    09/01/2007  17:22               566 mso7E.wmf
    09/01/2007  17:22               570 mso6E.wmf
    09/01/2007  17:22               570 mso6D.wmf
    09/01/2007  17:22           448,000 34 a trig formula for area of a triangle.ppt
    09/01/2007  12:05         1,632,768 36 the cosine rule.ppt
    09/01/2007  12:01               640 mso20D.wmf
    09/01/2007  12:01               344 mso1F5.wmf
    09/01/2007  12:01               438 mso205.wmf
    09/01/2007  12:01               282 mso207.wmf
    09/01/2007  12:01               570 mso208.wmf
    09/01/2007  12:01               504 mso203.wmf
    09/01/2007  12:01               282 mso206.wmf
    09/01/2007  12:01               570 mso20A.wmf
    09/01/2007  12:01               520 mso209.wmf
    09/01/2007  12:01               438 mso204.wmf
    09/01/2007  12:01               470 mso1F4.wmf
    09/01/2007  12:01               344 mso1CA.wmf
    09/01/2007  12:01               422 mso1E5.wmf
    09/01/2007  12:01               470 mso1C8.wmf
    09/01/2007  12:01               422 mso1C7.wmf
    09/01/2007  12:01               430 mso1C9.wmf
    09/01/2007  12:01               430 mso1B5.wmf
    09/01/2007  12:01           637,952 35 the sine rule.ppt
    09/01/2007  12:00            19,969 sine rule.doc
    09/01/2007  11:48            18,945 geometicseqs(sumtoinfinity).doc
    09/01/2007  11:47            96,710 java_install.log
    09/01/2007  11:46            20,481 geometicseqs.doc
    09/01/2007  11:44            20,481 arithmeticseqs.doc
    09/01/2007  11:06            50,177 c2 trapezium rule.doc
    09/01/2007  11:05            59,393 c2 indices.doc
    08/01/2007  23:04           705,228 AQA-5361-6361-W-SP-07.PDF
    05/01/2007  03:32            47,860 9d30_appcompat.txt
    04/01/2007  21:22            32,768 ~DF371.tmp
    03/01/2007  18:38            32,768 ~DFAD41.tmp
    03/01/2007  17:58           813,056 dyn prog.ppt
    03/01/2007  17:32           756,736 simplex basic whole.ppt
    03/01/2007  17:21            80,896 probabilities.ppt
    03/01/2007  17:06            32,257 d2 game theory.doc
    03/01/2007  17:06            31,233 d2 simplex.doc
    03/01/2007  17:05            44,033 d2 dynamic programming.doc
    03/01/2007  17:05            41,473 d2 critical path analysis.doc
    01/01/2007  21:32            32,768 ~DF4812.tmp
    31/12/2006  18:56            16,384 ~DFD8CE.tmp
    31/12/2006  18:56            83,801 SouthPark_809-814__avi_MrTwig_net_.torrent
    30/12/2006  02:36            63,445 [mininova.org] Monty Python - The Life Of Brian (1979) DVDRIP KVCD by davido_labido (TUS Release).torrent
    29/12/2006  23:10         2,485,085 Update_Dec24.zip
    20/12/2006  00:55            32,768 ~DFE6F6.tmp
    20/12/2006  00:05         2,431,443 Update_Dec19_updated.zip
    19/12/2006  23:46         2,434,137 Update_Dec06_updated.zip
    19/12/2006  23:45         4,559,632 NewSetup.zip
    19/12/2006  04:46         5,475,128 ap.wmv
    19/12/2006  04:40         2,784,121 01-8.wmv
    19/12/2006  02:45            16,384 ~DF4FED.tmp
    18/12/2006  22:58            76,723 Client.zip
    17/12/2006  21:19            32,768 ~DF1486.tmp
    15/12/2006  00:05            32,768 ~DFC380.tmp
    12/12/2006  01:44            16,384 ~DF2A4C.tmp
    10/12/2006  21:49            32,768 ~DF6111.tmp
    10/12/2006  19:24            16,384 ~WRF0002.tmp
    09/12/2006  06:38           956,190 03-4.wmv
    09/12/2006  06:37           985,076 02-7.wmv
    09/12/2006  06:37           979,300 01-7.wmv
    06/12/2006  17:03         3,016,990 35.wmv
    06/12/2006  17:02         2,383,978 43.wmv
    06/12/2006  17:00         1,839,591 03-3.wmv
    06/12/2006  16:59         2,037,873 02-6.wmv
    06/12/2006  16:58         1,701,401 01-6.wmv
    06/12/2006  12:53            13,675 wmsetup.log
    06/12/2006  12:53            16,384 ~DF33FC.tmp
    06/12/2006  12:49            12,936 control.xml
    06/12/2006  00:26           752,643 Windower-3.24.zip
    05/12/2006  23:15            16,384 ~DF5DB6.tmp
    05/12/2006  17:23            16,384 ~WRF0001.tmp
    05/12/2006  03:51         2,901,492 1-3.wmv
    05/12/2006  03:40         3,508,928 BCTA_Ryzell.wmv
    03/12/2006  18:26            16,384 ~DF2766.tmp
    02/12/2006  23:41            32,768 ~DF5C.tmp
    02/12/2006  04:59            16,384 ~DF465D.tmp
    01/12/2006  02:32         2,399,214 1154hi.wmv
    01/12/2006  02:30         1,893,657 10.wmv
    01/12/2006  02:29         2,085,931 06-1.wmv
    01/12/2006  02:27                 0 ot037.tmp
    
                1651 File(s)    720,965,488 bytes
                   0 Dir(s)   4,415,340,544 bytes free
    and my new HijackThis log

    Code:
    Logfile of HijackThis v1.99.1
    Scan saved at 00:41:00, on 01/06/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\system32\inetsrv\inetinfo.exe
    C:\Program Files\Kontiki\KService.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Agnitum\Outpost Firewall\op_viewer.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\hjt\hjt.exe
    
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.2.7.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [Outpost Firewall] C:\Program Files\Agnitum\Outpost Firewall\outpost.exe /waitservice
    O4 - HKLM\..\Run: [OutpostFeedBack] C:\Program Files\Agnitum\Outpost Firewall\feedback.exe /dump:os_startup
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
    O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: Outpost Firewall Pro Quick Tune - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\Program Files\Agnitum\Outpost Firewall\Plugins\BrowserBar\ie_bar.dll
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O18 - Protocol: bw+0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: offline-8876480 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: KService - Unknown owner - C:\Program Files\Kontiki\KService.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum Ltd. - C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
    O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    Annoying just thinking that all those blocked out bound connections were for less than a days worth, and they were only the ones getting blocked as I'm still getting bombarded with pop-ups, and possibly other things going on behind the scenes.

    Thanks for your help! I hope I've provided enough info for you to be able to help me get a bit further with this, thanks again.

  4. #4
    Ehrenmitglied Avatar von Karl
    Registriert seit
    01.12.2005
    Ort
    Berlin
    Beiträge
    8.393

    AW: pop-up troubles- nothing seems to be working

    First a special scan for rootkits, i'm not sure, but i think it is possible that some rootkit is involved.
    • Load F-Secure Blacklight into a new folder C:\program files\blacklight.
    • Start in this folder fsbl.exe and close all other programs.
    • Click "I accept the agreement", "next", "Scan".
    • After the scan is finished close choose "Close".
    • The log will be fsbl-XXX.log in the blacklight folder, in place of XXX there will be some numbers.


    Load Avenger and unzip it to your desktop. An unzipped exe version is available here. Start avenger and choose "Input script manually", click on the magnifying glass at the right side. Copy the complete and unchanged contents of the following code box into the window, click "done".
    Code:
    files to delete:
    C:\WINDOWS\system32\qqfgwb.dat      
    C:\WINDOWS\system32\qqfgwb_nav.dat  
    C:\WINDOWS\system32\qqfgwb_navps.dat
    C:\WINDOWS\system32\qqfgwb.exe
    Click the traffic light with the green light at the right side to start. Avenger will give you the instructions how to proceed. After the computer is restarted there will be a dos window doing the last steps. Wait for it to close. The avenger log will be in C:\avenger.txt. Please post its contents. A backup of all removed items will be in C:\avenger\backup.zip.

    After restart post the logs from blacklight and avenger and a new hijackthis.
    filelist_038.log

  5. #5
    Einsteiger
    Registriert seit
    31.05.2007
    Ort
    Hampshire, England
    Beiträge
    5

    Re: pop-up troubles- nothing seems to be working

    fsbl-20070601224925.log
    Code:
    06/01/07 23:49:25 [Info]: BlackLight Engine 1.0.61 initialized
    06/01/07 23:49:25 [Info]: OS: 5.1 build 2600 (Service Pack 2)
    06/01/07 23:49:25 [Note]: 7019 4
    06/01/07 23:49:25 [Note]: 7005 0
    06/01/07 23:49:31 [Note]: 7006 0
    06/01/07 23:49:31 [Note]: 7011 348
    06/01/07 23:49:31 [Note]: 7026 0
    06/01/07 23:49:31 [Note]: 7026 0
    06/01/07 23:49:31 [Note]: 7024 3
    06/01/07 23:49:31 [Info]: Hidden process: C:\windows\system32\qqfgwb.exe
    06/01/07 23:49:33 [Note]: FSRAW library version 1.7.1021
    06/01/07 23:56:44 [Info]: Hidden file: c:\WINDOWS\system32\qqfgwb.dat
    06/01/07 23:56:44 [Note]: 10002 1
    06/01/07 23:56:44 [Info]: Hidden file: C:\windows\system32\qqfgwb.exe
    06/01/07 23:56:44 [Note]: 10002 1
    06/01/07 23:56:44 [Info]: Hidden file: c:\WINDOWS\system32\qqfgwb_nav.dat
    06/01/07 23:56:44 [Note]: 10002 1
    06/01/07 23:56:45 [Info]: Hidden file: c:\WINDOWS\system32\qqfgwb_navps.dat
    06/01/07 23:56:45 [Note]: 10002 1
    06/02/07 00:01:24 [Note]: 7007 0
    avenger.txt
    Code:
    Logfile of The Avenger version 1, by Swandog46
    Running from registry key:
    \Registry\Machine\System\CurrentControlSet\Services\kvnpojxp
    
    *******************
    
    Script file located at: \??\C:\Program Files\mwjapenn.txt
    Script file opened successfully.
    
    Script file read successfully
    
    Backups directory opened successfully at C:\Avenger
    
    *******************
    
    Beginning to process script file:
    
    File C:\WINDOWS\system32\qqfgwb.dat deleted successfully.
    File C:\WINDOWS\system32\qqfgwb_nav.dat deleted successfully.
    File C:\WINDOWS\system32\qqfgwb_navps.dat deleted successfully.
    File C:\WINDOWS\system32\qqfgwb.exe deleted successfully.
    
    Completed script processing.
    
    *******************
    
    Finished!  Terminate.
    HijackThis.log
    Code:
    Logfile of HijackThis v1.99.1
    Scan saved at 00:11:08, on 02/06/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\WINDOWS\system32\notepad.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\system32\inetsrv\inetinfo.exe
    C:\Program Files\Kontiki\KService.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\hjt\hjt.exe
    
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.2.7.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [Outpost Firewall] C:\Program Files\Agnitum\Outpost Firewall\outpost.exe /waitservice
    O4 - HKLM\..\Run: [OutpostFeedBack] C:\Program Files\Agnitum\Outpost Firewall\feedback.exe /dump:os_startup
    O4 - HKLM\..\Run: [qqfgwb] c:\windows\system32\qqfgwb.exe qqfgwb
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
    O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: Outpost Firewall Pro Quick Tune - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\Program Files\Agnitum\Outpost Firewall\Plugins\BrowserBar\ie_bar.dll
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O18 - Protocol: bw+0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: offline-8876480 - {199D4144-3BCC-41ED-BFD8-7E69E543F53C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: KService - Unknown owner - C:\Program Files\Kontiki\KService.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum Ltd. - C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
    O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    Edit: Just noticed qqfgwb is now showing up in hijackthis.

    I'll say I jumped for joy when backlight's scan moved into system32 and picked up 4 files almost instantly- knowing that I had 4 of those qqfgwb files in my computer.

    Thanks so much for your help!! After that reset with the Avenger script running, it was the first time I've not seen that "Attept to terminate Outpost Firewall Pro process is prevented. Application: QQFGWB.EXE, Path: C:\WINDOWS\SYSTEM32\QQFGWB.EXE" in weeks. I'm certain that has solved the problem, and I certainly wont be visiting free6.com again as I'm near certain that's where I picked it up. and so far while writing this post I havn't seen a single popup (normally I would have had about 2-4 by now)

    So thanks again, sorry I couldn't get around to replying sooner but I've had no spare time since this time yesterday.

    Just out of interest, why would you think this qqfgwb file would be sending out bound connections to wikipedia?? that would be the last site that I'd suspect of malicious activity.
    Geändert von BornForDying (02.06.2007 um 00:34 Uhr)

  6. #6
    Einsteiger
    Registriert seit
    31.05.2007
    Ort
    Hampshire, England
    Beiträge
    5

    Re: pop-up troubles- nothing seems to be working

    Just want to add, would you like me to send you the backup.zip from avenger so you can have a look at the files? Just curious. Thanks again

  7. #7
    Ehrenmitglied Avatar von Karl
    Registriert seit
    01.12.2005
    Ort
    Berlin
    Beiträge
    8.393

    AW: pop-up troubles- nothing seems to be working

    Yes, this is a good idea. Goto this site and start a new thread with "New Topic", you don't need to be registered. Fill in the fields and put a link to this thread into your message. Choose "Browse ..." to select and upload the following files.
    • C:\avenger\backup.zip

    Click "Post". This will give our experts the chance to check this files. The bad one will be given to antivirus companies to improve their detections. Note: You won't be able to see the uploaded files, this needs special permission. Thank you.

    I don't know why this malware tried to connect to wikipedia, wikipedia is ok. Perhaps the files will reveal something.

    Please repeat the blacklight scan.

Aktive Benutzer

Aktive Benutzer

Aktive Benutzer in diesem Thema: 1 (Registrierte Benutzer: 0, Gäste: 1)

Ähnliche Themen

  1. local network connection not working HELP!
    Von fleming6 im Forum Archiv
    Antworten: 1
    Letzter Beitrag: 17.04.2007, 15:46
  2. Help finding troubles
    Von TheMizzle im Forum Archiv
    Antworten: 3
    Letzter Beitrag: 16.12.2006, 19:54
  3. Antworten: 3
    Letzter Beitrag: 28.04.2006, 12:00
  4. Please help nothing is working! win 98
    Von jerbell247 im Forum Archiv
    Antworten: 1
    Letzter Beitrag: 10.03.2005, 02:40
  5. IE 6 stops working
    Von schwinnrider32 im Forum Archiv
    Antworten: 2
    Letzter Beitrag: 01.01.2005, 12:39

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •